ID-One PIV 243 in NPIVP & CIV Configurations

Certificate #5024

Webpage information

Status active
Validation dates 09.06.2025
Sunset date 08-06-2030
Standard FIPS 140-3
Security level 2
Type Hardware
Embodiment Single Chip
Caveat None
Exceptions
  • Roles, services, and authentication: Level 3
  • Operational environment: N/A
  • Physical security: Level 3
  • Non-invasive security: N/A
  • Self-tests: Level 3
  • Life-cycle assurance: Level 3
  • Mitigation of other attacks: Level 3
Description ID-One PIV 243 in NPIVP & CIV Configurations, is a dual interface smartcard chip (ISO 7816 & ISO 14443) that contains a Personal Identity Verification (PIV) application with On-Card-Fingerprints-Comparison that can be configured to strictly comply with NIST FIPS 201-2 Standard for US Government Federal Employees and Contractors (NPIVP configuration), or support enhanced functionalities (ANSI 504), and additional access conditions (SO_PIN), as well as stronger cryptography (ECC P-521) while maintaining backward compatibility with NPIVP, to address Civilian markets worldwide (CIV configuration).
Vendor IDEMIA
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Security policy

Symmetric Algorithms
AES, AES-256, AES-128, CAST, SEED, HMAC, CMAC
Asymmetric Algorithms
RSA 2048, ECDH, ECDSA, ECC, DH, Diffie-Hellman, DSA
Hash functions
SHA-1, SHA-256, SHA256, SHA512, SHA2, SHA-3
Schemes
MAC, Key Agreement
Randomness
DRBG, RNG, RBG
Elliptic Curves
P-224, P-256, P-384, P-521, curve P-256
Block cipher modes
CTR

Trusted Execution Environments
PSP
Vendor
Infineon Technologies AG, Infineon, IDEMIA, Microsoft

Security level
Level 2, Level 1, level 2
Side-channel analysis
Side-channel, side-channel, DFA

Standards
FIPS 140-3, FIPS 201-3, FIPS140-3, FIPS 201, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 180-4, FIPS 201-2, FIPS PUB 140-3, FIPS 197, FIPS 202, SP 800-38A, SP 800-38B, SP 800-90A, SP 800-56A, SP 800-108, SP 800-56B, SP 800-56C, SP 800-90B, SP 800-38F, PKCS#1, RFC 4226, RFC 6238

File metadata

Creation date D:20250609081003-04'00'
Modification date D:20250609081229-04'00'
Pages 104
Creator Acrobat PDFMaker 25 for Word
Producer Adobe PDF Library 25.1.208

