This page was not yet optimized for use on mobile devices.
Postal xRevenector US 2023
Certificate details
| Certificate ID | #5283 |
|---|---|
| Status | active |
| Validation dates | 20.05.2026 |
| Sunset date | 19-05-2031 |
| Standard | FIPS 140-3 |
| Security level | 3 |
| Type | Hardware |
| Embodiment | MultiChipEmbed |
| Caveat | No assurance of the minimum strength of generated SSPs (e.g., keys); No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs |
| Exceptions |
|
| Description | FP InovoLabs GmbH is a wholly-owned subsidiary of Francotyp-Postalia Holding AG (FP), one of the leading global suppliers of mail center solutions. A major component of FP's business is the production and support of postal franking machines (postage meters). These postal franking machines incorporate a postal security device (PSD) that performs all postage meter cryptographic and postal security functions and which protects both Sensitive Security Parameters (SSPs) and Postal Relevant Data Items (PRDIs) from unauthorized access. The Postal xRevenector US 2023 is FP's latest generation of PSD. |
| Vendor | FP InovoLabs GmbH http://www.fp-francotyp.com |
| Lab | Penumbra Security, Inc. |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, CAST, HMAC, HMAC-SHA-256Asymmetric Algorithms
RSA 2048, RSA-PSS, ECDSA, DH, Diffie-Hellman, DSAHash functions
SHA-256Schemes
MAC, Key AgreementRandomness
DRBG, RBGElliptic Curves
P-224Block cipher modes
CBCTrusted Execution Environments
PSPSecurity level
Level 3Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5283,
"dgst": "01ec3d27560e00b6",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"#A3264",
"AES-CTRAES 5662",
"KAS-FFC-SSC Sp800-56Ar3A3263",
"Counter DRBGA3939",
"ECDSA KeyGen (FIPS186-4)A3260",
"AES-KWA3257",
"#A3265",
"ECDSA SigGen (FIPS186-4)A3260",
"#A3263",
"#A3938",
"HMAC-SHA2-256A3262",
"#A3260",
"#A3262",
"AES-CBCA3256",
"ECDSA SigVer (FIPS186-4)A3260",
"RSA SigVer (FIPS186-4)A3265",
"#A3267",
"AES-ECBA3256",
"KDA OneStep Sp800-56Cr1A3264",
"#A3257",
"RSA SigGen (FIPS186-4)A3265",
"#A3939",
"KDF SP800-108A3938",
"SHA2-256A3267",
"#A3256",
"RSA KeyGen (FIPS186-4)A3265",
"#A3259",
"DSA KeyGen (FIPS186-4)A3259"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"2023"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A3256",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "AES 5662",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3256",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3257",
"properties": "-",
"reference": "SP 800-38F"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3939",
"properties": "-",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "DSA KeyGen (FIPS186-4)",
"cavpCertName": "A3259",
"properties": "-",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3260",
"properties": "-",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3260",
"properties": "-",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3260",
"properties": "-",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A3262",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-FFC-SSC Sp800-56Ar3",
"cavpCertName": "A3263",
"properties": "-",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDA OneStep Sp800-56Cr1",
"cavpCertName": "A3264",
"properties": "-",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDF SP800-108",
"cavpCertName": "A3938",
"properties": "-",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3265",
"properties": "-",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3265",
"properties": "-",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3265",
"properties": "-",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3267",
"properties": "-",
"reference": "FIPS 180-4"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Debits the postal funds and returns indicia content.",
"indicator": "Event Log",
"inputs": "Postal data to be digitally signed",
"name": "Accounting",
"outputs": "Digitally signed data stream",
"rolesSspAccess": "Cryptographic Officer (Local) - Indicia Signing Key : E - Local Session Authentication Key (LSAK): E - Local Session Encryption Key (LSEK): E - Master Key Encryption Key (MKEK): E - Data Encryption Key (NVDEK): E - Data Authentication Key (NVDAK): E",
"secFunImpl": "ECDSA Signature Generation Hash Function CSP Decryption SSP Decryption SSP Authentication"
},
{
"description": "Dumps memory contents to a log file.",
"indicator": "Event Log",
