A value transfer system using integrated circuit cards for exchanging electronic cash in off-line transactions employs cryptographically secure message protocols. Cards are loaded each with two schemes from a series and interaction between cards determines and uses the oldest scheme shared by the cards, causing one card to switch schemes irrevocably if that common scheme is its second scheme. In this way, a switch to a new scheme can migrate through the system.