Security Statement

The following security measures are applicable to Aperio:
Authentication 3-pass mutual authentication (challenge-response protocol) based on AES128. Standard Aperio authentication scheme.
Confidentiality in communication The communication is encrypted by a unique session key.
Confidentiality of information in the lock Secret information such as encryption keys is never visible outside the protected flash of the microcontroller.
Encryption key Unique encryption key seed for each installation.
Database The encrypted database in Programming Application is password protected. The computer must also be physically protected.
Applicable tests

AES and RNG tested according to NIST (National Institute of Standards and Technology) test vectors.

http://csrc.nist.gov/groups/STM/cavp/documents/rng/RNGVS.pdf

http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf