list Copyright 2026, /n software, Inc. High-level information about new features, fixes, and functionality changes between minor versions releases. https://www.nsoftware.com/ webmaster@nsoftware.com [IMPORTANT] MasterCard has issued a new encryption certificate, which is used by the SDK to encrypt the device information. This affects the 'DirectoryServerInfo' values specified for communication with MasterCard. The previous encryption certificate was set to expire on July 15th, 2026; the new certificate expires on January 26th, 2029, and has a kid value of '0a15f97c9e4d5c1e02d234f65a05c44a38e8bc49'.The /n software 3DS SDKs preconfigured certificate values have been updated for MasterCard (DS ID: A000000004). The new certificate can also be obtained directly from MasterCard.<br> Feb 05, 2026 [IMPORTANT] A new LOA has been granted by EMVCo for the iOS SDK. The value for the iOS SDK is 3DS_LOA_SDK_NSOF_020301_01162 and expires on November 28th, 2027.<br> December 3, 2025 [IMPORTANT] A new LOA has been granted by EMVCo for the Android SDK. The value for the Android SDK is 3DS_LOA_SDK_NSOF_020301_01145 and expires on November 11th, 2027.<br> November 19, 2025 [NEW] Support added for Device Information Data Version 1.7 (DV 1.7).<br> August 28, 2025 [IMPORTANT] American Express has issued a new encryption certificate, which is used by the SDK to encrypt the device information. This affects the 'DirectoryServerInfo' values specified for communication with AMEX. The previous encryption certificate was set to expire on May 23rd, 2025; the new certificate expires on June 27th of 2027. The new encryption key has a kid value of '65e56482-h634-2512-6cg3-kn75c9b6e79h'. A new root CA certificate has been used as well.The /n software 3DS SDKs preconfigured certificate values have been updated for AMEX (DS ID: A000000025). The new certificates can also be obtained from American Express directly through their AMEX Enabled dashboard.<br> August 12, 2025 [IMPORTANT] UnionPay has issued a new encryption certificate, which is used by the SDK to encrypt the device information. This affects the 'DirectoryServerInfo' values specified for communication with UnionPay. The previous encryption certificate was set to expire on July 8th, 2025; the new certificate expires on April 18th, 2030. The /n software 3DS SDKs preconfigured certificate values have been updated for UnionPay (DS ID: A000000333).<br> June 4, 2025 [IMPORTANT] Improved network performance and stability.<br> September 23, 2024 [FIX] (Android) Add BROWSABLE category to intent filter to allow for OOB deep links.<br> August 9, 2024 [FIX] (Android) Updated device information collection to no longer pick up A144 (removed in DV 1.6).<br> July 5, 2024 [FIX] (Android) Removed 'android:supportsRtl="true"' from the Android SDK's manifest. If supportsRtl is required, it should instead be set in the application manifest.<br> May 6, 2024 [FIX] In some exceptional cases, Android may kill an application that is moved to the background, especially when memory is running low on the device. A workaround was added to the Android 3DS SDK to help with recovering from this type of situation. The SDK will restart the parent activity if the application was killed in the background during a challenge. The application can know the app was restarted by checking the 'ThreeDS2Service' object's static 'wasTransactionKilled()' method. For instance:<br> Apr 11, 2024 [IMPORTANT] MasterCard has issued a new encryption certificate, which is used by the SDK to encrypt the device information. This affects the 'DirectoryServerInfo' values specified for communication with MasterCard. The previous encryption certificate was set to expire on June 15th, 2024; the new certificate expires on July 15th, 2026. The /n software 3DS SDKs preconfigured certificate values have been updated for MasterCard (DS ID: A000000004).<br> Mar 20, 2024 [IMPORTANT] Visa has issued a new encryption certificate, which is used by the SDK to encrypt the device information. This affects the 'DirectoryServerInfo' values specified for communication with Visa. The previous encryption certificate was set to expire on August 22th, 2024; the new certificate expires on February 26th, 2027. The /n software 3DS SDKs preconfigured certificate values have been updated for Visa (DS ID: A000000003).<br> Mar 11, 2024 [NEW] Overloaded DirectoryServerInfo (Android and iOS) and ConfigParametersBuilder (iOS) constructors for backwards compatibility. The DirectoryServerInfo constructor now supports an optional KID parameter for message version 2.3.1.1. The ConfigParametersBuilder constructor supports an optional OOBAppURLSupported parameter for message version 2.3.1.1. See the product documentation for more information.