808bits

Marvell LS2 HSM Family

FIPS 140-3 certificate #5502 · Marvell Semiconductor, Inc. · data as of 2026-08-28
Active. Sunset date 2031-08-24, 1821 days away.
Caveat: When installed, initialized and configured as specified in Section 11.1 of the Security Policy. When operated in approved mode

Certificate

Certificate number5502
StandardFIPS 140-3
Statusactive
Sunset date2031-08-24
Overall level3
Module typeHardware
EmbodimentMultiChipEmbed
VendorMarvell Semiconductor, Inc. · website

Module description

The LS2 HSM module is a multi-chip PCIe adapter with firmware. It consists of multiple firmware components, including an operating system, applications exposing services and interfaces related to secure key management, crypto operations, and policy management of the module.

Security level exceptions

  • Operational environment: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA1948
AES-CBCA7544
AES-CCMA7544
AES-CMACA1948
AES-CMACA7544
AES-CTRA1948
AES-CTRA7544
AES-ECBA1948
AES-ECBA7544
AES-GCMA1948
AES-GCMA7544
AES-GMACA1948
AES-GMACA7544
AES-KWA1948
AES-KWPA1948
Counter DRBGA1948
ECDSA KeyGen (FIPS186-4)A1948
ECDSA KeyGen (FIPS186-5)A7545
ECDSA KeyVer (FIPS186-4)A1948
ECDSA SigGen (FIPS186-4)A1948
ECDSA SigGen (FIPS186-5)A7544
ECDSA SigVer (FIPS186-4)A1948
ECDSA SigVer (FIPS186-5)A7544
Hash DRBGA7544
HMAC-SHA-1A1948
HMAC-SHA-1A7544
HMAC-SHA2-224A1948
HMAC-SHA2-224A7544
HMAC-SHA2-256A1948
HMAC-SHA2-256A7544
HMAC-SHA2-384A1948
HMAC-SHA2-384A7544
HMAC-SHA2-512A1948
HMAC-SHA2-512A7544
HMAC-SHA3-224A1948
HMAC-SHA3-224A7544
HMAC-SHA3-256A1948
HMAC-SHA3-256A7544
HMAC-SHA3-384A1948
HMAC-SHA3-384A7544
HMAC-SHA3-512A1948
HMAC-SHA3-512A7544
KAS-ECC Sp800-56Ar3A1948
KAS-ECC-SSC Sp800-56Ar3A1948
KAS-ECC-SSC Sp800-56Ar3A7544
KAS-IFC-SSCA1948
KDA HKDF Sp800-56Cr1A1948
KDA OneStep Sp800-56Cr1A1948
KDA TwoStep Sp800-56Cr1A1948
KDF ANS 9.63A1948
KDF SP800-108A1948
KDF SP800-108A7544
KTS-IFCA1948
KTS-IFCA7545
RSA Decryption PrimitiveA1948
RSA Decryption Primitive Sp800-56Br2A7544
RSA KeyGen (FIPS186-5)A1948
RSA KeyGen (FIPS186-5)A7545
RSA SigGen (FIPS186-5)A1948
RSA Signature PrimitiveA1948
RSA Signature PrimitiveA7544
RSA SigVer (FIPS186-4)A1946
RSA SigVer (FIPS186-5)A1948
RSA SigVer (FIPS186-5)A7545
SHA-1A1948
SHA-1A7544
SHA2-224A1948
SHA2-224A7544
SHA2-256A1946
SHA2-256A1948
SHA2-256A7544
SHA2-384A1948
SHA2-384A7544
SHA2-512A1948
SHA2-512A7544
SHA3-224A1948
SHA3-224A7544
SHA3-256A1948
SHA3-256A7544
SHA3-384A1948
SHA3-384A7544
SHA3-512A1948
SHA3-512A7544
TDES-CBCA1948
TDES-CBCA7544
TDES-ECBA7544
TDES-KWA1948
TLS v1.2 KDF RFC7627A1948
TLS v1.2 KDF RFC7627A7544

Validation history

DateTypeLab
2026-08-25InitialTeron Labs

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-28: first observed by this tracker, status active
  • Validation dates on record: 2026-08-25

Source documents