www.hypersecu.com
HYPERSECU HyperPKI
Cryptographic Module
HYPERSECU INFORMATION SYSTEMS INC
200-6191 Westminster Hwy, Richmond BC, V7C 4V4 Canada
1-604-279-2000 | hypersecu.com
04/14/2026
Document Version: 1.0.0
FIPS 140-3 Non-Propriety Security
Policy
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
1 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Table of Contents
1 General...........................................................................................................5
1.1 Overview .....................................................................................................5
1.2 Security Levels .............................................................................................5
2 Cryptographic Module Specification .....................................................................6
2.1 Description...................................................................................................6
2.2 Tested and Vendor Affirmed Module Version and Identification ............................8
2.3 Excluded Components ...................................................................................9
2.4 Modes of Operation .......................................................................................9
2.5 Algorithms ...................................................................................................9
2.6 Security Function Implementations ................................................................11
2.7 Algorithm Specific Information ......................................................................16
2.8 RBG and Entropy.........................................................................................16
2.9 Key Generation...........................................................................................16
2.10 Key Establishment ...................................................................................17
2.11 Industry Protocols....................................................................................17
3 Cryptographic Module Interfaces.......................................................................17
3.1 Ports and Interfaces ....................................................................................17
4 Roles, Services, and Authentication...................................................................18
4.1 Authentication Methods ...............................................................................18
4.2 Roles.........................................................................................................20
4.3 Approved Services.......................................................................................20
4.4 Non-Approved Services ...............................................................................41
4.5 External Software/Firmware Loaded..............................................................41
5 Software/Firmware Security ............................................................................42
5.1 Integrity Techniques....................................................................................42
5.2 Initiate on Demand......................................................................................42
6 Operational Environment .................................................................................43
6.1 Operational Environment Type and Requirements ............................................43
7 Physical Security ............................................................................................44
7.1 Mechanisms and Actions Required .................................................................44
7.2 EFP/EFT Information....................................................................................44
7.3 Hardness Testing Temperature Ranges...........................................................45
8 Non-Invasive Security.....................................................................................46
8.1 Mitigation Techniques ..................................................................................46
9 Sensitive Security Parameters Management .......................................................47
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
2 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
9.1 Storage Areas.............................................................................................47
9.2 SSP Input-Output Methods ...........................................................................47
9.3 SSP Zeroization Methods..............................................................................48
9.4 SSPs .........................................................................................................50
9.5 Transitions .................................................................................................66
10 Self-Tests......................................................................................................67
10.1 Pre-Operational Self-Tests........................................................................67
10.2 Conditional Self-Tests ..............................................................................67
10.3 Periodic Self-Test Information....................................................................70
10.4 Error States ............................................................................................73
10.5 Operator Initiation of Self-Tests .................................................................73
11 Life-Cycle Assurance .......................................................................................73
11.1 Installation, Initialization, and Startup Procedures ........................................73
11.2 Administrator Guidance............................................................................74
11.3 Non-Administrator Guidance .....................................................................74
11.4 Design and Rules .....................................................................................74
11.5 Maintenance Requirements.......................................................................75
11.6 End of Life ..............................................................................................75
12 Mitigation of Other Attacks...............................................................................76
13 References and Definitions...............................................................................77
List of Figures
Figure 1: Module Boundary..........................................................................................6
Figure 2: Block Diagram..............................................................................................7
Figure 3: Module Appearance.......................................................................................8
List of Tables
Table 1: Security Levels ..............................................................................................5
Table 2: Tested Module Identification - Hardware...........................................................9
Table 3: Modes List and Description..............................................................................9
Table 4 : Approved Algorithms...................................................................................11
Table 5: Vendor-Affirmed Algorithms ..........................................................................11
Table 6: Security Function Implementations ................................................................15
Table 7: Entropy Certificates .....................................................................................16
Table 8: Entropy Sources ..........................................................................................16
Table 9: Ports and Interfaces.....................................................................................17
Table 10: Authentication Methods ..............................................................................19
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
3 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Table 11: Roles........................................................................................................20
Table 12: Approved Services .....................................................................................41
Table 13: Mechanisms and Actions Required................................................................44
Table 14: EFP/EFT Information ..................................................................................44
Table 15: Hardness Testing Temperatures...................................................................45
Table 16: Storage Areas ...........................................................................................47
Table 17: SSP Input-Output Methods..........................................................................48
Table 18: SSP Zeroization Methods ............................................................................49
Table 19: SSP Table 1...............................................................................................61
Table 20: SSP Table 2...............................................................................................66
Table 21: Pre-Operational Self-Tests ..........................................................................67
Table 22: Conditional Self-Tests.................................................................................70
Table 23: Pre-Operational Periodic Information ............................................................70
Table 24: Conditional Periodic Information ..................................................................71
Table 25: Error States ..............................................................................................73
Table 26: References ................................................................................................78
Table 27: Acronyms and Definitions............................................................................78
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
4 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Document History
Version
Release
Date
Description of Changes Document Owner Approved By
1.0.0
March 30,
2026
Original document JL JL
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
5 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
1 General
1.1 Overview
This document is the non-proprietary FIPS 140-3 Security Policy for the HyperPKI token. It
contains the security rules under which the module must operate and describes how this
module meets the requirements as specified in FIPS PUB 140-3 (Federal Information
Processing Standards Publication 140-3 for an overall Security Level 3 module.
1.2 Security Levels
The FIPS 140-3 security levels for the Module are as follows:
Section Title Security Level
1 General 3
2 Cryptographic module specification 3
3 Cryptographic module interfaces 3
4 Roles, services, and authentication 3
5 Software/Firmware security 3
6 Operational environment N/A
7 Physical security 3
8 Non-invasive security N/A
9 Sensitive security parameter management 3
10 Self-tests 3
11 Life-cycle assurance 3
12 Mitigation of other attacks N/A
Overall Level 3
Table 1: Security Levels
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
6 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
2 Cryptographic Module Specification
This HYPERSECU HyperPKI token module, hereafter denoted as the Module. The Module
supports multiple identity authentication system frameworks such as PKI/OTP/FIDO, among
which PKI includes three applications: HYP2003/HyperPKI-PIV/HyperPKI-OpenPGP. The OTP
functional unit complies with OATH standards. The PIV functional unit meets the specifications
NIST.SP.800-73-4. The OpenPGP functional unit is an ISO Smart Card Operating Systems.
2.1 Description
Purpose and Use:
The Module is intended for use by customers that require FIPS 140-3 cryptographic products,
the Module is intended to be used in digital signature, multi-factor authentication, data
encryption, etc.
Module Type: Hardware
Module Embodiment: MultiChipEmbed
Cryptographic Boundary:
The physical form of the Module is depicted in Figure 1. The Module is a multi-chip embedded
embodiment. The Module is a USB token containing the Chip Operating System (COS), which is
embedded in a HSC32K2 with PAA Integrated Circuit (IC) chip and has been developed to
support HYPERSECU USB tokens. The Module is designed to provide strong authentication and
identification and to support network login, secure online transactions, digital signatures, and
sensitive data protection.
