NITROXIII CNN35XX-NFBE HSM Family
Marvell Semiconductor, Inc. - FIPS 140 #2495
CNN35XX-NFBE HSM Family is a high performance purpose built solution for key management and crypto acceleration compliance to FIPS 140-2. The module supports flexible key store that can be partitioned up to 32 individually managed and isolated partitions. This is a SRIOV capable PCIe adapter and can be used in virtualization environment to extend services like virtual key management, crypto and TLS offloads to VMs in dedicated I/O channels. This product is suitable for PKI vendors, SSL servers/load balancers.
Key facts
- Scheme
- FIPS 140
- Certificate
- 2495
- Standard
- FIPS 140-2
- Security level
- Level 3
- Status
- historical
- Vendor
- Marvell Semiconductor, Inc.
- Module type
- Hardware
- Embodiment
- Multi-Chip Embedded
- Lab
- UL Verification Services, Inc.
- First validated
- December 15, 2015
- Versions
- P/Ns CNL3560P-NFBE-G [1 ,2, 3, 4, 5, 6, 7, 8], CNL3560P-NFBE-2.0-G [6, 7, 8], CNL3560P-NFBE-3.0-G [6, 7, 8], CNL3560B-NFBE-2.0-G [6, 7, 8], CNL3560B-NFBE-3.0-G [6, 7, 8], CNL3560-NFBE-G [1 ,2, 3, 4, 5, 6, 7, 8], CNL3560-NFBE-2.0-G [6, 7, 8], CNL3560-NFBE-3.0-G [6, 7, 8], CNL3560A-NFBE-3.0-G [6, 7, 8], CNL3560C-NFBE-3.0-G [6, 7, 8], CNL3560D-NFBE-3.0-G [6, 7, 8], CNL3560E-NFBE-3.0-G [6, 7, 8], CNL3560F-NFBE-3.0-G [6, 7, 8], CNL3530-NFBE-G [1 ,2, 3, 4, 5, 6, 7, 8], CNL3530-NFBE-2.0-G [6, 7, 8], CNL3530-NFBE-3.0-G [6, 7, 8], CNL3530B-NFBE-2.0-G [6, 7, 8], CNL3530B-NFBE-3.0-G [6, 7, 8], CNL3530A-NFBE-3.0-G [6, 7, 8], CNL3530C-NFBE-3.0-G [6, 7, 8], CNL3530D-NFBE-3.0-G [6, 7, 8], CNL3530E-NFBE-3.0-G [6, 7, 8], CNL3530F-NFBE-3.0-G [6, 7, 8], CNL3510-NFBE-G [1, 2, 3, 4, 5, 6, 7, 8], CNL3510-NFBE-2.0-G [6, 7, 8], CNL3510-NFBE-3.0-G [6, 7, 8], CNL3510P-NFBE-G [1 ,2, 3, 4, 5, 6, 7, 8], CNL3510P-NFBE-2.0-G [6, 7, 8], CNL3510P-NFBE-3.0-G [6, 7, 8], CNL3510A-NFBE-3.0-G [6, 7, 8], CNL3510C-NFBE-3.0-G [6, 7, 8], CNL3510D-NFBE-3.0-G [6, 7, 8], CNL3510E-NFBE-3.0-G [6, 7, 8], CNL3510F-NFBE-3.0-G [6, 7, 8], CNN3560P-NFBE-G [1 ,2, 3, 4, 5, 6, 7, 8], CNN3560P-NFBE-2.0-G [6, 7, 8], CNN3560P-NFBE-3.0-G [6, 7, 8], CNN3560-NFBE-G [1 ,2, 3, 4, 5, 6, 7, 8], CNN3560-NFBE-2.0-G [6, 7, 8], CNN3560-NFBE-3.0-G [6, 7, 8], CNN3560A-NFBE-3.0-G [6, 7, 8], CNN3560C-NFBE-3.0-G [6, 7, 8], CNN3560D-NFBE-3.0-G [6, 7, 8], CNN3560E-NFBE-3.0-G [6, 7, 8], CNN3560F-NFBE-3.0-G [6, 7, 8], CNN3530-NFBE-G [1 ,2, 3, 4, 5, 6, 7, 8], CNN3530-NFBE-2.0-G [6, 7, 8], CNN3530-NFBE-3.0-G [6, 7, 8], CNN3530A-NFBE-3.0-G [6, 7, 8], CNN3530C-NFBE-3.0-G [6, 7, 8], CNN3530D-NFBE-3.0-G [6, 7, 8], CNN3530E-NFBE-3.0-G [6, 7, 8], CNN3530F-NFBE-3.0-G [6, 7, 8], CNN3510-NFBE-G [1 ,2, 3, 4, 5, 6, 7, 8], CNN3510-NFBE-2.0-G [6, 7, 8], CNN3510-NFBE-3.0-G [6, 7, 8], CNN3510A-NFBE-3.0-G [6, 7, 8], CNN3510C-NFBE-3.0-G [6, 7, 8], CNN3510D-NFBE-3.0-G [6, 7, 8], CNN3510E-NFBE-3.0-G [6, 7, 8], CNN3510F-NFBE-3.0-G [6, 7, 8], CNN3510LP-NFBE-2.0-G [6, 7, 8], CNN3510LP-NFBE-3.0-G [6, 7, 8], CNN3510LPB-NFBE-2.0-G [6, 7, 8], CNN3510LPB-NFBE-3.0-G [6, 7, 8], CNN3510LPA-NFBE-3.0-G [6, 7, 8], CNN3510LPC-NFBE-3.0-G [6, 7, 8], CNN3510LPD-NFBE-3.0-G [6, 7, 8], CNN3510LPE-NFBE-3.0-G [6, 7, 8], CNN3510LPF-NFBE-3.0-G [6, 7, 8], CNN3505LP-NFBE-2.0-G [6, 7, 8], CNN3505LP-NFBE-3.0-G [6, 7, 8], CNN3505LPA-NFBE-3.0-G [6, 7, 8],CNN3505LPC-NFBE-3.0-G [6, 7, 8], CNN3505LPD-NFBE-3.0-G [6, 7, 8], CNN3505LPE-NFBE-3.0-G [6, 7, 8] and CNN3505LPF-NFBE-3.0-G [6, 7, 8]; CNN35XX-NFBE-FW-1.0 build 35 [1], CNN35XX-NFBE-FW-1.0 build 38 [2], CNN35XX-NFBE-FW-1.0 build 39 [3], CNN35XX-NFBE-FW-1.0 build 44 [4], CNN35XX-NFBE-FW-1.0 build 48 [5], CNN35XX-NFBE-FW-1.0 build 51 [6], CNN35XX-NFBE-FW-1.0 build 52 [7] or CNN35XX-NFBE-FW-1.0 build 58 [8]
- Caveat
- When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
Algorithms
- AES
- CVL
- DRBG
- DSA
- ECDSA
- HMAC
- KBKDF
- KTS
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Certificates it builds on
- 53
Certificate ids found in this certificate's documents (automated extraction).
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain