Cryptographic Module Validation Program CMVP

Module Name

SAFE-Key Device

Standard

FIPS 140-2

Status

Historical

 Historical Reason

Moved to historical list due to sunsetting

Overall Level

3

Caveat

When utilizing a Trusted Path as specified in the Security Policy

Security Level Exceptions

• Mitigation of Other Attacks: N/A

Module Type

Hardware

Embodiment

Multi-Chip Stand Alone

Description

The SAFE-Key device is a USB-based hardware security token; its primary purpose is two-factor authentication. The device supports three modalities: web-based two-factor authentication (patented), two-factor authentication for protected file decryption and two-factor authentication for digital signature generation. The two factors are something you have (i.e. a specific SAFE-Key device) and something you know (i.e. a password). It also supports one-factor, something you have (i.e. a specific SAFE-Key device) authentication.

Tested Configuration(s)

• N/A

Approved Algorithms

AES	Cert. #5373
CKG	vendor affirmed
CVL	Cert. #1839
DRBG	Cert. #2080
HMAC	Cert. #3561
KAS	SP 800-56B, vendor affirmed
KTS	AES Cert. #5373
RSA	Cert. #2874
SHS	Cert. #4313

Allowed Algorithms

NDRNG

Hardware Versions

1.4

Firmware Versions

Boot 1.2.0.0, PEM 1.2.0.0, BIOS 1.2.0.0