nShield 5s Hardware Security Module

Certificate

Module description

The nShield 5s PCIe Hardware Security Module (HSM) is a multi-chip embedded hardware Cryptographic Module as defined in FIPS 140-3, which comes in a PCI express board form factor protected by a tamper resistant enclosure, and performs encryption, digital signing, and key management on behalf of an extensive range of commercial and custom-built applications including public key infrastructures (PKIs), identity management systems, application-level encryption and tokenization, SSL/TLS, and code signing.

Security level exceptions

• Operational environment: N/A
• Non-invasive security: N/A
• Mitigation of other attacks: N/A

Approved algorithms

Allowed algorithms

ECDSA (Cert. #A2513) (when used with non-approved Brainpool elliptic curves P224r1/P224t1, P256r1/P256t1, P320r1/P320t1, P384r1/P384t1 and P512r1/P512t1; Key generation Signature generation and verification);KAS-ECC (Cert. #A2513) (when used with non-approved Brainpool elliptic curves P224r1/P224t1, P256r1/P256t1, P320r1/P320t1, P384r1/P384t1 and P512r1/P512t1; Key establishment)

Tested configurations

• n/a

Validation history

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

• 2026-08-21: first observed by this tracker, status active
• Validation dates on record: 2024-07-31

Source documents

• NIST certificate page
• Security policy (PDF)
• Consolidated certificate (PDF)