"inputs": "Memory parameters",
"name": "Dump Memory",
"outputs": "Memory data",
"rolesSspAccess": "User",
"secFunImpl": "None"
},
{
"description": "Echoes back data payload",
"indicator": "Service response",
"inputs": "Input pattern",
"name": "Echo",
"outputs": "Output pattern",
"rolesSspAccess": "User",
"secFunImpl": "None"
},
{
"description": "Generating the Indicia Signing Key and Indicia Verifying Key",
"indicator": "Event Log",
"inputs": "Key ID, Key Expiration",
"name": "Generate Indicia Keypair",
"outputs": "Key Version #, Public Key",
"rolesSspAccess": "Cryptographic Officer (Remote) - Indicia Signing Key : G - Indicia Verifying Key: G - Remote Session",
"secFunImpl": "ECDSA Key Generation DRBG Generate Function CSP Decryption SSP Encryption"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Authentication Key (RSAK): E - DRBG State: G,E - Data Encryption Key (NVDEK): E - Data Authentication Key (NVDAK): E - Master Key Encryption Key (MKEK): E",
"secFunImpl": "SSP Authentication"
},
{
"description": "Generating PSV Keypair",
"indicator": "Event Log",
"inputs": "Key ID, Key Expiration",
"name": "Generate PSV Keypair",
"outputs": "Key Version #, Public Key",
"rolesSspAccess": "Cryptographic Officer (Remote) - PSV Signing Key: G - PSV Verifying Key: G - Remote Session Authentication Key (RSAK): E - DRBG State: G,E - Data Encryption Key (NVDEK): E - Data Authentication Key (NVDAK): E - Master Key Encryption Key (MKEK): E",
"secFunImpl": "ECDSA Key Generation DRBG Generate Function CSP Decryption SSP Encryption SSP Authentication"
},
{
"description": "Gets module status information",
"indicator": "Service response",
"inputs": "Required status data",
"name": "Get Device Status",
"outputs": "Module information, status and versioning",
"rolesSspAccess": "User",
"secFunImpl": "None"
},
{
"description": "Retrieves certificate data",
"indicator": "Service response",
"inputs": "Required certificate data",
"name": "Get Certificate Information",
"outputs": "Certificate data (X509 format)",
"rolesSspAccess": "User",
"secFunImpl": "None"
},
{
"description": "Reads log data",
"indicator": "Service response",
"inputs": "Log Information",
"name": "Get Log Information",
"outputs": "Log record data",
"rolesSspAccess": "User",
"secFunImpl": "None"
},
{
"description": "Loads entropy and seeds DRBG",
"indicator": "Event Log",
"inputs": "Entropy string",
"name": "Instantiate DRBG",
"outputs": "Entropy size",
"rolesSspAccess": "Cryptographic Officer (Remote) - Entropy String: W - DRBG State: G - DRBG Seed: G - Master Key Encryption Key (MKEK): E - Data Encryption Key (NVDEK): G - Data Authentication Key (NVDAK): G",
"secFunImpl": "Seed DRBG"
},
{
"description": "Receives firmware from an external source and programs it into the cryptographic module\u0027s FLASH memory",
"indicator": "Event Log",
"inputs": "Digitally signed firmware",
"name": "Load Firmware",
"outputs": "Status",
"rolesSspAccess": "Cryptographic Officer (Local) - Local Session Authentication Key (LSAK): E - Firmware Verification Key: E",
"secFunImpl": "Message Authentication RSA Sig Ver (FW Load Test)"
},
{
"description": "Authenticates the Cryptographic Officer (Local) using a challenge-response protocol",
"indicator": "Event Log",
"inputs": "User ID, Response to challenge",
"name": "Local Login",
"outputs": "Device Info, Nonce, Role ID",
"rolesSspAccess": "Cryptographic Officer (Local) - Local Session Authentication Key (LSAK): G - Local Session Encryption Key (LSEK): G - Local Session Wrapping Key",
"secFunImpl": "DRBG Generate Function Key Based Key Derivation Message Authentication CSP Decryption"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "(LSWK): G,E - Local User Key (LUK): E - Master Key Encryption Key (MKEK): E",
"secFunImpl": ""
},
{
"description": "Changes the state in the postage lifecycle",
"indicator": "Event Log",
"inputs": "None",
"name": "Lockout",
"outputs": "Status",
"rolesSspAccess": "User",
"secFunImpl": "None"
},
{
"description": "Logout function for CO",
"indicator": "RFU LED, Event Log",
"inputs": "None",
"name": "Logoff",
"outputs": "Status",
"rolesSspAccess": "Cryptographic Officer (Remote) - Remote Session Authentication Key (RSAK): Z - Remote Session Encryption Key (RSEK): Z - Remote Session Wrapping Key (RSWK): Z Cryptographic Officer (Local) - Local Session Authentication Key (LSAK): Z - Local Session Encryption Key (LSEK): Z - Local Session Wrapping Key (LSWK): Z",
