Nitrox XL NFB FIPS Cryptographic Modules
Certificate
| Certificate number | 871 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 3 |
| Module type | Hardware |
| Embodiment | Multi-chip embedded |
| Vendor | Cavium Networks · website |
| Hardware versions | CN1120-VBD-03-0200, CN1010-VBD-03-0200 and CN1005-VBD-03-0200 |
| Firmware versions | 4.6.1 |
Module description
The Nitrox XL NFB FIPS Cryptographic Module is a cryptographic module integrated into a PCI card that provides cryptographic key protection and acceleration for both asymmetric and symmetric encryption operations. It is contained in its own secure enclosure that provides physical resistance to tampering and zeroization of plaintext cryptographic material in the event the enclosure is opened.
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 551, 189 |
| DSA | 224 |
| ECDSA | 58 |
| HMAC | 292 |
| RNG | 319 |
| RSA | 247 |
| SHS | 616 |
| Triple-DES | 547, 286 |
| Triple-DES MAC | vendor affirmed |
Other algorithms
AES-MAC (Certs. #551 and #189; non-compliant); DES; RC2; RC4; RC5; CAST; CAST3; CAST5; SEED; MD2; MD5; HAS-160; DES-MAC; RC2-MAC; RC5-MAC; CAST-MAC; CAST3-MAC; CAST5-MAC; SSL3-MD5-MAC; SSL3-SHA1-MAC; HMAC-MD5; KCDSA; PBE-MD2-DES; PBE-MD5-DES; PBE-MD5-CAST; PBE-MD5-CAST3; PBE-SHA-1-CAST5; GENERIC-SECRET; SSL PRE-MASTER; SEED; RC2-MAC; RC5-MAC; Diffie-Hellman (key agreement; key establishment methodology provides 80-bits of encryption strength; non-compliant); RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength); EC Diffie Hellman (key agreement; key establishment methodology provides 80-bits of encryption strength; non-compliant)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2007-11-27 | Initial | SAIC-VA |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2007-11-27