808bits

nShield F2 PCI[1] and nShield F2 PCI[2] Ultrasign

FIPS 140-2 certificate #398 · nCipher Corporation Ltd. · data as of 2026-10-21

nShield F2 PCI[1] and nShield F2 PCI[2] Ultrasign, from nCipher Corporation Ltd., holds FIPS 140-2 certificate #398 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number398
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-chip embedded
VendornCipher Corporation Ltd. · website
Hardware versionsnC4022P-150[1] and nC4022P-300[2], Build Standard ER
Firmware versionsVersion: 2.12.9-2

Module description

Quoted from the NIST CMVP entry for this certificate.

The nCipher nShield range of Hardware Security Modules improves the security of cryptographic keys, security sensitive software applications and increases server throughput of secure transactions in Public Key Infrastructure and other high integrity applications such as: Certificate Authorities, Registration Authorities, Government and Financial Institutions.

Security level exceptions

  • Roles, Services, and Authentication: Level 3
  • Design Assurance: Level 3
  • Cryptographic Module Ports and Interfaces: Level 3
  • Cryptographic Key Management: Level 3
  • Self-Tests: Level 4

Approved algorithms (6)

AlgorithmCAVP certificates
AES15
DSA/SHA-1
HMAC-SHA-1vendor affirmed
RSAvendor affirmed
Triple-DES34
Triple-DES MACvendor affirmed

Other algorithms

DES (Cert. #24); DES MAC (Cert. #24, vendor affirmed); ARC FOUR; CAST5; CAST 6; HMAC (MD2, MD5, SHA-256, SHA-384, SHA-512 and RIPEMD-160); SHA-256; SHA-384; SHA-512; RIPEMD-160; MD2; MD5; SEED; El-Gamal; Diffie-Hellman (key agreement); Blowfish; Twofish; Serpent; KCDSA; HSA 160

Validation history

DateTypeLab
2004-03-18InitialDOMUS
2006-03-09Update
2006-03-15Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2004-03-18, 2006-03-09, 2006-03-15

Source documents