"secFunImpl": "None"
},
{
"description": "Finance service required to load funds",
"indicator": "Event Log, Postal Registers",
"inputs": "Postage value data",
"name": "Postage Value Download (PVD)",
"outputs": "Postage value response data",
"rolesSspAccess": "Cryptographic Officer (Remote) - Remote Session Authentication Key (RSAK): E - Remote Session Encryption Key (RSEK): E - Master Key Encryption Key (MKEK): E - Data Encryption Key (NVDEK): E - Data Authentication Key (NVDAK): E - PKMCert: E - PSD Private Key: E",
"secFunImpl": "RSA Signature Generation Message Authentication RSA Signature Verification (Auth) Data Encryption CSP Decryption Data Decryption SSP Decryption SSP Authentication"
},
{
"description": "Finance service managing postal funds",
"indicator": "Event Log, Postal Registers",
"inputs": "Postage refund data",
"name": "Postage Value Refund",
"outputs": "Postage refund response data",
"rolesSspAccess": "Cryptographic Officer (Remote) - Remote Session Authentication Key (RSAK): E - Remote Session Encryption Key (RSEK): E - Master Key Encryption Key (MKEK): E - Data Encryption Key (NVDEK): E - Data",
"secFunImpl": "RSA Signature Generation Message Authentication RSA Signature Verification (Auth) Data Encryption CSP Decryption Data Decryption SSP Decryption SSP Authentication"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Authentication Key (NVDAK): E - PSD Private Key: E - PKMCert: E",
"secFunImpl": ""
},
{
"description": "Authorize the device according to the USPS - Intelligent Mail Indicia - Performance Criteria requirements",
"indicator": "Event Log",
"inputs": "Postal data",
"name": "Postal Authorization",
"outputs": "Postal data",
"rolesSspAccess": "Cryptographic Officer (Remote) - Remote Session Authentication Key (RSAK): E",
"secFunImpl": "Message Authentication"
},
{
"description": "Initialize the device according to the USPS - Intelligent Mail Indicia - Performance Criteria requirements",
"indicator": "Event Log",
"inputs": "Signed certificate",
"name": "Postal Initialization",
"outputs": "Certificate request",
"rolesSspAccess": "Cryptographic Officer (Remote) - PSD Private Key: G - Remote Session Authentication Key (RSAK): E - DRBG State: G,E - Data Encryption Key (NVDEK): E - Transport Signing Key: E - Transport Verifying Key: E - Data Authentication Key (NVDAK): E - Master Key Encryption Key (MKEK): E",
"secFunImpl": "DRBG Generate Function RSA Key Generation Message Authentication CSP Encryption SSP Encryption SSP Authentication"
},
{
"description": "Updates customer configuration data",
"indicator": "Event Log",
"inputs": "Postal data",
"name": "Re- Authorization",
"outputs": "Status",
"rolesSspAccess": "Cryptographic Officer (Remote) - Remote Session",
"secFunImpl": "Message Authentication"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Authentication Key (RSAK): E",
"secFunImpl": ""
},
{
"description": "Reboots the module",
"indicator": "Event Log",
"inputs": "None",
"name": "Reboot Device",
"outputs": "Status",
"rolesSspAccess": "Cryptographic Officer (Remote) Cryptographic Officer (Local) User",
"secFunImpl": "None"
},
{
"description": "Sets up an individual key between the module and host",
"indicator": "Event Log",
"inputs": "Encrypted local user key",
"name": "ReKey Local User Key",
"outputs": "Encrypted local user key, Nonce",
"rolesSspAccess": "Cryptographic Officer (Local) - Local User Key (LUK): G,Z - Local Session Authentication Key (LSAK): E - Local Session Wrapping Key (LSWK): E - Master Key Encryption Key (MKEK): E",
"secFunImpl": "DRBG Generate Function Symmetric Key Generation Message Authentication Key Transport CSP Encryption"
},
{
"description": "Generation of a new PSD Key Pair and exchange with infrastructure",
"indicator": "Event Log",
"inputs": "Signed Certificate",
"name": "Rekey PSD Key",
"outputs": "Certificate Request",
"rolesSspAccess": "Cryptographic Officer (Remote) - PSD Private Key: G,Z - PSD Public Key: G,Z - Remote Session Authentication Key (RSAK): E - DRBG State: G,E - Data Encryption Key (NVDEK): E - Data",
"secFunImpl": "DRBG Generate Function RSA Key Generation Message Authentication CSP Decryption SSP Encryption SSP Authentication"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Authentication Key (NVDAK): E - Master Key Encryption Key (MKEK): E",
"secFunImpl": ""
},
{
"description": "Cryptographic Officer (Remote) login service",
"indicator": "Event Log",
