I have a question. One of my colleague gave me a
Smart Token which consists of public/private key inside and asked me if I can test its security. I said it should be tested in a equipped lab for passing FIPS standard tests. However I was wondering if I can test this token with some tools and check if it's secure. I searched the web but I couldn't find anything useful. Does anybody here have any experience in this area? Any help would be greatly appreciated.
EDIT: Since my question may not be clear as I think, I put it in some practical approach, if I gave you some PKI token and show you some certificates which it has like FIPS-140, PKCS11, ... whould you use this PKI token in your secure applications? In other words, you trust a secure device by certificates which producer claims to have?? What if there is a hardware Torjan or backdoor implemented into device?