Thales Luna K7 Cryptographic Module

Certificate #4684

Webpage information

Status active
Validation dates 02.04.2024 , 07.07.2025
Sunset date 01-04-2029
Standard FIPS 140-3
Security level 3
Type Hardware
Embodiment Multi-Chip Embedded
Caveat When operated in approved mode
Exceptions
  • Operational environment: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description The Thales Luna K7 Cryptographic Module is a multi-chip embedded hardware cryptographic module in the form of a PCIe card which typically resides within a custom computing or secure communications appliance.
Version (Hardware) 808-000048-002, 808-000048-003, 808-000066-001, 808-000073-001, 808-000073-002
Version (Firmware) 7.8.4 with bootloader version 1.1.1, 1.1.2, 1.1.4 or 1.1.5; 7.8.5 with bootloader version 1.1.1, 1.1.2, 1.1.4 or 1.1.5
Vendor Thales
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms
AES, AES192, AES-256, AES-, CAST5, RC2, RC5, RC4, DES, Triple-DES, TDEA, TDES, ARIA, SM4, SEED, HMAC, CMAC
Asymmetric Algorithms
ECDH, ECDSA, EdDSA, ECC, Diffie-Hellman, DH, DSA
Hash functions
SHA-1, SHA1, SHA224, SHA2, SHA-3, SHA3-224, SHA3-384, SHA3-512, SHA3-256, SHA3, MD5, RIPEMD-160, PBKDF
Schemes
MAC, Key Agreement
Protocols
SSL
Randomness
TRNG, DRBG, RNG, RND, RBG
Elliptic Curves
P-224, P-256, P-384, P-521, P-192, curve P-384, curve P-521, B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, K-163, B-163, sect571r2, sect571k2, sect409r1, sect409k1, sect283r1, sect283k1, secp256k1, sect239k1, sect233r1, sect233k1, secp224k1, sect193r2, sect193r1, secp192k1, sect163r2, sect163r1, sect163k1, secp160r2, secp160r1, secp160k1, prime239v3, prime239v2, prime239v1, prime192v3, prime192v2, c2pnb368w1, c2pnb359v1, c2pnb304w1, c2pnb272w1, c2pnb239v1, c2pnb239v2, c2pnb239v3, c2pnb191v3, c2pnb191v2, c2pnb191v1, c2pnb163v1, c2pnb163v2, c2pnb163v3, Curve25519
Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, XEX, XTS

JavaCard API constants
SM2
Trusted Execution Environments
PSP, SSC
Vendor
STM, Thales

Security level
level 3, Level 1, Level 3
Side-channel analysis
physical probing

Standards
FIPS 140-3, FIPS 180-4, FIPS 186-4, FIPS 197, FIPS 198-1, FIPS 202, FIPS 186-2, FIPS 140, PKCS #1, PKCS #11, PKCS#1, RFC 5639, RFC 7748, ISO/IEC 24759, ISO/IEC 19790:2012, ISO/IEC 24759:2017, X.509

File metadata

Author Costa Graham
Creation date D:20250317101144-04'00'
Modification date D:20250317101414-04'00'
Pages 142
Creator Acrobat PDFMaker 25 for Word
Producer Adobe PDF Library 25.1.208

References

Outgoing
  • 98 - historical - Contivity Extranet Switch
  • 90 - historical - Oracle® Advanced Security

Heuristics

No heuristics are available for this certificate.

References

Updates

  • 07.07.2025 The certificate data changed.
    Certificate changed

    The web extraction data was updated.

    • The validation_history property was updated, with the [[1, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2025-07-07', 'validation_type': 'Update', 'lab': 'LEIDOS CSTL'}]] values inserted.
    • The fw_versions property was set to 7.8.4 with bootloader version 1.1.1, 1.1.2, 1.1.4 or 1.1.5; 7.8.5 with bootloader version 1.1.1, 1.1.2, 1.1.4 or 1.1.5.

    The PDF extraction data was updated.

