This page was not yet optimized for use on mobile
devices.
Thales Luna K7 Cryptographic Module
Certificate #4684
Webpage information
Security policy
Symmetric Algorithms
AES, AES192, AES-256, AES-, CAST5, RC2, RC5, RC4, DES, Triple-DES, TDEA, TDES, ARIA, SM4, SEED, HMAC, CMACAsymmetric Algorithms
ECDH, ECDSA, EdDSA, ECC, Diffie-Hellman, DH, DSAHash functions
SHA-1, SHA1, SHA224, SHA2, SHA-3, SHA3-224, SHA3-384, SHA3-512, SHA3-256, SHA3, MD5, RIPEMD-160, PBKDFSchemes
MAC, Key AgreementProtocols
SSLRandomness
TRNG, DRBG, RNG, RND, RBGElliptic Curves
P-224, P-256, P-384, P-521, P-192, curve P-384, curve P-521, B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, K-163, B-163, sect571r2, sect571k2, sect409r1, sect409k1, sect283r1, sect283k1, secp256k1, sect239k1, sect233r1, sect233k1, secp224k1, sect193r2, sect193r1, secp192k1, sect163r2, sect163r1, sect163k1, secp160r2, secp160r1, secp160k1, prime239v3, prime239v2, prime239v1, prime192v3, prime192v2, c2pnb368w1, c2pnb359v1, c2pnb304w1, c2pnb272w1, c2pnb239v1, c2pnb239v2, c2pnb239v3, c2pnb191v3, c2pnb191v2, c2pnb191v1, c2pnb163v1, c2pnb163v2, c2pnb163v3, Curve25519Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, XEX, XTSJavaCard API constants
SM2Trusted Execution Environments
PSP, SSCVendor
STM, ThalesSecurity level
level 3, Level 1, Level 3Side-channel analysis
physical probingStandards
FIPS 140-3, FIPS 180-4, FIPS 186-4, FIPS 197, FIPS 198-1, FIPS 202, FIPS 186-2, FIPS 140, PKCS #1, PKCS #11, PKCS#1, RFC 5639, RFC 7748, ISO/IEC 24759, ISO/IEC 19790:2012, ISO/IEC 24759:2017, X.509File metadata
| Author | Costa Graham |
|---|---|
| Creation date | D:20250317101144-04'00' |
| Modification date | D:20250317101414-04'00' |
| Pages | 142 |
| Creator | Acrobat PDFMaker 25 for Word |
| Producer | Adobe PDF Library 25.1.208 |
References
OutgoingHeuristics
No heuristics are available for this certificate.
References
Loading...
Updates Feed
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
Raw data
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4684,
"dgst": "4f2e3c02d4f030a3",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"RSA SigGen (FIPS186-4)C1717",
"HMAC-SHA3-384C1707",
"TDES-CBCC1707",
"KDF ANS 9.63A480",
"ECDSA SigGen (FIPS186-4)C1718",
"RSA SigVer (FIPS186-4)C1717",
"KDF ANS 9.42A480",
"ECDSA SigVer (FIPS186-4)C1718",
"HMAC-SHA2-512C1707",
"HMAC-SHA3-256C1707",
"Counter DRBGC1707",
"TDES-CFB64C1707",
"HMAC-SHA2-224C1707",
"KAS-IFCA481",
"KAS-ECC Sp800-56Ar3A480",
"KDF SP800-108C1707",
"RSA KeyGen (FIPS186-4)C1719",
"SHA3-512C1707",
"KTS-IFCA481",
"SHA3-224C1707",
"HMAC-SHA2-384C1707",
"SHA3-256C1707",
"HMAC-SHA-1C1707",
"HMAC-SHA2-256C1718",
"TDES-OFBC1707",
"HMAC-SHA3-512C1707",
"AES-CFB8C1707",
"AES-CBCC1707",
"AES-GCMC1707",
"TDES-CFB8C1707",
"AES-OFBC1707",
"AES-XTSC1707",
"DSA SigVer (FIPS186-4)C1707",
"SHA2-384C1707",
"KDA OneStep Sp800-56Cr1A480",
"DSA SigGen (FIPS186-4)C1707",
"KAS-FFC-SSC Sp800-56Ar3A480",
"TDES-ECBC1707",
"SHA2-512C1718",
"AES-KWPC1718",
"AES-CFB128C1707",
"KAS-ECC-SSC Sp800-56Ar3A480",
"SHA-1C1707",
"DSA KeyGen (FIPS186-4)C1718",
"AES-CTRC1707",
"DSA PQGGen (FIPS186-4)C1718",
"TDES-CTRC1707",
"SHA3-384C1707",
"ECDSA KeyGen (FIPS186-4)C1718",
