Chunghwa Mobile ID Applet on TAISYS Technologies JUISE-S2

Certificate details

Certificate ID #3537
Status historical
Historical reason Moved to historical list due to dependency on certificate #3441
Validation dates 26.09.2019
Standard FIPS 140-2
Security level 3
Type Hardware
Embodiment Single Chip
Caveat When operated with module TAISYS JUISE-S2 validated to FIPS 140-2 under Cert. #3441 operating in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
Description The TAISYS JUISE-S2 is a module available in contact/contactless form factors with the Chunghwa Mobile ID Applet. The Mobile ID Applet is a Javacard applet that provides security for stored user data and credentials for Mobile ID services.
Version (Hardware) 46 43
Version (Firmware) 32 53; Applet: Chunghwa Mobile ID Applet v1.0
Vendor Chunghwa Telecom Co., Ltd. and Taisys Technologies Co., Ltd.
Lab CGI Information Systems & Management Consultants Inc
Algorithms
References

This certificate's webpage directly references 1 certificates, transitively this expands into 1 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-, AES-192, AES-256, AES-128, DES, TDEA, Triple-DES, HMAC, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512, CMAC
Asymmetric Algorithms
RSA 2048, RSA-2048, ECDSA, ECC, Diffie-Hellman
Hash functions
SHA-1, SHA1, SHA-256, SHA-384, SHA-512, SHA224, SHA256, SHA512, SHA384, SHA-224
Schemes
MAC
Randomness
TRNG, DRBG, RNG
Elliptic Curves
P-256, P-384, P-521
Block cipher modes
ECB, CBC

JavaCard versions
Java Card 3.0.4, Java Card 3.0

Security level
Level 3, level 3
Side-channel analysis
Side-channel, DPA, SPA, DFA

Cross-references

Outgoing
  • 3441 - historical - TAISYS JUISE-S2
Title Non-Proprietary Security Policy
Subject Chunghwa HICOS Smart Card Security Policy
Author Ward Rosenberry
Creation date D:20190911110650-04'00'
Modification date D:20190911110656-04'00'
Pages 20
Creator Acrobat PDFMaker 11 for Word
Producer Adobe PDF Library 11.0

