Module Name
ActivIdentity Digital Identity Applet Suite V2 for Extended PIV
Historical Reason
RNG SP800-131A Revision 1 Transition
Caveat
When operated in FIPS mode
Security Level Exceptions
- Roles, Services, and Authentication: Level 3
- Physical Security: Level 3
- EMI/EMC: Level 3
Description
This version of the product can be used over contact and contactless interface (with some restrictions) and can be configured for use with ActivIdentity applet suite v2.6.2 for the support of GSC-IS v2.1, NIST SP800-73-1 Transitional and End-Point Card Edge (for HSPD-12/PIV). The product allows issuance and post-issuance support for PIV End Point Card Edge and Data Model. The validated product is similar to Applet v2.6.2a (FIPS 140-2 Cert. #880), but added the One Time Password applet.
Approved Algorithms
| CVL |
Cert. #204 |
| RNG |
Cert. #94 |
| RSA |
Cert. #43 |
| SHS |
Cert. #209 |
| Triple-DES |
Cert. #232 |
| Triple-DES MAC |
Triple-DES Cert. #232, vendor affirmed |
Other Algorithms
DES; DES MAC; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength)
Hardware Versions
P/N 77 Versions E303-063683 and E303-063684
Firmware Versions
ACA applet package v2.6.2.A3, PKI/GC applet package v2.6.2.A1, ASC library package v2.6.2.A1, PIV End-Point package v2.6.2.A1 and v2.6.2.A2, SKI applet package v2.6.2.A2
