Cygnus X3 Hardware Security Module (XHSM)
Certificate
| Certificate number | 1867 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 3 |
| Module type | Hardware |
| Embodiment | Single-chip |
| Vendor | Pitney Bowes, Inc. · website |
| Hardware versions | P/N 1R84000 Version A |
| Firmware versions | 01.00.06 and 01.03.0074 (Device Abstraction Layer) |
Module description
The Pitney Bowes Cygnus X3 Postal Security Device (PSD) has been designed in compliance with FIPS 140-2 in order to support international digital indicia standards globally. The Cygnus X3 HSM Cryptographic Module employs strong encryption, decryption, and digital signature techniques for the protection of customer funds in Pitney Bowes Postage Metering products.
Security level exceptions
- Physical Security: Level 3 +EFP
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 1979 |
| CVL | 20 |
| DRBG | 181 |
| DSA | 632 |
| ECDSA | 286 |
| HMAC | 1192 |
| KAS | 33 |
| RSA | 1063 |
| SHS | 1733 |
| Triple-DES | 1319 |
| Triple-DES MAC | vendor affirmed |
Other algorithms
AES (Cert. #1979, key wrapping; key establishment methodology provides 128 or 256 bits of encryption strength); Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2012-12-19 | Initial | UL Verification Services, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2012-12-19