Module Name
NITROXIII CNN35XX-NFBE HSM Family
Validation Dates
02/27/2017;02/28/2017;04/04/2017;08/04/2017;08/31/2017;11/09/2017;02/21/2018;03/15/2018;03/26/2018
Caveat
When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
Security Level Exceptions
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Embedded
Description
CNN35XX-NFBE HSM Family is a high performance purpose built solution for key management and crypto acceleration compliance to FIPS 140-2. The module supports flexible key store that can be partitioned up to 32 individually managed and isolated partitions. This is a SRIOV capable PCIe adapter and can be used in a virtualization environment to extend services like virtual key management, crypto and TLS offloads to VMs in dedicated I/O channels. This product is suitable for PKI vendors, SSL servers/load balancers.
FIPS Algorithms
| AES |
Certs. #2033, #2034, #2035, #3205, #3206 and #4104 |
| CVL |
Certs. #167 and #563 |
| DRBG |
Cert. #680 |
| DSA |
Cert. #916 |
| ECDSA |
Cert. #589 |
| HMAC |
Certs. #1233 and #2019 |
| KAS |
Cert. #53 |
| KAS |
SP 800-56B, vendor affirmed |
| KBKDF |
Cert. #65 |
| KTS |
AES Certs. #3206 and #4104 |
| KTS |
Triple-DES Cert. #2242; key establishment methodology provides 112 bits of encryption strength |
| RSA |
Certs. #1634 and #2218 |
| SHS |
Certs. #1780 and #2652 |
| Triple-DES |
Certs. #1311 and #2242 |
Other Algorithms
MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength); PBE; RC4
Hardware Versions
P/Ns CNL3560P-NFBE-G [1], CNL3560P-NFBE-2.0-G [2], CNL3560-NFBE-G [1], CNL3530-NFBE-G [1], CNL3510-NFBE-G [1], CNL3510P-NFBE-G [1], CNN3560P-NFBE-G [1], CNN3560-NFBE-G [1], CNN3560-NFBE-2.0-G [2], CNN3530-NFBE-G [1], CNN3530-NFBE-2.0-G [2], CNN3510-NFBE-G [1], CNN3510-NFBE-2.0-G [2], CNN3505LP-NFBE-2.0-G [2] and CNN3510LP-NFBE-2.0-G [2]
Firmware Versions
CNN35XX-NFBE-FW-2.03 build 10 [1], CNN35XX-NFBE-FW-2.03 build 13 [1], CNN35XX-NFBE-FW-2.03 build 20 [1], CNN35XX-NFBE-FW-2.03 build 21 [1], CNN35XX-NFBE-FW-2.03 build 22 [1] and CNN35XX-NFBE-FW-2.03 build 13-HW2.0 [1, 2]
) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)
