kbrain

nShield 5s Hardware Security Module

Entrust - FIPS 140 #4765

historicalLevel 3

The nShield 5s Hardware Security Module is a multi-chip embedded hardware Cryptographic Module as defined in FIPS 140-3, which comes in a PCI express board form factor protected by a tamper resistant enclosure, and performs encryption, digital signing, and key management on behalf of an extensive range of commercial and custom-built applications including public key infrastructures (PKIs), identity management systems, application-level encryption and tokenization, SSL/TLS, and code signing.

Key facts

Scheme
FIPS 140
Certificate
4765
Standard
FIPS 140-3
Security level
Level 3
Status
historical
Vendor
Entrust
Module type
Hardware
Embodiment
Multi-Chip Embedded
Lab
Lightship Security, Inc.
First validated
August 19, 2024
Versions
PCA10005-01 revision 03 and 04; primary-version 13.4.5; recovery-version 13.2.4; uboot-version 1.1.0 and uboot-version 1.4.1
Caveat
Interim validation. When installed, initialized and configured as specified in Section 11.3 of the Security Policy

Algorithms

  • AES-CBC
  • AES-CMAC
  • AES-CTR
  • AES-ECB
  • AES-GCM
  • AES-KW
  • AES-KWP
  • DSA KeyGen (FIPS186-4)
  • DSA PQGGen (FIPS186-4)
  • DSA PQGVer (FIPS186-4)
  • DSA SigGen (FIPS186-4)
  • DSA SigVer (FIPS186-4)
  • ECDSA KeyGen (FIPS186-4)
  • ECDSA KeyVer (FIPS186-4)
  • ECDSA SigGen (FIPS186-4)
  • ECDSA SigVer (FIPS186-4)
  • Hash DRBG
  • HMAC-SHA-1
  • HMAC-SHA2-224
  • HMAC-SHA2-256
  • HMAC-SHA2-384
  • HMAC-SHA2-512
  • HMAC-SHA3-224
  • HMAC-SHA3-256
  • HMAC-SHA3-384
  • HMAC-SHA3-512
  • KAS-ECC Sp800-56Ar3
  • KAS-ECC-SSC Sp800-56Ar3
  • KAS-FFC Sp800-56Ar3
  • KDF SP800-108
  • KDF SSHA3706
  • KMAC-128
  • KMAC-256
  • KTS-IFC
  • RSA KeyGen (FIPS186-4)
  • RSA SigGen (FIPS186-4)
  • RSA SigVer (FIPS186-4)
  • Safe Primes Key Generation
  • Safe Primes Key Verification
  • SHA-1
  • SHA2-224
  • SHA2-256
  • SHA2-384
  • SHA2-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512

Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.

CVEs that may affect this product

sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.

Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.

Documents and sources

Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026

Check certifications from your AI assistant

The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.

Add the certifications brain