808bits

NPCT6XX TPM 2.0

FIPS 140-2 certificate #2627 · Nuvoton Technology Corporation · data as of 2026-10-09

NPCT6XX TPM 2.0, from Nuvoton Technology Corporation, holds FIPS 140-2 certificate #2627 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its algorithm certificates, its validation history, and the list moves this tracker has observed, which NIST does not date.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement. Observed moving to historical on 2026-09-22. It was one of the last FIPS 140-2 certificates, all moved at the 140-2 sunset on 2026-09-21.
Caveat: When installed, initialized, and configured as specified in the Security Policy Section 8 and operated in FIPS mode

Certificate

Certificate number2627
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentSingle Chip
VendorNuvoton Technology Corporation · website
Hardware versionsFB5C85D and FB5C85E IN TSSOP28 PACKAGE and FB5C85D and FB5C85E IN QFN32 PACKAGE
Firmware versions1.3.0.1, 1.3.1.0, 1.3.2.8

Module description

Quoted from the NIST CMVP entry for this certificate.

Nuvoton NPCT6XX TPM 2.0 is a hardware cryptographic module that implements advanced cryptographic algorithms, including symmetric and asymmetric cryptography; as well as key generation and random number generation.

Security level exceptions

  • Mitigation of Other Attacks: N/A

Approved algorithms (9)

AlgorithmCAVP certificates
AES3541, 3542
CVL594, 596
DRBG898, 899
ECDSA719, 720
HMAC2262, 2263
KAS66, 67
KTS
RSA1819, 1820
SHS2919, 2920

Other algorithms

RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength); NDRNG

Tested configurations

  • N/A

Validation history

DateTypeLab
2016-04-28InitialEWA - Canada
2016-08-25UpdateEWA - Canada
2017-03-14UpdateEWA - Canada
2018-02-15UpdateEWA - Canada
2021-10-25UpdateEWA - Canada

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical at the time of the earliest snapshot
  • 2026-09-22: observed moving from active to historical
  • Validation dates on record: 2016-04-28, 2016-08-25, 2017-03-14, 2018-02-15, 2021-10-25

Source documents