DIGIPASS FX Crypto Module

Certificate

Module description

The DIGIPASS FX Crypto module validated to FIPS 140-3 overall Level 3, is a single chip module implementing the GlobalPlatform operational environment (Card Manager (ISD/SSD)) and the applications to perform cryptographic calculations.

Security level exceptions

• Operational environment: N/A
• Physical security: Level 4

Approved algorithms

Allowed algorithms

AES (Cert. #A2713, key unwrapping; key establishment methodology provides between 128 and 256 bits of encryption strength Per IG D.G; Symmetric key unwrapping (according to RFC3394) );AES (Cert. #A2713, key unwrapping; key establishment methodology provides 128 bits of encryption strength Per IG D.G; Symmetric key unwrapping (according to GlobalPlatform Amendment-I));ECDSA with non-NIST recommended curves (Provides between 112 and 256 bits of encryption strength Per IG C.A; Signature Generation/Verification using non-NIST curves [Brainpool224r1, Brainpool256r1, Brainpool320r, Brainpool384r1, Brainpool512r1, Secp224k1, Secp256k1 with strengths ]112, 128, 192 and 256 bits]);EC Diffie-Hellman with non-NIST recommended curves (Provides between 112 and 256 bits of encryption strength Per IGs D.F and C.A; Shared secret computation using non-NIST curves [Brainpool224r1, Brainpool256r1, Brainpool320r, Brainpool384r1, Brainpool512r1, Secp224k1, Secp256k1 with strengths ]112, 128, 192 and 256 bits])

Tested configurations

• N/A

Validation history

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

• 2026-08-21: first observed by this tracker, status active
• Validation dates on record: 2025-07-25

Source documents

• NIST certificate page
• Security policy (PDF)
• Consolidated certificate (PDF)