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 3537,
  "dgst": "ea1241439855626c",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "#1910",
        "#223",
        "CVL#1931",
        "KTS#5461",
        "#4369",
        "#1912",
        "CVL#1910",
        "#2134",
        "CVL#1912",
        "SHS#4369",
        "CVL#1911",
        "#1459",
        "DRBG#2134",
        "#1931",
        "AES#5461",
        "KBKDF#223",
        "#2933",
        "RSA#2933",
        "ECDSA#1459",
        "#1911",
        "#5461"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "1.0"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "3441"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "3441"
        ]
      }
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": [
        "3441"
      ]
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "3441"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "3441"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "3441"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 44,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 3
          },
          "ECDSA": {
            "ECDSA": 4
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 1
          }
        },
        "RSA": {
          "RSA 2048": 4,
          "RSA-2048": 2
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 4
        },
        "ECB": {
          "ECB": 2
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "MAC": {
          "MAC": 1
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 14,
          "P-384": 14,
          "P-521": 14
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 1,
          "#1459": 1,
          "#1910": 1,
          "#1911": 1,
          "#1912": 1,
          "#1931": 1,
          "#2134": 1,
          "#223": 1,
          "#2933": 1,
          "#3441": 3,
          "#4369": 1,
          "#5461": 3
        }
      },
      "fips_certlike": {
        "Certlike": {
          "#1459 CVL": 1,
          "#1910 CVL": 1,
          "#1911 CVL": 1,
          "#1912 CVL": 1,
          "#1931 AES": 1,
          "#2933 DRBG": 1,
          "#4369 RSA": 1,
          "#5461 AES": 1,
          "#5461 SHA": 1,
          "AES 128,192": 3,
          "AES, 128": 1,
          "AES- 128": 1,
          "AES-128": 2,
          "AES-128/192/256": 2,
          "AES-192": 3,
          "AES-256": 3,
          "Certificate AES": 1,
          "HMAC SHA-1": 1,
          "HMAC-SHA-224": 2,
          "HMAC-SHA-256": 2,
          "HMAC-SHA-384": 2,
          "HMAC-SHA-512": 2,
          "PKCS #1": 2,
          "PKCS#1": 4,
          "RSA 2048": 4,
          "SHA 256": 1,
          "SHA- 224": 1,
          "SHA-1": 5,
          "SHA-224": 1,
          "SHA-256": 6,
          "SHA-384": 2,
          "SHA-512": 2,
          "SHA1": 3,
          "SHA224": 3,
          "SHA256": 5,
          "SHA384": 2,
          "SHA512": 3
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 3": 4,
          "level 3": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 5,
            "SHA1": 3
          },
          "SHA2": {
            "SHA-224": 1,
            "SHA-256": 6,
            "SHA-384": 2,
            "SHA-512": 2,
            "SHA224": 3,
            "SHA256": 5,
            "SHA384": 2,
            "SHA512": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {
        "JavaCard": {
          "Java Card 3.0": 1,
          "Java Card 3.0.4": 2
        }
      },
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 14
        },
        "RNG": {
          "RNG": 1
        },
        "TRNG": {
          "TRNG": 1
        }
      },
      "side_channel_analysis": {
        "FI": {
          "DFA": 1
        },
        "SCA": {
          "DPA": 2,
          "SPA": 2,
          "Side-channel": 1
        }
      },
      "standard_id": {
        "BSI": {
          "AIS 31": 1
        },
        "FIPS": {
          "FIPS 140-2": 15,
          "FIPS 180-4": 2,
          "FIPS 186-4": 5,
          "FIPS 197": 1,
          "FIPS PUB 140": 1,
          "FIPS113": 1,
          "FIPS140-2": 1,
          "FIPS197": 1
        },
        "NIST": {
          "NIST SP 800-108": 2,
          "NIST SP 800-133": 1,
          "NIST SP 800-38B": 1,
          "SP 800-56A": 2,
          "SP 800-67": 2,
          "SP 800-90A": 1
        },
        "PKCS": {
          "PKCS #1": 1,
          "PKCS#1": 2
        },
        "SCP": {
          "SCP03": 5
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 13,
            "AES-": 1,
            "AES-128": 2,
            "AES-192": 3,
            "AES-256": 3
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 1,
            "Triple-DES": 1
          },
          "DES": {
            "DES": 5
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 3,
            "HMAC": 1,
            "HMAC-SHA-224": 1,
            "HMAC-SHA-256": 1,
            "HMAC-SHA-384": 1,
            "HMAC-SHA-512": 1
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "CVL#1912",
        "ECDSA#1459",
        "SHS#4369",
        "CVL#1931",
        "CVL#1911",
        "KTS#5461",
        "AES#5461",
        "KBKDF#223",
        "DRBG#2134",
        "RSA#2933",
        "CVL#1910"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#1910",
        "#2134",
        "#223",
        "#1911",
        "#4369",
        "#2933",
        "#1912",
        "#1459",
        "#1931",
        "#5461"
      ]
    },
    "policy_metadata": {
      "/Author": "Ward Rosenberry",
      "/Company": "Rosenberry Associates, Inc.",
      "/ContentType": "Document",
      "/Country": "",
      "/CreationDate": "D:20190911110650-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 11 for Word",
      "/Customer/project": "",
      "/Issue ID": "",
      "/Issue R\u0026D Status": "Active",
      "/Issue Status": "Active",
      "/Keywords": "",
      "/ModDate": "D:20190911110656-04\u002700\u0027",
      "/Object": "",
      "/Priority": "",
      "/Producer": "Adobe PDF Library 11.0",
      "/SourceModified": "D:20190911150643",
      "/Subject": "Chunghwa HICOS Smart Card Security Policy",
      "/Target Audiences": "",
      "/Title": "Non-Proprietary Security Policy",
      "pdf_file_size_bytes": 667507,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 20
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "6cc3cde7c1947fd6966501feb67b7e6c00dc5aa3395738452e096d57e3552e01",
      "source_hash": "0c45adc961d56aaf00870f83432878033c1abe9b7c871b57906db0319df39d89",
      "txt_hash": "59788367cda6e19ff2cec5d693dbbbbde9c30a8de52669f97adb9cec5dce5e1a"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated with module TAISYS JUISE-S2 validated to FIPS 140-2 under Cert. #3441 operating in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/SeptConsolidated.pdf",
    "date_sunset": null,
    "description": "The TAISYS JUISE-S2 is a module available in contact/contactless form factors with the Chunghwa Mobile ID Applet. The Mobile ID Applet is a Javacard applet that provides security for stored user data and credentials for Mobile ID services.",
    "embodiment": "Single Chip",
    "exceptions": null,
    "fw_versions": "32 53; Applet: Chunghwa Mobile ID Applet v1.0",
    "historical_reason": "Moved to historical list due to dependency on certificate #3441",
    "hw_versions": "46 43",
    "level": 3,
    "mentioned_certs": {
      "3441": 1
    },
    "module_name": "Chunghwa Mobile ID Applet on TAISYS Technologies JUISE-S2",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2019-09-26",
        "lab": "CGI Information Systems \u0026 Management Consultants Inc",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Chunghwa Telecom Co., Ltd. and Taisys Technologies Co., Ltd.",
    "vendor_url": null
  }
}