Thales Luna K7 Cryptographic Module

Certificate

Module description

Quoted from the NIST CMVP entry for this certificate.

The Thales Luna K7 Cryptographic Module is a multi-chip embedded hardware cryptographic module in the form of a PCIe card which typically resides within a custom computing or secure communications appliance.

Security level exceptions

• Operational environment: N/A
• Non-invasive security: N/A
• Mitigation of other attacks: N/A

Approved algorithms (59)

Allowed algorithms

AES Cert. #C1707 (Key unwrapping; SSP establishment methodology provides between 128 and 256 bits of encryption strength; Clone partition objects between partitions, Clone SMK between partitions, Import secret or private key using key wrapping.);Triple-DES Cert #C1707 (Key unwrapping; SSP establishment methodology provides 112 bits of encryption strength; Import secret or private key using key wrapping.);KAS-ECC-SSC Cert. #A480 (Key establishment methodology provides between 112 and 256-bits of encryption strength.; Derive key from existing partition secret or private key object.);KAS-ECC-SSC Cert. #A478 (Key establishment methodology provides between 112 and 256-bits of encryption strength.; Derive key from existing partition secret or private key object.)

Tested configurations

• N/A

Validation history

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

• 2026-08-21: first observed by this tracker, status active
• Validation dates on record: 2024-04-02

Source documents

• NIST certificate page
• Security policy (PDF)
• Consolidated certificate (PDF)