<br> Jan 23, 2023 [IMPORTANT] (iOS) Updated signature for the xcframeworks per Apple's requirements. Please ensure the Signature matches the following when viewed in Xcode: Team Name: n software, Inc. Team Id: 74N8742JFG Kind: Apple Developer Program<br> Jan 16, 2024 [IMPORTANT] (iOS) Added Privacy Manifest for the iOS SDK.<br> Jan 2, 2024 [IMPORTANT] A new LOA has been granted by EMVCo for the iOS SDK.The value for the iOS SDK is 3DS_LOA_SDK_NSOF_020301_00817 and expires on November 29th, 2025.<br> Dec 4, 2023 [IMPORTANT] A new LOA has been granted by EMVCo for the Android SDK. The value for the Android SDK is 3DS_LOA_SDK_NSOF_020301_00804 and expires on November 6th, 2025.<br> Nov 14, 2023 [FIX] (iOS) Removed deprecated bitcode support for the iOS frameworks.<br> Nov 14, 2023 [FIX] (iOS) Fixed issue loading certificate data when using iOS 17.<br> Oct 7, 2023 [NEW] Added support for Android 14.<br> Sept 20, 2023 [FIX] (iOS) Fixed issue in 2.1.0 challenge flow where the UI was not automatically updated after returning from a different app.<br> Sept 15, 2023 [FIX] (Android) Fixed issue where the UI was not updated with challengeAddInfo after returning from the background.<br> Aug 24, 2023 [IMPORTANT] American Express has issued a new encryption certificate, which is used by the SDK to encrypt the device information. This affects the 'DirectoryServerInfo' values specified for communication with AMEX. The previous encryption certificate was set to expire on August 18th, 2023; the new certificate expires on May 23rd of 2025. The /n software 3DS SDKs preconfigured certificate values have been updated for AMEX (DS ID: A000000025). The new certificate can also be obtained from American Express directly through their AMEX Enabled dashboard.<br> July 10, 2023 [FIX] (Android) Fixed issue related to synchronization when using the R8 compiler.<br> May 26, 2023 [FIX] (Android) Added the required BROWSABLE category to the manifest for OOB challenge listener intent filter.<br> May 25, 2023 [FIX] (Android) Fixed issue where SDK would crash when trying to dismiss activity during a challenge.<br> Feb 14, 2023 [NEW] (Android) Add support for Parcelable interface.<br> Jan 21, 2023 [NEW] Added support for Android 13.<br> Dec 8, 2022 [FIX] (iOS/Android) Fixed issue where the ThreeDSRequestorAppURL was not added to 2.2.0 CReq messages.<br>[FIX] (Android) Fixed issue for OOB flow where the CReq was not automatically posted when the requestor app was moved to the foreground.<br> Sept 6, 2022 [NEW] Pre-configured 3DS SDK encryption certificate value has been updated for UnionPay.<br> July 19, 2022 [FIX] (Android) Added a ProGuard configuration file to our Android SDK so no obfuscation rules would need to be manually specified by our customers that also use obfuscation.<br> April 28, 2022 [FIX] (Android) Fixed a bug where the BLUETOOTH_CONNECT permission was required for Android 12 and up. If this permission has not been granted, device parameter C009 will not be collected and will instead be listed in the Device Parameter Not Available section with a value of RE03 (indicating permissions not granted).<br> April 22, 2022 [FIX] (Android) Fixed challengeDataEntry and challengeHTMLDataEntry formatting in CReq.<br> February 4, 2022 [IMPORTANT] The Android SDK is now built with AndroidX which replaces the original Android Support Library. Please ensure your project is also using AndroidX instead of the older Android Support Library.<br> January 12, 2022 [IMPORTANT] New LOAs have been granted and both SDKs have been updated to the latest ones issued to /n software by EMVCo. The value for the Android SDK is 3DS_LOA_SER_NSOF_020200_00492 and expires on November 25th, 2023. The value for the iOS SDK is 3DS_LOA_SER_NSOF_020200_00489 and expires on December 3rd, 2023.<br> January 11, 2022 [FIX] Implemented SDKMaxTimeout. SDK will now close the transaction UI when a timeout occurs.<br> January 11, 2022 [FIX] (iOS) Fix an issue where the Challenge UI is not closed when the close method is called in protocolError.<br>[FIX] (Android) Fix an issue where the Challenge UI is not closed if there is a protocolError when clicking the resend button.<br>[FIX] (iOS) Fix an issue where both cancel and protocolError fire if the ACS returns an error during cancel. In this case, only protocolError should fire.<br> December 9, 2021 [NEW] Pre-configured 3DS SDK certificate values have been added/updated for JCB and UnionPay.<br> October 12, 2021 [IMPORTANT] American Express has issued a new encryption certificate (used by the SDK to encrypt the device information). Similar to the Visa change at build 2.0.7930, this affects the 'DirectoryServerInfo' values specified for communication with Amex. A new encryption certificate can be obtained from Amex directly though their AMEX Enabled dashboard, or from /n software. We have updated our pre-configured values for Amex to reflect the new certificate.