This page was not yet optimized for use on mobile devices.

Sm@rtCafé Expert 8.1

Certificate #5074

Webpage information

Status	active
Validation dates	03.10.2025
Sunset date	02-10-2030
Standard	FIPS 140-3
Security level	3
Type	Hardware
Embodiment	Single Chip
Caveat	None
Exceptions	Operational environment: N/A Non-invasive security: N/A
Description	Sm@rtCafé Expert 8.1 is a dual interface smart card (ISO/IEC 7816, ISO/IEC 14443) conforming to the Java Card 3.1 and GlobalPlatform 2.3.1 specifications, designed to address the high security and strong cryptography needs of US Federal agencies and Enterprises that require FIPS 140-3 validated applications for authorized access, authentication and identification, such as PIV and corporate ID.
Vendor	Giesecke+Devrient ePayments GmbH
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms

AES, AES-128, AES-256, CAST, TDEA, HMAC, CMAC

Asymmetric Algorithms

RSA-2048, ECDSA, ECC, DH

Hash functions

SHA-1, SHA-256, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3

Schemes

MAC, Key Agreement

Randomness

TRNG, DRBG, RNG, RBG

Elliptic Curves

P-256, P-224, P-384, P-521

Block cipher modes

ECB, GCM, CCM

Trusted Execution Environments

PSP

Vendor

STMicroelectronics, Giesecke+Devrient, G+D

Security level

Level 3, Level 1

Side-channel analysis

side channel, timing attacks, physical tampering

Standards

FIPS 140-3, FIPS PUB 140-3, FIPS186-5, FIPS 186-5, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 180-4, FIPS 202, FIPS140-3, FIPS PUB 186-4, FIPS PUB 186-5, FIPS PUB 197, FIPS PUB 198, FIPS PUB 180-4, FIPS PUB 202, SP 800-38A, SP 800-38B, SP 800-38F, SP 800-90A, SP 800-56A, SP 800-108, SP 800-56B, NIST SP 800-108, SP 800-90B, PKCS#1, ISO/IEC 7816-4, ISO/IEC 7816, ISO/IEC 19790, ISO/IEC 24759, scp03, SCP03

File metadata

Author	Hawes, David J. (Fed)
Creation date	D:20251002124432-04'00'
Modification date	D:20251002124432-04'00'
Pages	60
Creator	Microsoft® Word for Microsoft 365
Producer	Microsoft® Word for Microsoft 365

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates Feed

15.12.2025

The certificate data changed.
Certificate changed

The state was updated.

The following values were inserted: {'policy_json_hash': None}.

