808bits

ID-One Cosmo 64 v5

FIPS 140-2 certificate #549 · Oberthur Card Systems · data as of 2026-10-21

ID-One Cosmo 64 v5, from Oberthur Card Systems, holds FIPS 140-2 certificate #549 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: None

Certificate

Certificate number549
StandardFIPS 140-2
Statushistorical
Overall level3
Module typeHardware
EmbodimentSingle-chip
VendorOberthur Card Systems · website
Hardware versionsP/N 77
Firmware versionsE303-063792

Module description

Quoted from the NIST CMVP entry for this certificate.

The ID-One Cosmo 64 v5 is a JavaCard cryptographic module with dual interface (ISO 7816 & ISO 14443) specifically designed for identity and government market needs. It offers a full 64K Byte of EEPROm space available for customer discretionary use, together with on card cryptographic services such as TDES, AES, Elliptic Curve and 2048-bit RSA algorithms with on-card key generation. It is compliant to Java Card v2.2 and Open Platform v2.1.1A. To protect against skimming, a built-in firewall allows application developers to disable contactless access for sensitive operations. Additional feature include On-Card fingerprint matching and Logical Channels. The ID-One Cosmo 64 v5 is available in contact only, dual interface, or contactless only formats.

Approved algorithms (6)

AlgorithmCAVP certificates
AES123
RNG94
RSA43
SHS209
Triple-DES232
Triple-DES MACvendor affirmed

Other algorithms

DES (Cert. #246); DES MAC (Cert. #246, vendor affirmed);

Validation history

DateTypeLab
2005-06-09InitialUL Verification Services, Inc.
2005-09-23Update
2006-08-16Update
2007-04-30Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2005-06-09, 2005-09-23, 2006-08-16, 2007-04-30

Source documents