Payment Cryptography Data Plane Update: Additional support for managing HMAC keys that adheres to changes documented in X9.143-2021 and provides better interoperability for key import/export

Author: AWS

.changes/next-release/feature-PaymentCryptographyDataPlane-c26bc29.json

@@ -0,0 +1,6 @@
+{
+    "type": "feature",
+    "category": "Payment Cryptography Data Plane",
+    "contributor": "",
+    "description": "Additional support for managing HMAC keys that adheres to changes documented in X9.143-2021 and provides better interoperability for key import/export"
+}

services/paymentcryptographydata/src/main/resources/codegen-resources/service-2.json

@@ -480,7 +480,7 @@
     },
     "CipherTextType":{
       "type":"string",
-      "max":4096,
+      "max":4224,
       "min":2,
       "pattern":"(?:[0-9a-fA-F][0-9a-fA-F])+",
       "sensitive":true
@@ -666,7 +666,7 @@
       ],
       "members":{
         "KeySerialNumber":{
-          "shape":"HexLengthBetween10And24",
+          "shape":"HexLength16Or20Or24",
           "documentation":"<p>The unique identifier known as Key Serial Number (KSN) that comes from an encrypting device using DUKPT encryption method. The KSN is derived from the encrypting device unique identifier and an internal transaction counter.</p>"
         },
         "DukptDerivationType":{
@@ -681,7 +681,7 @@
       "required":["KeySerialNumber"],
       "members":{
         "KeySerialNumber":{
-          "shape":"HexLengthBetween10And24",
+          "shape":"HexLength16Or20Or24",
           "documentation":"<p>The unique identifier known as Key Serial Number (KSN) that comes from an encrypting device using DUKPT encryption method. The KSN is derived from the encrypting device unique identifier and an internal transaction counter.</p>"
         },
         "DukptKeyDerivationType":{
@@ -710,7 +710,7 @@
       "required":["KeySerialNumber"],
       "members":{
         "KeySerialNumber":{
-          "shape":"HexLengthBetween10And24",
+          "shape":"HexLength16Or20Or24",
           "documentation":"<p>The unique identifier known as Key Serial Number (KSN) that comes from an encrypting device using DUKPT encryption method. The KSN is derived from the encrypting device unique identifier and an internal transaction counter.</p>"
         },
         "Mode":{
@@ -1318,11 +1318,11 @@
       "pattern":"(?:[0-9a-fA-F][0-9a-fA-F])+",
       "sensitive":true
     },
-    "HexLengthBetween10And24":{
+    "HexLength16Or20Or24":{
       "type":"string",
       "max":24,
-      "min":10,
-      "pattern":"[0-9a-fA-F]+"
+      "min":16,
+      "pattern":"(?:[0-9a-fA-F]{16}|[0-9a-fA-F]{20}|[0-9a-fA-F]{24})"
     },
     "HexLengthBetween2And4":{
       "type":"string",
@@ -1547,7 +1547,8 @@
       "type":"string",
       "enum":[
         "CMAC",
-        "ANSI_X9_24"
+        "ANSI_X9_24",
+        "HMAC"
       ]
     },
     "KeyDerivationFunction":{
@@ -1585,7 +1586,7 @@
       ],
       "members":{
         "KeySerialNumber":{
-          "shape":"HexLengthBetween10And24",
+          "shape":"HexLength16Or20Or24",
           "documentation":"<p>The unique identifier known as Key Serial Number (KSN) that comes from an encrypting device using DUKPT encryption method. The KSN is derived from the encrypting device unique identifier and an internal transaction counter.</p>"
         },
         "DukptKeyVariant":{
@@ -1851,14 +1852,14 @@
     },
     "PlainTextOutputType":{
       "type":"string",
-      "max":4096,
+      "max":4224,
       "min":2,
       "pattern":"(?:[0-9a-fA-F][0-9a-fA-F])+",
       "sensitive":true
     },
     "PlainTextType":{
       "type":"string",
-      "max":4064,
+      "max":4096,
       "min":2,
       "pattern":"(?:[0-9a-fA-F][0-9a-fA-F])+",
       "sensitive":true
@@ -2177,7 +2178,11 @@
         "TDES_3KEY",
         "AES_128",
         "AES_192",
-        "AES_256"
+        "AES_256",
+        "HMAC_SHA256",
+        "HMAC_SHA384",
+        "HMAC_SHA512",
+        "HMAC_SHA224"
       ]
     },
     "ThrottlingException":{