808bits

NITROX XL 1600-NFBE HSM Family

FIPS 140-2 certificate #1369 · Cavium Networks · data as of 2026-09-03

NITROX XL 1600-NFBE HSM Family, from Cavium Networks, holds FIPS 140-2 certificate #1369 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. 186-2 transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number1369
StandardFIPS 140-2
Statushistorical
Overall level3
Module typeHardware
EmbodimentMulti-chip embedded
VendorCavium Networks · website
Hardware versionsCN1620-NFBE1NIC-2.0-G [1], CN1620-NFBE2NIC-2.0-G [1], CN1620-NFBE3NIC-2.0-G [1], CN1610-NFBE1NIC-2.0-G [1], CN1620-NFBE1NIC-2.0-FW1.2-G [2], CN1620-NFBE2NIC-2.0-FW1.2-G [2], CN1620-NFBE3NIC-2.0-FW1.2-G [2], CN1610-NFBE1NIC-2.0-FW1.2-G [2], CN1620-NFBE1-2.0-G [1], CN1620-NFBE2-2.0-G [1], CN1620-NFBE3-2.0-G [1], CN1610-NFBE1-2.0-G [1], CN1620-NFBE1-2.0-FW1.2-G [2], CN1620-NFBE2-2.0-FW1.2-G [2], CN1620-NFBE3-2.0-FW1.2-G [2], CN1610-NFBE1-2.0-FW1.2-G [2], CN1620-NFBE1-3.0-FW1.1-G [1], CN1620-NFBE2-3.0-FW1.1-G [1], CN1620-NFBE3-3.0-FW1.1-G [1], CN1620-NFBE1-3.0-FW1.2-G [2], CN1620-NFBE2-3.0-FW1.2-G [2] and CN1620-NFBE3-3.0-FW1.2-G [2]
Firmware versionsCN16XX-NFBE-FW-1.1-160628 [1] and CN16XX-NFBE-FW-1.2-160627 [2]

Module description

Quoted from the NIST CMVP entry for this certificate.

The NITROX XL 1600-NFBE HSM adapter family delivers the worldÆs fastest FIPS 140-2 Level 3 Hardware Security Module (HSM) with PCIe Gen 2.0. The NITROX XL family of adapters offers up to 45,000 RSA operations per second and 5 Gbps of bulk crypto performance and is certified to the stringent US Government security standards. This FIPS family delivers an unmatched solution to the increasing performance, cryptographic and time to market requirements of the financial, government and healthcare vertical markets

Approved algorithms (9)

AlgorithmCAVP certificates
AES1265, 1266
DRBG32
ECDSA150
HMAC736
KAS5
KTS
RSA607
SHS1165, 1166
Triple-DES898

Other algorithms

NDRNG; RSA (key wrapping; key establishment methodology provides 128 bits of encryption strength)

Validation history

DateTypeLab
2010-07-21InitialUL Verification Services, Inc.
2010-12-06UpdateUL Verification Services, Inc.
2012-12-27UpdateUL Verification Services, Inc.
2014-07-24UpdateUL Verification Services, Inc.
2017-01-11UpdateUL Verification Services, Inc.
2018-03-29UpdateUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2010-07-21, 2010-12-06, 2012-12-27, 2014-07-24, 2017-01-11, 2018-03-29

Source documents