top of page

Java Card

v3.2

GlobalPlatform

2.3.1 + Amendments

Silicon

Infineon · STMicro

Classical crypto

AES · RSA · ECC

Certifications

CC EAL5+/EAL6+ path · FIPS 140-3 designed

Javelin™ OS

Production-proven Java Card 3.2 OS for secure elements, with GlobalPlatform 2.3.1 + Amendments support and a clear path to post-quantum migration.
Designed for certified deployments across payment, identity, authentication, and secure hardware ecosystems.

Available on Infineon SLC-series silicon. Javelin OS-PQC on SLC27 and SLC22.

Java Card

v3.2

GlobalPlatform

2.3.1 + Amendments

Silicon

Infineon · STMicro

Classical crypto

AES · RSA · ECC

Certifications

CC EAL5+/EAL6+ path · FIPS 140-3 designed

PQC

ML-KEM · ML-DSA

Javelin™ OS

Production-proven Java Card 3.2 OS for secure elements, with GlobalPlatform 2.3.1 + Amendments support and a clear path to post-quantum migration.
Designed for certified deployments across payment, identity, authentication, and secure hardware ecosystems.

Available on Infineon SLC-series silicon. Javelin OS-PQC on SLC27 and SLC22.

OS ARCHITECTURE

Six layers plus a new PQC layer

From the Java Card runtime and GlobalPlatform services to silicon abstraction and the post-quantum extension layer, structured for production deployment, migration, and certification planning.

Javelin OS-PQC core

ML-KEM: NIST FIPS 203

ML-DSA: NIST FIPS 204

Hybrid ECC + PQC API

Crypto-agility negotiation

Key re-wrap migration toolkit

NEW

Silicon Abstraction Layer

HW accelerator binding

DPA / SPA countermeasures

Non-extractable key storage

NIST SP 800-90A RNG

I/O & Protocol Stack

ISO 7816-3 / 4 T=0 / T=1

ISO 14443-4 NFC Type A / B

USB CCID / HID fallback

SWP / HCI for embedded SE

Advanced Crypto Engine

AES 128 / 192 / 256 GCM / CCM

RSA 2048 / 4096, ECC P-256 / P-521

secp256k1, Ed25519, X25519

SHA-1 / 256 / 512, Keccak-256

GlobalPlatform Layer

GlobalPlatform 2.3.1 Card Manager ISD/SSD

SCP02 / SCP03 / SCP11

GP Amendments A, B, C, D, F and H (ELFU)

Contactless registry extensions

Java Card VM

Java Card 3.2 JCVM

Multi-app isolation firewall

ISO 7816 / USB / NFC I/O

Extended APDU (ISO 7816-4)

SUPPORTED SILICON

Production silicon support

Javelin OS is available across current Infineon and STMicroelectronics platforms. Javelin OS-PQC is running on SLC27 and SLC22, with additional platforms on the roadmap.

Infineon SLC27

Javelin OS

Available

Javelin OS-PQC

Running at the jNet bench

Infineon SLC22

Javelin OS

Available

Javelin OS-PQC

Running at the jNet bench

Infineon SLC39

Javelin OS

Available

Javelin OS-PQC

Roadmap

STMicroelectronics ST33

Javelin OS

Available

Javelin OS-PQC

Roadmap

STMicroelectronics ST33

Javelin OS

Available

Javelin OS-PQC

Roadmap

Applet Suite

Every applet, PQC migration path included

Production applets for identity, government ID, payment, blockchain, and PQC transition, structured for real deployment, certification, and migration planning.

NATIVE PQC

PQC in the OS core, using the silicon's crypto accelerators.

ML-KEM key encapsulation, NIST FIPS 203

ML-DSA digital signatures, NIST FIPS 204

Hybrid key exchange (X25519 + ML-KEM)

Key re-wrap migration toolkit

Crypto-agility API, algorithm negotiation per session

NATIVE PQC

PQC in the OS core, using the silicon's crypto accelerators.

ML-KEM key encapsulation, NIST FIPS 203

ML-DSA digital signatures, NIST FIPS 204

Hybrid key exchange (X25519 + ML-KEM)

Key re-wrap migration toolkit

Crypto-agility API, algorithm negotiation per session

Abstract blue-gray wave background animation

Ready to plan your PQC migration?

Talk to jNet about Java Card OS licensing, applet migration, and post-quantum deployment strategy.

bottom of page