Keyshare Generator
Generate random TDES or AES test key components, or split an existing key into custodian components, with the KCV of every component and of the combined key — for key ceremonies and split-knowledge procedures.
Follows ANSI X9.24-12017·verified Oct 2026· double-checked Oct 2026— XOR split and recombination; odd-parity TDES components; TDES and AES (CMAC / ECB) KCVs
Use test data only. All calculations run locally in your browser — PayProbe never sees, transmits, or stores your PAN, CVV, keys, PINs, or cryptographic inputs. How we handle data →
Test keys only — generated in your browser with crypto.getRandomValues; never use a web page for live keys.
1F3E2A195E6DEFB61592E3F7C7ADD6AD453E9755AA0C1608A4D523F462852904F252D6CE436D02F3CE0F56C93A95E1F066DEC35F847B8B7DFAThe XOR has even parity in byte(s) 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16. Odd-parity adjusted (as an HSM stores it, same KCV): 0E57C83B94E0F167DFC25E857A8A7CFB
Component 1 ⊕ Component 2
All 2 components are needed to rebuild the key (XOR, n-of-n — not an m-of-n threshold scheme); give each to a different custodian. TDES KCV: encrypt 8 zero bytes, leftmost 3 bytes. AES KCV: AES-CMAC of 16 zero bytes, leftmost 5 bytes (ANSI X9.24-1:2017, TR-31:2018); the legacy AES-ECB KCV is shown for HSMs that still print it.