加密将始终使用从IMKac派生的会话密钥进行密码生成.但是，IMK不必与您的物理卡使用的相同(您可以使用其他CVN作为主机来管理它). 付款方式(Visa，MasterCard等)将提供相同的密钥，这些密钥将在交易过程中验证密码并将验证结果发送给您.

Encryption will always use Session keys derived from an IMKac for Cryptogram generation. However the IMK need not be the same as what your physical card uses( you can manage this using a different CVN as host). The same key will be available with the payment schemes(Visa, MasterCard etc.) who will validate the cryptogram during the transaction and send you the results of verification.

钱包CVN不同.如果您作为发卡机构的主机要验证密码，那么您应该拥有CVN的IMKac，而您的HSM应该支持CVN.理想情况下，您可以依靠验证结果代码(对于Visa来说是44，对于MC来说是48 SE71)来决定是否可以批准.

Wallet CVNs are different. If you as a card issuer host wants to verify the cryptogram, then you should have the IMKac for the CVN and your HSM should support the CVN. Ideally you can rely on the verification results code (in 44 for Visa and 48 SE71 for MC) to decide whether it can be approved or no.

如果您可以从Apple获得更多文档，可以共享，我很乐意浏览这些文档:-).

In case if you have more documentations from Apple you can share, I would love to go through those :-) .