Module Name
MiniHSM [1], MiniHSM for nShield Edge [2] and MiniHSM for Time Stamp Master Clock [3]
Historical Reason
RNG SP800-131A Revision 1 Transition
Caveat
When operated in FIPS mode and initialized to Overall Level 2 per Security Policy
Security Level Exceptions
- Roles, Services, and Authentication: Level 3
- Physical Security: Level 3
- Cryptographic Key Management: Level 3
- EMI/EMC: Level 3
- Design Assurance: Level 3
Embodiment
Multi-chip embedded
Description
The nCipher MiniHSM is a fully featured HSM supplied in a single chip package. The MiniHSM offers all the security and key management features of other nCipher modules - but with reduced processing speed. The MiniHSM is an OEM part and will be included within other appliances or products, for example switches or routers. The MiniHSM's real time clock, also makes it suitable for use as a time-stamping engine.
Approved Algorithms
| AES |
Cert. #685 |
| AES GCM |
Cert. #685, vendor affirmed |
| DSA |
Cert. #259 |
| ECDSA |
Cert. #76 |
| HMAC |
Cert. #364 |
| RNG |
Cert. #399 |
| RSA |
Cert. #320 |
| SHS |
Cert. #713 |
| Triple-DES |
Cert. #625 |
| Triple-DES MAC |
Triple-DES Cert. #625 vendor affirmed |
Other Algorithms
ARC FOUR; Aria; Camellia; CAST 6; DES; MD5; SEED; HMAC-MD5; HMAC-Tiger; HMAC-RIPEMD160; RIPEMD 160; Tiger; El-Gamal; KCDSA; HAS 160; Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides 192 bits of encryption strength); RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of encryption strength), ECMQV (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of encryption strength)
Hardware Versions
nC4031Z-10 [1], nC3021U-10 [2] and TSMC200 [3]; Build Standard N
Firmware Versions
2.33.60-2
