IDPrime MD 830 with OATH & MPCOS applets

Certificate details

Certificate ID #2202
Status historical
Historical reason Moved to historical list due to sunsetting
Validation dates 07.07.2014 , 04.08.2016 , 03.04.2018 , 31.05.2019
Standard FIPS 140-2
Security level 2
Type Hardware
Embodiment Single Chip
Caveat When operated in FIPS mode
Exceptions
  • Roles, Services, and Authentication: Level 3
  • Physical Security: Level 3
  • EMI/EMC: Level 3
  • Design Assurance: Level 3
Description IDPrime MD 830 is a Minidriver enabled PKI smartcard, offering all the necessary services (with either RSA or Elliptic curves algorithms) to secure an IT Security and ID access infrastructure. In addition, OATH applet offers One Time Password based strong authentication while MPCOS offers e-purse and data management services.
Version (Hardware) SLE78CFX3009P and A2424658
Version (Firmware) IDCore 30 Build 1.17, IDPrime MD Applet version V4.1.2.F with MSPNP Applet V1.0, OATH Applet V2.11 and MPCOS Applet V3.8
Vendor Gemalto http://www.gemalto.com
Lab UL Verification Services, Inc.
Algorithms
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-128, AES-192, AES-256, DES, TDEA, Triple-DES, TDES, CMAC
Asymmetric Algorithms
RSA 1024, RSA 2048, ECDH, ECDSA, ECC, Diffie-Hellman, DH
Hash functions
SHA1, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA2, SHA-2
Schemes
MAC, Key Agreement
Randomness
PRNG, RNG
Elliptic Curves
P-224, P-256, P-384, P-521, P-192, P-512
Block cipher modes
ECB, CBC

JavaCard versions
Java Card 2.2.2, Java Card 3.0.1, JavaCard 2.2.2, Global Platform 2.1.1
Trusted Execution Environments
SE
Vendor
Infineon, Gemalto, Microsoft

Security level
Level 2, Level 3
Side-channel analysis
Side channel

Title Microsoft Word - 2e - Gemalto_IDPrime_MD830_applet_SecurityPolicyL2_V1_11 Cert#2202.docx
Author lgarcia
Creation date D:20190521134248-07'00'
Modification date D:20190521134248-07'00'
Pages 46
Creator PScript5.dll Version 5.2.2
Producer Acrobat Distiller 17.0 (Windows)

