Versions Compared

Old Version 1

changes.mady.by.user Admin

Saved on

compared with

New Version 2

changes.mady.by.user Peter Posse

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Published by Scroll Versions from space ENWORK and version Documentation

...

The following table describes how you can generate the Hash values to validate

Multiexcerpt include
SpaceWithExcerptEN
MultiExcerptNamePlatform-Name
PageWithExcerptWording
 response that you received:

Step

Task

1

Please log on to

Computop Support

Multiexcerpt include
SpaceWithExcerptEN
MultiExcerptNameHelpdesk-Name
PageWithExcerptWording
, which supplies you with the Hash password.

2

The HMAC value is calculated with the aid of the password and several parameter values. For the calculation, the parameters PayID, TransID, MerchantID, Status and Code are used and separated with asterisks:

PayID*TransID*MerchantID*Status*Code 

KeyValueComments
PayId
PayIDReferenced
PayId
PayID
PayId
PayID returned by 
Multiexcerpt include
SpaceWithExcerptEN
MultiExcerptNamePlatform-Name
PageWithExcerptWording
TransId
TransIDYour transactionId to reference / identify your requestYour own reference to identify each request / payment process.
MerchantId
MerchantIDYour
MerchantId
MerchantID assigned to you by
Computop
Multiexcerpt include
SpaceWithExcerptEN
MultiExcerptNamePartner-Name
PageWithExcerptWording
Your
MerchantId
MerchantID identifiying this request.
StatusStatus in responseStatus of response, e.g. AUTHORIZED, FAILED, OK, ...
CodeCode in responseCode of response, e.g. 00000000, 22720040, ...
YourHmacPasswortYour MAC-password assigned to you by
Computop
Multiexcerpt include
SpaceWithExcerptEN
MultiExcerptNamePartner-Name
PageWithExcerptWording
Your MAC-password assigned to a specific MID; if you have different MIDs you will have different MAC passwords, too.


Samples for MAC calculationFormulaResult
Authorized paymentsha256("7bbb448155234d8cbee323778952ce28*TID-12033175321270170232*yourMerchantId*AUTHORIZED*00000000", "mySecret")4CDCB4DE587AC210F21DE0591689B920CF56D89B38D4C7B1B7F8867BFC93E02C
Failed paymentsha256("7bbb448155234d8cbee323778952ce28*TID-12033175321270170232*yourMerchantId*FAILED*22720040", "mySecret")

0061D6AD2951C46A5507C3CA6B6236A32FD14ABA285722E87AF2A329FBDEFACD

3

Use the MAC SHA-256 algorithm, which nearly all programming languages support, in order to calculate the Hash value with the password and the parameter values.

4

Verify

  • the MAC-value from
    Multiexcerpt include
    SpaceWithExcerptEN
    MultiExcerptNamePlatform-Name
    PageWithExcerptWording
     response that you received
  • with the MAC value that you calculated yourself

to ensure that the message you have received is authentic.

 

Info
titleCheck your implementation

You can find an easy application to check the implementation of your MAC calculation here: https://computop.com/paygate-test

The application also allows to play with our 

Multiexcerpt include
SpaceWithExcerptEN
MultiExcerptNamePlatform-Kurz
PageWithExcerptWording
API - just use your MerchantID and Blowfish-Password that you already have received.

The MAC parameter is only returned to the Success URLSuccess or Failure URL URLFailure and for Notifys.

Important: Passwords may never be send via email, because in this case immediately the security of encrypted Requests/Responses is no longer assured. If accidentally passwords were sent via email, new passwords must be deposited at the merchant's expense with a single process or during next standard release. 

Multiexcerpt include
SpaceWithExcerptEN
MultiExcerptNamePartner-Name
PageWithExcerptWording
 explicitly point on the risikrisk of further using such compromised MIDs. If a merchant nevertheless continues such a compromised MID, he bears the liability risk for possible losses due to the compromised passwords on his own.