ID-One Cosmo 32 v5
ID-One Cosmo 32 v5, from Oberthur Card Systems, holds FIPS 140-2 certificate #597 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: None
Certificate
| Certificate number | 597 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 3 |
| Module type | Hardware |
| Embodiment | Single-chip |
| Vendor | Oberthur Card Systems · website |
| Hardware versions | P/N 90 |
| Firmware versions | E311-063842 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The ID-One Cosmo 32 v5 is a JavaCard cryptographic module specifically designed for identity and government market needs. It offers a full 32K Byte of EEPROM space available for customer discretionary use, together with on-card cryptographic services such as TDES (using double and triple length DES keys), and 2048-bit RSA with on-card key generation. The cryptographic module loads and runs applets written in Java programming language. It includes a native implementation of the latest Java Card TM (Version 2.2) and Open Platform (Version 2.1.1A) specifications, with full support for Delegated Management and DAP / Mandated DAP, that define a secure infrastructure for post-issuance programmable platforms. Additional features include On-Card fingerprint matching and Logical Channels.
Approved algorithms (5)
Other algorithms
DES (Cert. #286); DES MAC (Cert. #286, vendor affirmed); MD5
Validation history
| Date | Type | Lab |
|---|---|---|
| 2005-12-01 | Initial | UL Verification Services, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2005-12-01