IDPrime MD 940 minidriver enabled PKI smart card. Contact Interface. Plug & Play Smart Card

In addition to its seamless integration into Windows ecosystems, the SafeNet IDPrime 940 is a contact interface
smart card and is compatible with any environment through support by the SafeNet Authentication Client.

SafeNet IDPrime 940 Smart Cards are secured with both RSA up to 4096 and Elliptic curves algorithms, and address
a range of use cases that require PKI security, including secure access, email encryption, secure data storage,
digital signatures and secure online transactions for end users.

SafeNet IDPrime 940 is CC EAL5+ / PP Java Card certified for the Java platform and CC EAL5+ / PP QSCD certified
for the combination of Java platform and PKI applet. SafeNet IDPrime 940 is qualified by the French ANSSI and
is qualified according to the eIDAS regulations for both the eSignature and the eSeal applications.

Perfect integration in Windows environment—Certified and distributed by Microsoft, the SafeNet minidriver
ensures immediate integration with all Microsoft environments, plus Plug & Play service up to Windows 10.

Secure Flash mask chip—400 KB.

Compatible with any environment—SafeNet IDPrime 940 is fully supported by the SafeNet Authentication Client.

Compliant with eIDAS regulations—SafeNet IDPrime 940 is is fully qualified according the eIDAS regulations for both eSignature and eSeal applications,

and is qualified by the French ANSSI. Its Java platform is also CC EAL5+ / PP Java Card certified.

Multi-application smart cards—SafeNet IDPrime smart cards can have optional onboard applets for MPCOS e-purse.

Enhanced cryptographic support—SafeNet IDPrime 940 offers PKI services with both RSA up to 4096 and elliptic curves up to 521 bits.

Optional Onboard Applets
SafeNet IDPrime cards are multi-application smart cards, meaning they can have optional onboard applets for various
functions. An MPCOS applet can be added to provide both e-purse and data management services.

Product characteristics

Memory
SafeNet IDPrime 940 is based on a 400KB Flash memory chip. SafeNet IDPrime 940 comes as standard with 20 key containers. The memory available for certificates and other applets & data in this standard configuration is 73 KB.

Standards
BaseCSP minidriver (SafeNet minidriver)
Global Platform 2.2.1
Java Card 3.0.4
ISO 7816

Operating systems
Windows, MAC, Linux

Cryptographic algorithms
Hash: SHA-1, SHA-256, SHA-384, SHA-512.
RSA: up to RSA 4096 bits
RSA OAEP & RSA PSS
P-256 bits ECDSA, ECDH. P-384 & P-521bits ECDSA, ECDH are available via a custom configuration

On-card asymmetric key pair generation (RSA up to 4096 bits & Elliptic curves up to 521 bits)

Symmetric: AES—For secure messaging and 3DES for Microsoft Challenge/Response only

Communication protocols > T=0, T=1, PPS, with baud rate up to 446 Kbps at at 3.57 MZ (TA1=97h)

Other features
Onboard PIN Policy
Multi-PIN support
SafeNet IDPrime family of cards can be customized (card body and programming) to fit customers’ needs.
Gemalto applets (optional)
MPCOS > E-purse & secure data management application

Chip characteristics
Technology
Embedded crypto engine for symmetric and asymmetric cryptography Lifetime
Minimum 500,000 write/erase cycles
Data retention for minimum 25 years

Certification > CC EAL6+

Security
SafeNet IDPrime smart cards include multiple hardware and software countermeasures against various attacks: side channel attacks, invasive attacks, advanced fault attacks and other types of attacks.

The SafeNet IDPrime 940 is both CC EAL5+ / PP Java Card certified for the Java platform and CC EAL5+ / PP QSCD certified for the combination of Java platform plus PKI applet, is eIDAS qualified for both eSignature and eSeal, and qualified by the French ANSSI