HYP2003
Figure 1: Module Boundary
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
7 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Figure 2: Block Diagram
HYPERSECU USB Token
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
8 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Figure 3: Module Appearance
Model Description: There are two types, one without buttons and the other with buttons. In
the above Figure 3, the top row (A3 models – Blue and Purple) do not come with buttons, they
are only used for HYP2003 products. All other models (HSK9, HSK40, HSA4B, HSK49, HSK50
and HSK28) have a button which can be used for all functional units.
2.2 Tested and Vendor Affirmed Module Version and
Identification
The operator can correlate the module’s name and versioning information with the CMVP
validation record by following the instructions in the HYPERSECU HyperPKI Cryptographic
Module Administrator Guidance, page 31, Section 5.8 Get Device Info, #7 get version info.
Tested Module Identification – Hardware:
HYPERSECU HyperPKI cryptographic module is tested on the following operational environment.
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
9 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Model
and/or
Part
Number
Hardware
Version
Firmware
Version Processors Features
A3 V1.2 V1.3.02 HSC32K2 with PAA
HSK9 V1.0 V1.3.02 HSC32K2 with PAA
HSK40 V1.0 V1.3.02 HSC32K2 with PAA
HSA4B V1.0 V1.3.02 HSC32K2 with PAA
HSK49 V1.0 V1.3.02 HSC32K2 with PAA
HSK50 V1.0 V1.3.02 HSC32K2 with PAA
HSK28 V1.0 V1.3.02 HSC32K2 with PAA
Table 2: Tested Module Identification - Hardware
2.3 Excluded Components
The module does not exclude any components.
2.4 Modes of Operation
Modes List and Description:
Mode Name Description Type Status
Indicator
Approved
Mode
The module has only one mode of operation - the
Approved mode, which is entered after power up.
Approved LED on and
blink
Table 3: Modes List and Description
The module only supports Approved mode. IG 2.4.C scenario 2) is applied to the module, i.e. A
static code (9000 or 00) indicating the completion of service. The successful completion of a
service is an implicit indicator for the use of an approved service.
2.5 Algorithms
Approved Algorithms:
The Module implements the Approved cryptographic algorithms listed the table below.
Algorithm CAVP
Cert
Properties Reference
AES-CBC A4980 Direction - Decrypt, Encrypt Key Length -
128, 192, 256
SP 800-38A
AES-CMAC A4980 Direction - Generation, Verification Key
Length - 128, 192, 256
SP 800-38B
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
10 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Algorithm CAVP
Cert
Properties Reference
AES-ECB A4980 Direction - Decrypt, Encrypt Key Length -
128, 192, 256
SP 800-38A
AES-GCM A4980 Direction - Decrypt, Encrypt
IV Generation Mode - 8.2.2 Key Length -
128, 192, 256
SP 800-38D
Counter DRBG A4980 Prediction Resistance - Yes Mode - AES-
128
Derivation Function Enabled - Yes
SP 800-90A
Rev. 1
ECDSA KeyGen
(FIPS186-5)
A4980 Curve - P-256, P-384, P-521
Secret Generation Mode - testing
candidates
FIPS 186-5
ECDSA KeyVer
(FIPS186-5)
A4980 Curve - P-256, P-384, P-521 FIPS 186-5
ECDSA SigGen
(FIPS186-5) A4980
Curve - P-256, P-384, P-521
Hash Algorithm - SHA2-256, SHA2-384,
SHA2-512
Component - Yes
FIPS 186-5
ECDSA SigVer
(FIPS186-5)
A4980 Curve - P-256, P-384, P-521
Hash Algorithm - SHA2-256, SHA2-384,
SHA2-512
FIPS 186-5
HMAC-SHA-1 A4980 Key Length - Key Length: 8-2048
Increment 8
FIPS 198-1
HMAC-SHA2-256 A4980 Key Length - Key Length: 8-2048
Increment 8
FIPS 198-1
KAS-ECC Sp800-
56Ar3
A4980
Domain Parameter Generation Methods
- P-256
Function - Key Pair Generation Scheme -
ephemeralUnified - KAS Role - Responder
KDF Methods - twoStepKdf -
Key Length - 256
SP 800-56A
Rev. 3
KDF SP800-108 A4980 KDF Mode - Counter Supported Lengths -
Supported Lengths:
8-256 Increment 8
SP 800-108
Rev. 1
RSA KeyGen
(FIPS186-5) A4980
Key Generation Mode - probable Modulo -
2048, 3072, 4096
Primality Tests - 2powSecStr Private Key
Format - crt
FIPS 186-5
RSA SigGen
(FIPS186-5)
A4980 Modulo - 2048, 3072, 4096
Signature Type - pkcs1v1.5
FIPS 186-5
RSA SigVer
(FIPS186-5)
A4980 Modulo - 2048, 3072, 4096
Signature Type - pkcs1v1.5
FIPS 186-5
SHA-1 A4980 Message Length - Message Length: 160,
0-65536 Increment 8
FIPS 180-4
SHA2-256 A4980 Message Length - Message Length: 256,
0-65536 Increment 8
FIPS 180-4
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
11 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Algorithm CAVP
Cert
Properties Reference
SHA2-384 A4980 Message Length - Message Length: 384,
0-65536 Increment 8
FIPS 180-4
SHA2-512 A4980 Message Length - Message Length: 512,
0-65536 Increment 8
FIPS 180-4
Table 4 : Approved Algorithms
Vendor-Affirmed Algorithms:
The Module implements the FIPS Vendor Affirmed cryptographic algorithms listed below.
Name Properties Implementation Reference
CKG1 Key Type: Asymmetric and
Symmetric
N/A [133r2] section 4, example 1
and IG D.H
Table 5: Vendor-Affirmed Algorithms
Non-Approved, Allowed Algorithms:
N/A for this module.
Non-Approved, Allowed Algorithms with No Security Claimed:
N/A for this module.
Non-Approved, Not Allowed Algorithms:
N/A for this module.