"HMAC-SHA3-224C1707",
"AES-CMACC1707",
"SHAKE-128C1707",
"SHA2-256C1718",
"PBKDFA480",
"KDA OneStep SP800-56Cr2A480",
"SHAKE-256C1707",
"AES-ECBC1707",
"AES-KWC1718",
"SHA2-224C1707"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"1.1.5",
"1.1.2",
"7.8.5",
"1.1.4",
"1.1.1",
"7.8.4"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": {
"_type": "Set",
"elements": [
"90",
"98"
]
},
"indirectly_referenced_by": null,
"indirectly_referencing": {
"_type": "Set",
"elements": [
"90",
"98"
]
}
},
"policy_prunned_references": {
"_type": "Set",
"elements": [
"90",
"98"
]
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 115
},
"ECDH": {
"ECDH": 11
},
"ECDSA": {
"ECDSA": 39
},
"EdDSA": {
"EdDSA": 5
}
},
"FF": {
"DH": {
"DH": 4,
"Diffie-Hellman": 7
},
"DSA": {
"DSA": 16
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 14
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 27
},
"ECB": {
"ECB": 13
},
"GCM": {
"GCM": 19
},
"OFB": {
"OFB": 7
},
"XEX": {
"XEX": 2
},
"XTS": {
"XTS": 2
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"TLS": {
"SSL": {
"SSL": 2
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 20
},
"MAC": {
"MAC": 68
}
},
"device_model": {},
"ecc_curve": {
"Curve": {
"Curve25519": 1
},
"NIST": {
"B-163": 2,
"B-233": 8,
"B-283": 8,
"B-409": 8,
"B-571": 8,
"K-163": 2,
"K-233": 3,
"K-283": 8,
"K-409": 8,
"K-571": 8,
"P-192": 2,
"P-224": 8,
"P-256": 2,
"P-384": 21,
"P-521": 43,
"c2pnb163v1": 1,
"c2pnb163v2": 1,
"c2pnb163v3": 1,
"c2pnb191v1": 1,
"c2pnb191v2": 1,
"c2pnb191v3": 1,
"c2pnb239v1": 1,
"c2pnb239v2": 1,
"c2pnb239v3": 1,
"c2pnb272w1": 1,
"c2pnb304w1": 1,
"c2pnb359v1": 1,
"c2pnb368w1": 1,
"curve P-384": 7,
"curve P-521": 23,
"prime192v2": 1,
"prime192v3": 1,
"prime239v1": 1,
"prime239v2": 1,
"prime239v3": 1,
"secp160k1": 1,
"secp160r1": 1,
"secp160r2": 1,
"secp192k1": 1,
"secp224k1": 1,
"secp256k1": 1,
"sect163k1": 1,
"sect163r1": 1,
"sect163r2": 1,
"sect193r1": 1,
"sect193r2": 1,
"sect233k1": 1,
"sect233r1": 1,
"sect239k1": 1,
"sect283k1": 1,
"sect283r1": 1,
"sect409k1": 1,
"sect409r1": 1,
"sect571k2": 1,
"sect571r2": 1
}
},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#1": 4,
"#11": 2,
"#90": 1,
"#98": 24
}
},
"fips_certlike": {
"Certlike": {
"AES (128": 2,
"AES- 256": 26,
"AES-256": 12,
"AES11": 1,
"AES14": 1,
"AES192": 1,
"AES40": 1,
"AES45": 1,
"DES 11": 1,
"DSA KAT48": 1,
"DSA31": 1,
"DSA36": 1,
"Diffie-Hellman41": 1,
"HMAC- SHA1": 1,
"HMAC-SHA-1": 4,
"HMAC-SHA1": 4,
"HMAC30": 2,
"HMAC35": 2,
"PKCS #1": 5,
"PKCS #11": 4,
"PKCS#1": 4,
"RSA #1": 1,
"RSA PKCS #1": 1,
"RSA16": 1,
"RSA27": 1,
"RSA28": 1,
"RSA33": 1,
"RSA38": 1,
"RSA43": 1,
"RSA44": 1,
"SHA- 1": 1,
"SHA-1": 15,
"SHA-3": 4,
"SHA1": 13,
"SHA12": 1,
"SHA2": 1,
"SHA2- 224": 3,
"SHA2- 256": 7,
"SHA2- 384": 5,
"SHA2- 512": 6,
"SHA2-224": 32,
"SHA2-256": 50,
"SHA2-384": 45,
"SHA2-512": 92,
"SHA224": 1,
"SHA3": 2,
"SHA3- 224": 1,
"SHA3- 256": 2,
"SHA3- 384": 4,
"SHA3- 512": 4,
"SHA3-224": 23,
"SHA3-256": 23,
"SHA3-384": 21,
"SHA3-512": 27
}
},
"fips_security_level": {
"Level": {
"Level 1": 1,
"Level 3": 1,
"level 3": 2
}
},
"hash_function": {
"MD": {
"MD5": {
"MD5": 4
}
},
"PBKDF": {
"PBKDF": 14
},
"RIPEMD": {
