808bits

Oberthur PIV EP v1 on ID-One Cosmo 64 v5 D

FIPS 140-2 certificate #668 · Oberthur Card Systems · data as of 2026-08-28
Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: None

Certificate

Certificate number668
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentSingle-chip
VendorOberthur Card Systems · website
Hardware versionsHW P/N 77
Firmware versionsFW Version E303-063684 with PIV Applet Suite v1 (PIV Applet v1.08 or v1.09 and SSO Applet v1.08

Module description

The PIV EP v1 is a fully validated PIV-II « End Point » smart card to answer HSPD12. It offers Identity proofing (storage of personal data), User authentication, Card authentication, digital signature, encryption and secure post issuance management. To increase flexibility and customization capabilities, the card supports all PIV optional data containers from SP800-73-1, plus additional non-PIV containers and keys configurable during manufacturing. A built-in Card Single Sign-On application allows multiple on card applications to share the same Card Holder Verification Method (Global PIN).

Security level exceptions

  • Roles, Services, and Authentication: Level 3
  • Physical Security: Level 3
  • EMI/EMC: Level 3
  • Design Assurance: Level 3

Approved algorithms

AlgorithmCAVP certificate
CVL204
RNG94
RSA43
SHS209
Triple-DES232
Triple-DES MACvendor affirmed

Other algorithms

DES (Cert. #246); DES MAC (Cert. #246, vendor affirmed); RSA KeyGen

Validation history

DateTypeLab
2006-05-02InitialUL Verification Services, Inc.
2007-07-27Update
2014-02-06Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2006-05-02, 2007-07-27, 2014-02-06

Source documents