Aegis Secure Key 3Z and Aegis Secure Key 3NX Cryptographic Module
Aegis Secure Key 3Z and Aegis Secure Key 3NX Cryptographic Module, from Apricorn, holds FIPS 140-2 certificate #4420 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its algorithm certificates, its validation history, and the list moves this tracker has observed, which NIST does not date.
Caveat: The module generates cryptographic keys whose strengths are modified by available entropy.
Certificate
| Certificate number | 4420 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 3 |
| Module type | Hardware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Apricorn · website |
| Hardware versions | P/Ns ASK3Z-16GB [2.0], ASK3Z-32GB [2.0], ASK3Z-64GB [2.0], ASK3Z-128GB [2.0], ASK3-NX-2GB [2.0], ASK3-NX-4GB [2.0], ASK3-NX-8GB [2.0], ASK3-NX-16GB [2.0], ASK3-NX-32GB [2.0], ASK3-NX-64GB [2.0], ASK3-NX-128GB [2.0], ASK3-NX-256GB [2.0], ASK3-NXC-4GB [2.0], ASK3-NXC-8GB [2.0], ASK3-NXC-16GB [2.0], ASK3-NXC-32GB [2.0], ASK3-NXC-64GB [2.0], ASK3-NXC-128GB [2.0] ASK3-NXC-256GB [2.0]; Hardware Version: Rev A; P/Ns ASK3-NXC-4GB [2.1], ASK3-NXC-8GB [2.1], ASK3-NXC-16GB [2.1], ASK3-NXC-32GB [2.1], ASK3-NXC-64GB [2.1], ASK3-NXC-128GB [2.1], ASK3-NXC-256GB [2.1], ASK3-NXC-512GB [2.1]; Hardware Version: Rev B; P/Ns ASK3Z-16GB [2.1], ASK3Z-32GB [2.1], ASK3Z-64GB [2.1], ASK3Z-128GB [2.1], ASK3-NX-2GB [2.1], ASK3-NX-4GB [2.1], ASK3-NX-8GB [2.1], ASK3-NX-16GB [2.1], ASK3-NX-32GB [2.1], ASK3-NX-64GB [2.1], ASK3-NX-128GB [2.1], ASK3-NX-256GB [2.1], ASK3-NX-512GB [2.1]; Hardware Version: Rev C |
| Firmware versions | 2.0 and 2.1 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Apricorn Aegis Secure Key 3z and Apricorn Aegis Secure Key 3NX are hardware encrypted USB 3.1 memory keys.The software free design allows interface to any host that supports USB and mass storage.Authentication is performed via the embedded keypad and all critical security parameters (PINs, encryption keys, etc) never leave the device boundary for improved security. The device supports 1 administrator and 1 user and offers a variety of features including programmable brute force, recovery PINs, 7-16 digit PINs, auto lock, read only modes, and is compatible with our Aegis Configurator.
Security level exceptions
- Mitigation of Other Attacks: N/A
Approved algorithms (9)
| Algorithm | CAVP certificates |
|---|---|
| AES | A1909, C967 |
| CKG | vendor affirmed |
| DRBG | C1032 |
| ECDSA | C1033 |
| ENT | |
| KAS | |
| KAS-SSC | A1913 |
| KDA | A1913 |
| SHS | C1029 |
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2023-01-20 | Initial | AEGISOLVE, Inc. |
| 2023-02-14 | Update | AEGISOLVE, Inc. |
| 2024-11-27 | Update | AEGISOLVE, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical at the time of the earliest snapshot
- 2026-09-22: observed moving from active to historical
- Validation dates on record: 2023-01-20, 2023-02-14, 2024-11-27