Module Name
Ezio PKI Card
Historical Reason
SP 800-56Arev3 transition
Caveat
When operated in FIPS mode with the TOPDLv2.1 Platform
Security Level Exceptions
- Roles, Services, and Authentication: Level 3
- Physical Security: Level 3
- Operational Environment: Level 3
- EMI/EMC: Level 3
- Design Assurance: Level 3
Description
Ezio PKI Card is a Minidriver enabled PKI smartcard, working seamlessly with any Microsoft® environment (without any additional middleware), and offering all the necessary services (with either RSA or Elliptic curves algorithms) to secure an IT Security and ID access infrastructure. This version has been specifically designed to work with Ezio Pin pad reader to secure the PIN entry in eBanking environment.
Approved Algorithms
| AES |
Cert. #3543 |
| CKG |
vendor affirmed |
| CVL |
Certs. #597, #815 and #834 |
| DRBG |
Cert. #900 |
| ECDSA |
Cert. #721 |
| KBKDF |
Cert. #85 |
| KTS |
AES Cert. #3543; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
vendor affirmed |
| RSA |
Certs. #1822 and #1823 |
| SHS |
Cert. #2921 |
| Triple-DES |
Cert. #1984 |
Allowed Algorithms
EC Diffie-Hellman (CVL Cert. #597, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); NDRNG
Hardware Versions
NXP P60D144P VA (MPH149)
Firmware Versions
TOPDLV2.1 (Filter04), IDPrime MD Applet version V4.3.6.A and MSPNP Applet V1.2
