808bits

OTP Token

FIPS 140-2 certificate #4003 · FEITIAN Technologies · data as of 2026-10-09

OTP Token, from FEITIAN Technologies, holds FIPS 140-2 certificate #4003 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: None

Certificate

Certificate number4003
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeHardware
EmbodimentMulti-Chip Embedded
VendorFEITIAN Technologies · website
Hardware versionsP449, V1.0
Firmware versionsV1.0 (build015010, build015210, build021010 or build021210)

Module description

Quoted from the NIST CMVP entry for this certificate.

OTP Token enables strong authentication by positively identifying user with one-time passwords. Simply pressing the button OTP Token generates a secure event synchronous or time-based one-time password, ensuring properly identification and allowing only authorized access to critical applications and sensitive data.

Security level exceptions

  • EMI/EMC: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms (2)

AlgorithmCAVP certificates
HMACC1993
SHSC1993

Tested configurations

  • N/A

Validation history

DateTypeLab
2021-08-03InitialUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2021-08-03

Source documents