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 2202,
  "dgst": "4e893a5e600e9e6d",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "#1413",
        "#1946",
        "Triple-DES#1413",
        "AES#2261",
        "#1158",
        "#363",
        "RSA#1163",
        "RSA#1158",
        "KTS#2261",
        "#1163",
        "#41",
        "SHS#1946",
        "ECDSA#363",
        "Triple-DES MAC#1413",
        "CVL#41",
        "#2261"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "2.11",
        "4.1.2",
        "3.8",
        "1.0",
        "1.17"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 41,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 15
          },
          "ECDH": {
            "ECDH": 5
          },
          "ECDSA": {
            "ECDSA": 24
          }
        },
        "FF": {
          "DH": {
            "DH": 1,
            "Diffie-Hellman": 2
          }
        },
        "RSA": {
          "RSA 1024": 1,
          "RSA 2048": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 4
        },
        "ECB": {
          "ECB": 6
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2
        },
        "MAC": {
          "MAC": 14
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-192": 8,
          "P-224": 40,
          "P-256": 36,
          "P-384": 36,
          "P-512": 13,
          "P-521": 36
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1413": 1,
          "#2261": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 128": 2,
          "AES 128/192/256": 6,
          "AES CMAC Cert. #2261": 1,
          "AES-128": 2,
          "AES-128/192/256": 8,
          "AES-192": 1,
          "AES-256": 1,
          "PKCS#1": 6,
          "RSA 1024": 1,
          "RSA 2048": 1,
          "RSA PKCS#1": 2,
          "SHA-1": 11,
          "SHA-2": 4,
          "SHA-2 1158": 1,
          "SHA-2 1163": 1,
          "SHA-2 363": 1,
          "SHA-224": 2,
          "SHA-256": 4,
          "SHA-384": 2,
          "SHA-512": 4,
          "SHA1": 1,
          "SHA2": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 2": 48,
          "Level 3": 3
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 11,
            "SHA1": 1
          },
          "SHA2": {
            "SHA-2": 7,
            "SHA-224": 2,
            "SHA-256": 4,
            "SHA-384": 2,
            "SHA-512": 4,
            "SHA2": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {
        "GlobalPlatform": {
          "Global Platform 2.1.1": 2
        },
        "JavaCard": {
          "Java Card 2.2.2": 3,
          "Java Card 3.0.1": 1,
          "JavaCard 2.2.2": 2
        }
      },
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "PRNG": 2
        },
        "RNG": {
          "RNG": 4
        }
      },
      "side_channel_analysis": {
        "SCA": {
          "Side channel": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 113": 1,
          "FIPS 140-2": 51,
          "FIPS 180-4": 2,
          "FIPS 186-3": 6,
          "FIPS 186-4": 1,
          "FIPS 197": 2,
          "FIPS PUB 140-2": 1,
          "FIPS113": 1,
          "FIPS140-2": 1,
          "FIPS186-3": 1
        },
        "NIST": {
          "NIST SP 800-131A": 4,
          "SP 800-131A": 1,
          "SP 800-38F": 1,
          "SP 800-56A": 4,
          "SP 800-67": 2
        },
        "PKCS": {
          "PKCS#1": 4
        },
        "SCP": {
          "SCP01": 2,
          "SCP02": 2,
          "SCP03": 9
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 37,
            "AES-128": 2,
            "AES-192": 1,
            "AES-256": 1
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 2,
            "TDES": 15,
            "Triple-DES": 57
          },
          "DES": {
            "DES": 3
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 4
          }
        }
      },
      "tee_name": {
        "IBM": {
          "SE": 4
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Gemalto": {
          "Gemalto": 160
        },
        "Infineon": {
          "Infineon": 2
        },
        "Microsoft": {
          "Microsoft": 2
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "Triple-DES#1413",
        "AES#2261",
        "RSA#1163",
        "RSA#1158",
        "KTS#2261",
        "SHS#1946",
        "ECDSA#363",
        "Triple-DES MAC#1413",
        "CVL#41"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#1413",
        "#1946",
        "#1158",
        "#363",
        "#1163",
        "#41",
        "#2261"
      ]
    },
    "policy_metadata": {
      "/Author": "lgarcia",
      "/CreationDate": "D:20190521134248-07\u002700\u0027",
      "/Creator": "PScript5.dll Version 5.2.2",
      "/ModDate": "D:20190521134248-07\u002700\u0027",
      "/Producer": "Acrobat Distiller 17.0 (Windows)",
      "/Title": "Microsoft Word - 2e - Gemalto_IDPrime_MD830_applet_SecurityPolicyL2_V1_11 Cert#2202.docx",
      "pdf_file_size_bytes": 370205,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 46
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "5fb3981e95e76a8157e2f40fae2fe4039e26e520914e95e7028282aaf1596356",
      "source_hash": "a753757cba23072ff64890f0df9648af1ff34d599fb1f09ceb98a585f5e554ea",
      "txt_hash": "f70fd5562cb89354de6ea68abc2aeab646fe8c3b5c47fa7113efac4f7f795ea8"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0043.pdf",
    "date_sunset": null,
    "description": "IDPrime MD 830 is a Minidriver enabled PKI smartcard, offering all the necessary services (with either RSA or Elliptic curves algorithms) to secure an IT Security and ID access infrastructure. In addition, OATH applet offers One Time Password based strong authentication while MPCOS offers e-purse and data management services.",
    "embodiment": "Single Chip",
    "exceptions": [
      "Roles, Services, and Authentication: Level 3",
      "Physical Security: Level 3",
      "EMI/EMC: Level 3",
      "Design Assurance: Level 3"
    ],
    "fw_versions": "IDCore 30 Build 1.17, IDPrime MD Applet version V4.1.2.F with MSPNP Applet V1.0, OATH Applet V2.11 and MPCOS Applet V3.8",
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": "SLE78CFX3009P and A2424658",
    "level": 2,
    "mentioned_certs": {},
    "module_name": "IDPrime MD 830 with OATH \u0026 MPCOS applets",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2014-07-07",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2016-08-04",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2018-04-03",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2019-05-31",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      }
    ],
    "vendor": "Gemalto",
    "vendor_url": "http://www.gemalto.com"
  }
}