808bits

Atalla Cryptographic Subsystem (ACS)

FIPS 140-2 certificate #3059 · Utimaco Inc. · data as of 2026-10-21

Atalla Cryptographic Subsystem (ACS), from Utimaco Inc., holds FIPS 140-2 certificate #3059 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: None

Certificate

Certificate number3059
StandardFIPS 140-2
Statushistorical
Overall level3
Module typeHardware
EmbodimentMulti-Chip Embedded
VendorUtimaco Inc. · website
Hardware versionsC9B60-2101A[1], C9B60-2101B[2], C9B60-2108A[3] or C9B60-2108B[4]
Firmware versionsLoader Versions 1.20[1], 1.21[1][2][3][4], 1.22[1][2][3][4] or 1.23[1][2][3][4], PSMCU Versions 0.95[1], 0.96[1], 0.97[2][3][4], 1.0[2][3][4], 1.0.1[2][3][4] or 1.0.2[2][3][4], CMS-OCT Version 0.95 or 1.0, CMS-NTX Versions 0.95[1][2], 0.96[2][3][4] or 1.0[2][3][4]

Module description

Quoted from the NIST CMVP entry for this certificate.

The ACS is a multi-chip embedded cryptographic module. It consists of a secure hardware platform, a firmware secure loader, and three separate microcontrollers, collectively called the Physical Security Monitor Central Unit or PSMCU). The purpose of the cryptographic module is to load Approved (RSA and ECDSA signed) application programs, called "personalities," in a secure manner.

Security level exceptions

  • Mitigation of Other Attacks: N/A

Approved algorithms (7)

AlgorithmCAVP certificates
AES4600, 4601
CKGvendor affirmed
DRBG1542
ECDSA1128
KTS
RSA2518
SHS3776

Allowed algorithms

NDRNG

Tested configurations

  • N/A

Validation history

DateTypeLab
2017-11-09InitialLeidos Accredited Testing & Evaluation (AT&E) Lab
2018-12-11UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2019-10-22UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2019-12-18UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab
2022-04-08UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2017-11-09, 2018-12-11, 2019-10-22, 2019-12-18, 2022-04-08

Source documents