nShield F3 SCSI[1], nShield F3 SCSI Ultrasign[2], nShield SCSI Ultrasign 32[3], payShield SCSI[4], and payShield Ultra[5]
nShield F3 SCSI[1], nShield F3 SCSI Ultrasign[2], nShield SCSI Ultrasign 32[3], payShield SCSI[4], and payShield Ultra[5], from nCipher Corporation Ltd., holds FIPS 140-2 certificate #395 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Certificate
| Certificate number | 395 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 3 |
| Module type | Hardware |
| Embodiment | Multi-chip standalone |
| Vendor | nCipher Corporation Ltd. · website |
| Hardware versions | nC4032W-150[1], nC4032w-400[2], nC4132W-400[3], nC4232W-150[4] and nC4232W-400[5], Build Standard DP |
| Firmware versions | 2.12.9-3 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The nCipher nShield range of Hardware Security Modules improves the security of cryptographic keys, security sensitive software applications and increases server throughput of secure transactions in Public Key Infrastructure and other high integrity applications such as: Certificate Authorities, Registration Authorities, Government and Financial Institutions.
Security level exceptions
- Self Tests: Level 4
Approved algorithms (6)
| Algorithm | CAVP certificates |
|---|---|
| AES | 15 |
| DSA/SHA-1 | |
| HMAC-SHA-1 | vendor affirmed |
| RSA | vendor affirmed |
| Triple-DES | 34 |
| Triple-DES MAC | vendor affirmed |
Other algorithms
DES (Cert. #24); DES MAC (Cert #24, vendor affirmed); ARC FOUR; CAST5; CAST 6; HMAC (MD2, MD5, SHA-256, SHA-384, SHA-512 and RIPEMD-160); SHA-256; SHA-384; SHA-512; RIPEMD-160; MD2; MD5; SEED; El-Gamal; Diffie-Hellman (key agreement); Blowfish; Twofish; Serpent; KCDSA; HSA 160
Validation history
| Date | Type | Lab |
|---|---|---|
| 2004-03-18 | Initial | DOMUS |
| 2006-03-09 | Update | |
| 2006-03-15 | Update |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2004-03-18, 2006-03-09, 2006-03-15