808bits

MultiApp V4.0 Platform

FIPS 140-2 certificate #3198 · Gemalto · data as of 2026-10-21

MultiApp V4.0 Platform, from Gemalto, holds FIPS 140-2 certificate #3198 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: None

Certificate

Certificate number3198
StandardFIPS 140-2
Statushistorical
Overall level3
Module typeHardware
EmbodimentSingle Chip
VendorGemalto · website
Hardware versionsSLE78CLFX400VPH, SLE78CLFX300VPH, SLE78CLFX4000PH, SLE78CLFX3000PH, SLE78CFX4000PH, SLE78CFX3000PH
Firmware versionsMultiApp V4.0, Demonstration Applet version V9.1

Module description

Quoted from the NIST CMVP entry for this certificate.

MultiApp V4.0 is a highly secured smartcard platform from Gemalto complying with Javacard 3.0.4 and GP 2.2.1 standards and operated on the SLE78 chip from Infineon. This field-proven OS has the largest number of references in national ID programs. Its cryptographic library implements TDES, AES, SHA, RSA, RSA CRT, ECDSA, ECC CDH and DRBG algorithms. This modular and flexible platform serves various needs, enabling ePassport, secure data storage, identification, authentication and digital signature with biometry control.

Approved algorithms (11)

AlgorithmCAVP certificates
AES4457
CKGvendor affirmed
CVL1165, 1167, 1171, 1172
DRBG1444
ECDSA1086
KBKDF128
KTS
RSA2435, 2436
SHS3670
Triple-DES2394
Triple-DES MACvendor affirmed

Allowed algorithms

AES (Cert. #4457, key unwrapping; key establishment methodology provides 128 bits of encryption strength); NDRNG

Tested configurations

  • N/A

Validation history

DateTypeLab
2018-06-14InitialUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2018-06-14

Source documents