HID Global ActivID Applet Suite v2.7.5 and v2.7.6 on Giesecke & Devrient Sm@rtCafé Expert 7.0

Certificate details

Certificate ID	#4564
Status	historical
Historical reason	Moved to historical list due to dependency on certificate #2327
Validation dates	30.08.2023
Standard	FIPS 140-2
Security level	2
Type	Hardware
Embodiment	Single Chip
Caveat	When operated with module Sm@rtCafé Expert 7.0 validated to FIPS 140-2 under Cert. #2327 operating in FIPS mode
Exceptions	Roles, Services, and Authentication: Level 3 Physical Security: Level 3 Operational Environment: Level 3 EMI/EMC: Level 3 Design Assurance: Level 3
Description	HID Global ActivID Applet v2.7.5 and v2.7.6 are Java Card applet suites that use the Sm@rtCafé Expert 7.0 operating system. The products can be used over contact and contactless interfaces and can be configured for support of GSC-IS v2.1 and PIV standards (NIST SP 800-73-4 and SP 800-78-4).
Version (Hardware)	SLE78CLFX4000P(M) M7892
Version (Firmware)	Sm@rtCafé Expert 7.0 and HID Global ActivID Applet Suite 2.7.5 and 2.7.6
Vendor	HID Global and Giesecke+Devrient Mobile Security America Inc. http://www.hidglobal.com
Lab	UL Verification Services, Inc.
Algorithms	AES#2720 AES#2721 CVL#1192 CVL#1193 DRBG#455 ECDSA#476 KBKDF#18 KTS#2720 KTS#2721 RSA#1507 SHS#2289 SHS#2290 Triple-DES#1637
References	This certificate's webpage directly references 1 certificates, transitively this expands into 1 certificates.

Certificate

Webpage

Security policy

Security policy PDF TXT

Extracted keywords

Symmetric Algorithms

AES, AES-256, AES-128, TDEA, Triple-DES, CMAC

Asymmetric Algorithms

RSA 2048, ECDSA, ECC, DH, Diffie-Hellman

Hash functions

SHA-1, SHA-256, SHA-2

Schemes

MAC, Key Agreement

Randomness

TRNG, DRBG, RNG

Elliptic Curves

P-224, P-256, P-384, P-521

Block cipher modes

ECB, CBC

Vendor

Giesecke & Devrient, G&D

Security level

Level 2

Side-channel analysis

Side-channel, DPA, timing attacks, DFA

Standards

FIPS 140-2, FIPS 180-4, FIPS 186-4, FIPS 197, FIPS PUB 140-2, FIPS 201-2, FIPS 201, SP 800-90A, SP 800-67, SP 800-108, SP 800-56B, SP 800-38F, SP 800-56A, PKCS#1, PKCS #1

Cross-references

Outgoing

2327 - historical - Sm@rtCafé Expert 7.0

Subject	FIPS 140-2 Security Policy Template
Author	Vendor
Creation date	D:20221102102329-07'00'
Modification date	D:20221102102348-07'00'
Pages	16
Creator	Acrobat PDFMaker 22 for Word
Producer	Adobe PDF Library 22.3.39

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

Processing updates

21.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'module_algorithms': {'_type': 'Set', 'elements': ['ECDSA#476', 'KTS#2721', 'SHS#2289', 'Triple-DES#1637', 'DRBG#455', 'KTS#2720', 'AES#2720', 'CVL#1192', 'CVL#1193', 'SHS#2290', 'RSA#1507', 'AES#2721', 'KBKDF#18']}, 'policy_algorithms': {'_type': 'Set', 'elements': ['#2721', '#476', '#1637', '#1192', '#1507', '#177', '#91', '#2720', '#2289', '#455', '#1193', '#2290']}}.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__delete__': ['Level 1']}}}, 'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'SHA-1, 2290': 1, 'Cert #DRBG': 1, 'Cert #RSA': 1}, '__update__': {'SHA-1': 2, 'SHA-256': 2}, '__delete__': ['Cert # DRBG', 'Cert # RSA']}}}, 'vendor': {'__update__': {'GD': {'__update__': {'G&D': 17}}}}, 'randomness': {'__update__': {'PRNG': {'__update__': {'DRBG': 5}}, 'RNG': {'__update__': {'RNG': 3}}}}, 'ecc_curve': {'__update__': {'NIST': {'__insert__': {'P-224': 2, 'P-384': 2}, '__update__': {'P-256': 6, 'P-521': 6}}}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS 186-4': 3}}}}} data.

The computed heuristics were updated.

The algorithms property was updated, with the {'_type': 'Set', 'elements': ['#2721', '#476', '#1637', '#1192', '#1507', '#177', '#91', '#2720', '#2289', '#455', '#1193', '#2290']} values added.

The policy_prunned_references property was updated, with the {'_type': 'Set', 'elements': ['177']} values discarded.

