808bits

HiCOS PKI Applet and Taiwan eID Applet on Oberthur Technologies ID-One Cosmo V8

FIPS 140-2 certificate #2743 · Chunghwa Telecom Co., Ltd. and Oberthur Technologies · data as of 2026-10-09

HiCOS PKI Applet and Taiwan eID Applet on Oberthur Technologies ID-One Cosmo V8, from Chunghwa Telecom Co., Ltd. and Oberthur Technologies, holds FIPS 140-2 certificate #2743 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: None

Certificate

Certificate number2743
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentSingle Chip
VendorChunghwa Telecom Co., Ltd. and Oberthur Technologies · website
Hardware versions'0F'
Firmware versions'5601'; Firmware Extension: '082371'

Module description

Quoted from the NIST CMVP entry for this certificate.

The HiCOS PKI Applet is a Javacard applet that provides security for stored user data and credentials and an easy to use interface to PKI services. Taiwan eID Applet is a Javacard applet that stores personal information related to the card holder and supports the authentication mechanisms described in ICAO and EAC specifications with a fully configurable access control management over the Data Groups (DG).

Security level exceptions

  • Cryptographic Module Specification: Level 3
  • Cryptographic Module Ports and Interfaces: Level 3
  • Physical Security: Level 4
  • EMI/EMC: Level 3
  • Design Assurance: Level 3

Approved algorithms (9)

AlgorithmCAVP certificates
AES2910
CVL336
DRBG537
ECDSA526
KBKDF33
KTS
RSA1531, 1532
SHS2449, 2450
Triple-DES1727

Other algorithms

EC Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); NDRNG

Tested configurations

  • N/A

Validation history

DateTypeLab
2016-09-13InitialUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2016-09-13

Source documents