9F6A
Unpredictable Number (Numeric)Unpredictable Number (Numeric) is the mag-stripe-mode contactless equivalent of the terminal's core Unpredictable Number (9F37, covered earlier): the same random-value-per-transaction concept, but expressed as numeric digits rather than raw binary, since it feeds directly into the CVC3 computation (9F60, covered earlier) that mag-stripe-mode Kernel 2 transactions depend on for replay resistance. It's related to both 9F37 and 9F60, and exists as a separate tag from 9F37 specifically because the numeric encoding this particular computation needs differs from the binary encoding the core cryptogram flow uses - the same underlying security property, freshness, unpredictability, one value per transaction, implemented via two different tags because two different downstream computations need the value in two different formats. A terminal that reuses a 9F37 value directly as 9F6A without the correct numeric re-encoding will feed CVC3 a malformed input, weakening the mag-stripe-mode protection this field exists to provide. See EMV Contactless Book C-2.
Interactive decoder
Paste a hex value for this tag to decode it in your browser. Nothing is sent anywhere.
Numeric (BCD): 12345678
This tag is not a bitmap; the decoder shows a format-based interpretation.
Decoded example
Example value: 12345678
Properties
| Tag | 9F6A |
|---|---|
| Name | Unpredictable Number (Numeric) |
| Format | Numeric (BCD) |
| Length | 4 bytes |
| Source | Card (ICC) |
| Templates | — |
| Books | EMV Contactless Book C-2 |
Frequently asked questions
- What is EMV tag 9F6A?
- Unpredictable Number (Numeric) is the mag-stripe-mode contactless equivalent of the terminal's core Unpredictable Number (9F37, covered earlier): the same random-value-per-transaction concept, but expressed as numeric digits rather than raw binary, since it feeds directly into the CVC3 computation (9F60, covered earlier) that mag-stripe-mode Kernel 2 transactions depend on for replay resistance. It's related to both 9F37 and 9F60, and exists as a separate tag from 9F37 specifically because the numeric encoding this particular computation needs differs from the binary encoding the core cryptogram flow uses - the same underlying security property, freshness, unpredictability, one value per transaction, implemented via two different tags because two different downstream computations need the value in two different formats. A terminal that reuses a 9F37 value directly as 9F6A without the correct numeric re-encoding will feed CVC3 a malformed input, weakening the mag-stripe-mode protection this field exists to provide. See EMV Contactless Book C-2.
- What format and length does EMV tag 9F6A use?
- Tag 9F6A uses the Numeric (BCD) format and is normally 4 bytes long.
- Is tag 9F6A provided by the card or the terminal?
- Tag 9F6A (Unpredictable Number (Numeric)) is provided by the Card (ICC).
Sources
- C-2-Kernel-2-V2.11-Final-June-2023, p. 434
Receive site updates
Subscribe to receive site updates directly to your email
We won't send spam. You can unsubscribe at any time.