NITROX XL 1600-NFBE HSM Family: FIPS 140-2 cert #3248

NITROX XL 1600-NFBE HSM Family, from Cavium Inc., holds FIPS 140-2 certificate #3248 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	3248
Standard	FIPS 140-2
Status	historical
Overall level	3
Module type	Hardware
Embodiment	Multi-Chip Embedded
Vendor	Cavium Inc. · website
Hardware versions	P/Ns CN1610-NFBE1-3.0-G, CN1620-NFBE1-3.0-G, CN1620-NFBE3-3.0-G, CN1610-NFBE1-2.0-G, CN1620-NFBE1-2.0-G, CN1620-NFBE3-2.0-G and FN1620-NFBE2-G
Firmware versions	CN16XX-NFBE-FW-2.3-180205

Module description

Quoted from the NIST CMVP entry for this certificate.

The NITROX XL 1600-NFBE HSM adapter family delivers the world's fastest FIPS 140-2 Level 3 Hardware Security Module (HSM) with PCIe Gen 2.0. The HSM family of offers up to 9000 RSA 2k-bit operations per second and 5 Gbps of bulk crypto.

Security level exceptions

Mitigation of Other Attacks: N/A

Approved algorithms (11)

Algorithm	CAVP certificates
AES	1265, 2899, 4026
CKG	vendor affirmed
CVL	166, 847
DRBG	32
ECDSA	1276
HMAC	443, 736, 1677
KAS	153
KTS
RSA	2701
SHS	801, 1165, 1379
Triple-DES	898, 2204

Allowed algorithms

MD5; NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 128 bits of encryption strength)

Tested configurations

Validation history

Date	Type	Lab
2018-07-27	Initial	UL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2018-07-27

NITROX XL 1600-NFBE HSM Family