Module Name
IBM 4769-001 Enterprise PKCS#11 HSM Cryptographic Coprocessor Security Module
Caveat
When operated in FIPS mode
Security Level Exceptions
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Embedded
Description
The IBM 4769-001 Enterprise PKCS#11 Hardware Security Module is in the form or a PCIe card that executes IBM Enterprise PKCS#11 firmware within a secured tamper responding hardware boundary.
Approved Algorithms
| AES |
Cert. #A2470 |
| CKG |
vendor affirmed |
| CVL |
Cert. #A2470 |
| DRBG |
Certs. #A2413, #A2470, #A2472, #C1249 and #C1250 |
| DSA |
Cert. #A2472 |
| ECDSA |
Certs. #A2413, #A2470, #C1249 and #C1250 |
| ENT |
P |
| HMAC |
Certs. #A2470, #C1187 and #C1188 |
| KAS-SSC |
Certs. #A2470 and #A2472 |
| KBKDF |
Cert. #A2470 |
| KDA |
Cert. #A2470 |
| KTS |
AES Cert. #A2470 |
| KTS |
AES Cert. #A2470 and HMAC Cert. #A2470; key establishment methodology provides between 128 and 256 bits of encryption strength |
| RSA |
Cert. #A2470 |
| SHA-3 |
Cert. #A2470 |
| SHS |
Certs. #A2470, #A2472, #C1187, #C1188, #C1247 and #C1248 |
| Triple-DES |
Cert. #A2470 |
Hardware Versions
PN 02WN654-N37880 POST0 v9662 MB0 v6096 (Standard Power); PN 02WN652-N37880 POST0 v9662 MB0 v6096 (Low Power); PN 03FM956-H07053 POST0 v8657 MB0 v6381 (Standard Power); PN 03FM953-H07053 POST0 v8657 MB0 v6381 (Low Power); PN 03JJ168-N38177 POST0 v8657 MB0 v6381 (Standard Power); PN 03JJ165-N38177 POST0 v8657 MB0 v6381 (Low Power)
Firmware Versions
7.0.46z P1591 M1591 P5625 F0701 and 7.0.74z P3795 M6356 P0630 F0701
