Cygnus X3 PSD Cryptographic Module: FIPS 140-2 cert #1289

Cygnus X3 PSD Cryptographic Module, from Pitney Bowes, Inc., holds FIPS 140-2 certificate #1289 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	1289
Standard	FIPS 140-2
Status	historical
Overall level	3
Module type	Hardware
Embodiment	Single-chip
Vendor	Pitney Bowes, Inc. · website
Software versions	03.00.0064 (PSD Application) and 01.00.0053 (SDU)
Hardware versions	P/N 1R84000 Version A
Firmware versions	01.00.06

Module description

Quoted from the NIST CMVP entry for this certificate.

The Pitney Bowes Cygnus X3 Postal Security Device (PSD) has been designed in compliance with FIPS 140-2 and IPMAR security protection profile in order to support the USPS IBIP and international digital indicia standards globally. The Cygnus X3 PSD Cryptographic Module employs strong encryption, decryption, and digital signature techniques for the protection of customer funds in Pitney Bowes Postage Metering products.

Security level exceptions

Physical Security: Level 3 + EFP

Approved algorithms (9)

Algorithm	CAVP certificates
AES	1069
DRBG	20
DSA	374
ECDSA	vendor affirmed
HMAC	601
KAS	3
SHS	650
Triple-DES	572
Triple-DES MAC	vendor affirmed

Other algorithms

AES (AES Cert. #1069, key wrapping; key establishment methodology provides 128 bits of encryption strength)

Validation history

Date	Type	Lab
2010-04-12	Initial	UL Verification Services, Inc.
2010-05-05	Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2010-04-12, 2010-05-05

Cygnus X3 PSD Cryptographic Module