    • The keywords property was updated, with the {'fips_cert_id': {'__update__': {'Cert': {'__delete__': ['#1701']}}}, 'fips_certlike': {'__update__': {'Certlike': {'__update__': {'PKCS#1': 4}}}}, 'vendor': {'__update__': {'Thales': {'__update__': {'Thales': 382}}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__update__': {'AES': 127}}}}, 'DES': {'__update__': {'3DES': {'__update__': {'Triple-DES': 16}}}}}}, 'asymmetric_crypto': {'__update__': {'ECC': {'__update__': {'ECDSA': {'__update__': {'ECDSA': 39}}}}, 'FF': {'__update__': {'DSA': {'__update__': {'DSA': 16}}}}}}, 'crypto_scheme': {'__update__': {'KA': {'__update__': {'Key Agreement': 20}}}}, 'tee_name': {'__update__': {'IBM': {'__update__': {'SSC': 4}}}}, 'standard_id': {'__update__': {'PKCS': {'__update__': {'PKCS#1': 2}}}}} data.
    • The policy_metadata property was updated, with the {'pdf_file_size_bytes': 2288518, 'pdf_number_of_pages': 142, '/Creator': 'Acrobat PDFMaker 25 for Word', '/CreationDate': "D:20250317101144-04'00'", '/ModDate': "D:20250317101414-04'00'", '/Producer': 'Adobe PDF Library 25.1.208', 'pdf_hyperlinks': {'__discard__': {'_type': 'Set', 'elements': ['file:///C:/Users/t0248592/Desktop/IAN/www.thalesdocs.com']}}} data.

    The computed heuristics were updated.

    • The extracted_versions property was updated, with the {'_type': 'Set', 'elements': ['7.8.5']} values added.
    • The policy_prunned_references property was updated, with the {'_type': 'Set', 'elements': ['1701']} values discarded.
    • The policy_processed_references property was updated, with the {'directly_referencing': {'__discard__': {'_type': 'Set', 'elements': ['1701']}}, 'indirectly_referencing': {'__discard__': {'_type': 'Set', 'elements': ['1701']}}} data.

    The state was updated.

    • The policy_pdf_hash property was set to 3a885884dd69995a40a45875557f1627e2bcb9e29efe984a8ecdda9ba82f619f.
    • The policy_txt_hash property was set to 7b3e12ae1dfd912c38d14f18dcefe8d8081d9b3daef9ae77c78c3286a28c7518.
  • 24.02.2025 The certificate data changed.
    Certificate changed

    The web extraction data was updated.

    • The exceptions property was updated.
  • 04.07.2024 The certificate was first processed.
    New certificate

    A new FIPS 140 certificate with the product name Thales Luna K7 Cryptographic Module was processed.

