808bits

CN Series Encryptors

FIPS 140-3 certificate #4869 · Senetas Corporation Ltd, distributed by Thales SA (SafeNet) · data as of 2026-08-28
Historical. Replaced by certificate #5432. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim Validation. When operated in approved mode and initialized as per Section 2.3.1 of the Security Policy

Certificate

Certificate number4869
StandardFIPS 140-3
Statushistorical
Overall level3
Module typeHardware
EmbodimentMulti-Chip Stand Alone
VendorSenetas Corporation Ltd, distributed by Thales SA (SafeNet) · website
Hardware versionsSenetas Corp. Ltd. CN4000 Series: A4010B (DC) and A4020B (DC); Senetas Corp. Ltd. CN6000 Series: A6010B (AC), A6011B (DC), A6012B (AC/DC), A6100B (AC), A6101B (DC), A6102B (AC/DC), A6110B (AC), A6111B (DC), A6112B (AC/DC), A6140B (AC), A6141B (DC), A6142B (AC/DC); Senetas Corp. Ltd. CN9000 Series: A9100B (AC), A9101B (DC), A9102B (AC/DC), A9120B (AC), A9121B (DC) and A9122B (AC/DC); Senetas Corp. Ltd. & SafeNet Inc. CN4000 Series: A4010B (DC) and A4020B (DC); Senetas Corp. Ltd. & SafeNet Inc. CN6000 Series: A6010B (AC), A6011B (DC), A6012B (AC/DC), A6100B (AC), A6101B (DC), A6102B (AC/DC), A6110B (AC), A6111B (DC), A6112B (AC/DC), A6140B (AC), A6141B (DC), A6142B (AC/DC); Senetas Corp. Ltd. & SafeNet Inc. CN9000 Series: A9100B (AC), A9101B (DC), A9102B (AC/DC), A9120B (AC), A9121B (DC) and A9122B (AC/DC); Senetas Corp. Ltd. & Thales CN4000 Series: A4010B (DC) and A4020B (DC); Senetas Corp. Ltd. & Thales CN6000 Series: A6010B (AC), A6011B (DC), A6012B (AC/DC), A6100B (AC), A6101B (DC), A6102B (AC/DC), A6110B (AC), A6111B (DC), A6112B (AC/DC), A6140B (AC), A6141B (DC), A6142B (AC/DC); Senetas Corp. Ltd. & Thales CN9000 Series: A9100B (AC), A9101B (DC), A9102B (AC/DC), A9120B (AC), A9121B (DC) and A9122B (AC/DC)
Firmware versions5.5.0 and 5.5.1

Module description

The CN4010, CN4020, CN6010, CN6100, CN6110, CN6140, CN9100 and CN9120 are high-speed hardware encryption platforms that secure data over twisted-pair and optical Ethernet networks. The modules support line rates from 10Mb/s to 100Gb/s. All models except CN4010 are equipped with pluggable transceivers to support a variety of optical network interfaces. Data privacy is provided by FIPS approved AES algorithms in CFB, CTR and GCM modes. Additional transmission security is provided via TRANSEC (Traffic Flow Security) which can be used to remove patterns in network traffic and prevent traffic analysis attacks.

Security level exceptions

  • Operational environment: N/A
  • Non-invasive security: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA3451
AES-CFB128A3435
AES-CFB128A3437
AES-CFB128A3439
AES-CFB128A3445
AES-CFB128A3451
AES-CFB128A3549
AES-CTRA3435
AES-CTRA3436
AES-CTRA3437
AES-CTRA3438
AES-CTRA3439
AES-CTRA3440
AES-CTRA3441
AES-CTRA3442
AES-CTRA3443
AES-CTRA3444
AES-CTRA3445
AES-CTRA3446
AES-CTRA3447
AES-CTRA3448
AES-CTRA3451
AES-CTRA3458
AES-CTRA3459
AES-CTRA3460
AES-CTRA3492
AES-CTRA3549
AES-ECBA3435
AES-ECBA3436
AES-ECBA3437
AES-ECBA3438
AES-ECBA3439
AES-ECBA3440
AES-ECBA3441
AES-ECBA3442
AES-ECBA3443
AES-ECBA3444
AES-ECBA3445
AES-ECBA3446
AES-ECBA3447
AES-ECBA3448
AES-ECBA3451
AES-ECBA3458
AES-ECBA3459
AES-ECBA3460
AES-ECBA3492
AES-ECBA3549
AES-GCMA3435
AES-GCMA3436
AES-GCMA3437
AES-GCMA3438
AES-GCMA3439
AES-GCMA3440
AES-GCMA3441
AES-GCMA3442
AES-GCMA3443
AES-GCMA3444
AES-GCMA3445
AES-GCMA3446
AES-GCMA3447
AES-GCMA3448
AES-GCMA3451
AES-GCMA3458
AES-GCMA3459
AES-GCMA3460
AES-GCMA3549
ECDSA KeyGen (FIPS186-4)A3451
ECDSA KeyVer (FIPS186-4)A3451
ECDSA SigGen (FIPS186-4)A3451
ECDSA SigVer (FIPS186-4)A3451
Hash DRBGA3451
HMAC-SHA-1A3451
HMAC-SHA2-256A3450
HMAC-SHA2-256A3451
HMAC-SHA2-384A3451
HMAC-SHA2-512A3451
KAS-ECC Sp800-56Ar3A3451
KAS-FFC Sp800-56Ar3A3451
KDF SNMPA3451
KDF SP800-108A3451
KDF SSHA3451
KDF TLSA3451
KTS-IFCA3451
RSA KeyGen (FIPS186-4)A3451
RSA SigGen (FIPS186-4)A3451
RSA SigVer (FIPS186-4)A3451
SHA-1A3451
SHA2-256A3450
SHA2-256A3451
SHA2-384A3451
SHA2-512A3451
SHA3-256A3449
TDES-CFB8A3451
TLS v1.2 KDF RFC7627A3451

Validation history

DateTypeLab
2024-11-06InitialLightship Security, Inc.
2025-11-14UpdateLightship Security, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-11-06

Source documents