Module Name

TecSec Armored Card - Contact Cryptographic Module

Standard

FIPS 140-2

Status

Historical

 Historical Reason

Moved to historical list due to sunsetting

Validation Dates

08/19/2013;02/06/2014

Overall Level

2

Caveat

When operated with the fingerprint authentication mechanism parameters configured as indicated in the Security Policy Section 9. No assurance of Secure Channel Protocol (SCP) message integrity

PIV Cert Number

35

Security Level Exceptions

• Roles, Services, and Authentication: Level 3
• Physical Security: Level 4
• EMI/EMC: Level 3
• Design Assurance: Level 3

Module Type

Hardware

Embodiment

Single-chip

Description

The TecSec Armored Card is a cryptographic module which provides enterprise personnel identification, persistent data security for data in transit and at rest, with additional support for physical/logical/functional/content authorization. The Chip is part of a dual-chip PIV smart card that is fully compliant with the end-point service specified in SP800-73-1. This Contact Chip Provides 368k eprom memory leveraging a common robust identity process and additionally providing a federation platform for multiple applications from multiple owners enforced by cryptographic separation.

FIPS Algorithms

02/06/14:	Certs. #218 and #222
AES	Certs. #1654 and #2226
CVL	Cert. #2
DRBG	Cert. #98
ECDSA	Cert. #214
HMAC	Cert. #1354
KBKDF	Cert. #4
RSA	Cert. #824
SHS	Cert. #1465
Triple-DES	Cert. #1087

Other Algorithms

NDRNG; EC Diffie-Hellman (key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); AES-CMAC (non-compliant)

Hardware Versions

P/N Inside Secure AT90SC320288RCT Revision E

Firmware Versions

P/Ns Athena IDProtect Version 0108.0264.0001, TecSec SSD Applet Version 1.001, TecSec PIV Applet Version 1.007, TecSec BOCC Applet Version 1.001, TecSec CKM Attribute Container Applet Version 1.002, TecSec CKM Info Applet Version 1.000