Does piv test cards contain sha2 signed certificate?

[y...@vmware.com]

I plan to purchase some PIV Test Card from NIST, and I want to get confirmation whether the NIST PIV Test card using SHA2 signed certificates?

Thanks.

[David A. Cooper]

On 06/01/2018 03:42 AM, y...@vmware.com wrote:

I plan to purchase some PIV Test Card from NIST, and I want to get confirmation whether the NIST PIV Test card using SHA2 signed certificates?

Yes, most of the certificates on the test cards are signed using SHA-2. There are only a few exceptions:

• Card 7 is intended to represent an older card, so its certificates are signed with SHA-1 (and its authentication certificates have 1024-bit RSA keys).

• Card 13 also represents an older card (one that has already expired), so its certificates are also signed with SHA-1 (and its authentication certificates have 1024-bit RSA keys).

• Many of the certificates corresponding to retired key management keys on the cards are signed with SHA-1, as such certificates will also tend to be older certificates that have already expired.

If you are interested, https://csrc.nist.gov/CSRC/media/Projects/PIV/documents/test-piv-card-data-specifications.pdf provides detailed information about every data object on every card, including the hash algorithm used in creating the signature.

Thanks,

David

[y...@vmware.com]

Thanks for your confirmation.