Nitrox XL NFB FIPS Cryptographic Modules
Certificate
| Certificate number | 870 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-chip embedded |
| Vendor | Cavium Networks · website |
| Hardware versions | CN1120-VBD-03-0200, CN1010-VBD-03-0200, and CN1005-VBD-03-0200 |
| Firmware versions | 4.6.1 |
Module description
The Cavium Nitrox NFB Cryptographic Modules are a cryptographic component of the Nitrox PCI acceleration board that provides cryptographic key protection and acceleration for both asymmetric and symmetric encryption operations. It is contained in its own secure enclosure that provides physical resistance to tampering and zeroization of plaintext cryptographic material in the event the enclosure is opened.
Security level exceptions
- Physical Security: Level 3
- EMI/EMC: Level 3
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 551, 189 |
| DSA | 224 |
| ECDSA | 58 |
| HMAC | 292 |
| RNG | 319 |
| RSA | 247 |
| SHS | 616 |
| Triple-DES | 547, 286 |
| Triple-DES MAC | vendor affirmed |
Other algorithms
AES-MAC (Certs. #551 and #189; non-compliant); DES; RC2; RC4; RC5; CAST; CAST3; CAST5; SEED; MD2; MD5; HAS-160; DES-MAC; RC2-MAC; RC5-MAC; CAST-MAC; CAST3-MAC; CAST5-MAC; SSL3-MD5-MAC; SSL3-SHA1-MAC; HMAC-MD5; KCDSA; PBE-MD2-DES; PBE-MD5-DES; PBE-MD5-CAST; PBE-MD5-CAST3; PBE-SHA-1-CAST5; GENERIC-SECRET; SSL PRE-MASTER; SEED; RC2-MAC; RC5-MAC; Diffie-Hellman (key agreement; key establishment methodology provides 80-bits of encryption strength; non-compliant); RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength); EC Diffie Hellman (key agreement; key establishment methodology provides 80-bits of encryption strength; non-compliant)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2007-11-27 | Initial | SAIC-VA |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2007-11-27