808bits

Oberthur ID-One Cosmo V7-a

FIPS 140-2 certificate #1248 · Oberthur Technologies · data as of 2026-10-21

Oberthur ID-One Cosmo V7-a, from Oberthur Technologies, holds FIPS 140-2 certificate #1248 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: None

Certificate

Certificate number1248
StandardFIPS 140-2
Statushistorical
Overall level3
Module typeHardware
EmbodimentSingle-chip
VendorOberthur Technologies · website
Hardware versionsP/Ns BF [1, 2], C0 [3, 4], C3 [3, 4] and CF [5, 6]
Firmware versions0801 with op-codes (071621 and 070534) [1], (071621 and 071891) [2], (071631 and 070544) [3], (071631 and 071901) [4], (071641 and 070554) [5] or (071641 and 071911) [6]

Module description

Quoted from the NIST CMVP entry for this certificate.

This new generation Smart Card programmable module offers a highly secure architecture with state of the art on board cryptographic services that include and even exceed NSA SUITE-B cryptography with Advanced Encryption Standard (AES up to 256); Secure Hash Algorithm (SHA up to 512); Elliptic-Curve Diffie-Hellman (ECDH) and Digital Signature Algorithm (ECDSA up to P-521). The module supports Java Card 2.2.2 and Global Platform 2.1.1.A with Delegated Management, and is available with contact (ISO 7816) and contactless (ISO 14443) communication interfaces.

Approved algorithms (6)

AlgorithmCAVP certificates
AES978
RNG555
RSA471
SHS949
Triple-DES770
Triple-DES MACvendor affirmed

Other algorithms

Triple-DES (Triple-DES Cert. #770, key wrapping; key establishment methodology provides 80 bits of encryption strength; non-compliant)

Validation history

DateTypeLab
2009-12-29InitialUL Verification Services, Inc.
2010-02-05Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2009-12-29, 2010-02-05

Source documents