The following properties were deleted: ['policy_convert_garbage'].
20.10.2025

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5074,
  "dgst": "ffb3b559b4fd37f4",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": []
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "8.1"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 11
          },
          "ECDSA": {
            "ECDSA": 24
          }
        },
        "FF": {
          "DH": {
            "DH": 1
          }
        },
        "RSA": {
          "RSA-2048": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CCM": {
          "CCM": 1
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 3
        },
        "MAC": {
          "MAC": 4
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 2,
          "P-256": 8,
          "P-384": 2,
          "P-521": 2
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#3": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 256": 1,
          "AES CMAC 128": 2,
          "AES-128": 5,
          "AES-128/192/256": 2,
          "AES-256": 1,
          "HMAC-256": 2,
          "PKCS#1": 4,
          "SHA-1": 5,
          "SHA-256": 3,
          "SHA-3": 1,
          "SHA2-224": 2,
          "SHA2-256": 8,
          "SHA2-384": 2,
          "SHA2-512": 8,
          "SHA3-224": 1,
          "SHA3-256": 4,
          "SHA3-384": 1,
          "SHA3-512": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "Level 3": 2
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 5
          },
          "SHA2": {
            "SHA-256": 3
          },
          "SHA3": {
            "SHA-3": 1,
            "SHA3-224": 1,
            "SHA3-256": 4,
            "SHA3-384": 1,
            "SHA3-512": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 7
        },
        "RNG": {
          "RBG": 2,
          "RNG": 1
        },
        "TRNG": {
          "TRNG": 2
        }
      },
      "side_channel_analysis": {
        "FI": {
          "physical tampering": 3
        },
        "SCA": {
          "side channel": 1,
          "timing attacks": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 7,
          "FIPS 180-4": 9,
          "FIPS 186-4": 3,
          "FIPS 186-5": 7,
          "FIPS 198-1": 4,
          "FIPS 202": 4,
          "FIPS PUB 140-3": 2,
          "FIPS PUB 180-4": 1,
          "FIPS PUB 186-4": 1,
          "FIPS PUB 186-5": 1,
          "FIPS PUB 197": 1,
          "FIPS PUB 198": 1,
          "FIPS PUB 202": 1,
          "FIPS140-3": 1,
          "FIPS186-4": 3,
          "FIPS186-5": 25
        },
        "ISO": {
          "ISO/IEC 19790": 2,
          "ISO/IEC 24759": 2,
          "ISO/IEC 7816": 2,
          "ISO/IEC 7816-4": 1
        },
        "NIST": {
          "NIST SP 800-108": 1,
          "SP 800-108": 2,
          "SP 800-38A": 4,
          "SP 800-38B": 1,
          "SP 800-38F": 2,
          "SP 800-56A": 2,
          "SP 800-56B": 1,
          "SP 800-90A": 1,
          "SP 800-90B": 2
        },
        "PKCS": {
          "PKCS#1": 2
        },
        "SCP": {
          "SCP03": 1,
          "scp03": 6
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 14,
            "AES-128": 5,
            "AES-256": 1
          },
          "CAST": {
            "CAST": 38
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 1
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 17,
            "HMAC": 5
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 9
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "GD": {
          "G+D": 3,
          "Giesecke+Devrient": 123
        },
        "STMicroelectronics": {
          "STMicroelectronics": 2
        }
      },
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Hawes, David J. (Fed)",
      "/CreationDate": "D:20251002124432-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ActionId": "af3932ad-9e65-4996-8d19-bf2b2e636c07",
      "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ContentBits": "1",
      "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Enabled": "true",
      "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Method": "Privileged",
      "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Name": "UNCLASSIFIED",
      "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SetDate": "2025-10-02T16:42:31Z",
      "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a",
      "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Tag": "10, 0, 1, 1",
      "/ModDate": "D:20251002124432-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 1332279,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 60
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "142107ecd206787b79775c7c7e20c9e81a576b99cf8e4867d8bcca0d6016ec66",
    "policy_txt_hash": "c948db363b62ebf0a1d7374a9a0a4cc18c469790ecbb0094b2cb288d77d665bf"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "None",
    "certificate_pdf_url": null,
    "date_sunset": "2030-10-02",
    "description": "Sm@rtCaf\u00e9 Expert 8.1 is a dual interface smart card (ISO/IEC 7816, ISO/IEC 14443) conforming to the Java Card 3.1 and GlobalPlatform 2.3.1 specifications, designed to address the high security and strong cryptography needs of US Federal agencies and Enterprises that require FIPS 140-3 validated applications for authorized access, authentication and identification, such as PIV and corporate ID.",
    "embodiment": "Single Chip",
    "exceptions": [
      "Operational environment: N/A",
      "Non-invasive security: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 3,
    "mentioned_certs": {},
    "module_name": "Sm@rtCaf\u00e9 Expert 8.1",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-10-03",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Giesecke+Devrient ePayments GmbH",
    "vendor_url": "http://www.gi-de.com"
  }
}

Sections

Sm@rtCafé Expert 8.1

Certificate #5074

Webpage information

Security policy

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Randomness

Elliptic Curves

Block cipher modes

Trusted Execution Environments

Vendor

Security level

Side-channel analysis

Standards

File metadata

Heuristics

References

Updates Feed

Certificate changed

New certificate

Raw data

Sections

Sm@rtCafé Expert 8.1

Certificate #5074

Webpage information

Security policy

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Randomness

Elliptic Curves

Block cipher modes

Device

Trusted Execution Environments

Vendor

Security

Security level

Side-channel analysis

Other

Standards

File metadata

Heuristics

References

Updates Feed

Raw data

Toggle raw data