"inputs": "PSD-Name, Random Bits, Domain parameters, CO-DH- public-key, Signature",
"name": "Remote Login",
"outputs": "CO-Name, Random Bits, Domain parameters, Module- DH-public-key, Signature",
"rolesSspAccess": "Cryptographic Officer (Remote) - Ephemeral Diffie- Hellman Client (Private) Key: G,Z - Transport Signing Key: E - PSD Private Key: E - Remote Session Authentication Key (RSAK): G - Remote Session Encryption Key (RSEK): G - Remote Session Wrapping Key (RSWK): G - DRBG State: G,E - Ephemeral Diffie- Hellman Client (Public) Key: G,R,Z - Ephemeral Diffie- Hellman Server (Public) Key: W,E,Z - PKMCert: E - Shared Secret: G,E",
"secFunImpl": "KAS (dhEphem C(2e, 0s, FFC DH)) DRBG Generate Function Hash Function RSA Signature Generation DSA Key Generation RSA Signature Verification (Auth) CSP Decryption SSP Decryption SSP Authentication"
},
{
"description": "Load signed PKM certificate",
"indicator": "Event Log",
"inputs": "Signed certificate",
"name": "Renew PKM Key",
"outputs": "Certificate Request",
"rolesSspAccess": "Cryptographic Officer (Remote) - PKMCert: W,E,Z",
"secFunImpl": "RSA Signature Verification (Auth)"
},
{
"description": "Zeroizes all plaintext CSPs",
"indicator": "Event Log",
"inputs": "None",
"name": "Scrap",
"outputs": "Status",
"rolesSspAccess": "Cryptographic Officer (Local) - Master Key Encryption Key (MKEK): Z - Data Encryption Key (NVDEK): Z - Data Authentication Key (NVDAK): Z - DRBG State: Z - Local User Key (LUK): Z User - Master Key Encryption Key (MKEK): Z - Data Encryption Key (NVDEK): Z - Data Authentication Key (NVDAK): Z - DRBG State: Z - Local User Key (LUK): Z",
"secFunImpl": "None"
},
{
"description": "Echoes back data payload within a secure session",
"indicator": "Event Log",
"inputs": "Encrypted data, MAC",
"name": "Secure Echo",
"outputs": "Encrypted data, MAC",
"rolesSspAccess": "Cryptographic Officer (Remote) - Remote Session Authentication Key",
"secFunImpl": "Message Authentication Data Encryption Data Decryption"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "(RSAK): E - Remote Session Encryption Key (RSEK): E Cryptographic Officer (Local) - Local Session Authentication Key (LSAK): E - Local Session Encryption Key (LSEK): E",
"secFunImpl": ""
},
{
"description": "Provides status within a secure session",
"indicator": "Event Log",
"inputs": "Status data",
"name": "Secure Get Status",
"outputs": "Module information, status and versioning",
"rolesSspAccess": "Cryptographic Officer (Remote) - Remote Session Authentication Key (RSAK): E",
"secFunImpl": "Message Authentication"
},
{
"description": "Synchronizes the RTC within a secure session",
"indicator": "Event Log",
"inputs": "Time data",
"name": "Secure Set Time",
"outputs": "Status",
"rolesSspAccess": "Cryptographic Officer (Remote) - Remote Session Authentication Key (RSAK): E",
"secFunImpl": "Message Authentication"
},
{
"description": "Runs all self-tests (Pre- operational and Conditional)",
"indicator": "Event Log",
"inputs": "None",
"name": "Self-Test",
"outputs": "Status",
"rolesSspAccess": "User",
"secFunImpl": "RSA Sig Ver (FW Integrity - App) RSA Sig Ver (FW Integrity - BL)"
},
{
"description": "Enters postal config data",
"indicator": "Event Log",
"inputs": "Postal configuration data",
"name": "Set Meter Parameter",
"outputs": "Status",
"rolesSspAccess": "User",
"secFunImpl": "None"
},
{
"description": "Sign postal related items and communication data",
"indicator": "Event Log",
"inputs": "Postal data",
"name": "Sign PMD Data",
"outputs": "Digital signature",
"rolesSspAccess": "Cryptographic Officer (Local) - Local Session",
"secFunImpl": "Hash Function RSA Signature Generation"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Authentication Key (LSAK): E - Local Session Encryption Key (LSEK): E - PMD Signing Key: E - Master Key Encryption Key (MKEK): E - Data Encryption Key (NVDEK): E - Data Authentication Key (NVDAK): E",
"secFunImpl": "Message Authentication Data Encryption CSP Decryption Data Decryption SSP Decryption SSP Authentication"
},
{
"description": "Signs postal related data for storage in hosts PSD Secured Vault",
"indicator": "Event Log",
"inputs": "Postal data",
"name": "Sign PSV Data",
"outputs": "Digital signature",
"rolesSspAccess": "Cryptographic Officer (Local) - PSV Signing Key: E - Local Session Authentication Key (LSAK): E - DRBG State: G,E",
"secFunImpl": "ECDSA Signature Generation Hash Function Message Authentication CSP Decryption SSP Decryption SSP Authentication"