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates Feed

  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5024,
  "dgst": "5324c7411a7c6155",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": []
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "243"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 24
          },
          "ECDH": {
            "ECDH": 8
          },
          "ECDSA": {
            "ECDSA": 88
          }
        },
        "FF": {
          "DH": {
            "DH": 2,
            "Diffie-Hellman": 2
          },
          "DSA": {
            "DSA": 1
          }
        },
        "RSA": {
          "RSA 2048": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CTR": {
          "CTR": 7
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 4
        },
        "MAC": {
          "MAC": 5
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 8,
          "P-256": 20,
          "P-384": 26,
          "P-521": 28,
          "curve P-256": 4
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 106
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES-128": 2,
          "AES-256": 2,
          "DRBG 256": 1,
          "HMAC-SHA-1": 2,
          "PKCS#1": 2,
          "RSA 2048": 1,
          "SHA-1": 2,
          "SHA-256": 4,
          "SHA-3": 1,
          "SHA2": 2,
          "SHA2- 224": 1,
          "SHA2- 256": 2,
          "SHA2- 384": 2,
          "SHA2-224": 4,
          "SHA2-256": 10,
          "SHA2-384": 4,
          "SHA2-512": 8,
          "SHA256": 2,
          "SHA512": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "Level 2": 6,
          "level 2": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 2
          },
          "SHA2": {
            "SHA-256": 4,
            "SHA2": 2,
            "SHA256": 2,
            "SHA512": 2
          },
          "SHA3": {
            "SHA-3": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 16
        },
        "RNG": {
          "RBG": 2,
          "RNG": 1
        }
      },
      "side_channel_analysis": {
        "FI": {
          "DFA": 1
        },
        "SCA": {
          "Side-channel": 1,
          "side-channel": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 113,
          "FIPS 180-4": 6,
          "FIPS 186-4": 10,
          "FIPS 197": 1,
          "FIPS 198-1": 4,
          "FIPS 201": 1,
          "FIPS 201-2": 1,
          "FIPS 201-3": 2,
          "FIPS 202": 1,
          "FIPS PUB 140-3": 1,
          "FIPS140-3": 3,
          "FIPS186-4": 21
        },
        "NIST": {
          "SP 800-108": 8,
          "SP 800-38A": 3,
          "SP 800-38B": 2,
          "SP 800-38F": 1,
          "SP 800-56A": 3,
          "SP 800-56B": 1,
          "SP 800-56C": 1,
          "SP 800-90A": 1,
          "SP 800-90B": 2
        },
        "PKCS": {
          "PKCS#1": 1
        },
        "RFC": {
          "RFC 4226": 2,
          "RFC 6238": 4
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 13,
            "AES-128": 2,
            "AES-256": 2
          },
          "CAST": {
            "CAST": 31
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 7,
            "HMAC": 9
          }
        },
        "miscellaneous": {
          "SEED": {
            "SEED": 2
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 12
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Idemia": {
          "IDEMIA": 109
        },
        "Infineon": {
          "Infineon": 1,
          "Infineon Technologies AG": 1
        },
        "Microsoft": {
          "Microsoft": 1
        }
      },
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "",
      "/Comments": "",
      "/Company": "",
      "/CreationDate": "D:20250609081003-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 25 for Word",
      "/Keywords": "",
      "/ModDate": "D:20250609081229-04\u002700\u0027",
      "/Producer": "Adobe PDF Library 25.1.208",
      "/SourceModified": "",
      "/Subject": "",
      "/Title": "",
      "pdf_file_size_bytes": 1024475,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140Br1.2pd.pdf",
          "https://nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-78-4.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Br2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-73-4.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-76-2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-85A-4.pdf",
          "http://www.atsec.com/",
          "https://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
          "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
          "https://webstore.ansi.org/standards/incits/incits5042013am12016",
          "https://www.ietf.org/rfc/rfc3447.txt",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1.pdf",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf",
          "https://globalplatform.org/wp-content/uploads/2014/07/GPC_2.2_D_SCP03_v1.1.1.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
          "https://webstore.ansi.org/standards/ascx9/ansix9621998",
          "https://webstore.ansi.org/standards/ascx9/ansix9632001",
          "https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.201-3.pdf",
          "https://globalplatform.org/specs-library/card-specification-v2-3-1/",
          "https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 104
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "d1d40e4cdc3dd133979ba3552cd72dcada532732b4012d440089e872ecf552aa",
    "policy_txt_hash": "2ed56437f81c66339bf04460ff45847e3a735c1e207130665d21a565a36b6386"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "None",
    "certificate_pdf_url": null,
    "date_sunset": "2030-06-08",
    "description": "ID-One PIV 243 in NPIVP \u0026 CIV Configurations, is a dual interface smartcard chip (ISO 7816 \u0026 ISO 14443) that contains a Personal Identity Verification (PIV) application with On-Card-Fingerprints-Comparison that can be configured to strictly comply with NIST FIPS 201-2 Standard for US Government Federal Employees and Contractors (NPIVP configuration), or support enhanced functionalities (ANSI 504), and additional access conditions (SO_PIN), as well as stronger cryptography (ECC P-521) while maintaining backward compatibility with NPIVP, to address Civilian markets worldwide (CIV configuration).",
    "embodiment": "Single Chip",
    "exceptions": [
      "Roles, services, and authentication: Level 3",
      "Operational environment: N/A",
      "Physical security: Level 3",
      "Non-invasive security: N/A",
      "Self-tests: Level 3",
      "Life-cycle assurance: Level 3",
      "Mitigation of other attacks: Level 3"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 2,
    "mentioned_certs": {},
    "module_name": "ID-One PIV 243 in NPIVP \u0026 CIV Configurations",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-06-09",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "IDEMIA",
    "vendor_url": "http://www.idemia.com"
  }
}