<br>[NEW] Pre-configured 3DS SDK certificate values have been added for Discover.<br> September 30, 2021 [IMPORTANT] MasterCard has issued a new encryption certificate (used by the SDK to encrypt the device information). Similar to the Visa change at build 2.0.7930, this affects the 'DirectoryServerInfo' values specified for communication with MasterCard. A new encryption certificate can be obtained from MasterCard directly, or from /n software. We have updated our pre-configured values for MasterCard to reflect the new certificate.<br> September 22, 2021 [IMPORTANT] Visa is rolling out a new eCommerce G2 root CA certificate, and a new encryption certificate and chain will need to be configured in the 3DS SDKs in order to continue communication with Visa after October 31st, 2021. This affects the 'DirectoryServerInfo' values specified for communication with Visa. New certificates can be obtained from Visa directly, or from /n software. We have updated our pre-configured values for Visa to reflect the new certificates.<br> September 17, 2021 [FIX] A change to the way signature algorithms are presented to the server during SSL negotiation (in the Client Hello packet). Some servers seem to require these algorithms to be listed with the most secure algorithms first.<br> July 8, 2021 [FIX] The Android edition of the SDK previously used hardcoded colors which could only be modified by creating an nsoftware.3ds.Theme. The default colors have been removed. The challenge pages will now use the color theme specified for the app (colorPrimary/colorPrimaryDark in colors.xml), or the system default colors if no app-level themes are defined.<br> May 19, 2021 [FIX] Fixed an issue with the OOB UI type where cancelling after a previous submit resulted in the 'challengeCancel' field being sent alongside the 'oobContinue' field, which should not be the case. This issue affected both the Android and iOS SDKs.<br> May 12, 2021 [FIX] Fixed an issue where the challenge text field and submit button during certain flows would be covered up by the keyboard in the iOS SDK. The result is that challenge data could not be submitted. The keyboard type has also been changed to 'done' so when the "done" button is pressed, the keyboard will hide again.<br> May 6, 2021 [NEW] Added logging of security warning details to the 'Log' event in the Android 3DS SDK. This matches the iOS feature from the previous change. When the 'logType' is 'SW', the 'message' parameter will contain a code pointing to a reason why the warning was raised.<br> April 23, 2021 [NEW] Added an 'AppBundleID' config parameter to the iOS 3DS SDK. This should be retrieved from a server and set at runtime when initializing the SDK. This is then verified throughout the 3DS process to verify that the app's Bundle ID matches the value specified.<br>[NEW] Added logging of security warning details to the 'Log' event in the iOS 3DS SDK. When the 'logType' is 'SW', the 'message' parameter will contain a code pointing to a reason why the warning was raised.<br> March 18, 2021 [NEW] Added 'setBrandingZoneLogoGap' function to the 'UICustomization' class for the iOS 3DS SDK. This allows specifying the gap between the psImage and issuerImage displayed in the "branding zone" (between the header and challenge data). The default value is 8.<br> March 10, 2021 [NEW] Added 'UseDefaultTrustedAppStoreList' config setting for the Android 3DS SDK. By default, the Android 3DS SDK will trust the Google Play Store (com.android.vending). Setting this config to "false" will cause the SDK to only trust stores explicitly specified during initialization (via the 'TrustedAppStores' Config Parameters). The default value is "true."<br> February 2, 2021 [FIX] Ignore extra fields (not defined in the specification) sent by the ACS in the final CRes packet.<br> January, 25 2021 [NEW] Added 'FireChallengeStatusFirst' config setting for the iOS SDK. By default, the challenge is complete or cancelled, the SDK will raise the relevant 'ChallengeStatusReceiver' events after the challenge UI is closed. Setting this new config to "true" causes the 'completed', 'cancelled', or 'protocolError' events to be fired before the UI is closed. This allows the view to be changed, if desired. This is helpful if navigating to a new view (different from the pre-challenge view) when the challenge is complete/cancelled. The default value is "false."<br> January, 14 2021 [FIX] Resolved an issue related to UTF-8 character decoding in the iOS 3DS SDK. This bug resulted in UTF-8 characters not being counted properly, which could cause issues if the field containing these characters was at or near the max length, resulting in a "data element not in the required format" error.<br> January, 13 2021