BP-Tools Cryptographic Calculator Tutorial – Step-by-Step Guide for EMV ARQC Generation (2026)

[Student]

BP-Tools is a freeware suite of tools for payment development, including BP-CCALC (Cryptographic Calculator) – the main tool for EMV cryptogram calculations like ARQC, session keys, PIN offsets, etc.

Download: Available from SourceForge (sourceforge.net/projects/bptools/) – latest version 20.04 or newer (2025 compatible).

Important: BP-Tools is for legitimate payment testing/development. Real ARQC requires issuer master keys (secret). Fake calculations work only for offline/fallback.

Full Step-by-Step Guide for ARQC Generation (EMV Menu – Most Common 2025 Use)​

1. Launch BP-CCALC
   • Open the Cryptographic Calculator.
2. Navigate to EMV Menu
   • Top menu → EMV → Application Cryptograms
   • Choose specification: EMV 4.3 (most common), Visa CVN 10/18/22, MasterCard, or VSDC.
3. UDK Derivation (Unique Derived Key – First Step)
   • Tab: UDK
   • Input:
     • MDK (Master Derivation Key): e.g., 0123456789ABCDEF0123456789ABCDEF
     • PAN: e.g., 43219876543210987
     • PAN Sequence Nr.:00
     • Derivation Option: Option A or B
     • Key Parity: Right odd
   • Click Generate
   • Output example:
     

     UDK: C8B507136D921FD05864C81F79F2D30B
     KCV: 0DA897

4. Session Key Derivation
   • Tab: Session Key (or MC Session Key/Common Session Key)
   • Input:
     • UDK or Master Key (from previous step)
     • ATC: e.g., 0001
     • Unpredictable Number (UN): e.g., 30901B6A (from terminal)
   • Click Generate
   • Output example (MasterCard):
     

     Session key: 45C44343B64A58B3BF8046F75D943BEA
     KCV: 31C65D

5. ARQC Generation (Authorization Request Cryptogram)
   • Tab: AAC/ARQC/TC
   • Input:
     • Session Key (from previous step)
     • Terminal Data (CDOL1 – TLV format): e.g., 0000000010000000000000000710000000000007101302050030901B6A
     • ICC Data (from card): e.g., 3C00000103A4A082
     • Padding Method: Method 1 (ISO-9797)
   • Click Generate
   • Output example:
     

     AC generated: 92791D36B5CC31B5

     This is your ARQC (tag 9F26 = 92791D36B5CC31B5)
6. ARPC Generation (Authorization Response Cryptogram – Optional)
   • Tab: ARPC
   • Input:
     • ARPC Method: 1 or 2
     • Response Code: e.g., Y3 (approved)
     • Session Key
     • Transaction Cryptogram (TC/ARQC)
   • Output example:
     

     ARPC generated: E4E0BD6721957E2B

Other Useful EMV Features in BP-Tools​

• DDA/SDA Validation – Verify signed data.
• Secure Messaging – MasterCard/Visa MAC/PIN encryption.
• CAP Token – Chip Authentication Program.
• HCE – Visa qVSDC cryptograms for mobile.

Real test example (Visa CVN 18):

• Master Key: secret
• PAN + ATC + UN → Session Key → ARQC matches real card 98 %+ with correct keys.

Bottom Line – December 2025​

BP-Tools is the best free legit tool for EMV crypto calculations (ARQC, session keys, PIN offset). Real ARQC needs issuer master keys (from logs/insider). Fake ARQC = only offline/fallback.

For research/development only – stay legal!

Sources: EFTlab tutorials, BP-Tools docs.