kbrain

NITROXIII CNN35XX-NFBE HSM Family

JISA Softech Private Limited - FIPS 140 #5219

activeLevel 3

The NITROXIII CNN35XX-NFBE HSM Family module is a high-performance purpose-built security solution for crypto acceleration. The module provides a FIPS 140-3 overall Level 3 security solution. The module is deployed inside CryptoBind HSM and CryptoBind DSS to provide crypto and TLS 1.0/1.1/1.2 acceleration in a secure manner to the system host. It is typically deployed in a CryptoBind HSM & CryptoBind DSS network appliance to provide cryptographic operations. The module’s functions are accessed over the PCIe interface via an API defined by the module inside CryptoBind HSM and CryptoBind DSS.

Key facts

Scheme
FIPS 140
Certificate
5219
Standard
FIPS 140-3
Security level
Level 3
Status
active
Vendor
JISA Softech Private Limited
Module type
Hardware
Embodiment
MultiChipEmbed
Lab
Leidos Accredited Testing & Evaluation (AT&E) Lab
First validated
March 31, 2026
Sunset date
May 29, 2029
Versions
HW-1.0 (CNL3510-NFBE-G; CNL3510P-NFBE-G; CNL3530-NFBE-G; CNL3560-NFBE-G; CNL3560P-NFBE-G; CNN3510-NFBE-G; CNN3530-NFBE-G; CNN3560-NFBE-G; CNN3560P-NFBE-G); HW-2.0 (CNL3510-NFBE-2.0-G; CNL3510B-NFBE-2.0-G; CNL3510P-NFBE-2.0-G; CNL3510PB-NFBE-2.0-G; CNL3530-NFBE-2.0-G; CNL3530B-NFBE-2.0-G; CNL3560-NFBE-2.0-G; CNL3560B-NFBE-2.0-G; CNL3560P-NFBE-2.0-G; CNL3560PB-NFBE-2.0-G; CNN3505LP-NFBE-2.0-G; CNN3510-NFBE-2.0-G; CNN3510LP-NFBE-2.0-G; CNN3510LPB-NFBE-2.0-G; CNN3530-NFBE-2.0-G; CNN3560-NFBE-2.0-G; CNN3560P-NFBE-2.0-G); HW-3.0 (CNL3510-NFBE-3.0-G; CNL3510A-NFBE-3.0-G; CNL3510C-NFBE-3.0-G; CNL3510D-NFBE-3.0-G; CNL3510E-NFBE-3.0-G; CNL3510F-NFBE-3.0-G; CNL3510I-NFBE-3.0-G; CNL3510P-NFBE-3.0-G; CNL3530-NFBE-3.0-G; CNL3530A-NFBE-3.0-G; CNL3530B-NFBE-3.0-G; CNL3530C-NFBE-3.0-G; CNL3530D-NFBE-3.0-G; CNL3530E-NFBE-3.0-G; CNL3530F-NFBE-3.0-G; CNL3560-NFBE-3.0-G; CNL3560A-NFBE-3.0-G; CNL3560B-NFBE-3.0-G; CNL3560B-NFBE-3.0-G-FB; CNL3560C-NFBE-3.0-G; CNL3560D-NFBE-3.0-G; CNL3560E-NFBE-3.0-G; CNL3560F-NFBE-3.0-G; CNL3560P-NFBE-3.0-G; CNN3505LP-NFBE-3.0-G; CNN3505LPA-NFBE-3.0-G; CNN3505LPC-NFBE-3.0-G; CNN3505LPD-NFBE-3.0-G; CNN3505LPE-NFBE-3.0-G; CNN3505LPF-NFBE-3.0-G; CNN3510-NFBE-3.0-G; CNN3510A-NFBE-3.0-G; CNN3510C-NFBE-3.0-G; CNN3510D-NFBE-3.0-G; CNN3510E-NFBE-3.0-G; CNN3510F-NFBE-3.0-G; CNN3510LP-NFBE-3.0-G; CNN3510LPA-NFBE-3.0-G; CNN3510LPB-NFBE-3.0-G; CNN3510LPC-NFBE-3.0-G; CNN3510LPD-NFBE-3.0-G; CNN3510LPE-NFBE-3.0-G; CNN3510LPF-NFBE-3.0-G; CNN3530-NFBE-3.0-G; CNN3530A-NFBE-3.0-G; CNN3530C-NFBE-3.0-G; CNN3530D-NFBE-3.0-G; CNN3530E-NFBE-3.0-G; CNN3530F-NFBE-3.0-G; CNN3560-NFBE-3.0-G; CNN3560A-NFBE-3.0-G; CNN3560C-NFBE-3.0-G; CNN3560D-NFBE-3.0-G; CNN3560E-NFBE-3.0-G; CNN3560F-NFBE-3.0-G; CNN3560P-NFBE-3.0-G); CNN35XX-NFBE-FW-2.09-0702, CNN35XX-NFBE-SMW-2.09-0702, CNN35XX-UBOOT-4.03-03
Caveat
When operated in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy. The module generates SSPs whose strengths are modified by available entropy

Algorithms

  • AES-CBCC839
  • AES-CCMC839
  • AES-CMACC839
  • AES-CTRC839
  • AES-ECBC839
  • AES-GCMC839
  • AES-GMACC839
  • AES-KWC1263
  • AES-KWPC1263
  • Counter DRBGC821
  • DSA KeyGen (FIPS186-4)C823
  • DSA PQGGen (FIPS186-4)C823
  • DSA PQGVer (FIPS186-4)C823
  • DSA SigGen (FIPS186-4)C823
  • DSA SigVer (FIPS186-4)C823
  • ECDSA KeyGen (FIPS186-4)C825
  • ECDSA KeyVer (FIPS186-4)C825
  • ECDSA SigGen (FIPS186-4)C829
  • ECDSA SigVer (FIPS186-4)C829
  • Hash DRBGC830
  • HMAC-SHA-1C839
  • HMAC-SHA2-224C839
  • HMAC-SHA2-256C839
  • HMAC-SHA2-384C839
  • HMAC-SHA2-512C839
  • KAS-ECC CDH-ComponentC829
  • KAS-ECC Sp800-56Ar3
  • KAS-ECC-SSC Sp800-56Ar3
  • KAS-IFC-SSC
  • KDA HKDF Sp800-56Cr1
  • KDA OneStep Sp800-56Cr1
  • KDA TwoStep Sp800-56Cr1
  • KDF ANS 9.63C825
  • KDF SP800-108C839
  • KDF TLSC840
  • KTS-IFC
  • PBKDF
  • RSA Decryption PrimitiveC839
  • RSA KeyGen (FIPS186-4)C824
  • RSA SigGen (FIPS186-2)C824
  • RSA SigGen (FIPS186-4)
  • RSA Signature PrimitiveC839
  • RSA SigVer (FIPS186-4)C824
  • SHA-1SHS 1780
  • SHA2-224SHS 1780
  • SHA2-256SHS 1780
  • SHA2-384SHS 1780
  • SHA2-512SHS 1780
  • SHA3-224
  • SHA3-256
  • SHA3-512
  • SHAKE-128
  • SHAKE-256
  • TDES-CBCTDES 1311
  • TDES-ECBTDES 1311
  • TDES-KWC1263

Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.

CVEs that may affect this product

sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.

Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.

Documents and sources

Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026

Check certifications from your AI assistant

The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.

Add the certifications brain