What is Triple DES Technology?

Triple DES is a soon to be mandated method of encrypting the PIN block that is transmitted from an ATM to the network. It is similar to the current required DES encryption technology but instead of using one key (16 digit alpha numeric number 0-9 and A-F), Triple DES technology will utilize two different keys.

Who is mandating the change to Triple DES?

MasterCard International is the EFT network authority who is mandating the change to Triple DES technology for ATM's operating on their network.

What does Triple DES offer over the current encryption standard?

As general technology increases so does the security required for EFT transactions. Triple DES technology offers a significantly higher level of security than the current mandated single DES encryption method. The implementation of Triple DES is necessary in order to maintain public trust in payment systems and to ensure the integrity of confidential cardholder information.

When does the new rule become effective?

All ATM equipment installed on or after April 1, 2002 must be Triple DES compliant. All ATM equipment installed prior to this date must be upgraded to Triple DES no later than April 1, 2005.

How does Triton plan to support the Triple DES requirement?

By April 1, 2002, every model of ATM that Triton manufactures will be Triple DES compliant. This will be accomplished via a three-step process.

Step 1.  All ATM models that currently ship with a Secure Pin Entry Device (SPED) Keypad (MAKO, Model 9650 within the U.S. and all ATM models outside of the U.S.) will have upgraded SPED keypads that support Triple DES from a hardware perspective by April 1, 2002.

Step 2.  All ATM models that have not been manufactured with a SPED Keypad will ship with one that supports Triple DES as standard equipment by April 1, 2002.

Step 3.  All ATM models will ship with terminal software that supports Triple DES by April 1, 2002.

Note: The three steps described above will not be implemented simultaneously. There will be some units that ship prior to April 1, 2002 that will have a SPED Keypad that supports Triple DES but with terminal software that does not support Triple DES. However, by April 1, 2002, every unit will have as standard equipment the hardware and software required supporting Triple DES.

How can I determine if my Triton ATM is Triple DES compliant?

To determine if you have the hardware and software required to be Triple DES compliant go into the Management Functions and select Test Receipt Printer. On the printout will be version numbers for the SPED keypad (if installed) and terminal software. Next, contact our Technical Services Department and they can make the correct determination based on the revision levels of the previously mentioned items.

How will the implementation of Triple DES affect my support and service of Triton equipment?

There will be some minor changes that service and support organizations must be aware of with Triple DES compliant units. One issue will be encountered during the programming of the ATM. Triple DES units will have the ability to have multiple Master Keys entered instead of only one. Initially, most EFT Networks will not be supporting this function. However, when programming Triple DES compliant Triton ATM's it will be necessary to load the single Master Key twice.

From a spare parts perspective, units that did not ship with a SPED keypad (i.e. Model 9600 in the U.S.) prior to April 1, 2002, will now have one as standard equipment. The SPED Keypad will replace the non-SPED Keypad. Since the data encryption is performed in the SPED Keypad and not in the Memory Module, Triton will be phasing out the DES circuitry that is currently installed on the Memory Module. After April 1, 2002, when ordering either a replacement Keypad PCB or Memory Module, the customer must inform Triton if the part is for a SPED or non-SPED unit.

Will Triton continue to stock Non-SPED Keypads and Memory Modules?

We will continue to sell non-SPED capable Keypad's and Memory Modules for at least six months after April 1, 2002. After that time we will continue to sell these parts until we exhaust our inventory and discontinue availability.

Will Triton offer a Triple DES Field Upgrade Kit?

Yes. The upgrade kit may be ordered for any non-Triple DES unit after April 1, 2002.

Will all Triton manufactured ATM's be able to be upgraded to support Triple DES?

No. The Model 9500 Series and Scrip 9000 units will not be capable of being upgraded to support Triple DES. However, all other models of Triton ATM's and SuperScrip products will be able to support Triple DES.