9F6A

Unpredictable Number (Numeric)

Unpredictable Number (Numeric) is the mag-stripe-mode contactless equivalent of the terminal's core Unpredictable Number (9F37, covered earlier): the same random-value-per-transaction concept, but expressed as numeric digits rather than raw binary, since it feeds directly into the CVC3 computation (9F60, covered earlier) that mag-stripe-mode Kernel 2 transactions depend on for replay resistance. It's related to both 9F37 and 9F60, and exists as a separate tag from 9F37 specifically because the numeric encoding this particular computation needs differs from the binary encoding the core cryptogram flow uses - the same underlying security property, freshness, unpredictability, one value per transaction, implemented via two different tags because two different downstream computations need the value in two different formats. A terminal that reuses a 9F37 value directly as 9F6A without the correct numeric re-encoding will feed CVC3 a malformed input, weakening the mag-stripe-mode protection this field exists to provide. See EMV Contactless Book C-2.

Interactive decoder

Paste a hex value for this tag to decode it in your browser. Nothing is sent anywhere.

Numeric (BCD): 12345678

This tag is not a bitmap; the decoder shows a format-based interpretation.

Decoded example

Example value: 12345678

Related tags

Properties

Tag9F6A
NameUnpredictable Number (Numeric)
FormatNumeric (BCD)
Length4 bytes
SourceCard (ICC)
Templates
BooksEMV Contactless Book C-2

Frequently asked questions

What is EMV tag 9F6A?
Unpredictable Number (Numeric) is the mag-stripe-mode contactless equivalent of the terminal's core Unpredictable Number (9F37, covered earlier): the same random-value-per-transaction concept, but expressed as numeric digits rather than raw binary, since it feeds directly into the CVC3 computation (9F60, covered earlier) that mag-stripe-mode Kernel 2 transactions depend on for replay resistance. It's related to both 9F37 and 9F60, and exists as a separate tag from 9F37 specifically because the numeric encoding this particular computation needs differs from the binary encoding the core cryptogram flow uses - the same underlying security property, freshness, unpredictability, one value per transaction, implemented via two different tags because two different downstream computations need the value in two different formats. A terminal that reuses a 9F37 value directly as 9F6A without the correct numeric re-encoding will feed CVC3 a malformed input, weakening the mag-stripe-mode protection this field exists to provide. See EMV Contactless Book C-2.
What format and length does EMV tag 9F6A use?
Tag 9F6A uses the Numeric (BCD) format and is normally 4 bytes long.
Is tag 9F6A provided by the card or the terminal?
Tag 9F6A (Unpredictable Number (Numeric)) is provided by the Card (ICC).

Sources

  • C-2-Kernel-2-V2.11-Final-June-2023, p. 434

Receive site updates

Subscribe to receive site updates directly to your email

We won't send spam. You can unsubscribe at any time.