808bits

X5 Postal Security Device (PSD)

FIPS 140-3 certificate #4933 · Pitney Bowes, Inc. · data as of 2026-08-28
Active. Sunset date 2029-12-23, 1212 days away.
Caveat: Interim Validation; When operated in approved mode; No assurance of the minimum strength of generated SSPs (e.g., keys).

Certificate

Certificate number4933
StandardFIPS 140-3
Statusactive
Sunset date2029-12-23
Overall level3
Module typeHardware
EmbodimentSingle Chip
VendorPitney Bowes, Inc. · website
Hardware versionsMaxim Integrated MAX32590 DeepCover Secure Microcontroller - Revision B4
Firmware versionsPSD Application: 22.01.000D & 22.01.000F Device Abstraction Layer (DAL): 02.01.000F & 02.01.00013

Module description

The X5 Postal Security Device (PSD) is a single-chip cryptographic module designed by Pitney Bowes, Inc. (PB) to conform with FIPS 140-3 Security Level 3 requirements. The device includes the Maxim Integrated MAX32590 DeepCover Secure Microcontroller hardware component. The PSD Application and DAL are compiled into a single firmware. The X5 Postal Security Device (PSD) provides cryptographic services to a host device (i.e., Digital Postage Meter), to support postage evidence in the form of an indicium. A PSD provides protection that includes ensuring the secrecy of sensitive security parameters (SSPs) such as cryptographic keys and providing data integrity protection for funds relevant data items (FRDIs) such as accounting data. SSPs and FRDIs reside inside the strong physical protections of the X5 Postal Security Device (PSD).

Security level exceptions

  • Operational environment: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA2435
AES-ECBA2435
AES-KWA2435
ECDSA KeyGen (FIPS186-4)A2437
ECDSA SigGen (FIPS186-4)A2437
ECDSA SigVer (FIPS186-4)A2437
Hash DRBGA2436
HMAC-SHA2-256A2438
KAS-ECC-SSC Sp800-56Ar3A2439
KDA OneStep Sp800-56Cr1A2439
RSA SigVer (FIPS186-4)A2440
SHA2-224A2441
SHA2-256A2441

Tested configurations

  • N/A

Validation history

DateTypeLab
2024-12-24InitialPenumbra Security, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2024-12-24

Source documents