{
  "id": 9938974,
  "title": "Apple Pay Token Decryption vs Google Pay ECv2",
  "url": "https://urgent.news/2026/09/26/apple-pay-token-decryption-vs-google-pay-ecv2",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-26T07:20:29.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/tomwangcn/apple-pay-token-decryption-vs-google-pay-ecv2-3pje"
  },
  "original_language": "en",
  "account": "Apple's Apple Pay token decryption guide contains errors, leading to incorrect key derivation and inability to open ciphertext. The source page shows the correct values, but most guides do not cover the full formats and processes needed. Apple Pay tokens include version, ciphertext, signature, and header information. The header contains ephemeral public key, SHA-256 of the certificate's public key, transaction ID, and optional application data. Apple uses ECC encryption globally and RSA_v1 in specific regions. Decrypting Apple Pay EC_v1 tokens involves ECDH agreement, a single-pass NIST SP 800-56A KDF, and AES-GCM encryption with a 256-bit ECC key. The header's publicKeyHash identifies the private key used to encrypt the token, crucial during certificate rotations.",
  "summary": "Apple's own reference page for decrypting an Apple Pay token currently gets the key derivation wrong. The KDF table lists the hash function where the shared secret should be, and it has dropped the id-aes256-GCM algorithm ID bytes altogether; the archived version of the same page has the correct values. If you are building a decryptor from the live docs, you will get a key that never opens the…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}