Raw data 

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4684,
  "dgst": "4f2e3c02d4f030a3",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC-SHA3-224C1707",
        "TDES-CTRC1707",
        "SHAKE-128C1707",
        "AES-CBCC1707",
        "KDF ANS 9.63A480",
        "SHA2-384C1707",
        "TDES-ECBC1707",
        "SHA3-384C1707",
        "SHA-1C1707",
        "AES-GCMC1707",
        "TDES-CFB8C1707",
        "SHA3-256C1707",
        "AES-KWC1718",
        "KDA OneStep SP800-56Cr2A480",
        "HMAC-SHA3-512C1707",
        "SHA2-512C1718",
        "DSA SigVer (FIPS186-4)C1707",
        "ECDSA SigVer (FIPS186-4)C1718",
        "AES-KWPC1718",
        "SHA2-224C1707",
        "HMAC-SHA2-384C1707",
        "KAS-FFC-SSC Sp800-56Ar3A480",
        "DSA PQGGen (FIPS186-4)C1718",
        "KDF SP800-108C1707",
        "KAS-IFCA481",
        "AES-OFBC1707",
        "KAS-ECC Sp800-56Ar3A480",
        "KAS-ECC-SSC Sp800-56Ar3A480",
        "RSA KeyGen (FIPS186-4)C1719",
        "KDA OneStep Sp800-56Cr1A480",
        "HMAC-SHA-1C1707",
        "HMAC-SHA3-256C1707",
        "HMAC-SHA3-384C1707",
        "SHA3-512C1707",
        "AES-XTSC1707",
        "Counter DRBGC1707",
        "AES-CFB128C1707",
        "HMAC-SHA2-256C1718",
        "AES-ECBC1707",
        "RSA SigVer (FIPS186-4)C1717",
        "ECDSA SigGen (FIPS186-4)C1718",
        "AES-CFB8C1707",
        "SHA3-224C1707",
        "HMAC-SHA2-224C1707",
        "HMAC-SHA2-512C1707",
        "TDES-CFB64C1707",
        "SHAKE-256C1707",
        "AES-CTRC1707",
        "KDF ANS 9.42A480",
        "AES-CMACC1707",
        "DSA SigGen (FIPS186-4)C1707",
        "DSA KeyGen (FIPS186-4)C1718",
        "TDES-CBCC1707",
        "RSA SigGen (FIPS186-4)C1717",
        "PBKDFA480",
        "SHA2-256C1718",
        "KTS-IFCA481",
        "TDES-OFBC1707",
        "ECDSA KeyGen (FIPS186-4)C1718"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "1.1.4",
        "1.1.1",
        "1.1.5",
        "1.1.2",
        "7.8.4",
        "7.8.5"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "98",
          "90"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "98",
          "90"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "98",
        "90"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 115
          },
          "ECDH": {
            "ECDH": 11
          },
          "ECDSA": {
            "ECDSA": 39
          },
          "EdDSA": {
            "EdDSA": 5
          }
        },
        "FF": {
          "DH": {
            "DH": 4,
            "Diffie-Hellman": 7
          },
          "DSA": {
            "DSA": 16
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 14
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 27
        },
        "ECB": {
          "ECB": 13
        },
        "GCM": {
          "GCM": 19
        },
        "OFB": {
          "OFB": 7
        },
        "XEX": {
          "XEX": 2
        },
        "XTS": {
          "XTS": 2
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 2
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 20
        },
        "MAC": {
          "MAC": 68
        }
      },
      "device_model": {},
      "ecc_curve": {
        "Curve": {
          "Curve25519": 1
        },
        "NIST": {
          "B-163": 2,
          "B-233": 8,
          "B-283": 8,
          "B-409": 8,
          "B-571": 8,
          "K-163": 2,
          "K-233": 3,
          "K-283": 8,
          "K-409": 8,
          "K-571": 8,
          "P-192": 2,
          "P-224": 8,
          "P-256": 2,
          "P-384": 21,
          "P-521": 43,
          "c2pnb163v1": 1,
          "c2pnb163v2": 1,
          "c2pnb163v3": 1,
          "c2pnb191v1": 1,
          "c2pnb191v2": 1,
          "c2pnb191v3": 1,
          "c2pnb239v1": 1,
          "c2pnb239v2": 1,
          "c2pnb239v3": 1,
          "c2pnb272w1": 1,
          "c2pnb304w1": 1,
          "c2pnb359v1": 1,
          "c2pnb368w1": 1,
          "curve P-384": 7,
          "curve P-521": 23,
          "prime192v2": 1,
          "prime192v3": 1,
          "prime239v1": 1,
          "prime239v2": 1,
          "prime239v3": 1,
          "secp160k1": 1,
          "secp160r1": 1,
          "secp160r2": 1,
          "secp192k1": 1,
          "secp224k1": 1,
          "secp256k1": 1,
          "sect163k1": 1,
          "sect163r1": 1,
          "sect163r2": 1,
          "sect193r1": 1,
          "sect193r2": 1,
          "sect233k1": 1,
          "sect233r1": 1,
          "sect239k1": 1,
          "sect283k1": 1,
          "sect283r1": 1,
          "sect409k1": 1,
          "sect409r1": 1,
