Oberthur PIV EP v1 on ID-One Cosmo 64 v5 D
Oberthur PIV EP v1 on ID-One Cosmo 64 v5 D, from Oberthur Card Systems, holds FIPS 140-2 certificate #668 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: None
Certificate
| Certificate number | 668 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Single-chip |
| Vendor | Oberthur Card Systems · website |
| Hardware versions | HW P/N 77 |
| Firmware versions | FW Version E303-063684 with PIV Applet Suite v1 (PIV Applet v1.08 or v1.09 and SSO Applet v1.08 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The PIV EP v1 is a fully validated PIV-II « End Point » smart card to answer HSPD12. It offers Identity proofing (storage of personal data), User authentication, Card authentication, digital signature, encryption and secure post issuance management. To increase flexibility and customization capabilities, the card supports all PIV optional data containers from SP800-73-1, plus additional non-PIV containers and keys configurable during manufacturing. A built-in Card Single Sign-On application allows multiple on card applications to share the same Card Holder Verification Method (Global PIN).
Security level exceptions
- Roles, Services, and Authentication: Level 3
- Physical Security: Level 3
- EMI/EMC: Level 3
- Design Assurance: Level 3
Approved algorithms (6)
Other algorithms
DES (Cert. #246); DES MAC (Cert. #246, vendor affirmed); RSA KeyGen
Validation history
| Date | Type | Lab |
|---|---|---|
| 2006-05-02 | Initial | UL Verification Services, Inc. |
| 2007-07-27 | Update | |
| 2014-02-06 | Update |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2006-05-02, 2007-07-27, 2014-02-06