Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #4081

Details

Module Name
X4i Postal Security Device (PSD)
Standard
FIPS 140-2
Status
Active
Sunset Date
9/21/2026
Overall Level
3
Caveat
When operated in FIPS Mode. No assurance of the minimum strength of generated keys.
Module Type
Hardware
Embodiment
Single Chip
Description
The X4i PSD is a single chip cryptographic module using the Maxim MAX32590 hardware that provides security services to support the creation of digital postage evidence in the form of an indicium.
Tested Configuration(s)
  • N/A
Approved Algorithms
AES Cert. #5954
CKG vendor affirmed
DRBG Cert. #C472
ECDSA Cert. #C476
HMAC Cert. #C464
KAS-SSC vendor affirmed
KDA vendor affirmed
KTS AES Cert. #5954
KTS AES Cert. #5954 and HMAC Cert. #C464
RSA Cert. #C477
SHS Cert. #C295
Allowed Algorithms
N/A
Hardware Versions
MAX32590 Secure Microcontroller Revision B4
Firmware Versions
PB Bootloader Version 00.00.0016, PSD Application Versions 21.07.0013 and 21.07.0018, and Device Abstraction Layer (DAL) Version 01.02.0027 and 01.02.0041

Vendor

Pitney Bowes, Inc.
27 Waterview Drive
Shelton, CT 06484
USA

Brian Hannigan
brian.hannigan@pb.com
Phone: 203-796-3201
Fax: 203-749-7491

Related Files

Security Policy
Consolidated Certificate

Validation History

Date Type Lab
11/30/2021 Initial PENUMBRA SECURITY
1/5/2023 Update PENUMBRA SECURITY
9/1/2023 Update PENUMBRA SECURITY