          "sect571k2": 1,
          "sect571r2": 1
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 4,
          "#11": 2,
          "#90": 1,
          "#98": 24
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES (128": 2,
          "AES- 256": 26,
          "AES-256": 12,
          "AES11": 1,
          "AES14": 1,
          "AES192": 1,
          "AES40": 1,
          "AES45": 1,
          "DES 11": 1,
          "DSA KAT48": 1,
          "DSA31": 1,
          "DSA36": 1,
          "Diffie-Hellman41": 1,
          "HMAC- SHA1": 1,
          "HMAC-SHA-1": 4,
          "HMAC-SHA1": 4,
          "HMAC30": 2,
          "HMAC35": 2,
          "PKCS #1": 5,
          "PKCS #11": 4,
          "PKCS#1": 4,
          "RSA #1": 1,
          "RSA PKCS #1": 1,
          "RSA16": 1,
          "RSA27": 1,
          "RSA28": 1,
          "RSA33": 1,
          "RSA38": 1,
          "RSA43": 1,
          "RSA44": 1,
          "SHA- 1": 1,
          "SHA-1": 15,
          "SHA-3": 4,
          "SHA1": 13,
          "SHA12": 1,
          "SHA2": 1,
          "SHA2- 224": 3,
          "SHA2- 256": 7,
          "SHA2- 384": 5,
          "SHA2- 512": 6,
          "SHA2-224": 32,
          "SHA2-256": 50,
          "SHA2-384": 45,
          "SHA2-512": 92,
          "SHA224": 1,
          "SHA3": 2,
          "SHA3- 224": 1,
          "SHA3- 256": 2,
          "SHA3- 384": 4,
          "SHA3- 512": 4,
          "SHA3-224": 23,
          "SHA3-256": 23,
          "SHA3-384": 21,
          "SHA3-512": 27
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "Level 3": 1,
          "level 3": 2
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 4
          }
        },
        "PBKDF": {
          "PBKDF": 14
        },
        "RIPEMD": {
          "RIPEMD-160": 2
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 15,
            "SHA1": 13
          },
          "SHA2": {
            "SHA2": 1,
            "SHA224": 1
          },
          "SHA3": {
            "SHA-3": 4,
            "SHA3": 2,
            "SHA3-224": 23,
            "SHA3-256": 23,
            "SHA3-384": 21,
            "SHA3-512": 27
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {
        "curves": {
          "SM2": 5
        }
      },
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 199
        },
        "RNG": {
          "RBG": 5,
          "RND": 7,
          "RNG": 3
        },
        "TRNG": {
          "TRNG": 1
        }
      },
      "side_channel_analysis": {
        "SCA": {
          "physical probing": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140": 2,
          "FIPS 140-3": 36,
          "FIPS 180-4": 2,
          "FIPS 186-2": 1,
          "FIPS 186-4": 42,
          "FIPS 197": 7,
          "FIPS 198-1": 2,
          "FIPS 202": 5
        },
        "ISO": {
          "ISO/IEC 19790:2012": 8,
          "ISO/IEC 24759": 8,
          "ISO/IEC 24759:2017": 3
        },
        "PKCS": {
          "PKCS #1": 3,
          "PKCS #11": 2,
          "PKCS#1": 2
        },
        "RFC": {
          "RFC 5639": 16,
          "RFC 7748": 3
        },
        "X509": {
          "X.509": 16
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 127,
            "AES-": 28,
            "AES-256": 12,
            "AES192": 1
          },
          "CAST": {
            "CAST5": 6
          },
          "RC": {
            "RC2": 6,
            "RC4": 2,
            "RC5": 3
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 1,
            "TDES": 2,
            "Triple-DES": 16
          },
          "DES": {
            "DES": 10
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 12,
            "HMAC": 37
          }
        },
        "miscellaneous": {
          "ARIA": {
            "ARIA": 8
          },
          "SEED": {
            "SEED": 6
          },
          "SM4": {
            "SM4": 6
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 30
        },
        "IBM": {
          "SSC": 4
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "STMicroelectronics": {
          "STM": 14
        },
        "Thales": {
          "Thales": 382
        }
      },
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Costa Graham",
      "/Bootloader Version": "1.1.1, 1.1.2, 1.1.4, or 1.1.5",
      "/Comments": "",
      "/Company": "",
      "/Company Name": "Thales.",
      "/ContentTypeId": "0x01010007F73A0A2200204682E8C9949BCBF44F",
      "/Copyright_Year": "2025",
      "/CreationDate": "D:20250317101144-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 25 for Word",
      "/Doc Part Number": "002-010935-003",
