Authentication Token

Certificate details

Certificate ID #1969
Status historical
Historical reason Moved to historical list in accordance with SP800-131A Revision 1 Transition (AES/TDES key wrapping)
Validation dates 26.06.2013
Standard FIPS 140-2
Security level 3
Type Hardware
Embodiment Single Chip
Caveat No assurance of Secure Channel Protocol (SCP) message integrity
Description Authentication Token is a Cryptographic Module containing Thales' authenticated Java applets. Authentication Token is compliant with the latest Java Card 2.2.2 and GlobalPlatform 2.1.1 specifications and is validated to FIPS 140-2 Level 3. Authentication Token supports FIPS-Approved: DRBG; SHA-1 and all SHA-2; TDES; AES; ECDSA and ECC CDC; and, RSA and ECC key generation. Authentication Token is designed to provide users of Thales' hardware security modules with high-performance smart card capabilities in support of their government and enterprise applications.
Version (Hardware) Inside Secure AT90SC28872RCU Revision G
Version (Firmware) Athena IDProtect 010B.0333.0004 with Authentication Token Applet 1.0
Vendor Thales e-Security Inc. http://www.thales-esecurity.com
Lab UL Verification Services, Inc.
Algorithms
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-128, AES-192, AES-256, AES-, CMAC
Asymmetric Algorithms
RSA 1024, RSA 2048, ECC, Diffie-Hellman, DH
Hash functions
SHA-1, SHA-256, SHA-224, SHA-384, SHA-512
Schemes
MAC
Randomness
DRBG, RNG
Elliptic Curves
P-521, P-256, NIST P-521
Block cipher modes
ECB, CBC

Vendor
Thales

Security level
Level 3, level 2
Side-channel analysis
SPA, DPA, Fault Induction, fault induction

Title Thales e-Security Security Policy - v0.9
Author pcatherwood
Creation date D:20130508114003+01'00'
Modification date D:20130626111418-04'00'
Pages 29
Creator PDFCreator Version 1.2.0
Producer GPL Ghostscript 9.0

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 1969,
  "dgst": "fd21cc3cb5062bc4",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "#98",
        "#824",
        "CVL#2",
        "#1465",
        "DRBG#98",
        "#1654",
        "AES#1654",
        "RSA#824",
        "SHS#1465"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "0333.0004",
        "1.0"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 42,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 9
          }
        },
        "FF": {
          "DH": {
            "DH": 7,
            "Diffie-Hellman": 3
          }
        },
        "RSA": {
          "RSA 1024": 1,
          "RSA 2048": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "ECB": {
          "ECB": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "MAC": {
          "MAC": 3
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "NIST P-521": 2,
          "P-256": 2,
          "P-521": 8
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 1,
          "#1654": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES Cert. #1654": 1,
          "AES- 192": 1,
          "AES-128": 5,
          "AES-192": 1,
          "AES-256": 19,
          "CVL 2": 1,
          "Certificate # DRBG": 1,
          "PKCS #1": 2,
          "PKCS#1": 5,
          "PKCS1-v1_5": 1,
          "RSA 1024": 1,
          "RSA 2048": 1,
          "RSA PKCS#1": 1,
          "SHA-1": 2,
          "SHA-224": 1,
          "SHA-256": 3,
          "SHA-384": 1,
          "SHA-512": 3
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 3": 2,
          "level 2": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 2
          },
          "SHA2": {
            "SHA-224": 1,
            "SHA-256": 3,
            "SHA-384": 1,
            "SHA-512": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 10
        },
        "RNG": {
          "RNG": 7
        }
      },
      "side_channel_analysis": {
        "FI": {
          "Fault Induction": 2,
          "fault induction": 1
        },
        "SCA": {
          "DPA": 2,
          "SPA": 2
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 51,
          "FIPS113": 1,
          "FIPS140-2": 1,
          "FIPS180-3": 2,
          "FIPS186-2": 2,
          "FIPS186-3": 1,
          "FIPS197": 5
        },
        "ISO": {
          "ISO/IEC 7816": 16,
          "ISO/IEC 7816-4": 1
        },
        "PKCS": {
          "PKCS #1": 1,
          "PKCS#1": 3
        },
        "SCP": {
          "SCP03": 17
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 14,
            "AES-": 1,
            "AES-128": 5,
            "AES-192": 1,
            "AES-256": 19
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 4
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Thales": {
          "Thales": 91
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "CVL#2",
        "DRBG#98",
        "SHS#1465",
        "AES#1654",
        "RSA#824"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#1654",
        "#824",
        "#98",
        "#1465"
      ]
    },
    "policy_metadata": {
      "/Author": "pcatherwood",
      "/CreationDate": "D:20130508114003+01\u002700\u0027",
      "/Creator": "PDFCreator Version 1.2.0",
      "/Keywords": "",
      "/ModDate": "D:20130626111418-04\u002700\u0027",
      "/Producer": "GPL Ghostscript  9.0",
      "/Subject": "",
      "/Title": "Thales e-Security Security Policy - v0.9",
      "pdf_file_size_bytes": 321482,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 29
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "0a40b8fb3678fb29973fc0d8b5dfabf731d69fda0d0418032fe85beae881ac97",
      "source_hash": "a8867a47ea723a7e5e1dde8487923a6b883a5766692ea2fc478e3676dd4b0b19",
      "txt_hash": "034cf847e3cc79523edd8a6258dfa55c19bbb6a4b8237356091741a579a73c58"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "No assurance of Secure Channel Protocol (SCP) message integrity",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0030.pdf",
    "date_sunset": null,
    "description": "Authentication Token is a Cryptographic Module containing Thales\u0027 authenticated Java applets. Authentication Token is compliant with the latest Java Card 2.2.2 and GlobalPlatform 2.1.1 specifications and is validated to FIPS 140-2 Level 3. Authentication Token supports FIPS-Approved: DRBG; SHA-1 and all SHA-2; TDES; AES; ECDSA and ECC CDC; and, RSA and ECC key generation. Authentication Token is designed to provide users of Thales\u0027 hardware security modules with high-performance smart card capabilities in support of their government and enterprise applications.",
    "embodiment": "Single Chip",
    "exceptions": null,
    "fw_versions": "Athena IDProtect 010B.0333.0004 with Authentication Token Applet 1.0",
    "historical_reason": "Moved to historical list in accordance with SP800-131A Revision 1 Transition (AES/TDES key wrapping)",
    "hw_versions": "Inside Secure AT90SC28872RCU Revision G",
    "level": 3,
    "mentioned_certs": {},
    "module_name": "Authentication Token",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2013-06-26",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Thales e-Security Inc.",
    "vendor_url": "http://www.thales-esecurity.com"
  }
}