PKI BLADE Cosmo

U.S. Department of State - FIPS 140 #1642

historicalLevel 2

The PKI/BLADE applet is based on ISO 7816 and GSC-IS commands interface. The applet is designed to be loaded on any Java card compliant with JavaCard v2.2.1 and Global Platform v2.1.1 specifications including PIV certified Java cards. It is designed to provide services for PKI based logical access applications and to provide strong two factor authentication using fingerprint biometrics.

Key facts

Scheme: FIPS 140
Certificate: 1642
Standard: FIPS 140-2
Security level: Level 2
Status: historical
Vendor: U.S. Department of State
Module type: Hardware
Embodiment: Single Chip
Lab: UL Verification Services, Inc.
First validated: November 21, 2011
Versions: P/N B0; FC10 (with op-code 071964) with ID-One PIV Applet Suite V2.3.2-a and PKI BLADE Applet V1.2
Caveat: When operated in FIPS mode with the fingerprint authentication mechanism parameters configured as indicated in the Security Policy Section 8.6

Algorithms

AES
CVL
ECDSA
RNG
RSA
SHS
Triple-DES
Triple-DES MAC

Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.

CVEs that may affect this product

sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.

Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.

Certificates it builds on

1414

Certificate ids found in this certificate's documents (automated extraction).

Documents and sources

Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026

Check certifications from your AI assistant

The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.

Add the certifications brain