How Can I Check the KSI for a VP3300?

Answer:

The KSI is the first few bytes of the KSN and can be used to identify the key.

First, send the 81-0A NEO command with data 05 to retrieve the data encryption KSN follow the steps shown in the screenshot below. The KSN (in hex) is in the Results window as highlighted.



The Results windows show the KSN in hex first with the same string converted to ASCII which is FFFFFF0200000000000D for the sample string in the screenshot. You can check the first few bytes of the KSN with the desired KSI to identify the key.







Use data 02 for RKI-KEK, data 03 is the MAC DUKPT key which is only for the SRED device