The extension includes two main methods:
CreateAuthenticationData (MBPAD) – Generates the Provisioning Authentication Data required for initial Apple Wallet provisioning.
CreateActivationData (MBPAC) – Generates the Activation Data required to complete the token activation phase.
Both outputs are formatted according to the Visa legacy structure:
type-version-keyscheme-keysetidentifier-ephemeralkey-algorithm-encryptedinformation
The encryption logic follows Visa’s guidelines for WSD Zone Encryption Keys using Triple-DES (TDEA) in Cipher Block Chaining (CBC) mode.
Renamed legacy methods to align with Visa terminology:
CreateAuthenticationData now generates MPAD
CreateAuthenticationData
CreateActivationData now generates MPAC
CreateActivationData
Added CreateWalletWrapperForVisa to generate the fully encrypted Apple Wallet provisioning payload.
CreateWalletWrapperForVisa
Added DecryptKeyWithHSM to securely decrypt encrypted keys using three HSM key components.
DecryptKeyWithHSM
Centralized encryption logic and improved alignment with modern Visa Mobile Provisioning and Apple Wallet standards.
Legacy MBPAD/MBPAC flow is superseded by the new MPAD/MPAC-based implementation.