Cygnus X-2 Postal Security Device
Cygnus X-2 Postal Security Device, from Pitney Bowes, Inc., holds FIPS 140-2 certificate #1121 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: None
Certificate
| Certificate number | 1121 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 3 |
| Module type | Hardware |
| Embodiment | Multi-chip standalone |
| Vendor | Pitney Bowes, Inc. · website |
| Hardware versions | 1MEC BBC/BAJ (Canada), 1MES BBC/BAJ (Canada), 1MCT BBC/BAJ (Canada), 1MET BBC/BAJ (Canada), 1M00 BBC/BAJ (US) and 1M05 BBC/BAJ (US) |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Pitney Bowes Cygnus X-2 Postal Security Device (PSD) has been designed in compliance with FIPS 140-2 and IPMAR security protection profile in order to support the USPS IBIP and international digital indicia standards globally. The PSD employs strong encryption, decryption, and digital signature techniques for the protection of customer funds in Pitney Bowes Postage Metering products.
Security level exceptions
- Physical Security: Level 3 +EFP
Approved algorithms (7)
| Algorithm | CAVP certificates |
|---|---|
| DSA | 200 |
| ECDSA | 48 |
| HMAC | 246 |
| RNG | 272 |
| SHS | 562 |
| Triple-DES | 503 |
| Triple-DES MAC | vendor affirmed |
Other algorithms
Diffie-Hellman (key agreement; key establishment methodology provides 80 bits of encryption strength; non-compliant)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2009-04-14 | Initial | UL Verification Services, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2009-04-14