Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #2443

Details

Module Name
Pitney Bowes MS1 X4 Postal Security Device (PSD)
Standard
FIPS 140-2
Status
Historical
 Historical Reason
Moved to historical list due to sunsetting
Overall Level
3
Caveat
When operated in FIPS Mode.
Security Level Exceptions
  • Mitigation of Other Attacks: N/A
Module Type
Hardware
Embodiment
Single-chip
Description
The MS1 X4 PSD is a single chip cryptographic module using the Maxim MAX32590 hardware that provides security services to support the creation of digital postage evidence in the form of an indicium.
Tested Configuration(s)
  • N/A
Approved Algorithms
AES Certs. #2826 and #2936
CVL Cert. #254
DRBG Cert. #487
DSA Cert. #871
ECDSA Cert. #529
HMAC Cert. #1769
KAS Cert. #49
KTS AES Cert. #2936; key establishment methodology provides 128 or 256 bits of encryption strength
RSA Cert. #1539
SHS Cert. #2369
Triple-DES Cert. #1690
Triple-DES MAC Cert. #1690, vendor affirmed
Other Algorithms
Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength); NDRNG
Hardware Versions
Part # 4W84001 Rev AAA; MAX32590 Secure Microcontroller Revision B4
Firmware Versions
Device Abstraction Layer (DAL) Version 01.01.00F4; PB Bootloader Version 00.00.0016; PSD Application Version 21.04.007E

Vendor

Pitney Bowes, Inc.
37 Executive Drive
Danbury, CT 06810
USA

Brian Hannigan
brian.hannigan@pb.com
Phone: 203-796-3201
Fax: 203-749-7491

Validation History

Date Type Lab
9/9/2015 Initial PENUMBRA SECURITY
4/24/2018 Update PENUMBRA SECURITY