2.6 Security Function Implementations
The SFI table shows the Security Function Implementations that the module implements:
Name Type Description Properties Algorithms
RSA_GEN_KEY_PAIR AsymKeyPa ir-
KeyGen
Asymmetric Key-Pair
Generation
Publications:Publications
: [FIPS 186-5], [SP800-
90A], [SP800-133r1],
[IG C.E]
RSA
KeyGen (FIPS186
-5): (A4980)
Counter DRBG: (A4980)
CKG1: ()
Key Type: Symmetric
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
12 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Type Description Properties Algorithms
ECC_GEN_KEY_PAIR AsymKeyPa ir-
KeyGen
Asymmetric Key-Pair
Generation
Publications:[FIPS 186-
5], [SP800-90A],
[SP800-133r1], [IG C.A]
ECDSA
KeyGen (FIPS186
-5): (A4980)
Counter DRBG: (A4980)
CKG1: ()
Key Type: Symmetric
AES_KEY_GEN CKG
Symmetric Key
Generation Sections 4
and 6.1 Direct
symmetric key
generation using
unmodified DRBG
output
Publications:[SP800-
90A], [IG D.H], [FIPS
197]
AES-CBC: (A4980)
Size: 128 AES-GCM:
(A4980)
Size: 128 AES-ECB:
(A4980)
Size: 128 Counter
DRBG: (A4980) CKG1:
()
Key Type: Symmetric
SESSIONKEY_GEN KBKDF
Symmetric Key
Generation using
KBKDF
Publications:[SP800-
108r1], [SP800-38B],
[FIPS 197]
AES-CMAC: (A4980)
Size: 128 KDF SP800-
108: (A4980)
Size: 128
RSA_SIG_GEN
DigSig-SigGen Digital Signature
Generation
Publications:[FIPS 186-
5], [SP800-
133r1], [IG C.E]
RSA
SigGen (FIPS186
-5): (A4980) SHA2-256:
(A4980) SHA2-384:
(A4980) SHA2-512:
(A4980)
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
13 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Type Description Properties Algorithms
RSA_SIG_VER
DigSig-SigVer Signature Verification Publications:[FIPS 186-
5], [IG C.E]
RSA
SigVer (FIPS186
-5): (A4980) SHA2-256:
(A4980) SHA2-384:
(A4980) SHA2-512:
(A4980)
ECC_SIG_GEN
DigSig-SigGen Digital Signature
Generation
Publications:[FIPS 186-
5], [SP800-
133r1], [IG C.A]
ECDSA
SigGen (FIPS186
-5): (A4980) SHA2-
256: (A4980)
SHA2-384: (A4980)
SHA2-
512: (A4980)
ECC_SIG_VER
DigSig-SigVer Signature Verification Publications:[FIPS 186-
5], [IG C.A]
ECDSA
SigVer (FIPS186
-5): (A4980) SHA2-256:
(A4980) SHA2-384:
(A4980) SHA2-512:
(A4980)
ECC_KEY_VER AsymKeyPa ir-
KeyVer
Check the validity of
the public key Publications:[FIPS 186-
5], [IG C.A]
ECDSA
KeyVer (FIPS186
-5): (A4980)
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
14 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Type Description Properties Algorithms
DRBG_GEN DRBG Random Number
Generation
Publications:[SP800-
90A], [IG D.L]
Counter DRBG:
(A4980)
ENT_GEN ENT-ESV Entropy Source Publications:[SP800-
90B], [IG 9.3.A], [IG
D.J] [IG D.O]
SHAREDSECRETKEY_GE
N_KAS
KAS-Full
Key Agreement Shared
Secret Calculation
[56Ar3]
Key Derivation KDA
[56Cr2]
IG:D.F Scenario 2,
path 2, end-to-end
Caveat:Key
establishment
methodology provides
128 bits of security
strength Key
confirmation:No Key
derivation:KDA (tested
as part KAS
certificate)
KAS-ECC Sp800-56Ar3:
(A4980)
AES_ENC_AUTH
BC-
AuthEncrypt
Block Cipher Publications:[FIPS 197]
AES-CMAC: (A4980)
Sizes: 128
AES-GCM: (A4980)
Size: 128
AES_ENC BC-
UnAuthEncrypt
Block Cipher Publications:[FIPS 197]
AES-CBC: (A4980) AES-
ECB:
(A4980)
AES_DEC_AUTH
BC-
AuthDecrypt
Block Cipher Publications:[FIPS 197]
AES-CMAC: (A4980)
Size: 128 AES-GCM:
(A4980)
Size: 128
AES_DEC
BC-
UnAuthDecrypt
Block Cipher Publications:[FIPS 197]
AES-CBC: (A4980) AES-
ECB:
(A4980)
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
15 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Type Description Properties Algorithms
HMAC_GEN MAC
Message
Authentication
Generation
Publications:[FIPS19 8-
1] [IG C.B]
HMAC-SHA-1: (A4980)
HMAC-SHA2-256:
(A4980) SHA-1:
(A4980) SHA2-256:
(A4980)
KTS_SCP03_WRAP
KTS-
Unwrap
used as SCP03
Standard:SP 800-38F
IG D.G:Approved
Caveat:Key
establishment
methodology provides
128 bits of security
strength
AES-CBC: (A4980)
Sizes: 128 AES-CMAC:
(A4980)
Sizes: 128
KTS_AESGCM_WRAP KTS-
Unwrap KTS-
Wrap
SP800-38D
Based on IG D.G
Standard:SP 800-38F
IG D.G:Approved
Caveat:Key
establishment
methodology provides
128 bits of
security strength
AES-
GCM: (A4980)
Sizes: 128
KTS_CTAP_WRAP
KTS-
Unwrap KTS-
Wrap
Key Wrapping Based
on IG D.G
Standard:SP 800-38F
IG D.G:Approved
Caveat:Key
establishment
methodology provides
128 bits of security
strength
AES-CBC: (A4980)
Sizes: 128 HMAC-SHA2-
256:
(A4980)
SHA_CAL SHA
Secure Hash Standard
Publications: [FIPS 180-
4], [IG C.B]
SHA2-256: (A4980)
SHA2-384: (A4980)
SHA2-
512: (A4980)
Table 6: Security Function Implementations
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
16 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
2.7 Algorithm Specific Information
AES GCM IV Uniqueness
FIPS140-3 IG C.H, Option 2
The IV is generated internally at its entirety randomly.
The generation uses an Approved DRBG (Cert. #A4980) that is internal to the module’s
boundary.
The IV length shall be at least 96 bits (per SP 800-38D).
KAS [56Ar3] - Per [IG] D.F Scenario 2 path (2), compliant key agreement scheme where
testing is performed end-to-end for the shared secret computation and a KDF compliant with
HKDF (2step KDF).
The Module obtains the [FIPS140-3_IG] D.F required key agreement assurances [SP800-
56Ar3] in accordance with Section 5.6.2.
2.8 RBG and Entropy
The scenario 1(a) in IG 9.3.A is applied to the module, the security strength of the DRBG
seeded by the entropy source is 128-bit.
According to table 4 of the ESV Public Use Document, to reach 128 bits of strength, at least
581 bits of random nonce are needed to seed the DRBG. A 640-bit nonce is used in the
module, so the DRBG entropy strength is 128 bits.
Cert Number Vendor Name
E134 Feitian Technologies Co., Ltd
Table 7: Entropy Certificates
The Module uses the following entropy sources:
Name Type Operational
Environment
Sample
Size
Entropy
per
Sample
Conditioning
Component
HSEC_ES Physical HSEC HSC 1 bit 0.3308 N/A
Table 8: Entropy Sources
2.9 Key Generation
For Key Generation, see Section 2.5 and Section 2.6 above.
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
17 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
2.10 Key Establishment
Key Agreement Information
For Key Agreement, see Section 2.5 and Section 2.6 above.
