FIPS 140-2 certificate 2443: Pitney Bowes MS1 X4 Postal Security Device (PSD)

Pitney Bowes MS1 X4 Postal Security Device (PSD), from Pitney Bowes, Inc., holds FIPS 140-2 certificate #2443 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	2443
Standard	FIPS 140-2
Status	historical
Overall level	3
Module type	Hardware
Embodiment	Single-chip
Vendor	Pitney Bowes, Inc. · website
Hardware versions	Part # 4W84001 Rev AAA; MAX32590 Secure Microcontroller Revision B4
Firmware versions	Device Abstraction Layer (DAL) Version 01.01.00F4; PB Bootloader Version 00.00.0016; PSD Application Version 21.04.007E

Module description

Quoted from the NIST CMVP entry for this certificate.

The MS1 X4 PSD is a single chip cryptographic module using the Maxim MAX32590 hardware that provides security services to support the creation of digital postage evidence in the form of an indicium.

Security level exceptions

Mitigation of Other Attacks: N/A

Approved algorithms (12)

Algorithm	CAVP certificates
AES	2826, 2936
CVL	254
DRBG	487
DSA	871
ECDSA	529
HMAC	1769
KAS	49
KTS
RSA	1539
SHS	2369
Triple-DES	1690
Triple-DES MAC	vendor affirmed

Other algorithms

Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength); NDRNG

Tested configurations

Validation history

Date	Type	Lab
2015-09-09	Initial	Penumbra Security, Inc.
2018-04-24	Update	Penumbra Security, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2015-09-09, 2018-04-24

Pitney Bowes MS1 X4 Postal Security Device (PSD)