ASI-HSM AHX5 KNET Cryptographic Module
ASI-HSM AHX5 KNET Cryptographic Module, from KRYPTUS S.A., holds FIPS 140-2 certificate #3614 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy.
Certificate
| Certificate number | 3614 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 3 |
| Module type | Hardware |
| Embodiment | Multi-Chip Embedded |
| Vendor | KRYPTUS S.A. · website |
| Hardware versions | 1.0.1 |
| Firmware versions | 1.0.1 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The module exists to provide cryptographic services to applications running on behalf of its users which communicate with it via a standard Ethernet interface using IP protocols. In order to provide these services, the module also requires a power supply. The module is usually sold embedded within a stand-alone network appliance. That appliance is typically used in large-scale cloud infrastructures, where ease of remote configuration and operation is required.
Security level exceptions
- Mitigation of Other Attacks: N/A
Approved algorithms (11)
| Algorithm | CAVP certificates |
|---|---|
| AES | C212 |
| CKG | vendor affirmed |
| CVL | C212 |
| DRBG | 349 |
| DSA | C212 |
| ECDSA | C212 |
| HMAC | C212 |
| KTS | |
| RSA | C212 |
| SHS | C212 |
| Triple-DES | C212 |
Allowed algorithms
EC Diffie-Hellman (CVL Cert. #C212, Key agreement; key establishment methodology provides 128 bits of security strength); NDRNG; RSA (Key wrapping; key establishment methodology provides 112 bits of security strength)
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2020-02-04 | Initial | EWA - Canada |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2020-02-04