Key Transport Information
For Key Transport, see Section 2.5 and Section 2.6 above.
2.11 Industry Protocols
The module does not support any industry protocols that would be of interest to this standard.
3 Cryptographic Module Interfaces
3.1 Ports and Interfaces
The Module’s ports and associated FIPS defined logical interface categories are listed below.
Physical Port Logical
Interface(s)
Data That Passes
Power Supply 2 Pins Power Vcc Vdd 1.62-5.5V
Touch Button 1 Pin Control Input Physical input
LED 1 Pin Status Output Physical output
USB(D+/D-) 2 Pins
Data Input
Data Output
Control Input
Status Output
Primary physical interface (USB) for all service
data
Table 9: Ports and Interfaces
NOTE: The module does not support Control Output.
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
18 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
4 Roles, Services, and Authentication
4.1 Authentication Methods
Method Name Description Security
Mechanism
Strength Each Attempt Strength per
Minute
Authentication_PIN
A role is
authenticated to the
Module console with
a PIN
mechanism The PIN
must be changed by
the CO after first
authentication with
default data. The
Module enforced a
minimum size of 8
ASCII
characters. The
number of incorrect
attempts for PIN is
3-15,
which can be set to a
maximum of 15
times and a
minimum of 3
times.
Memorized
Secrets
PIN8-63 characters PIN,
including numbers, letters,
and special characters.
Therefore, the probability of
successful attempt is 1/95^8
Each authentication
attempt takes
approximately 60
ms which allows a
maximum of 15
attempts per
minute.
Therefore, the
probability of
successfully
authenticating to
the module within
one minute through
random attempts is
15/95^8
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
19 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Method Name Description Security
Mechanism
Strength Each Attempt Strength per
Minute
Authentication_ AuthKey
The identity is
authenticated to the
module with a
challenge-response
mechanism (Cert.
#A4980).
The entity gets
challenge from the
module then
encrypts it
resulting in
cryptogram using
Auth key.
The cryptogram is
sent back and
decrypted in the
module using same
key, then the module
check if the result is
matched with
original challenge.
The Auth key MUST
be changed to
specific value for
each module by the
CO after first
authentication with
default data. The
Auth key is generally
a random number
automatically
generated by HSM.
The
number of incorrect
attempts for Auth
key is 3-15, which
can be set to a
maximum of 15
times and a
minimum of 3
times.
AES-ECB
(A4980)
128-bit AES-ECB Key
Challenge-Response A
minimum 16-byte (128-bit)
binary string has a
probability that a random
attempt will succeed or a
false acceptance will occur of
1/2^128.
Each authentication
attempt takes
approximately 60
ms which allows a
maximum of 15
attempts per
minute.
Therefore, the
probability of
successfully
authenticating
to the module within
one minute through
random attempts is
15/2^128 .
Table 10: Authentication Methods
All authentication states are all stored in RAM, so they are cleared automatically once the
module is powered down.
NOTE: Authentication-PIN is an abstract noun that includes the PIN of a HYP2003 unit,
PIN/PUK of PIV unit, PIN of FIDO unit, AccessiCode of OTP unit, PGP User PIN(PW1)/ PGP
Admin PIN(PW3) of OpenPGP unit.
Authentication-AuthKey is an abstract noun that includes the Device authenticate key of a
universal service unit, the External Auth Key of a HYP2003 unit, and the PIV Authentication
Key of a PIV unit.
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
20 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
4.2 Roles
The Module supports four distinct operator roles, User, Admin, Cryptographic Officer (CO) and
Unauth. The CO role is responsible for device authentication, resetting applications and other
roles' authentication data (User PINs, etc). The Admin role is responsible for configuring SSPs
and managing User identities (such as unblock a User identity in the PIV application). The User
role is responsible for performing cryptographic operations to utilize the module as an
authenticator. The unauthenticated role can only access some non-operational SSP services,
Such as Select functional unit, get a challenge, read non-security relevant information, self-
tests, etc.
The Module does not support a maintenance role.
The Module does not support concurrent operators.
The Roles Table below lists all operator roles supported by the Module.
Name Type Operator Type Authentication Methods
CO Identity Crypto Officer Authentication_ AuthKey
Admin Identity User Authentication_PIN
Authentication_ AuthKey
User Identity User Authentication_PIN
UnAuth Role Unauthenticated None
Table 11: Roles
4.3 Approved Services
All approved services implemented by the Module are listed in the table below:
The SSPs modes of access shown in the table below are defined as:
• G = Generate: The Module generates or derives the SSP.
• R = Read: The SSP is read from the Module (e.g., the SSP is output).
• W = Write: The SSP is updated, imported, or written to the Module (SSP is input).
• E = Execute: The Module uses the SSP in performing a cryptographic operation.
• Z = Zeroize: The Module zeroizes the SSP
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
21 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
SELECT
Select functional
unit
9000
or error
status
Command
with AID
FCI (File
Control
Information) None
Unauthenticat
ed
KSenc: Z
KSmac: Z
Get Device
Info
Get device
information
content including
versioning
information and
show
status
9000
or error
status
Command
without input
parameter
Device Info
None
Unauthenticat
ed
Get Challenge
Request random
data that will be
used as a
challenge within
the Device
Authenticate
service
9000
or error
status
Command
with expected
data length
random value DRBG_GEN ENT_GEN
Unauthenticat
ed
DRBG V: G,Z
DRBG
Seed: G
DRBG Key:
G,Z
Device
Authenticate
Request
administrator
privileges
9000
or error
status
Kid and cipher
text N/A AES_DEC_AUTH
CO
- Device
authentic ate
key: E
Update key
Change Device
authenticate key,
INIT_KEYenc and
INIT_KEY
mac
9000
or error
status cipher text N/A AES_DEC
CO
KSenc: E
KSmac: E
Device
authenticate
key: W,E,Z
- INIT_KEY
enc: W,Z
- INIT_KEY
mac: W,Z
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
22 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
GP
Initialize
Update
Create Secure
Channel Session
9000
or error
status
Host random
Card random cipher text SESSIONKEY_GEN
Admin
- INIT_KEY
enc: E
- INIT_KEY
mac: E
KSenc: G
KSmac: G
User
- INIT_KEY
enc: E
- INIT_KEY
mac: E
KSenc: G
KSmac: G
GP
External
Authenticate
This service may
also be used to
both authenticate
and initiate a
secure session
with an external
entity.
9000
or error
status cipher text N/A SESSIONKEY_GEN
Admin
KSenc: E
KSmac: E
User
KSenc: E
KSmac: E
Terminate
token
The token into
terminate state.
