WatchKey ProX USB Token Cryptographic Module

Certificate #2397

Webpage information

Status historical
Historical reason Moved to historical list due to sunsetting
Validation dates 23.06.2015 , 11.10.2017
Standard FIPS 140-2
Security level 3
Type Hardware
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode
Exceptions
  • Mitigation of Other Attacks: N/A
Description The WatchKey ProX USB Token is a USB-based PKI, two-factor authentication token device. It provides digital signature generation/verification for online authentications and data encryption/decryption for online transactions. The user’s private and public key pairs can be generated and stored on the embedded chip.
Version (Hardware) Smart Card Chip AS518 and K023314A
Version (Firmware) 36410101
Vendor WatchData Technologies Pte Ltd
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms
AES, DES, Triple-DES, TDEA, CMAC
Asymmetric Algorithms
ECDSA
Hash functions
SHA-1, SHA-256, SHA-384, SHA-512
Schemes
MAC
Randomness
DRBG, RNG
Elliptic Curves
P-256, P-192
Block cipher modes
ECB, CBC, OFB

Security level
Level 3, level 3

Standards
FIPS 140-2, FIPS PUB 140-2, FIPS 197, FIPS 186-4, FIPS 180-4, SP 800-67, SP 800-38B, SP 800-90A, NIST SP 800-90A, NIST SP 800-67, NIST SP 800-38B, PKCS#1, PKCS #1, ISO/IEC 7816, ISO/IEC 7816-4

File metadata

Title Microsoft Word - WatchKey ProX USB Token V1.0.2
Author Hedy
Creation date D:20150611131107-05'00'
Modification date D:20150623095542-04'00'
Pages 43
Creator PScript5.dll Version 5.2.2
Producer Acrobat Distiller 11.0 (Windows)

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data 

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 2397,
  "dgst": "cbbe2e41fff1a2f0",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "AES#3196",
        "Triple-DES#1822",
        "SHS#2647",
        "DRBG#673",
        "RSA#1630",
        "ECDSA#585"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "36410101"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDSA": {
            "ECDSA": 61
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "ECB": {
          "ECB": 2
        },
        "OFB": {
          "OFB": 2
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "MAC": {
          "MAC": 3
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-192": 26,
          "P-256": 16
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 42
        }
      },
      "fips_cert_id": {
        "Cert": {
          "#1": 2
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 128": 1,
          "AES 128/192/256": 10,
          "Certificate # AES": 1,
          "DRBG 256": 1,
          "PKCS #1": 4,
          "PKCS#1": 4,
          "SHA- 512": 2,
          "SHA-1": 7,
          "SHA-256": 15,
          "SHA-384": 10,
          "SHA-512": 8,
          "SHA-512 9": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 3": 3,
          "level 3": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 7
          },
          "SHA2": {
            "SHA-256": 15,
            "SHA-384": 10,
            "SHA-512": 9
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 23
        },
        "RNG": {
          "RNG": 8
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 54,
          "FIPS 180-4": 2,
          "FIPS 186-4": 5,
          "FIPS 197": 2,
          "FIPS PUB 140-2": 1
        },
        "ISO": {
          "ISO/IEC 7816": 2,
          "ISO/IEC 7816-4": 1
        },
        "NIST": {
          "NIST SP 800-38B": 1,
          "NIST SP 800-67": 1,
          "NIST SP 800-90A": 2,
          "SP 800-38B": 2,
          "SP 800-67": 1,
          "SP 800-90A": 14
        },
        "PKCS": {
          "PKCS #1": 2,
          "PKCS#1": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 20
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 1,
            "Triple-DES": 17
          },
          "DES": {
            "DES": 1
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 4
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Hedy",
      "/CreationDate": "D:20150611131107-05\u002700\u0027",
      "/Creator": "PScript5.dll Version 5.2.2",
      "/ModDate": "D:20150623095542-04\u002700\u0027",
      "/Producer": "Acrobat Distiller 11.0 (Windows)",
      "/Title": "Microsoft Word - WatchKey ProX USB Token V1.0.2",
      "pdf_file_size_bytes": 359362,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 43
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "26513a8653612d708fabced16d07c21423352642215f742c06da059606bfcc40",
    "policy_txt_hash": "4849bc95d7a363e265acd17da13146c7081d76f405e511bff3f7ea33c4831d20"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0054.pdf",
    "date_sunset": null,
    "description": "The WatchKey ProX USB Token is a USB-based PKI, two-factor authentication token device. It provides digital signature generation/verification for online authentications and data encryption/decryption for online transactions. The user\u2019s private and public key pairs can be generated and stored on the embedded chip.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": "36410101",
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": "Smart Card Chip AS518 and K023314A",
    "level": 3,
    "mentioned_certs": {},
    "module_name": "WatchKey ProX USB Token Cryptographic Module",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2015-06-23",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2017-10-11",
        "lab": "atsec information security corporation",
        "validation_type": "Update"
      }
    ],
    "vendor": "WatchData Technologies Pte Ltd",
    "vendor_url": "http://www.watchdata.com"
  }
}