This document defines a method for generating and verifying card security codes (CSCs) using cipher-based message authentication code (CMAC) or keyed-hash message authentication code (HMAC).

Key management mechanisms associated with these processes are beyond the scope of this document.