HiCOS PKI Applet v2.0 on IDEMIA ID-One Cosmo v8.1-R2
HiCOS PKI Applet v2.0 on IDEMIA ID-One Cosmo v8.1-R2, from Chunghwa Telecom Co., Ltd., holds FIPS 140-2 certificate #3465 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: With module ID-One PIV on Cosmo V8.1 validated to FIPS 140-2 under Cert. #2986 operating in FIPS mode
Certificate
| Certificate number | 3465 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Single Chip |
| Vendor | Chunghwa Telecom Co., Ltd. · website |
| Hardware versions | P/N '30' |
| Firmware versions | ‘5F02’-'090191' and HiCOS PKI Applet V2.0 '03020206' |
Module description
Quoted from the NIST CMVP entry for this certificate.
The HiCOS PKI Applet is a Javacard applet that provides security for stored user data and credentials and an easy to use interface to PKI services (e.g., for strong authentication, encryption and digital signatures).
Security level exceptions
- Roles, Services, and Authentication: Level 3
- Physical Security: Level 4
- EMI/EMC: Level 3
- Design Assurance: Level 3
Approved algorithms (10)
| Algorithm | CAVP certificates |
|---|---|
| AES | 4107, 4108 |
| CKG | vendor affirmed |
| CVL | 921, 953, 954 |
| DRBG | 1234 |
| ECDSA | 933 |
| KBKDF | 106 |
| KTS | |
| RSA | 2253 |
| SHS | 3379, 3380 |
| Triple-DES | 2245 |
Allowed algorithms
NDRNG
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2019-05-29 | Initial | UL Verification Services, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2019-05-29