Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #5282

Details

Module Name
ASI-HSM AHX5 kNET Cryptographic Module
Standard
FIPS 140-3
Status
Active
Sunset Date
5/19/2031
Overall Level
3
Caveat
When installed, initialized and configured as specified in Section 11 of the Security Policy. When operated in approved mode.
Security Level Exceptions
  • Operational environment: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Hardware
Embodiment
MultiChipStand
Description
The ASI-HSM AHX5 kNET Cryptographic Module is a Hardware Security Module that provides cryptographic services with native implementation of the Key Management Interoperability Protocol to applications. The hardware is optimized for cryptographic operations along with proprietary firmware and software developed exclusively for the module. Its operators communicate with it via a standard Ethernet interface using IP protocols. The module is usually sold embedded within a stand-alone network appliance, which is typically used in large-scale cloud infrastructures, where ease of remote configuration and operation is required.
Approved Algorithms
AES-CBC
AES-CMAC
AES-CTR
AES-ECB
AES-GCM
AES-KW
Conditioning Component AES-CBC-MAC SP800-90B
ECDSA KeyGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigVer (FIPS186-5)
EDDSA KeyGen
EDDSA SigGen
EDDSA SigVer
Hash DRBG
HMAC-SHA-1
HMAC-SHA2-224
HMAC-SHA2-256
HMAC-SHA2-384
HMAC-SHA2-512
HMAC-SHA2-512/224
HMAC-SHA2-512/256
HMAC-SHA3-224
HMAC-SHA3-256
HMAC-SHA3-384
HMAC-SHA3-512
KAS-ECC-SSC Sp800-56Ar3
KDF TLS
ML-DSA KeyGen
ML-DSA SigGen
ML-DSA SigVer
ML-KEM EncapDecap
ML-KEM KeyGen
RSA KeyGen (FIPS186-5)
RSA SigGen (FIPS186-5)
RSA SigVer (FIPS186-5)
SHA2-224
SHA2-256
SHA2-384
SHA2-512
SHA2-512/224
SHA2-512/256
SHA3-224
SHA3-256
SHA3-384
SHA3-512
SHAKE-256
TDES-CBC
TDES-ECB

Vendor

Kryptus
Rua Galilée 7
Yverdon 1400
Switzerland

Global Operations Team
[email protected]
Phone: 41799321923
Quality Assurance Team
[email protected]
Phone: 551931125000

Validation History

Date Type Lab
5/20/2026 Initial EWA - Canada