},
{
"description": "Enters other postal-related data",
"indicator": "Event Log",
"inputs": "Postal data",
"name": "Setup Parameters",
"outputs": "Status",
"rolesSspAccess": "Cryptographic Officer (Local) - Local Session Authentication Key (LSAK): E User",
"secFunImpl": "None"
},
{
"description": "Verify postal related items stored (using Public PSV Key)",
"indicator": "Event Log",
"inputs": "Postal data, digital signature",
"name": "Verify PSV Data",
"outputs": "Status (true or false)",
"rolesSspAccess": "Cryptographic Officer (Local) - PSV Verifying Key:",
"secFunImpl": "Hash Function ECDSA Signature Verification"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "E - Local Session Authentication Key (LSAK): E",
"secFunImpl": "Message Authentication CSP Decryption SSP Decryption SSP Authentication"
},
{
"description": "Initialize the device according to the USPS - Intelligent Mail Indicia - Performance Criteria requirements",
"indicator": "Event Log",
"inputs": "Postal data",
"name": "Re-Initialization",
"outputs": "Status",
"rolesSspAccess": "Cryptographic Officer (Remote) - Remote Session Authentication Key (RSAK): E",
"secFunImpl": "Message Authentication"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [
{
"description": "Identity-based. Allows the Cryptographic Officer (Local) to authenticate to the module. Sets up a local session with host.",
"mechanism": "Challenge response mechanism.",
"name": "Local Login",
"perMinute": "A delay of 1 second is added after any failed login attempt, resulting in a maximum of 60 attempts per minute. The probability of a successful random attempt per minute is therefore 60/2^128, which is less than 1/1,000,000.",
"strength": "128 bits"
},
{
"description": "Identity-based. Allows the Cryptographic Officer (Remote) to authenticate themselves. Sets up a remote session with CO.",
"mechanism": "RSA SigVer (FIPS186-4) (A3265)",
"name": "Remote Login",
"perMinute": "A delay of 1 second is added after any failed login attempt, resulting in a maximum of 60 attempts per minute. The probability of a successful random attempt per minute is therefore 60/2^112, which is less than 1/100,000.",
"strength": "112 bits"
}
],
"found": true,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-CBC Encrypt (A3256)",
"condition": "Power-up, Periodically \u0026 on-demand",
"details": "Encrypt KAT",
"indicator": "Success or Failure written to Event Log. ERR LED illuminates on error.",
"testMethod": "KAT",
"testProps": "128-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC Decrypt (A3256)",
"condition": "Power-up, Periodically \u0026 on-demand",
"details": "Decrypt KAT",
"indicator": "Success or Failure written to Event Log. ERR LED illuminates on error.",
"testMethod": "KAT",
"testProps": "128-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB Encrypt (A3256)",
"condition": "Power-up, Periodically \u0026 on-demand",
"details": "Encrypt KAT",
"indicator": "Success or Failure written to Event Log. ERR LED illuminates on error.",
"testMethod": "KAT",
"testProps": "128-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB Decrypt (A3256)",
"condition": "Power-up, Periodically \u0026 on-demand",
"details": "Decrypt KAT",
"indicator": "Success or Failure written to Event Log. ERR LED illuminates on error.",
"testMethod": "KAT",
"testProps": "128-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES-KW Encrypt (A3257)",
"condition": "Power-up, Periodically \u0026 on-demand",
"details": "Encrypt KAT",
"indicator": "Success or Failure written to Event Log. ERR LED illuminates on error.",
"testMethod": "KAT",
"testProps": "128-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES-KW Decrypt (A3257)",
"condition": "Power-up, Periodically \u0026 on-demand",
"details": "Decrypt KAT",
"indicator": "Success or Failure written to Event Log. ERR LED illuminates on error.",
"testMethod": "KAT",
"testProps": "128-bit",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3939)",
"condition": "Power-up, Periodically \u0026 on-demand",
"details": "Instantiate and Generate KAT",
"indicator": "Success or Failure written to Event Log. ERR LED illuminates on error.",
"testMethod": "KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "DSA KeyGen (FIPS186-4) (A3259)",
"condition": "DH Key Generation",
"details": "PCT",
"indicator": "Success or Failure written to Event Log",
"testMethod": "PCT",
