The ACOS5-EVO, is the latest addition to the ACOS5 Series, that provides additional features such as support for ECC and RSA algorithms and extended APDU. It also supports DES, 3DES, AES, CMAC and SHA (up to 512bits). Dual - Contact and Contactless Smart Card Interface
It is compliant with international standards for PKI smart cards such as FIPS 140-2 (US Federal Information Processing Standards) Level 3 and CC EAL 5+ (chip level) making it ideal for public-key based applications such as digital signing, email security, online log-on, network log-in, blockchain applications, and others.
Features:
- Memory
- Capacity: 192 KB
- Contact Smart Card Interface
- Compliant with ISO 7816 Parts 1, 2, 3, 4, 8 and 9
- Supports T=1 (Default) and T=0 Protocol
- Supports baud up to 446.4 kbps
- Contactless Smart Card Interface
- Compliant with ISO 14443 Parts 1, 2, 3 and 4 (Type A)
- Supports T=CL Protocol
- Supports baud up to 424 kbps
- Cryptographic Features
- ECC: Curves P-224/P-256/P-384/P-521
- RSA: up to 4096 bits
- AES: 128/192/256-bits (ECB, CBC)
- DES/3DES: 56/112/168-bits (ECB, CBC)
- Hash: SHA1, SHA224, SHA256, SHA384, SHA512
- MAC: CBC-MAC (DES/3DES, AES), CMAC (3DES, AES)
- Random Number Generation: Deterministic RNG, Non-deterministic RNG
- File Security
- Private and secret key file read access can be set to “Never”
- File access condition capability with ISO 7816–compliant Secure Attribute-Compact. File access is only allowed if the proper security conditions are met (e.g. PIN submission)
- Command execution condition capability per Dedicated File (DF) with ISO 7816–compliant Secure Attribute-Extended. Commands are allowed only if the proper security conditions are met (e.g., PIN submission)
- Secure Messaging function for confidential and authenticated data transfers
- Mutual authentication (terminal-to-card and card-to-terminal) using Triple DES with session key generation for encryption and MAC
- Anti-tearing Function Support
- Certifications
- Common Criteria EAL5+ (Chip Level)
- ACS Middleware Support
- Windows® Minidriver
- PKCS #11 (*)
- Microsoft® CryptoAPI (*)
- Microsoft® CryptoAPI Next Generation (*)
(*) Please refer to EVO PKI Kit.