Neopost Postal Security Device (PSD)
Neopost Postal Security Device (PSD), from Neopost Technologies, S.A., holds FIPS 140-2 certificate #2167 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 2167 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 3 |
| Module type | Hardware |
| Embodiment | Multi-chip embedded |
| Vendor | Neopost Technologies, S.A. · website |
| Hardware versions | A0014227-B, A0014227-C |
| Firmware versions | a22.17.01, a22.17.02, a23.08.01, a23.08.03, a28.02.01, a28.02.04, a28.05 and a28.08 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Neopost Postal Security Device (PSD) is a cryptographic module embedded within postal franking machines. The PSD performs all franking machine’s cryptographic and postal security functions and protects the Critical Security Parameters (CSPs) and Postal Relevant Data from unauthorized access.
Security level exceptions
- Physical Security: Level 3 +EFP/EFT
Approved algorithms (7)
Other algorithms
RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength, non-compliant less than 112 bits of encryption strength); Diffie-Hellman (non-compliant)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2014-06-11 | Initial | Penumbra Security, Inc. |
| 2014-08-29 | Update | Penumbra Security, Inc. |
| 2015-09-18 | Update | Penumbra Security, Inc. |
| 2016-01-04 | Update | Penumbra Security, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2014-06-11, 2014-08-29, 2015-09-18, 2016-01-04