"testProps": "2048-bit",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A3260)",
"condition": "Power-up, Periodically \u0026 on-demand",
"details": "Signature Generation KAT",
"indicator": "Success or Failure written to Event Log. ERR LED illuminates on error.",
"testMethod": "KAT",
"testProps": "P-224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A3260)",
"condition": "Power-up, Periodically \u0026 on-demand",
"details": "Signature Verification KAT",
"indicator": "Success or Failure written to Event Log. ERR LED illuminates on error.",
"testMethod": "KAT",
"testProps": "P-224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A3260)",
"condition": "ECDSA Key Generation",
"details": "PCT",
"indicator": "Success or Failure written to Event Log. ERR LED illuminates on error.",
"testMethod": "PCT",
"testProps": "P-224",
"type": "PCT"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A3262)",
"condition": "Power-up, Periodically \u0026 on-demand",
"details": "HMAC Generation KAT",
"indicator": "Success or Failure written to Event Log. ERR LED illuminates on error.",
"testMethod": "KAT",
"testProps": "256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SP800-108 (A3938)",
"condition": "Power-up, Periodically \u0026 on-demand",
"details": "Key Based KDF Generation KAT",
"indicator": "Success or Failure written to Event Log. ERR LED illuminates on error.",
"testMethod": "KAT",
"testProps": "256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "KDA OneStep Sp800-56Cr1 (A3264)",
"condition": "Power-up, Periodically \u0026 on-demand",
"details": "KDA KAT",
"indicator": "Success or Failure written to Event Log. ERR LED illuminates on error.",
"testMethod": "KAT",
"testProps": "2048-bit",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-FFC-SSC Sp800-56Ar3 (A3263)",
"condition": "Power-up, Periodically \u0026 on-demand",
"details": "KAS-SSC KAT",
"indicator": "Success or Failure written to Event Log. ERR LED illuminates on error.",
"testMethod": "KAT",
"testProps": "2048-bit",
"type": "CAST"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A3265)",
"condition": "RSA Key Generation",
"details": "RSA Key Gen",
"indicator": "Success or Failure written to Event Log. ERR LED illuminates on error.",
"testMethod": "PCT",
"testProps": "2048 bits",
"type": "PCT"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A3265)",
"condition": "Power-up, Periodically \u0026 on-demand",
"details": "RSA Signature Generation KAT",
"indicator": "Success or Failure written to Event Log. ERR LED illuminates on error.",
"testMethod": "KAT",
"testProps": "2048 bits",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A3265)",
"condition": "Power-up, Periodically \u0026 on-demand",
"details": "RSA Signature Verification KAT",
"indicator": "Success or Failure written to Event Log. ERR LED illuminates on error.",
"testMethod": "KAT",
"testProps": "2048 bits",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Fatal error caused by self-test failure Fatal error caused by physical tamper e.g. removal of battery",
"description": "Non recoverable error",
"indicator": "LED (Red)",
"name": "Defect (Hard Error)",
"recoveryMethod": "Non recoverable error"
},
{
"conditions": "General Application errors",
"description": "Recoverable Error",
"indicator": "LED (Yellow)",
"name": "Soft Error",
"recoveryMethod": "Power-cycle"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [
{
"inspectFreq": "During installation, re-installation, decommissioning, and servicing.",
"inspectGuidance": "Inspect device for obvious damage or other evidence of tamper.",
"mechanism": "Tamper Evidence"
}
],
"found": true,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "The module incorporates a single, Approved mode of operation",
"name": "Approved Mode",
"statusIndicator": "LED",
"type": "Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [],
"found": false,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "Primary (PCIe) serial interface for communicating with module.",
"logicalInterface": "Data Input Data Output Control Input Status Output Power",
"physicalPort": "36-pin Serial I/O card edge connector (PCIe)"
},
{
"data": "Alternate interface for communicating with module.",
"logicalInterface": "Data Input Data Output Control Input Status Output Power",
"physicalPort": "USB"
},
{
"data": "Module status",
"logicalInterface": "Status Output",
"physicalPort": "LED Interface"
},
{
"data": "Additional power",
