PKI BLADE Applet and Protiva PIV DL Card
Caveat: When operated in FIPS mode with the fingerprint authentication mechanism parameters configured as indicated in the Security Policy Section 12
Certificate
| Certificate number | 1573 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Single-chip |
| Vendor | U.S. Department of State · website |
| Hardware versions | P/N P5CD144 Version A1047808 |
| Firmware versions | EI08-M1004069, Softmask V01, PIV Applet V1.55 and PKI BLADE Applet V1.2 |
Module description
The PKI/BLADE applet is based on ISO 7816 and GSC-IS commands interface. The applet is designed to be loaded on any Java card compliant with JavaCard v2.2.1 and Global Platform v2.1.1 specifications including PIV certified Java cards. It is designed to provide services for PKI based logical access applications and to provide strong two factor authentication using passwords and fingerprints biometrics.
Security level exceptions
- Roles, Services, and Authentication: Level 3
- Physical Security: Level 3
- EMI/EMC: Level 3
- Design Assurance: Level 3
Approved algorithms
Other algorithms
Triple-DES (Cert. #678, key wrapping; key establishment methodology provides 100 bits of encryption strength)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2011-07-15 | Initial | UL Verification Services, Inc. |
| 2014-02-06 | Update |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2011-07-15, 2014-02-06