FIPS SE051
FIPS SE051, from NXP Semiconductors, holds FIPS 140-2 certificate #4009 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Certificate
| Certificate number | 4009 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 3 |
| Module type | Hardware |
| Embodiment | Single Chip |
| Vendor | NXP Semiconductors · website |
| Hardware versions | FIPS SE051 Full [SE050 (N7121 B1)] [1, 2] and FIPS SE051 Reduced [SE050 (N7121 B1)] [3] |
| Firmware versions | [Platform ID 4A3352333531303239423431313130304C0954E73E773C6E and ROM ID 2E5AD88409C9BADB and Patch ID 1 and NXP SEMS Lite applet v1.4.0.11 and NXP IoT applet v6.0.0] [1], [Platform ID 4A3352333531303239423431313130304C0954E73E773C6E and ROM ID 2E5AD88409C9BADB and Patch ID 1 and NXP SEMS Lite applet v1.4.0.11] [2] and [Platform ID 4A3352333531303239423431313130301A08FA5067B5F256 and ROM ID 2E5AD88409C9BADB and Patch ID 1 and NXP SEMS Lite applet v1.4.0.11 and NXP IoT applet v6.0.0] [3] |
Module description
Quoted from the NIST CMVP entry for this certificate.
NXP Semiconductors offers the secure element EdgeLock™ SE051 as a turnkey solution for IoT security. It comes with JCOP4, a secure Java Card Operating System based on several independent 3rd party specifications, such as Java Card 3.0.4 specifications or the GlobalPlatform, and an applet optimized for IoT security use cases pre-installed and updatable via SEMS Lite. There is also a version that can be programmed with customer developed applets. The solution is complemented by NXP’s Plug & Trust Middleware, enabling fast time to market & easy design in with host applications.
Security level exceptions
- Physical Security: Level 4
Approved algorithms (13)
| Algorithm | CAVP certificates |
|---|---|
| AES | C880, C1819, C1822 |
| CVL | C838, C1820, C1823, C1825 |
| DRBG | C886 |
| ECDSA | C1820 |
| HMAC | C1818 |
| KAS-SSC | vendor affirmed |
| KBKDF | C1818, C1824 |
| KDA | vendor affirmed |
| KTS | |
| PBKDF | vendor affirmed |
| RSA | C838, C1821, C1825 |
| SHS | C837, C1816 |
| Triple-DES | C880 |
Allowed algorithms
AES (Cert. #C880, key unwrapping; key establishment methodology provides 128 bits of encryption strength); AES (Cert. #C880, key unwrapping; key establishment methodology provides between 128 and 256 bits of encryption strength); EC Diffie-Hellman (shared secret computation)
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2021-08-12 | Initial | UL Verification Services, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2021-08-12