"RIPEMD-160": 2
},
"SHA": {
"SHA1": {
"SHA-1": 15,
"SHA1": 13
},
"SHA2": {
"SHA2": 1,
"SHA224": 1
},
"SHA3": {
"SHA-3": 4,
"SHA3": 2,
"SHA3-224": 23,
"SHA3-256": 23,
"SHA3-384": 21,
"SHA3-512": 27
}
}
},
"ic_data_group": {},
"javacard_api_const": {
"curves": {
"SM2": 5
}
},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 199
},
"RNG": {
"RBG": 5,
"RND": 7,
"RNG": 3
},
"TRNG": {
"TRNG": 1
}
},
"side_channel_analysis": {
"SCA": {
"physical probing": 1
}
},
"standard_id": {
"FIPS": {
"FIPS 140": 2,
"FIPS 140-3": 36,
"FIPS 180-4": 2,
"FIPS 186-2": 1,
"FIPS 186-4": 42,
"FIPS 197": 7,
"FIPS 198-1": 2,
"FIPS 202": 5
},
"ISO": {
"ISO/IEC 19790:2012": 8,
"ISO/IEC 24759": 8,
"ISO/IEC 24759:2017": 3
},
"PKCS": {
"PKCS #1": 3,
"PKCS #11": 2,
"PKCS#1": 2
},
"RFC": {
"RFC 5639": 16,
"RFC 7748": 3
},
"X509": {
"X.509": 16
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 127,
"AES-": 28,
"AES-256": 12,
"AES192": 1
},
"CAST": {
"CAST5": 6
},
"RC": {
"RC2": 6,
"RC4": 2,
"RC5": 3
}
},
"DES": {
"3DES": {
"TDEA": 1,
"TDES": 2,
"Triple-DES": 16
},
"DES": {
"DES": 10
}
},
"constructions": {
"MAC": {
"CMAC": 12,
"HMAC": 37
}
},
"miscellaneous": {
"ARIA": {
"ARIA": 8
},
"SEED": {
"SEED": 6
},
"SM4": {
"SM4": 6
}
}
},
"tee_name": {
"AMD": {
"PSP": 30
},
"IBM": {
"SSC": 4
}
},
"tls_cipher_suite": {},
"vendor": {
"STMicroelectronics": {
"STM": 14
},
"Thales": {
"Thales": 382
}
},
"vulnerability": {}
},
"policy_metadata": {
"/Author": "Costa Graham",
"/Bootloader Version": "1.1.1, 1.1.2, 1.1.4, or 1.1.5",
"/Comments": "",
"/Company": "",
"/Company Name": "Thales.",
"/ContentTypeId": "0x01010007F73A0A2200204682E8C9949BCBF44F",
"/Copyright_Year": "2025",
"/CreationDate": "D:20250317101144-04\u002700\u0027",
"/Creator": "Acrobat PDFMaker 25 for Word",
"/Doc Part Number": "002-010935-003",
"/Doc Revision": "U",
"/Document Name": "LEVEL 3 NON-PROPRIETARY SECURITY POLICY",
"/Document Subject": "Document Subject",
"/Document_Name_Short": "COMMON CRITERIA USER GUIDANCE - PART 1",
"/Firmware Version": "7.8.4 or 7.8.5",
"/Hardware Parts": "808-000048-002, 808-000048-003, 808-000066-001, 808-000073-001 and 808-000073-002",
"/Keywords": "",
"/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_ActionId": "a36b2600-da06-4249-9baf-2a7810e88f69",
"/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_ContentBits": "0",
"/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Enabled": "true",
"/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Method": "Privileged",
"/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Name": "Unrestricted",
"/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_SetDate": "2024-01-16T17:12:06Z",
"/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_SiteId": "b64da4ac-e800-4cfc-8931-e607f720a1b8",
"/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_ActionId": "bf3017e2-e8be-43e0-b729-443f3a2b9535",
"/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_ContentBits": "0",
"/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_Enabled": "true",
"/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_Method": "Privileged",
"/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_Name": "DIS OPEN",
