LUNA® RA Secure Key Issuance HSM token
LUNA® RA Secure Key Issuance HSM token, from SafeNet, Inc., holds FIPS 140-1 certificate #168 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 168 |
|---|---|
| Standard | FIPS 140-1 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-chip standalone |
| Vendor | SafeNet, Inc. · website |
| Hardware versions | v 1 and 2 |
| Firmware versions | v3.9 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Chrysalis-ITS® LUNA RA Secure Issuance HSM token is a hardware-based, multiple-chip standalone module which is a delta production of the Chrysalis-ITS® LUNA 2 token (certificate #56, dated 08/08/1999). Like the LUNA 2, the LUNA RA is in the form of a PC card “token” based on the PCMCIA standard. The LUNA RA token offers secure key distribution, fast key generation and secure key backup functionality to increase security and reduce operational overhead. The Luna RA token is integral to the secure issuance of keys to smart cards, cable modems, mobile phones and other PKI-enabled devices.
Security level exceptions
- Software Security: Level 3
- Self Tests: Level 3
Approved algorithms (3)
| Algorithm | CAVP certificates |
|---|---|
| RSA | vendor affirmed |
| Triple-DES | 74 |
| Triple-DES MAC; DSA/SHA-1 |
Other algorithms
DES (Cert. #32); DES MAC; HMAC-SHA-1; Diffie-Hellman (key agreement); MD2; MD5; HMAC-MD5; RC2; RC4; RC5; CAST/CAST3/CAST5 (40 and 64 bit keys)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2001-09-25 | Initial | DOMUS |
| 2004-10-18 | Update |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2001-09-25, 2004-10-18