9000
or error
status
Command
without input
parameter
N/A None
CO
DRBG-EI: Z
DRBG V: Z
- DRBG Key: Z
- Managing
Key: Z -
Device
authenticate
key: Z -
INIT_KEYenc:
Z -
INIT_KEYmac:
Z - KSenc: Z -
KSmac: Z -
AES-GCM Key:
Z - FIDO
Device ECDSA
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
23 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
Private Key: Z
- FIDO Device
ECDSA Public
Key: Z - FIDO
User ECDSA
Private Key: Z
- FIDO User
ECDSA Public
Key: Z - FIDO
Agreement
ECC Private
Key: Z - FIDO
Agreement
ECC Public
Key: Z - FIDO
Agreement
sharedSecret:
Z - FIDO
SharedSecret
AES Key: Z -
FIDO
SharedSecret
HMAC Key: Z -
FIDO
PinUvAuthToke
n: Z - FIDO
PIN: Z - PIV
Authentication
Key: Z - PIV
ECC Signature
Private Key: Z
- PIV ECC
verification
Public Key: Z -
PIV RSA
Signature
Private Key: Z
- PIV RSA
verification
Public Key: Z -
PIV User PIN:
Z - PIV PUK
PIN: Z - 2003
Internal
Auth Key: Z -
2003 External
Auth Key: Z -
2003 PIN: Z -
2003 PSO
calculation
key: Z - 2003
Unblock PIN: Z
- 2003 RSA
Private Key: Z
- 2003 RSA
Public Key: Z -
2003 ECDSA
Private Key: Z
- 2003 ECDSA
Public Key: Z -
OTP HMAC
Seed Key: Z -
OTP
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
24 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
AccessCode: Z
- PGP Admin
PIN(PW3): Z -
PGP User
PIN(PW1): Z -
PGP Resetting
Code: Z - PGP
Signature
Private Key: Z
- PGP
Verification
Public Key: Z -
External
Agreement
ECC Public
Key: Z - DRBG
Seed: Z - AES-
GCM IV: Z
Manage
Security
Environment
(MSE)
Prepares the
Module for the
subsequent
commands,
Perform Security
Operation.
9000
or error
status
Command
without input
parameter N/A None
User Admin
Hash
Performs a hash
using SHA-256,
SHA-384,
or SHA-512.
9000
or error
status message
Hash value
SHA_CAL
Unauthenticat
ed
Read Binary
Allows read
access to a binary
file. A binary file
is a file whose
content is a
sequential string
of
bits.
9000
or error
status
Command
with file info
Binary
database None
Admin User
Update Binary
Allows write
access to a binary
file.
9000
or error
status
Binary data N/A None Admin User
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
25 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
Read Record
Allows read
access to a
record. A record
is a type of data
storage structure
as defined within
ISO 7816.
Records
are stored in
files.
9000
or error
status
Command
With file info Record data None Admin User
Update Record
Allows write
access to a
record
9000
or error
status
Record data N/A None Admin User
Append Record
Allows a record to
be append
9000
or error
status
Record data N/A None Admin User
Internal
Authenticate
Authenticate the
cryptographic
module by an
external entity
NOTE: In
order for this
service to be
utilized, the
external entity
must have
privileged access
to the referenced
key.
9000
or error
status
Random
data
cipher text AES_ENC
Admin
- 2003
Internal Auth
Key: E
User
- 2003
Internal Auth
Key: E
External
Authenticate
Authenticates an
external
entity by the
cryptographic
module.
9000
or error
status
cipher text N/A AES_DEC
Admin
- 2003
External
Auth Key: E
User
- 2003
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
26 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
NOTE:
Prerequisite to
this service is the
use of Get
Challenge
service.
The key as
referenced within
the service call
exists under the
current file
External Auth
Key: E
Verify PIN
Provides PIN
verification.
9000
or error
status PIN data N/A
KTS_SCP03_WRA P
Admin
- 2003
PIN: E
KSenc: E
KSmac: E
User
KSenc: E
KSmac: E
- 2003
PIN: E
Change
Reference
Data
Modify the PIN
9000
or error
status
PIN and new
PIN data N/A
KTS_SCP03_WRA P
Admin
- 2003
PIN: W,E
KSenc: E
KSmac: E
User
- 2003
PIN: W,E
KSenc: E
KSmac: E
Reset Retry
Counter
Resets the retry
counter
9000 or error
status
Command
without input
parameter
N/A KTS_SCP03_WRA P User
- KSenc: E
- KSmac: E Admin
- KSenc: E
- KSmac: E
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
27 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
Generate
Asymmetric
Key Pair
Generates an
Asymmetric key
pair.
9000
or error status
Command
without input
parameter N/A
RSA_GEN_KEY_P AIR
ECC_GEN_KEY_P AIR
Admin
DRBG-
EI: G,E
- 2003
RSA
Private Key: G
- 2003
RSA
Public Key: G
- 2003
ECDSA
Private Key: G
- 2003
ECDSA
Public Key: G
DRBG
Seed: G,E
User
DRBG-
EI: G,E
- 2003
RSA
Private Key: G
- 2003
RSA
Public Key: G
- 2003
ECDSA
Private Key: G
- 2003
ECDSA
Public Key: G
- DRBG
Seed: G,E
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
28 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
Encrypt
Performs an
encrypt operation
using an
Approved security
function.
9000
or error status Kid and plain
text
cipher text
AES_ENC
Admin
- 2003
PSO
calculation key: E
-
Managing Key: E
User
- 2003
PSO
calculation key: E
-
Managing Key: E
Decrypt
Performs a
decrypt operation.
9000
or error status Kid and
cipher text plain text AES_DEC
Admin
- 2003
PSO
calculation key: E
-
Managing Key: E
User
- 2003
PSO
calculation key: E
-
Managing Key: E
Verify Digital
Signature
Verifies a digital
signature using
RSA PKCS#1 or
ECDSA
9000
or error status
Signature
and kid
N/A
RSA_SIG_VER
ECC_SIG_VER
ECC_KEY_VER
Admin
- 2003
RSA
Public Key: E
- 2003
ECDSA
Public Key: E User
- 2003
RSA
Public
Key: E
- 2003
ECDSA
Public Key: E
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
29 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
Generate
Digital
Signature
Generates a
digital signature
using RSA
PKCS#1 or
ECDSA.
9000
or error status message and
kid
Signature RSA_SIG_GEN
ECC_SIG_GEN
Admin
- 2003
RSA
Private Key: E
- 2003
ECDSA
Private Key: E
User
- 2003
RSA
Private Key: E
- 2003
ECDSA
Private Key: E
Verify
Cryptographic
Checksum
Performs AES
CMAC
verification.
9000
or error status cipher text
N/A AES_ENC_AUTH
Admin
- 2003
PSO
calculation key: E
User
- 2003
PSO
calculation key: E
Compute
Cryptographic
Checksum
Compute AES
CMAC.
9000
or error status
plain text
cipher text
AES_ENC_AUTH
Admin
- 2003
PSO
calculation key: E
User
- 2003
PSO
calculation key: E
Create File Create a file.
9000
or error status
Command
with file info N/A None Admin
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
30 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
Delete File Delete a File.
