I'm using a Triple DES with a DUKPT Key Management Approach.
I have two organization which have access to the BDK Key:
Orgzanization 1 which acts as the Secure Decryption Environment in which the Encrypted message generated from the PED/POS will be decrypted.
Organization 2 which acts as the Key Management Environment specially for generating and injecting the IPEK Keys to the PED/POS Environement.
My question is, can it be technically possible to limit the key injection capabilities such that it is clear that it is not possible to derive in decryption keys?
The only solution that I would think of is to move to an Asymmetric Key Approach.... However, I was wondering if it is possible with DUKPT and 3DES Key Management Approach?
Thanks in adavance!