NITROXIII CNN35XX-NFBE HSM Family
Certificate
| Certificate number | 2733 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 3 |
| Module type | Hardware |
| Embodiment | Multi-Chip Embedded |
| Vendor | Cavium Inc. · website |
| Hardware versions | P/Ns CNL3560P-NFBE-G, CNL3560-NFBE-G, CNL3530-NFBE-G, CNL3510-NFBE-G, CNL3510P-NFBE-G, CNN3560P-NFBE-G, CNN3560-NFBE-G, CNN3530-NFBE-G and CNN3510-NFBE-G |
| Firmware versions | CNN35XX-NFBE-FW-1.1 build 01 |
Module description
CNN35XX-NFBE HSM Family is a high performance purpose built solution for key management and crypto acceleration compliance to FIPS 140-2. The module supports flexible key store that can be partitioned up to 32 individually managed and isolated partitions. This is a SRIOV capable PCIe adapter and can be used in virtualization environment to extend services like virtual key management, crypto and TLS offloads to VMs in dedicated I/O channels. This product is suitable for PKI vendors, SSL servers/load balancers.
Security level exceptions
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 2033, 2034, 2035, 3205, 3206 |
| CVL | 167, 563 |
| DRBG | 680 |
| DSA | 916 |
| ECDSA | 589 |
| HMAC | 1233, 2019 |
| KAS | 53 |
| KAS | vendor affirmed |
| KBKDF | 65 |
| KTS | |
| RSA | 1634 |
| SHS | 1780, 2652 |
| Triple-DES | 1311 |
Other algorithms
NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength); MD5; RC4; PBE
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2016-09-01 | Initial | UL Verification Services, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2016-09-01