9000
or error status Command
with file info N/A None
Admin
- 2003
Internal Auth Key:
Z
- 2003
External Auth
Key: Z
- 2003
PIN: Z
- 2003
Unblock PIN: Z
- 2003
RSA
Private Key: Z
- 2003
RSA
Public Key: Z
- 2003
ECDSA
Private Key: Z
- 2003
ECDSA
Public Key: Z
Install Secret
This service is
used to enter AES
keys, and PINs.
SSPs
which may be
entered are as
follows: * Internal
Auth Key *
External Auth Key
* Symmetric Key
* PIN
9000
or error status
Encrypted
Symmetric
Key or pin N/A
KTS_SCP03_WRA P
Admin
- 2003
Internal Auth Key:
W
- 2003
External Auth
Key: W
- 2003
PSO
calculation key: W
KSenc: E
KSmac: E
- 2003
PIN: W
- 2003
Unblock PIN: W
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
31 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
Get File List
Allows the
reading of the
FID list of child
files of the
current file
9000
or error
status
Command
with file File info None
Admin User
Read Public Key Allows the
output of a
public key.
9000
or error
status
Command
with key info
RSA/ECC
Public Key None
Admin
- 2003
RSA
Public Key: R
- 2003
ECDSA
Public Key: R User
- 2003
RSA
Public Key: R
- 2003
ECDSA
Public Key: R
Make Credential
This service is
used to
generate a new
credential in the
module
00 or
error
status
Encrypted
Device ECDSA
Private Key
and message
CredenticalID
and X.509
certificate
ECC_GEN_KEY_P AIR
ECC_SIG_GEN
AES_ENC_AUTH
KTS_AESGCM_WR AP
User
DRBG-
EI: G,E
DRBG V: G,E
AES-GCM Key: E
FIDO
Device ECDSA
Private Key: E
FIDO
User ECDSA
Private Key:
G,R,W
FIDO
Device ECDSA
Public Key: R
AES-GCM IV: E
DRBG
Seed: G,E
DRBG Key: G,E
FIDO
User ECDSA
Public Key: G,R
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
32 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
Get Attestation
This service is
using
Registration's
credential to
signature
00 or
error
status
Encrypted
User ECDSA
Private Key
and message
Signature
ECC_SIG_GEN
ECC_SIG_VER
AES_DEC_AUTH
KTS_AESGCM_WR AP
User
DRBG-
EI: G,E
DRBG V: G,E
AES-GCM Key: E
AES-GCM IV: E
DRBG
Seed: G,E
DRBG Key: G,E
FIDO
User ECDSA
Private Key: E
FIDO
User ECDSA
Public Key: E
Get Next
Attestation
The client calls
this service
when the
Attestation
response
contains the
number of
credentials
member and the
number of
credentials
exceeds 1.
OK
or error
status00
or error
status
Command
without input
parameter
Signature ECC_SIG_GEN
User
DRBG-
EI: G,E
DRBG V: G,E
AES-GCM Key: E
DRBG
Seed: G,E
DRBG Key: G,E
Get Information Device
Information
00 or
error
status
Command
without input
parameter
Version None Unauthenticated
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
33 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
PIN
Service
This service is
used by the
platform to
establish the
sharedSecret
key, setting a
new user PIN,
changing
existing user
PIN, and getting
User PinUvAuth
Token from the
module
00 or
error
status
PIN PinUvAuthTok
en
ECC_GEN_KEY_P AIR
AES_KEY_GEN
ECC_KEY_VER
SHAREDSECRETK
EY_GEN_KAS
AES_ENC_AUTH
HMAC_GEN
KTS_CTAP_WRAP
User
FIDO PIN: W,E
FIDO
PinUvAuthToken:
G,R,E
FIDO
SharedSecret AES
Key: G,E
FIDO
SharedSecret
HMAC Key: G,E
FIDO
Agreement
sharedSecret: G,E
FIDO
Agreement ECC
Public Key: G,R
- External
Agreement ECC
Public Key: W,E
- Managing Key:
G
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
34 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
FIDO
Reset
Zeroization
00 or
error
status
Command
without input
parameter N/A AES_KEY_GEN DRBG_GEN
CO
FIDO
User ECDSA
Private Key: Z
FIDO
User ECDSA
Public Key: Z
FIDO
Agreement ECC
Private Key: Z
FIDO
Agreement ECC
Public Key: Z
FIDO
Agreement
sharedSecret: Z
FIDO
SharedSe cret
AES Key: Z
FIDO
SharedSecret
HMAC
Key: Z
FIDO
PinUvAuthToken:
Z
FIDO PIN: Z
AES-GCM Key: G
Credential
Management
Listing
credentials and
deleting
crendentials
00 or
error
status
pinUvAuthPara
m
N/A AES_ENC HMAC_GEN
KTS_CTAP_WRAP
User
- FIDO
PinUvAuthToken:
E
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
35 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
authenticate
orConfig
Used to
configure
various
authenticate or
features through
the use of its
subcommands.
00 or
error
status
pinUvAuthPara
m
N/A AES_ENC HMAC_GEN
User
- FIDO
PinUvAuthToken:
E
PIV GET DATA
This service is
used to read
data object
9000
or error
status
Command
without input
parameter data object None
User
PIV ECC
verification Public
Key: R
PIV RSA
verification Public
Key: R
PIV Verify PIN
This service is
used to verify
the PIN.
9000
or error
status PIN N/A KTS_SCP03_WRA P
User
KSenc: E
KSmac: E
PIV User PIN: W,E
PIV Verify PUK
This service is
used to verify
the PUK.
9000
or error
status PUK N/A KTS_SCP03_WRA P
Admin
KSenc: E
KSmac: E
PIV PUK PIN: W,E
GeneralAuth
(Symmetric
Key)
This service is
used to external
and mutual
authenticate
with PIV
Symmetric
Key
9000
or error
status
Random data
and cipher
text
N/A AES_ENC_AUTH AES_ENC
User
- DRBG-EI: E
- PIV
Authentication
Key: E
PIV Reset
Reset PIV card
state and delete
all stored
information
Zeroization
9000
or error
status
Command
without input
parameter
N/A SHA_CAL
CO - PIV User
PIN: Z - PIV PUK
PIN: Z
- PIV
Authentication
Key: Z - PIV ECC
Signature Private
Key: Z - PIV ECC
verification Public
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
36 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
Key: Z - PIV RSA
Signature Private
Key: Z - PIV RSA
verification Public
Key: Z
Set
Authentication
Key
This service is
used to change
Authentication
key (PIV
Symmetric Key)
9000
or error
status
Encrypted
Authentication
Key N/A
AES_ENC AES_DEC
KTS_SCP03_WRA P
Admin
- PIV
Authentication
Key: W,E
-
Managing Key: E
Change PUK
This service is
used to change
PUK
9000
or error
status PUK N/A KTS_SCP03_WRA P
Admin
PIV PUK PIN: W,E
KSenc: E
KSmac: E
Change PIN
This service is
used to change
PIN
9000
or error
status PIN and new
PIN
N/A KTS_SCP03_WRA P
User
PIV User PIN: W,E
KSenc: E
KSmac: E
Unblock PIN
(Reset retry
counter)
This service is
used to reset
retry counter
and set new
user
PIN with known
PUK
9000
or error
status
New PIN and
PUK N/A
KTS_SCP03_WRA P
Admin
PIV User PIN: W,E
PIV PUK PIN: W,E
KSenc: E
- KSmac: E
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
37 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
Generate
Asymmetric Key
This service is
used to
generate an
asymmetric key
9000
or error
status
Command
with Key
length
Asymmetric
Public key
RSA_GEN_KEY_P AIR
ECC_GEN_KEY_P AIR
Admin
- DRBG V: G,Z
PIV ECC
Signature Private
Key: G
PIV ECC
verification Public
Key: G
PIV RSA
Signature Private
Key: G
PIV RSA
verification Public
Key: G
DRBG Key: G,Z
DRBG
Seed: G,E
DRBG-
EI: G,E
GeneralAuth
(RSA/ECD SA)
This service is
used to
generate
signature with
asymmetric key
9000
or error
status message Signature RSA_SIG_GEN
ECC_SIG_GEN
User
PIV ECC
Signature Private
Key: E
PIV RSA
Signature Private
Key: E
PIV Put Data
This service is
used to write
data
(certificate, ID
and etc.)
