808bits

ASI-HSM AHX5 KNET Cryptographic Module

FIPS 140-2 certificate #4633 · KRYPTUS S.A. · data as of 2026-10-21

ASI-HSM AHX5 KNET Cryptographic Module, from KRYPTUS S.A., holds FIPS 140-2 certificate #4633 at overall level 3. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy.

Certificate

Certificate number4633
StandardFIPS 140-2
Statushistorical
Overall level3
Module typeHardware
EmbodimentMulti-Chip Embedded
VendorKRYPTUS S.A. · website
Hardware versions1.0.1
Firmware versions1.0.1

Module description

Quoted from the NIST CMVP entry for this certificate.

The module exists to provide cryptographic services to applications running on behalf of its users which communicate with it via a standard Ethernet interface using IP protocols. In order to provide these services, the module also requires a power supply. The module is usually sold embedded within a stand-alone network appliance. That appliance is typically used in large-scale cloud infrastructures, where ease of remote configuration and operation is required.

Security level exceptions

  • Mitigation of Other Attacks: N/A

Approved algorithms (13)

AlgorithmCAVP certificates
AESA3223
CKGvendor affirmed
CVLA3223
DRBG349
DSAA3223
ECDSAA3223
HMACA3223
KAS
KAS-SSCA3223
KTS
RSAA3223
SHSA3223
Triple-DESA3223

Allowed algorithms

NDRNG

Tested configurations

  • N/A

Validation history

DateTypeLab
2023-10-11InitialEWA - Canada

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2023-10-11

Source documents