The policy_processed_references property was updated, with the {'directly_referencing': {'__discard__': {'_type': 'Set', 'elements': ['177']}}, 'indirectly_referencing': {'__discard__': {'_type': 'Set', 'elements': ['47', '177', '103', '1637']}}} data.

The state was updated.

The policy property was updated, with the {'txt_hash': 'd6dd3c3d33a4fd7ee1ef8fb11360c832257c1475b9bbf77d9f4d97d61d0f319e', 'json_hash': '34266e6c28763754b9732894950a0620ac50abe54828645534a20602b8a4ea97'} data.
26.01.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The status property was set to historical.

The historical_reason property was set to Moved to historical list due to dependency on certificate #2327.

The date_sunset property was set to None.
15.12.2025

The certificate data changed.
Certificate changed

The state was updated.

The following values were inserted: {'policy_json_hash': None}.

The following properties were deleted: ['policy_convert_garbage'].
08.09.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated.
18.09.2023

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4564,
  "dgst": "09b56f21e3c4370a",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "AES#2720",
        "DRBG#455",
        "SHS#2290",
        "Triple-DES#1637",
        "KTS#2720",
        "#1192",
        "#2721",
        "KTS#2721",
        "#2720",
        "#1193",
        "#177",
        "AES#2721",
        "SHS#2289",
        "#1637",
        "KBKDF#18",
        "#455",
        "#1507",
        "#2289",
        "CVL#1193",
        "ECDSA#476",
        "#476",
        "#2290",
        "CVL#1192",
        "#91",
        "RSA#1507"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "7.0",
        "2.7.6",
        "2.7.5"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "2327"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "2327"
        ]
      }
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": [
        "2327"
      ]
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "2327"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "2327"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "2327"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 10
          },
          "ECDSA": {
            "ECDSA": 2
          }
        },
        "FF": {
          "DH": {
            "DH": 1,
            "Diffie-Hellman": 1
          }
        },
        "RSA": {
          "RSA 2048": 11
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "ECB": {
          "ECB": 4
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2
        },
        "MAC": {
          "MAC": 3
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 2,
          "P-256": 6,
          "P-384": 2,
          "P-521": 6
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "# 18": 1,
          "# 2327": 1,
          "#1": 1,
          "#1507": 1,
          "#1637": 1,
          "#177": 1,
          "#2289": 1,
          "#2290": 1,
          "#2327": 2,
          "#2721": 1,
          "#40": 1,
          "#455": 1,
          "#476": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES (Cert. #2721": 1,
          "AES 2720": 1,
          "AES 2721": 1,
          "AES-128": 9,
          "AES-256": 1,
          "Cert #DRBG": 1,
          "Cert #RSA": 1,
          "DRBG (Cert. #455": 1,
          "PKCS #1": 2,
          "PKCS#1": 2,
          "RSA 2048": 11,
          "SHA-1": 2,
          "SHA-1 (Cert. #2290": 1,
          "SHA-1, 2290": 1,
          "SHA-2": 1,
          "SHA-256": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 2": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 4
          },
          "SHA2": {
            "SHA-2": 1,
            "SHA-256": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 5
        },
        "RNG": {
          "RNG": 3
        },
        "TRNG": {
          "TRNG": 3
        }
      },
      "side_channel_analysis": {
        "FI": {
          "DFA": 5
        },
        "SCA": {
          "DPA": 1,
          "Side-channel": 2,
          "timing attacks": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 28,
          "FIPS 180-4": 2,
          "FIPS 186-4": 3,
          "FIPS 197": 2,
          "FIPS 201": 1,
          "FIPS 201-2": 1,
          "FIPS PUB 140-2": 1
        },
        "NIST": {
          "SP 800-108": 3,
          "SP 800-38F": 1,
          "SP 800-56A": 1,
          "SP 800-56B": 1,
          "SP 800-67": 1,
          "SP 800-90A": 2
        },
        "PKCS": {
          "PKCS #1": 1,
          "PKCS#1": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 11,
            "AES-128": 9,
            "AES-256": 1
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 2,
            "Triple-DES": 5
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 3
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "GD": {
          "G\u0026D": 17,
          "Giesecke \u0026 Devrient": 2
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "AES#2720",
        "DRBG#455",
        "AES#2721",
        "SHS#2289",
        "SHS#2290",
        "KTS#2720",
        "CVL#1192",
        "Triple-DES#1637",
        "CVL#1193",
        "KBKDF#18",
        "KTS#2721",
        "RSA#1507",