9000
or error
status
Data object
N/A None Admin
Personalization
OTP
Add a new entry
and initialize its
seed key
9000
or error
status
Seed key N/A
KTS_SCP03_WRA P User
- OTP HMAC
Seed Key: W
KSenc: E
KSmac: E
DRBG V: E
- OTP
AccessCode: E
DRBG
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
38 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
Key: E
DRBG
Seed: G,E
DRBG-
EI: G,E
Delete OTP
Remove an
entry and its
seed key.
9000
or error
status
Command
without input
parameter N/A None
User
OTP
AccessCode: E
OTP HMAC
Seed Key: Z
List
List all the
names of the
entries.
9000
or error
status
Command
without input
parameter
Slot info None User
Calculate OTP
Calculate the
OTP value for an
entry.
9000
or error
status
Command
without input
parameter
6-digit OTP
value or 8-
digit OTP
value HMAC_GEN
User
OTP HMAC
Seed Key: E
OTP
AccessCode: E
OTP Reset
Reset the applet
to manufactory
default settings.
9000
or error
status
Command
without input
parameter
N/A None
CO
- OTP HMAC
Seed Key: Z
Verify
AccessCode
Verify user
AccessCode
9000
or error
status
AccessCode N/A KTS_SCP03_WRA P
User
- OTP
AccessCode: E
Change
AccessCode
Change user
AccessCode
9000
or error
status
AccessCode N/A KTS_SCP03_WRA P
User
- OTP
AccessCode: W,E
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
39 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
Emit OTP from
slot
When the device
is powered on
and the user
presses the
button, the
device outputs a
6-byte or 8-byte
password
9000
or error
status
press-button
6-digit OTP
value or 8-
digit OTP
value HMAC_GEN
User
- OTP HMAC
Seed Key: E
SELECT DATA
Select a current
DO, a following
GET DATA
or PUT DATA will
access this
current DO
9000
or error
status DO Data N/A None
Unauthenticated
VERIFY
Verify using user
PGP User
PIN(PW1)
or administrator
PGP Admin
PIN(PW3)
9000
or error
status
PGP
User PIN(PW1
) or PGP
Admin
PIN(PW3
)
N/A
KTS_SCP03_WRA P
Admin
PGP
Admin PIN(PW3)
: E
User
PGP
User PIN(PW1)
: E
OpenPGP
CHANGE
REFEREN CE
DATA
Change user
PGP User
PIN(PW1)
or administrator
PGP Admin
PIN(PW3)
9000
or error
status
Command
with data info N/A
KTS_SCP03_WRA P
Admin
PGP
Admin PIN(PW3)
: W,E
User
PGP
User PIN(PW1)
: W,E
OpenPGP RESET
RETRY
COUNTER
Reset PGP
User PIN(PW1)
counter and set
new PGP User
PIN(PW1)
using PGP
Admin PIN(PW3)
or Resetting
Code.
9000
or error
status
PW1 or
PW3/Resetting
Code
N/A KTS_SCP03_WRA P Admin
- PGP
Admin PIN(PW3)
: W,E
PGP
User PIN(PW1)
: W
User
PGP
User PIN(PW1)
: W
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
40 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
PGP
Resetting Code:
W,E
GET DATA
Read protected
or unprotected
Data Object
9000
or error
status
Command
without input
parameter Data Object None
User
- PGP
User PIN(PW1)
: E
Unauthenticated
PUT DATA
Write data
objects except
user writable
data objects.
9000
or error
status
Data to be
written None
KTS_SCP03_WRA P
Admin
PGP
Resetting Code:
W
PGP
Admin PIN(PW3)
: E
COMPUTE
DIGITAL
SIGNATU RE
Perform
signature
primitive with
signature
Private Key
9000
or error
status
message and
kid Signature RSA_SIG_GEN
User
- PGP
Signature Private
Key: E
OpenPGP
GENERATE
ASYMMETRIC
KEY
Generate
asymmetric key
pair
9000
or error
status
Command
without input
parameter
RSA
public key
RSA_GEN_KEY_P AIR
Admin
DRBG V: G,E
PGP
Admin PIN(PW3)
: E
PGP
Signature Private
Key: G
PGP Verification
Public Key: G,R
DRBG Key: G,E
DRBG
Seed: G,E
DRBG-
EI: G,E
TERMINATE DF
This command is
designed to
renew a card in
case of blocked
passwords
or other
problems.
9000
or error
status
Command
without input
parameter N/A None
Admin
- PGP
Admin PIN(PW3)
: E
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
41 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Indicator Inputs Outputs Security Functions SSP
Access
ACTIVATE FILE
Initialize to the
manufactory
default settings.
Zeroization
9000
or error
status
Command
without input
parameter
N/A None
Admin
PGP
Admin PIN(PW3)
: Z
PGP
User PIN(PW1)
: Z
PGP
Resetting Code: Z
PGP
Signature Private
Key: Z
PGP
Verification Public
Key: Z
Get Error log Get self-test
result
9000
or error
status
Command
without input
parameter
Self-test
result
None
Admin
- Device authentic
ate key: E
On-
Demand Self-
test
Initiate on-
demand self-
tests by reboot
or power cycle
None None Pass or Fail Admin
Unauthenticated
Table 12: Approved Services
4.4 Non-Approved Services
N/A for this module.
4.5 External Software/Firmware Loaded
NOTE: There is no External Software/Firmware Loaded.
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
42 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
5 Software/Firmware Security
5.1 Integrity Techniques
The Module is composed of the following firmware component(s):
Component 1: cryptographic binary
Component 2: non-modifiable operating system - binary
The firmware components are protected with the error detection code CRC-16. Calculate CRC-
16 on code and constant data in flash, then compare the result with expected value, which is
also part of pre-operational self-test.