"/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_SetDate": "2023-08-14T14:24:25Z",
"/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_SiteId": "6e603289-5e46-4e26-ac7c-03a85420a9a5",
"/ModDate": "D:20250317101414-04\u002700\u0027",
"/Module Name": "Thales Luna K7 Cryptographic Module",
"/Producer": "Adobe PDF Library 25.1.208",
"/Product Name": "Thales Luna K7 Cryptographic Module",
"/Product Name Network": "Thales Luna Network HSM",
"/Product Name PCIe": "Thales Luna PCIe HSM",
"/Product_Net": "Thales Luna Network HSM",
"/Product_PCIE": "Thales Luna PCIe HSM",
"/Release Date": "January 31, 2025",
"/SourceModified": "D:20250317140633",
"/Subject": "",
"/Title": "",
"pdf_file_size_bytes": 2288518,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35774",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32486",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32619",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32496",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32618",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32518",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32519",
"https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/98",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32517",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32620",
"https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/AES#5652",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32617",
"https://supportportal.thalesgroup.com/csm",
"https://www.thalesdocs.com/"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 142
}
},
"state": {
"_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
"module_download_ok": true,
"module_extract_ok": true,
"policy_convert_ok": true,
"policy_download_ok": true,
"policy_extract_ok": true,
"policy_json_hash": null,
"policy_pdf_hash": "3a885884dd69995a40a45875557f1627e2bcb9e29efe984a8ecdda9ba82f619f",
"policy_txt_hash": "7b3e12ae1dfd912c38d14f18dcefe8d8081d9b3daef9ae77c78c3286a28c7518"
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/April 2024_010524_0757.pdf",
"date_sunset": "2029-04-01",
"description": "The Thales Luna K7 Cryptographic Module is a multi-chip embedded hardware cryptographic module in the form of a PCIe card which typically resides within a custom computing or secure communications appliance.",
"embodiment": "Multi-Chip Embedded",
"exceptions": [
"Operational environment: N/A",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": "7.8.4 with bootloader version 1.1.1, 1.1.2, 1.1.4 or 1.1.5; 7.8.5 with bootloader version 1.1.1, 1.1.2, 1.1.4 or 1.1.5",
"historical_reason": null,
"hw_versions": "808-000048-002, 808-000048-003, 808-000066-001, 808-000073-001, 808-000073-002",
"level": 3,
"mentioned_certs": {},
"module_name": "Thales Luna K7 Cryptographic Module",
"module_type": "Hardware",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2024-04-02",
"lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
"validation_type": "Initial"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2025-07-07",
"lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
"validation_type": "Update"
}
],
"vendor": "Thales",
"vendor_url": "http://cpl.thalesgroup.com"
}
}