"logicalInterface": "Power",
"physicalPort": "Battery"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "Remote Login",
"name": "Cryptographic Officer (Remote)",
"operatorType": "Cryptographic Officer",
"type": "Identity"
},
{
"authMethodList": "Local Login",
"name": "Cryptographic Officer (Local)",
"operatorType": "Cryptographic Officer",
"type": "Identity"
},
{
"authMethodList": "None",
"name": "User",
"operatorType": "Unauthenticated",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "3",
"section": "1",
"title": "General"
},
{
"level": "3",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "3",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "3",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "3",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "N/A",
"section": "6",
"title": "Operational environment"
},
{
"level": "3",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "3",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "3",
"section": "10",
"title": "Self-tests"
},
{
"level": "3",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "3",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "3",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "Application Firmware Integrity Test",
"details": "RSA-PKCS1 v1.5 Signature Verification",
"indicator": "LED",
"testMethod": "KAT",
"testProps": "2048 bits",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "Bootloader Firmware Integrity Test",
"details": "RSA-PSS Signature Verification",
"indicator": "LED",
"testMethod": "KAT",
"testProps": "2048 bits",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "SRAM",
"distribution": "N/A",
"entry": "Electronic",
"format": "Plaintext",
"name": "Manufacturing",
"sfiAlgo": "",
"source": "Manufacturing"
},
{
"dest": "Outside the Module",
"distribution": "Automated",
"entry": "Electronic",
"format": "Encrypted",
"name": "Output (Encrypted)",
"sfiAlgo": "Key Transport",
"source": "NVRAM"
},
{
"dest": "SRAM",
"distribution": "Automated",
"entry": "Electronic",
"format": "Plaintext",
"name": "Input (Plaintext)",
"sfiAlgo": "KAS (dhEphem C(2e, 0s, FFC DH))",
"source": "Outside the Module"
},
{
"dest": "Outside the Module",
"distribution": "Automated",
"entry": "Electronic",
"format": "Plaintext",
"name": "Output (Plaintext)",
"sfiAlgo": "KAS (dhEphem C(2e, 0s, FFC DH))",
"source": "SRAM"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Service",
"method": "Scrap",
"operatorId": "Host device calls the service",
"rationale": "Forces a zeroisation of the Master Key Encryption Key (MKEK) and NVRAM memory components. N.B. This process is irreversible."
},
{
"description": "Automatic",
"method": "End of session",
"operatorId": "N/A",
"rationale": "Firmware programmed zeroization of ephemeral SSPs used in secure session"
},
{
"description": "Physical",
"method": "Removal of Battery/Tamper",
"operatorId": "Removal of battery power or a tamper event",
"rationale": "Forces a zeroisation of the Master Key Encryption Key and removal of power from battery-backed memory"
},
{
"description": "Automatic",
"method": "Automatically",
"operatorId": "N/A",
"rationale": "Immediately after use"
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "On-chip memory that is zeroized on tamper detection.",
"name": "Battery Protected Key Storage (BPKS)",
"persistance": "Static"
},
{
"description": "Plaintext and encrypted",
"name": "Battery Backed RAM (BBRAM)",
"persistance": "Static"
},
{
"description": "Plaintext",
"name": "FLASH",
"persistance": "Static"
},
{
"description": "Plaintext and encrypted",
"name": "NVRAM",
"persistance": "Static"
},
{
"description": "Plaintext",
"name": "SRAM",
"persistance": "Static"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [
{
"features": "Includes PCIe Interface only",
"fwVersion": "90.0036.0616.00/2023.32.5.003",
"hwVersion": "1",
"modelPartNum": "Postal xRevenector US 2023 (58.0036.0301.00)",
"processors": "Maxim Integrated MAX32590 DeepCover Secure Microcontroller"
},
{
"features": "Includes USB and PCIe Interfaces",
"fwVersion": "90.0036.0616.00/2023.32.5.003",
"hwVersion": "2",
"modelPartNum": "Postal xRevenector US 2023 (58.0036.0302.00)",
"processors": "Maxim Integrated MAX32590 DeepCover Secure Microcontroller"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Symmetric and Asymmetric",
"implName": "N/A",
"name": "CKG",
"reference": "NIST SP 800-133r2 and IG D.G per Section 4 example 1, Sections 5.1, 5.2, and 6.1."
