FIPS 140-2 certificate 3108: NITROXIII CNN35XX-NFBE HSM Family

Certificate

Certificate number	3108
Standard	FIPS 140-2
Status	historical
Overall level	3
Module type	Hardware
Embodiment	Multi-Chip Embedded
Vendor	Marvell Semiconductor, Inc. · website
Hardware versions	P/Ns CNL3560P-NFBE-G, CNL3560P-NFBE-2.0-G, CNL3560P-NFBE-3.0-G, CNL3560B-NFBE-2.0-G, CNL3560B-NFBE-3.0-G, CNL3560-NFBE-G, CNL3560-NFBE-2.0-G, CNL3560-NFBE-3.0-G, CNL3560A-NFBE-3.0-G, CNL3560C-NFBE-3.0-G, CNL3560D-NFBE-3.0-G, CNL3560E-NFBE-3.0-G, CNL3560F-NFBE-3.0-G, CNL3530-NFBE-G, CNL3530-NFBE-2.0-G, CNL3530-NFBE-3.0-G, CNL3530B-NFBE-2.0-G, CNL3530B-NFBE-3.0-G, CNL3530A-NFBE-3.0-G, CNL3530C-NFBE-3.0-G, CNL3530D-NFBE-3.0-G, CNL3530E-NFBE-3.0-G, CNL3530F-NFBE-3.0-G, CNL3510-NFBE-G, CNL3510-NFBE-2.0-G, CNL3510-NFBE-3.0-G, CNL3510P-NFBE-G, CNL3510P-NFBE-2.0-G, CNL3510P-NFBE-3.0-G, CNL3510A-NFBE-3.0-G, CNL3510C-NFBE-3.0-G, CNL3510D-NFBE-3.0-G, CNL3510E-NFBE-3.0-G, CNL3510F-NFBE-3.0-G, CNN3560P-NFBE-G, CNN3560P-NFBE-2.0-G, CNN3560P-NFBE-3.0-G, CNN3560-NFBE-G, CNN3560-NFBE-2.0-G, CNN3560-NFBE-3.0-G, CNN3560A-NFBE-3.0-G, CNN3560C-NFBE-3.0-G, CNN3560D-NFBE-3.0-G, CNN3560E-NFBE-3.0-G, CNN3560F-NFBE-3.0-G, CNN3530-NFBE-G, CNN3530-NFBE-2.0-G, CNN3530-NFBE-3.0-G, CNN3530A-NFBE-3.0-G, CNN3530C-NFBE-3.0-G, CNN3530D-NFBE-3.0-G, CNN3530E-NFBE-3.0-G, CNN3530F-NFBE-3.0-G, CNN3510-NFBE-G, CNN3510-NFBE-2.0-G, CNN3510-NFBE-3.0-G, CNN3510A-NFBE-3.0-G, CNN3510C-NFBE-3.0-G, CNN3510D-NFBE-3.0-G, CNN3510E-NFBE-3.0-G, CNN3510F-NFBE-3.0-G, CNN3510LP-NFBE-2.0-G, CNN3510LP-NFBE-3.0-G, CNN3510LPB-NFBE-2.0-G, CNN3510LPB-NFBE-3.0-G, CNN3510LPA-NFBE-3.0-G, CNN3510LPC-NFBE-3.0-G, CNN3510LPD-NFBE-3.0-G, CNN3510LPE-NFBE-3.0-G, CNN3510LPF-NFBE-3.0-G, CNN3505LP-NFBE-2.0-G, CNN3505LP-NFBE-3.0-G, CNN3505LPA-NFBE-3.0-G, CNN3505LPC-NFBE-3.0-G, CNN3505LPD-NFBE-3.0-G, CNN3505LPE-NFBE-3.0-G and CNN3505LPF-NFBE-3.0-G
Firmware versions	CNN35XX-NFBE-FW-3.0 build 15, CNN35XX-NFBE-FW-3.01 build 06, CNN35XX-NFBE-FW-3.2 build 06, CNN35XX-NFBE-FW-3.2 build 12, CNN35XX-NFBE-FW-3.2 build 18 and CNN35XX-NFBE-FW-3.2 build 19

Module description

CNN35XX-NFBE HSM Family is a high performance purpose built solution for key management and crypto acceleration compliance to FIPS 140-2. The module supports flexible key store that can be partitioned up to 32 individually managed and isolated partitions. This is a SRIOV capable PCIe adapter and can be used in a virtualization environment to extend services like virtual key management, crypto and TLS offloads to VMs in dedicated I/O channels. This product is suitable for PKI vendors, SSL servers/load balancers.

Security level exceptions

Mitigation of Other Attacks: N/A

Approved algorithms

Algorithm	CAVP certificate
AES	2033, 2034, 2035, 3205, 3206, 4104
CKG	vendor affirmed
CVL	167, 563
DRBG	680
DSA	916
ECDSA	589
HMAC	1233, 2019
KAS	53
KAS	vendor affirmed
KBKDF	65
KTS
KTS
RSA	1634, 2218
SHS	1780, 2652
Triple-DES	1311, 2242

Allowed algorithms

MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)

Tested configurations

Validation history

Date	Type	Lab
2018-01-18	Initial	UL Verification Services, Inc.
2018-03-07	Update	UL Verification Services, Inc.
2018-04-10	Update	UL Verification Services, Inc.
2018-10-12	Update	UL Verification Services, Inc.
2018-10-31	Update	UL Verification Services, Inc.
2019-02-20	Update	UL Verification Services, Inc.
2019-05-08	Update	UL Verification Services, Inc.
2020-08-19	Update	UL Verification Services, Inc.
2020-09-30	Update	UL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2018-01-18, 2018-03-07, 2018-04-10, 2018-10-12, 2018-10-31, 2019-02-20, 2019-05-08, 2020-08-19, 2020-09-30

NITROXIII CNN35XX-NFBE HSM Family