Eviden’s cryptovision ePasslet Suite running on Infineon’s SECORA™ ID V2 platform pioneer the market by reaching the highest FIDO2 certification level 3+ for their authenticator solution.
We are pleased to share that Brightsight has successfully completed its first FIDO2 Authenticator evaluation, consisting of Eviden’s JavaCard applet and Infineon’s Common Criteria-certified platform. The solution passed the Authenticator Level 3+ certification under the FIDO CTAP 2.1 standard. Level 3+ certification represents the highest level in the FIDO Alliance’s security framework, ensuring robust protection against sophisticated attacks and setting a new benchmark in secure user authentication and digital identity protection.
This milestone was achieved through close collaboration with two industry leaders:
- Infineon Technologies with their SECORA™ ID V2 platform, delivering secure, hardware-based authentication at the highest assurance level.
- Eviden with their cryptovision ePasslet Suite FIDO2 application, that runs on Infineon’s platform SECORA™ ID V2, enabling strong, passwordless authentication across diverse environments.
The certified ePasslet FIDO Authenticator is the first in the world commercial* product that receives the FIDO CTAP 2.1 Authenticator Level 3+ certification. It is listed on the FIDO Certified Products page.
*The existing Level 3+ certification by BSI served as an open-source example and was not intended for production, but to establish a foundation for future Level 3+ evaluations. More information available here.
This achievement reinforces Brightsight’s role as the trusted lab partner for advancing phishing-resistant, passwordless security.
"We are proud to see the Cryptovision ePasslet Suite, powered by Infineon’s SECORA™ ID V2 platform, achieve FIDO2 Level 3+ certification. This milestone highlights our commitment to delivering secured hardware-based solutions that meet highest security standards”, says Maurizio Skerlj, Senior Vice President and Product Line Manager for Authentication and Identity Solutions at Infineon. “Together with Eviden and Brightsight, we are setting a new benchmark for secured digital identities and advancing the future of passwordless authentication."
About FIDO2
We asked Pol Matamoros, a Senior Security Evaluator and FIDO expert at Brightsight, to explain what a FIDO Level 3+ security evaluation entails.
What is a FIDO2 Level 3+ security evaluation?
Authenticator Certification Level 3+ evaluates FIDO Authenticator protection against high effort software and hardware attacks. This means that Cryptovision ePasslet can resist sophisticated attacks such as side channel or fault injection.
Level 3+ is the highest level a FIDO Authenticator can reach and requires applying the most demanding security standards such as FIPS or EUCC High. While in Level 2, the evaluation is based on documents, in Level 3+ the evaluators need to conduct code reviews, assess the product’s life cycle and execute penetration tests.
Interested?
Do you want to know how to achieve your product’s compliance or want to check your product’s implementation and documentation gaps? Work with a trusted partner like Brightsight—an accredited FIDO security lab—to make your product's certification journey smoother. Our decades of experience in security evaluations, combined with a deep understanding of the FIDO standards, enable us to navigate your challenges efficiently and effectively, and in a structured and predictable way.
Contact us for more details – our experts are ready to assist you.
Enjoyed this article?
Stay up-to-date with our news, updates and latest developments by following us on LinkedIn.
Don't miss any of our news, updates and latest developments – subscribe below to our newsletter.
The Brightsight Bulletin
Subscribe today to stay-up to date with the latest cybersecurity news, trends and regulatory developments from across the payment, internet of things, medical, automotive, industrial, government, telecommunication and network or integrated circuit sectors.
Receive expert insights on cybersecurity testing and certification, upcoming events, and webinars tailored for manufacturers and developers of chip-based devices.
