Static Data Authentication Tag List

What it is

The Static Data Authentication Tag List names which data elements are included in the card's signed static application data (tag 93). In almost all implementations it contains exactly one entry — the AIPApplication Interchange ProfileEMV tag 82 — a bitmap of the functions the card supports (SDA/DDA/CDA, cardholder verification, and more).View in glossary → (82) — ensuring the interchange profile is covered by the SDAStatic Data AuthenticationOffline check where the terminal verifies a fixed issuer signature over static card data. It cannot prove the card is live, so it is vulnerable to cloning and replay.View in glossary →/CDACombined DDA / Application Cryptogram generationThe strongest offline authentication: the card signs the dynamic data and the transaction cryptogram together in one step, preventing tamper (“wedge”) attacks.View in glossary → signature and cannot be silently altered.

Where it appears

Read from the card record files; used when building the SDAStatic Data AuthenticationOffline check where the terminal verifies a fixed issuer signature over static card data. It cannot prove the card is live, so it is vulnerable to cloning and replay.View in glossary →/CDACombined DDA / Application Cryptogram generationThe strongest offline authentication: the card signs the dynamic data and the transaction cryptogram together in one step, preventing tamper (“wedge”) attacks.View in glossary → hash.

Specification reference

Defined in: EMV 4.x Book 3 (Application Specification), Annex A — Data Element Dictionary

Decode & build this tag

Related tags