kbrain

HiKey - Flash and HiKey PKI Token

Chunghwa Telecom Co., Ltd. - FIPS 140 #1117

historicalLevel 2

The HiKey Flash and HiKey PKI Token modules are multi-chip standalone implementations of a cryptographic module. The Hikey - Flash and HiKey PKI Token modules are USB tokens that adhere to ISO/IEC specifications for Integrated Circuit Chip (ICC) based identification cards. The HiKey - Flash and HiKey PKI Token cryptographic modules contain an implementation of the Open Platform (OP) Version 2.0.1 specification defining a secure infrastructure for post-issuance programmable smart cards.

Key facts

Scheme
FIPS 140
Certificate
1117
Standard
FIPS 140-2
Security level
Level 2
Status
historical
Status reason
RNG SP800-131A Revision 1 Transition
Vendor
Chunghwa Telecom Co., Ltd.
Module type
Hardware
Embodiment
Multi-Chip Stand Alone
Lab
DOMUS
First validated
July 7, 2009
Versions
1.5 and 1.8; 1.25; Card OS version 3.1 with GINA Applet: 1.0, PKI Applet: 2.0, FISC II Applet: 1.2
Caveat
When operated in FIPS mode
Level exceptions
Design Assurance: Level 3; EMI/EMC: Level 3; Roles, Services, and Authentication: Level 3

Algorithms

  • AES
  • HMAC
  • RNG
  • RSA
  • SHS
  • Triple-DES
  • Triple-DES MAC

Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.

CAVP algorithm certificates (7)

Each approved algorithm in a FIPS 140-3 module needs its own NIST CAVP certificate. Older numeric certificates link to their NIST page; ACVP certificates (A1234) can be looked up in the CAVP validation search.

CVEs that may affect this product

sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.

Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.

Documents and sources

Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP, the Common Criteria Portal and ENISA (EUCC) - dataset of September 21, 2026 - synced October 17, 2026

Check certifications from your AI assistant

The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.

Add the certifications brain