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDSA": {
"ECDSA": 35
}
},
"FF": {
"DH": {
"DH": 19,
"Diffie-Hellman": 4
},
"DSA": {
"DSA": 13
}
},
"RSA": {
"RSA 2048": 8,
"RSA-PSS": 2
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 2
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {},
"crypto_scheme": {
"KA": {
"Key Agreement": 3
},
"MAC": {
"MAC": 4
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-224": 20
}
},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#1": 1
}
},
"fips_certlike": {
"Certlike": {
"AES 128": 2,
"AES 5662": 3,
"HMAC-SHA-256": 2,
"PKCS#1": 6,
"PKCS1": 8,
"RSA 2048": 8,
"RSA PKCS#1": 6,
"RSA-PKCS1": 1,
"SHA-256": 2,
"SHA2-256": 1
}
},
"fips_security_level": {
"Level": {
"Level 3": 3
}
},
"hash_function": {
"SHA": {
"SHA2": {
"SHA-256": 2
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 50
},
"RNG": {
"RBG": 3
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 7,
"FIPS 180-4": 1,
"FIPS 186-4": 19,
"FIPS 186-5": 1,
"FIPS 1864": 1,
"FIPS 198-1": 1,
"FIPS186-4": 35
},
"ISO": {
"ISO/IEC 19790": 2
},
"NIST": {
"NIST SP 800-108": 1,
"NIST SP 800-90A": 3,
"SP 800-108": 1,
"SP 800-38A": 3,
"SP 800-38F": 1,
"SP 800-56A": 1,
"SP 800-56C": 1,
"SP 800-90A": 1
},
"PKCS": {
"PKCS#1": 6,
"PKCS1": 4
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 8
},
"CAST": {
"CAST": 30
}
},
"constructions": {
"MAC": {
"HMAC": 1,
"HMAC-SHA-256": 1
}
}
},
"tee_name": {
"AMD": {
"PSP": 8
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"ECDSA SigVer (FIPS186-4)A3260",
"RSA SigGen (FIPS186-4)A3265",
"ECDSA SigGen (FIPS186-4)A3260",
"KDF SP800-108A3938",
"SHA2-256A3267",
"AES-CBCA3256",
"HMAC-SHA2-256A3262",
"AES-CTRAES 5662",
"Counter DRBGA3939",
"KAS-FFC-SSC Sp800-56Ar3A3263",
"RSA SigVer (FIPS186-4)A3265",
"DSA KeyGen (FIPS186-4)A3259",
"RSA KeyGen (FIPS186-4)A3265",
"ECDSA KeyGen (FIPS186-4)A3260",
"AES-ECBA3256",
"KDA OneStep Sp800-56Cr1A3264",
"AES-KWA3257"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A3257",
"#A3939",
"#A3263",
"#A3938",
"#A3264",
"#A3260",
"#A3256",
"#A3267",
"#A3259",
"#A3262",
"#A3265"
]
},
"policy_metadata": {
"/Author": "Hawes, David J. (Fed)",
"/ClassificationContentMarkingHeaderFontProps": "#008000,10,Aptos",
"/ClassificationContentMarkingHeaderShapeIds": "43166a73,4dc19151,6794d062",
"/ClassificationContentMarkingHeaderText": "UNCLASSIFIED / NON CLASSIFI\u00c9//TLP:AMBER+STRICT",
"/Comments": "",
"/Company": "",
"/CreationDate": "D:20260520105248-04\u002700\u0027",
"/Creator": "Acrobat PDFMaker 26 for Word",
"/Keywords": "",
"/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ActionId": "257ac794-c680-423a-9374-2d4c7ecfd00b",
"/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ContentBits": "1",
"/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Enabled": "true",
"/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Method": "Privileged",
"/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Name": "TLP-Amber_Strict",
"/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SetDate": "2026-05-20T14:47:15Z",
"/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a",
"/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Tag": "10, 0, 1, 1",
"/ModDate": "D:20260520105407-04\u002700\u0027",
"/Producer": "Adobe PDF Library 26.1.59",
"/SourceModified": "",
"/Subject": "",
"/Title": "",
"pdf_file_size_bytes": 712437,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 48
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "88ff89d23ba6d6e6633f1f41ed8c24f4aee6bbd00b79353e78589d12d95a5224",
"source_hash": "b7b25a32b0093e9f75861ef8e667f5c4d8720317f08458216e6d5243c647ec31",
"txt_hash": "f439bc50ac0464e7c1f5beb3afa2516e7a93c7b227a644f5f1d04d69acfbdfd4"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "No assurance of the minimum strength of generated SSPs (e.g., keys); No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/May 2026_030626_0716.pdf",
"date_sunset": "2031-05-19",
"description": "FP InovoLabs GmbH is a wholly-owned subsidiary of Francotyp-Postalia Holding AG (FP), one of the leading global suppliers of mail center solutions. A major component of FP\u0027s business is the production and support of postal franking machines (postage meters). These postal franking machines incorporate a postal security device (PSD) that performs all postage meter cryptographic and postal security functions and which protects both Sensitive Security Parameters (SSPs) and Postal Relevant Data Items (PRDIs) from unauthorized access. The Postal xRevenector US 2023 is FP\u0027s latest generation of PSD.",
"embodiment": "MultiChipEmbed",
"exceptions": [
"Operational environment: N/A",
"Non-invasive security: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 3,
"mentioned_certs": {},
"module_name": "Postal xRevenector US 2023",
"module_type": "Hardware",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-05-20",
"lab": "Penumbra Security, Inc.",
"validation_type": "Initial"
}
],
"vendor": "FP InovoLabs GmbH",
"vendor_url": "http://www.fp-francotyp.com"
}
}