Prime PIV v2.1 Applet on TOP DL V2.1 platform
Prime PIV v2.1 Applet on TOP DL V2.1 platform, from Gemalto, holds FIPS 140-2 certificate #2970 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 2970 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Firmware-Hybrid |
| Embodiment | Single Chip |
| Vendor | Gemalto · website |
| Hardware versions | NXP P60D144P VA (MPH149) |
| Firmware versions | TOPDLV2.1 (Filter04), PIV Applet version 2.1 |
Module description
Quoted from the NIST CMVP entry for this certificate.
« Prime PIV v2.1 » is a FIPS201-2 smart card running on TOP DL V2.1 platform, which complies with the latest version of NIST SP800-73-4 and NIST SP800-85A-4. The product can be used over Contact and Contactless interfaces (ISO 7816 & 14443). Algorithms have been optimized to comply with NIST SP800-78-4 (AES CMAC for OPACITY secure messaging).
Security level exceptions
- Roles, Services, and Authentication: Level 3
- Physical Security: Level 3
- EMI/EMC: Level 3
- Design Assurance: Level 3
Approved algorithms (9)
| Algorithm | CAVP certificates |
|---|---|
| AES | 3543 |
| CVL | 597, 815, 834 |
| DRBG | 900 |
| ECDSA | 721 |
| KBKDF | 85 |
| KTS | |
| RSA | 1822, 1823 |
| SHS | 2921 |
| Triple-DES | 1984 |
Allowed algorithms
NDRNG
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2017-07-26 | Initial | UL Verification Services, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2017-07-26