        "ECDSA#476"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#1193",
        "#177",
        "#476",
        "#1637",
        "#2290",
        "#1192",
        "#91",
        "#2721",
        "#455",
        "#1507",
        "#2720",
        "#2289"
      ]
    },
    "policy_metadata": {
      "/Author": "Vendor",
      "/Company": "Vendor",
      "/CreationDate": "D:20221102102329-07\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 22 for Word",
      "/ModDate": "D:20221102102348-07\u002700\u0027",
      "/Producer": "Adobe PDF Library 22.3.39",
      "/SourceModified": "D:20221102001500",
      "/Subject": "FIPS 140-2 Security Policy Template",
      "/Title": "",
      "/bjDocumentLabelXML": "\u003c?xml version=\"1.0\" encoding=\"us-ascii\"?\u003e\u003csisl xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\" sislVersion=\"0\" policy=\"c8d5760e-638a-47e8-9e2e-1226c2cb268d\" origin=\"userSelected\" xmlns=\"http://www.boldonj",
      "/bjDocumentLabelXML-0": "ames.com/2008/01/sie/internal/label\"\u003e\u003celement uid=\"42834bfb-1ec1-4beb-bd64-eb83fb3cb3f3\" value=\"\" /\u003e\u003c/sisl\u003e",
      "/bjDocumentSecurityLabel": "Unrestricted",
      "/bjLabelHistoryID": "{828B1F90-65E8-4E63-AA1E-F87AF3202B93}",
      "/bjSaver": "ISGRPDYWN9fvPi5hqiz+EhJKtcKoBKWs",
      "/docIndexRef": "255897e1-d866-4c4b-9a64-0ebae3d0a7dd",
      "pdf_file_size_bytes": 440117,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html#2721",
          "http://csrc.nist.gov/groups/STM/cavp/documents/components/componentnewval.html#1193",
          "http://csrc.nist.gov/groups/STM/cavp/documents/shs/shaval.htm#2290",
          "http://csrc.nist.gov/groups/STM/cavp/documents/keymgmt/kasnewval.html#91",
          "http://csrc.nist.gov/groups/STM/cavp/documents/components/componentnewval.html#1192",
          "http://csrc.nist.gov/groups/STM/cavp/documents/shs/shaval.htm#2289",
          "http://csrc.nist.gov/groups/STM/cavp/documents/dss/ecdsanewval.html#476",
          "http://csrc.nist.gov/groups/STM/cavp/documents/dss/rsanewval.html#1507",
          "http://csrc.nist.gov/groups/STM/cavp/documents/KBKDF800-108/kbkdfval.htm#18",
          "http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html#2720",
          "http://csrc.nist.gov/groups/STM/cavp/documents/des/tripledesval.html#1637",
          "http://csrc.nist.gov/groups/STM/cavp/documents/drbg/drbgval.html#455",
          "http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2015.htm#2327",
          "http://csrc.nist.gov/groups/STM/cavp/documents/components/componentnewval.html#177"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 16
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "34266e6c28763754b9732894950a0620ac50abe54828645534a20602b8a4ea97",
      "source_hash": "1cee5ed511445c7684d8406756881f85621b82b5281471a63f188bb6f7c5f08e",
      "txt_hash": "d6dd3c3d33a4fd7ee1ef8fb11360c832257c1475b9bbf77d9f4d97d61d0f319e"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated with module Sm@rtCaf\u00e9 Expert 7.0 validated to FIPS 140-2 under Cert. #2327 operating in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/August 2023_010923_0844.pdf",
    "date_sunset": null,
    "description": "HID Global ActivID Applet v2.7.5 and v2.7.6 are Java Card applet suites that use the Sm@rtCaf\u00e9 Expert 7.0 operating system. The products can be used over contact and contactless interfaces and can be configured for support of GSC-IS v2.1 and PIV standards (NIST SP 800-73-4 and SP 800-78-4).",
    "embodiment": "Single Chip",
    "exceptions": [
      "Roles, Services, and Authentication: Level 3",
      "Physical Security: Level 3",
      "Operational Environment: Level 3",
      "EMI/EMC: Level 3",
      "Design Assurance: Level 3"
    ],
    "fw_versions": "Sm@rtCaf\u00e9 Expert 7.0 and HID Global ActivID Applet Suite 2.7.5 and 2.7.6",
    "historical_reason": "Moved to historical list due to dependency on certificate #2327",
    "hw_versions": "SLE78CLFX4000P(M) M7892",
    "level": 2,
    "mentioned_certs": {
      "2327": 1
    },
    "module_name": "HID Global ActivID Applet Suite v2.7.5 and v2.7.6 on Giesecke \u0026 Devrient Sm@rtCaf\u00e9 Expert 7.0",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2023-08-30",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Initial"
      }
    ],
    "vendor": "HID Global and Giesecke+Devrient Mobile Security America Inc.",
    "vendor_url": "http://www.hidglobal.com"
  }
}

Sections

HID Global ActivID Applet Suite v2.7.5 and v2.7.6 on Giesecke & Devrient Sm@rtCafé Expert 7.0

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Randomness

Elliptic Curves

Block cipher modes

Vendor

Security level

Side-channel analysis

Standards

Cross-references

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

HID Global ActivID Applet Suite v2.7.5 and v2.7.6 on Giesecke & Devrient Sm@rtCafé Expert 7.0

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Randomness

Elliptic Curves

Block cipher modes

Device

Vendor

Security

Security level

Side-channel analysis

Other

Standards

Cross-references

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data