VaultIP
VaultIP, from Rambus Inc., holds FIPS 140-2 certificate #3945 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 3945 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Single Chip |
| Vendor | Rambus Inc. · website |
| Hardware versions | 3.0.3 |
| Firmware versions | 3.0.6 |
Module description
Quoted from the NIST CMVP entry for this certificate.
VaultIP is a Silicon IP Security Module with a secure asset store protecting all valuable assets on your device. It is a stand-alone Root of Trust that offers key management and crypto functions needed for platform and application security. VaultIP offers all security services to manage your device securely through its lifecycle. These include Secure Debug, Secure Provisioning, HUK and Identity protection and secure authentication services. Secure Boot and Communication protocols such as TLS can leverage VaultIP to secure the boot process and protect private communication keys.
Security level exceptions
- Physical Security: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms (12)
| Algorithm | CAVP certificates |
|---|---|
| AES | C1224, C1242 |
| CKG | vendor affirmed |
| CVL | C1224 |
| DRBG | C1224 |
| ECDSA | C1224 |
| ENT | |
| HMAC | C1224 |
| KBKDF | C1224 |
| KDA | vendor affirmed |
| KTS | |
| RSA | C1224 |
| SHS | C1224 |
Allowed algorithms
EC Diffie-Hellman (CVL Cert. #C1224 with SP 800-56C, vendor affirmed, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength)
Tested configurations
- Xilinx Zynq XC7Z045 FPGA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2021-06-07 | Initial | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2021-06-07