Cygnus X3 Hardware Security Module (XHSM): FIPS 140-2 cert #1867

Cygnus X3 Hardware Security Module (XHSM), from Pitney Bowes, Inc., holds FIPS 140-2 certificate #1867 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	1867
Standard	FIPS 140-2
Status	historical
Overall level	3
Module type	Hardware
Embodiment	Single-chip
Vendor	Pitney Bowes, Inc. · website
Hardware versions	P/N 1R84000 Version A
Firmware versions	01.00.06 and 01.03.0074 (Device Abstraction Layer)

Module description

Quoted from the NIST CMVP entry for this certificate.

The Pitney Bowes Cygnus X3 Postal Security Device (PSD) has been designed in compliance with FIPS 140-2 in order to support international digital indicia standards globally. The Cygnus X3 HSM Cryptographic Module employs strong encryption, decryption, and digital signature techniques for the protection of customer funds in Pitney Bowes Postage Metering products.

Security level exceptions

Physical Security: Level 3 +EFP

Approved algorithms (11)

Algorithm	CAVP certificates
AES	1979
CVL	20
DRBG	181
DSA	632
ECDSA	286
HMAC	1192
KAS	33
RSA	1063
SHS	1733
Triple-DES	1319
Triple-DES MAC	vendor affirmed

Other algorithms

AES (Cert. #1979, key wrapping; key establishment methodology provides 128 or 256 bits of encryption strength); Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength)

Validation history

Date	Type	Lab
2012-12-19	Initial	UL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2012-12-19

Cygnus X3 Hardware Security Module (XHSM)