5
Cryptographic Capabilities
The ACOS5-EVO supports a number of cryptographic algorithms, including:
•ECC: Curves P-224/P-256/P-384/P-521
•RSA: 512 –4096 bits in 256 bits increments
•AES: 128/192/256-bits (ECB, CBC)
•DES/3DES: 56/112/168-bits (ECB, CBC)
•Hash: SHA1, SHA224, SHA256, SHA384, SHA512
•MAC: CBC-MAC (DES/3DES, AES), CMAC (3DES, AES)
Random Number Generation
•Deterministic RNG according to FIPS 140-2
•Non-deterministic RNG compliant to AIS-31
File Security
•Private and secret key file read access can be set to “Never”
•File access condition capability with ISO 7816-compliant Secure Attribute-
Compact. File access is only allowed if the proper security conditions are met
(e.g., PIN submissions)
•Command execution condition capability per Dedicated File (DF) with ISO 7816-
compliant Secure Attribute-Extended. Commands are allowed only if the proper
security conditions are met (e.g., PIN submission)
•Secure Messaging function for confidential and authenticated data transfer
•Mutual authentication (terminal-co-card and card-to-terminal) with session key
generation for encryption and MAC
•Anti-tearing Function Support
Compliance to Standards
•Compliance with ISO 7816 Parts 1,2.3,4, 8, and 9
•Compliance with FIPS 140-2 Level 3
•Certified with Common Criteria ELA 5+ (Chip Level)
