WatchKey ProX USB Token Cryptographic Module

Certificate #4159

Webpage information

Status active
Validation dates 17.02.2022
Sunset date 21-09-2026
Standard FIPS 140-2
Security level 3
Type Hardware
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode
Exceptions
  • Mitigation of Other Attacks: N/A
Description The WatchKey ProX USB Token is a USB-based PKI, two-factor authentication token device. It provides digital signature generation/verification for online authentications and data encryption/decryption for online transactions. The user's private and public key pairs can be generated and stored on the embedded chip.
Version (Hardware) Smart Card Chip AS518 and K023314A
Version (Firmware) 36410102
Vendor WatchData Technologies Pte Ltd
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms
AES, DES, TDES, Triple-DES, TDEA, CMAC
Asymmetric Algorithms
ECDSA
Hash functions
SHA-1, SHA-256, SHA-384, SHA-512
Schemes
MAC
Randomness
DRBG, RNG
Elliptic Curves
P-256, P-192
Block cipher modes
ECB, CBC, OFB

Security level
Level 3, level 3

Standards
FIPS 140-2, FIPS PUB 140-2, FIPS 197, FIPS 186-4, FIPS 180-4, FIPS 1024, FIPS186-4, SP 800-67, SP 800-38B, SP 800-90A, NIST SP 800-67, NIST SP 800-90A, NIST SP 800-38B, PKCS#1, PKCS #1, ISO/IEC 7816, ISO/IEC 7816-4

File metadata

Title Microsoft Word - WatchKey ProX USB Token V1.0.5.docx
Creation date D:20211213193540Z00'00'
Modification date D:20211213193540Z00'00'
Pages 43
Creator Word
Producer macOS Version 11.6 (Build 20G165) Quartz PDFContext

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data 

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4159,
  "dgst": "98c94daf4e5bd960",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "AES#3196",
        "Triple-DES#1822",
        "SHS#2647",
        "DRBG#673",
        "RSA#1630",
        "ECDSA#585"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "36410102"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDSA": {
            "ECDSA": 65
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "ECB": {
          "ECB": 2
        },
        "OFB": {
          "OFB": 2
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "MAC": {
          "MAC": 3
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-192": 26,
          "P-256": 16
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 42
        }
      },
      "fips_cert_id": {
        "Cert": {
          "#1": 3
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 128": 1,
          "AES 128/192/256": 10,
          "Certificate # AES": 1,
          "DRBG 256": 1,
          "PKCS #1": 6,
          "PKCS#1": 4,
          "SHA- 1": 1,
          "SHA- 512": 3,
          "SHA-1": 5,
          "SHA-256": 15,
          "SHA-384": 10,
          "SHA-512": 6,
          "SHA-512 9": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 3": 3,
          "level 3": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 5
          },
          "SHA2": {
            "SHA-256": 16,
            "SHA-384": 9,
            "SHA-512": 8
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 30
        },
        "RNG": {
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 1024": 1,
          "FIPS 140-2": 56,
          "FIPS 180-4": 2,
          "FIPS 186-4": 6,
          "FIPS 197": 2,
          "FIPS PUB 140-2": 1,
          "FIPS186-4": 1
        },
        "ISO": {
          "ISO/IEC 7816": 2,
          "ISO/IEC 7816-4": 1
        },
        "NIST": {
          "NIST SP 800-38B": 1,
          "NIST SP 800-67": 1,
          "NIST SP 800-90A": 1,
          "SP 800-38B": 2,
          "SP 800-67": 1,
          "SP 800-90A": 18
        },
        "PKCS": {
          "PKCS #1": 3,
          "PKCS#1": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 21
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 1,
            "TDES": 2,
            "Triple-DES": 20
          },
          "DES": {
            "DES": 1
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 4
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/CreationDate": "D:20211213193540Z00\u002700\u0027",
      "/Creator": "Word",
      "/ModDate": "D:20211213193540Z00\u002700\u0027",
      "/Producer": "macOS Version 11.6 (Build 20G165) Quartz PDFContext",
      "/Title": "Microsoft Word - WatchKey ProX USB Token V1.0.5.docx",
      "pdf_file_size_bytes": 1376993,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 43
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "48135b66d5e40cffb58e82daf26a3083d3fbd8ac6db06fcb7b55368fc39df2a4",
    "policy_txt_hash": "167ef41fccb0bc892ebb510ca7d4090cf7058dba3b3fd1843ec18dd760c46af3"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/February 2022_010322_0121_Signed.pdf",
    "date_sunset": "2026-09-21",
    "description": "The WatchKey ProX USB Token is a USB-based PKI, two-factor authentication token device. It provides digital signature generation/verification for online authentications and data encryption/decryption for online transactions. The user\u0027s private and public key pairs can be generated and stored on the embedded chip.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": "36410102",
    "historical_reason": null,
    "hw_versions": "Smart Card Chip AS518 and K023314A",
    "level": 3,
    "mentioned_certs": {},
    "module_name": "WatchKey ProX USB Token Cryptographic Module",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2022-02-17",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "WatchData Technologies Pte Ltd",
    "vendor_url": "http://www.watchdata.com"
  }
}