808bits

IDProtect Duo with LASER PKI

FIPS 140-2 certificate #2127 · Athena Smartcard Inc. · data as of 2026-09-03

IDProtect Duo with LASER PKI, from Athena Smartcard Inc., holds FIPS 140-2 certificate #2127 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list in accordance with SP800-131A Revision 1 Transition (AES/TDES key wrapping). Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode. No assurance of Secure Channel Protocol (SCP) message integrity

Certificate

Certificate number2127
StandardFIPS 140-2
Statushistorical
Overall level3
Module typeHardware
EmbodimentSingle-chip
VendorAthena Smartcard Inc. · website
Hardware versionsSTMicroelectronics ST23YR80 Rev. G
Firmware versionsAthena IDProtect 0204.0355.0702 with LASER PKI Applet 3.0

Module description

Quoted from the NIST CMVP entry for this certificate.

IDProtect is a Cryptographic Module based on the Athena OS755 Java Card smart card operating system with 80KB of EEPROM. IDProtect is compliant with the latest Java Card 2.2.2 and GlobalPlatform 2.1.1 specifications and is validated to FIPS 140-2 Level 3. IDProtect supports FIPS approved DRBG, SHA-1 and all SHA-2, TDES, AES, RSA, ECDSA and ECC CDC, and RSA and ECC key generation. IDProtect exposes PKI and Biometric APIs and is designed for high-performance government and enterprise smart card applications.

Approved algorithms (8)

AlgorithmCAVP certificates
AES1830
CVL8
DRBG144
ECDSA253
RSA919
SHS1609
Triple-DES1183
Triple-DES MACvendor affirmed

Other algorithms

HW RNG; AES-CMAC (non-compliant); EC Diffie-Hellman (CVL Cert. #8, key agreement; key establishment methodology provides 128 bits of encryption strength); AES (Cert. #1830, key wrapping; key establishment methodology provides between 128 and 256 bits of encryption strength)

Validation history

DateTypeLab
2014-04-09InitialUL Verification Services, Inc.
2014-05-28UpdateUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2014-04-09, 2014-05-28

Source documents