IDPrime PIV 4.0 FIDO on IDCore3230 Platform
IDPrime PIV 4.0 FIDO on IDCore3230 Platform, from Thales, holds FIPS 140-3 certificate #5532 at overall level 2. The validation is active, with a sunset date of 2031-09-27. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: None
Certificate
| Certificate number | 5532 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2031-09-27 |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | SingleChip |
| Vendor | Thales · website |
Module description
Quoted from the NIST CMVP entry for this certificate.
The IDPrime PIV 4.0 FIDO on IDCore3230 Platform is a single-chip "contact" or "contact and contactless" (aka as "Dual") module implementing the Global Platform operational environment, with Card Manager, PIV, PIV Admin, MoC Server (for Match-on-Card) and FIDO Applets.
Security level exceptions
- Roles, services, and authentication: Level 3
- Software/Firmware security: Level 3
- Operational environment: N/A
- Physical security: Level 3
- Non-invasive security: N/A
- Life-cycle assurance: Level 3
- Mitigation of other attacks: N/A
Approved algorithms (19)
| Algorithm | CAVP certificates |
|---|---|
| AES-CBC | A2877 |
| AES-CMAC | A2877 |
| AES-ECB | A2877 |
| Counter DRBG | A2877 |
| ECDSA KeyGen (FIPS186-5) | A2877 |
| ECDSA SigGen (FIPS186-5) | A2877 |
| HMAC-SHA2-256 | A2877 |
| KAS-ECC Sp800-56Ar3 | A2877 |
| KAS-ECC-SSC Sp800-56Ar3 | A2877 |
| KDA HKDF SP800-56Cr2 | A2877 |
| KDA OneStep SP800-56Cr2 | A2877 |
| KDF SP800-108 | A2877 |
| KTS-IFC | A2877 |
| RSA KeyGen (FIPS186-5) | A2877 |
| RSA SigGen (FIPS186-5) | A2877 |
| SHA2-224 | A2877 |
| SHA2-256 | A2877 |
| SHA2-384 | A2877 |
| SHA2-512 | A2877 |
Validation history
| Date | Type | Lab |
|---|---|---|
| 2026-09-28 | Initial | Leidos Accredited Testing & Evaluation (AT&E) Lab |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-09-28: first observed by this tracker, status active
- Validation dates on record: 2026-09-28