ASI-HSM AHX5 KNET Cryptographic Module

Certificate

Module description

The module exists to provide cryptographic services to applications running on behalf of its users which communicate with it via a standard Ethernet interface using IP protocols. In order to provide these services, the module also requires a power supply. The module is usually sold embedded within a stand-alone network appliance. That appliance is typically used in large-scale cloud infrastructures, where ease of remote configuration and operation is required.

Security level exceptions

• Mitigation of Other Attacks: N/A

Approved algorithms

Allowed algorithms

EC Diffie-Hellman (CVL Cert. #C212, Key agreement; key establishment methodology provides 128 bits of security strength); NDRNG; RSA (Key wrapping; key establishment methodology provides 112 bits of security strength)

Tested configurations

• N/A

Validation history

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

• 2026-08-21: first observed by this tracker, status historical
• Validation dates on record: 2020-02-04

Source documents

• NIST certificate page
• Security policy (PDF)
• Consolidated certificate (PDF)