Overview
The CryptoMate Nano is the latest addition to the CryptoMate Token Series.
It contains the FIPS 140-2 Level 3-Certified ACOS5-64 v3.00 module, making it one of the most secured and portable cryptographic USB tokens in the market.
The CryptoMate Nano has 64 KB of EEPROM and complies with various international standards. Its casing is designed to be tamper-evident so that any unauthorized physical access will be easily visible. It also protects sensitive credentials and cryptographic keys since cryptographic operations such as RSA, SHA, AES and 3K3DES are performed on the ACOS5-64 module inside the token. With this, important and sensitive information is protected from being hacked or sniffed, achieving a high level of security for applications.
Features
Cryptographic Smart Card and Cryptoprocessor
- Embedded ACOS5-64 v3.00 chip (FIPS 140-2 Level 3 Certified Module)
- User memory: 64 KB of EEPROM
- Common Criteria EAL5+ (Chip Level)
- ISO 7816 Parts 1, 2, 3, 4, 8, 9 Compliant
- Supports ISO 7816 Part 4 File Structures: Transparent, Linear Fixed, Linear Variable, Cyclic
- DES, 3DES and 3K3DES with 64/128/192 bit keys data encryption in ECB and CBC mode. AES 128/192/256-bit is also supported
- Secure on-card RSA key pair generation with 512-bit to 4096-bit keys in 256-bit steps
- RSA signature computation and verification with 512-bit to 4096-bit keys in 256-bit steps
- Private and secret key file read access can be set to “Never”
- Mutual authentication (terminal-to-card and card-to-terminal) using Triple DES with session key generation for encryption and MAC
- SHA-1 and SHA-256 hashing algorithm
- Secure Messaging function for confidential and authenticated data transfers
- File access condition capability with ISO 7816–compliant Secure Attribute-Compact. File access is only allowed if the proper security conditions are met (e.g. PIN submission).
- Command execution condition capability per Dedicated File (DF) with ISO 7816–compliant Secure Attribute-Extended. Commands are allowed only if the proper security conditions are met (e.g., PIN submission).
- Deterministic random number generation
- Configurable baud rates
- Configurable ATR
- Customizable Key and PIN code
