Protiva PIV Applet v1.55 on Protiva TOP DM Card
Protiva PIV Applet v1.55 on Protiva TOP DM Card, from Gemalto, holds FIPS 140-2 certificate #691 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 691 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Single-chip |
| Vendor | Gemalto · website |
| Hardware versions | GCX4-M2569420, GXP4-M2569430, GCX4-M2569422, GCX4-A1004155 and GCX4-A1026517 |
| Firmware versions | GCX4-FIPS EI07 (MPH051), GCX4-FIPS EI08, GXP4-FIPS EI07 (MPH052) and GXP4-FIPS EI08; Applet Version: Protiva PIV Applet v1.55 |
Module description
Quoted from the NIST CMVP entry for this certificate.
This module is based on a Java platform (GemCombiXpresso R4 E72 PK ) with 72K EEPROM memory and on the SafesITe FIPS201 applet loaded on the Java Card platform. The Cryptographic Module provides dual interfaces (i.e. contact and contact-less) where the same security level is achieved. The module has on board the following FIPS approved security functions used specifically by the SafesITe FIPS201 applet :P-RNG, Triple DES, SHA-1, RSA algorithms up to 2048 bits key length, and X9.31 RSA On Board Key generation up to 2048 bits long. The module conforms to Java Card 2.1.1, Global Platform 2.1.1, NITS SP-800-73-1, and is very well suited for US Government and Federal projects where FIPS-201, PIV-II compliance is required.
Security level exceptions
- Roles, Services, and Authentication: Level 3
- Physical Security: Level 3
- EMI/EMC: Level 3
- Design Assurance: Level 3
Approved algorithms (7)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2006-07-20 | Initial | SAIC-VA |
| 2006-12-19 | Update | |
| 2007-08-29 | Update | SAIC-VA |
| 2007-12-20 | Update | |
| 2008-07-28 | Update | |
| 2011-02-24 | Update | SAIC-VA |
| 2011-06-09 | Update | SAIC-VA |
| 2014-02-06 | Update |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2006-07-20, 2006-12-19, 2007-08-29, 2007-12-20, 2008-07-28, 2011-02-24, 2011-06-09, 2014-02-06