      "/Doc Revision": "U",
      "/Document Name": "LEVEL 3 NON-PROPRIETARY SECURITY POLICY",
      "/Document Subject": "Document Subject",
      "/Document_Name_Short": "COMMON CRITERIA USER GUIDANCE - PART 1",
      "/Firmware Version": "7.8.4 or 7.8.5",
      "/Hardware Parts": "808-000048-002, 808-000048-003, 808-000066-001, 808-000073-001 and 808-000073-002",
      "/Keywords": "",
      "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_ActionId": "a36b2600-da06-4249-9baf-2a7810e88f69",
      "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_ContentBits": "0",
      "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Enabled": "true",
      "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Method": "Privileged",
      "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Name": "Unrestricted",
      "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_SetDate": "2024-01-16T17:12:06Z",
      "/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_SiteId": "b64da4ac-e800-4cfc-8931-e607f720a1b8",
      "/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_ActionId": "bf3017e2-e8be-43e0-b729-443f3a2b9535",
      "/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_ContentBits": "0",
      "/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_Enabled": "true",
      "/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_Method": "Privileged",
      "/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_Name": "DIS OPEN",
      "/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_SetDate": "2023-08-14T14:24:25Z",
      "/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_SiteId": "6e603289-5e46-4e26-ac7c-03a85420a9a5",
      "/ModDate": "D:20250317101414-04\u002700\u0027",
      "/Module Name": "Thales Luna K7 Cryptographic Module",
      "/Producer": "Adobe PDF Library 25.1.208",
      "/Product Name": "Thales Luna K7 Cryptographic Module",
      "/Product Name Network": "Thales Luna Network HSM",
      "/Product Name PCIe": "Thales Luna PCIe HSM",
      "/Product_Net": "Thales Luna Network HSM",
      "/Product_PCIE": "Thales Luna PCIe HSM",
      "/Release Date": "January 31, 2025",
      "/SourceModified": "D:20250317140633",
      "/Subject": "",
      "/Title": "",
      "pdf_file_size_bytes": 2288518,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32518",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35774",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32519",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32619",
          "https://www.thalesdocs.com/",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32517",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32486",
          "https://supportportal.thalesgroup.com/csm",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32617",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/98",
          "https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/AES#5652",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32618",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32496",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32620"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 142
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_garbage": false,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_pdf_hash": "3a885884dd69995a40a45875557f1627e2bcb9e29efe984a8ecdda9ba82f619f",
    "policy_txt_hash": "7b3e12ae1dfd912c38d14f18dcefe8d8081d9b3daef9ae77c78c3286a28c7518"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/April 2024_010524_0757.pdf",
    "date_sunset": "2029-04-01",
    "description": "The Thales Luna K7 Cryptographic Module is a multi-chip embedded hardware cryptographic module in the form of a PCIe card which typically resides within a custom computing or secure communications appliance.",
    "embodiment": "Multi-Chip Embedded",
    "exceptions": [
      "Operational environment: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": "7.8.4 with bootloader version 1.1.1, 1.1.2, 1.1.4 or 1.1.5; 7.8.5 with bootloader version 1.1.1, 1.1.2, 1.1.4 or 1.1.5",
    "historical_reason": null,
    "hw_versions": "808-000048-002, 808-000048-003, 808-000066-001, 808-000073-001, 808-000073-002",
    "level": 3,
    "mentioned_certs": {},
    "module_name": "Thales Luna K7 Cryptographic Module",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-04-02",
        "lab": "LEIDOS CSTL",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-07-07",
        "lab": "LEIDOS CSTL",
        "validation_type": "Update"
      }
    ],
    "vendor": "Thales",
    "vendor_url": "http://cpl.thalesgroup.com"
  }
}