5.2 Initiate on Demand
The operator can initiate integrity test on demand by restarting the module.
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
43 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
6 Operational Environment
6.1 Operational Environment Type and Requirements
The Module has a non-modifiable operational environment at Level 3 under the FIPS 140-3
definitions therefore per the FIPS 140-3 Management Manual Section 7.5 Partial validations
and non-applicable areas this section is not applicable.
Type of Operational Environment: Non-Modifiable
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
44 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
7 Physical Security
The Module is made of a completely hardened, production-grade polycarbonate or metal. The
colored polycarbonate or metal enclosure obscures a clear view of the hardware components
within. A hard, non-malleable metal casing surrounds the USB connector. The casing is made
of hard, production-grade, black, opaque plastic.
The coloring of the Module obscures any visible writing on the PCB. The visible critical
components within the Module are further covered to meet FIPS 140-3 level 3 physical security
requirements. The HSC32K2 with PAA microcontroller is covered with a black, opaque, tamper-
resistant, epoxy encapsulated, thus completely covering all critical cryptographic components
from plain view. The USB connector located outside of the casing (in the case of the USB
Token-A3) of the USB token is made of a hard, black, opaque, production grade plastic and
prevents access to the rest of the USB token. Any attempt at removal or penetration of the
enclosure has a high probability of causing serious damage to the Module and the hardware
components within the enclosure, which will reveal clear tamper evidence. Removal of the
metal surrounding the USB connector will result in physical damage of the USB connector and
its associated pins, rendering the entire cryptographic module useless. If the USB connector is
exposed, there is no power going to the USB token. Once power is removed from the
cryptographic module, all plaintext keys and unprotected SSPs in RAM are zeroized.
7.1 Mechanisms and Actions Required
The enclosure of the module is designed with anti-dismantle. After assembly, any attempt at
tampering will leave visible damage on the enclosure. So, each time a user uses the module,
you should first check the outer appearance of the module to make sure the module has not
been tampered since last time use. In case user detects any tamper during inspection, user
must stop using the module immediately and contact manufacturer.
Mechanism Inspection Frequency Inspection Guidance
Anti-dismantle
enclosure
Each time using the moduleCheck the outer appearance of the
module
Table 13: Mechanisms and Actions Required
7.2 EFP/EFT Information
Temp/Voltage TypeTemperature or
Voltage
EFP
or EFT Result
LowTemperature -29.6 EFP shutdown
HighTemperature +86.6 EFP shutdown
LowVoltage 2.8V EFP shutdown
HighVoltage 5.5V EFP shutdown
Table 14: EFP/EFT Information
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
45 of 78
© Hypersecu Information Systems Inc, 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
7.3 Hardness Testing Temperature Ranges
Temperature Type Temperature
LowTemperature -20C°
HighTemperature +40C°
Table 15: Hardness Testing Temperatures
NOTES: The module is hardness tested at the lowest and highest temperatures within the
module's intended temperature range of operation.
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
46 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
8 Non-Invasive Security
8.1 Mitigation Techniques
The Module does not implement any mitigation method against non-invasive attack.
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
47 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
9 Sensitive Security Parameters
Management
9.1 Storage Areas
Storage Area
Name
Description Persistence
Type
CHIPRAM(S1) Session Key stored in volatile memory in plaintext. Dynamic
CHIPRAM(S2) Session Key stored in volatile memory in encrypted. Dynamic
CHIPNVM(S3) CSP is encrypted with AES-128 and stored in FLASH Static
CHIPNVM(S4) CSP stored in flash in SHA2-256 Static
CHIPNVM(S5) CSP stored in flash in plaintext Static
CHIPNVM(S6) PSP stored in flash in plaintext Static
Table 16: Storage Areas
9.2 SSP Input-Output Methods
Name From To Format
Type
Distribution
Type
Entry
Type
SFI or Algorithm
Input
encapsulated
by KTS-Wrap
SCP03(IO 1)
Application
Software
(outside)
CHIPNVM( S3) Encrypted Automate d Electronic KTS_SCP03_WR AP
Input
encapsulated
by KTS-Wrap
AES-GCM
(IO2)
Application
Software
(outside)
CHIPRAM( S2) Encrypted Automate d Electronic KTS_AESGCM_W RAP
Output
encapsulated
by KTS-Wrap
AES-GCM
(IO3)
CHIPRAM( S2) Application
Software
(outside)
Encrypted Automated Electronic KTS_AESGCM_W RAP
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
48 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Input
encapsulated
by KTS-Wrap
AES-CBC
with
HMAC (IO4)
Application
Software
(outside)
CHIPNVM( S4) Encrypted Automated Electronic
KTS_CTAP_WRA P
Output
encapsulated
by KTS-Wrap
AES-CBC
with HMAC
(IO5)
CHIPRAM( S2) Application
Software
(outside)
Encrypt ed Automated Electronic KTS_CTAP_WRA P
Input in
plaintext (IO6)
Application
Software
(outside)
CHIPRAM( S1) Plaintext Automated Electronic
Output in
plaintext
(IO7)
CHIPRAM( S1) Application
Software
(outside)
Plaintext Automated Electronic
Output in
plaintext (IO8)
CHIPNVM( S6) Application
Software
(outside)
Plaintext Automated Electronic
Table 17: SSP Input-Output Methods
9.3 SSP Zeroization Methods
Zeroization
Method
Description Rationale Operator
Initiation
Z1 Zeroized by Terminate
token command
All SSP are cleared, completed by
explicit indication of 9000 Status
CO
Z2 Overwritten with all 0 after
power cycle
Power on and implicit clear, completed
by implicit indication of LED on.
Unauth
Z3 Zeroized by 2003 delete MF Received command to actively clear
SSPs, completed by explicit indication
of 9000 Status
CO
Z4 "TERMINATE DF"
followed by "ACTIVATE
FILE"
Received command to actively clear
SSPs, completed by explicit indication
of 9000 Status
CO
Z5 Zeroized by FIDO Reset Received command to actively clear
SSPs, completed by explicit indication
of 00 Status
CO
Z6 Zeroized by PIV Reset Received command to actively clear
SSPs, completed by explicit indication
of 9000 Status
CO
Z7 Select functional unit Received command to actively clear
SSPs, completed by explicit indication
of 9000 Status
Unauth
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
49 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Z8 Zeroized by OTP Reset Received command to actively clear
SSPs, completed by explicit indication
of 9000 Status
CO
Table 18: SSP Zeroization Methods
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
50 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
9.4 SSPs
All usage of these SSPs by the Module are described in the services detailed in Section 4.3
Name Description Size -
Strength
Type -
Category
Generated By Established By Used By
DRBG-EI
384-bit entropy
and 256-bit
nonce input
collected from
the ESV, used to
derive the DRBG
seed
640 - 128
entropy
source and
nonce - CSP ENT_GEN DRBG_GEN
DRBG
Seed
640-bit DRBG
Seed from
DRBG-EI
640 - 128
entropy
source and
nonce -
CSP
ENT_GEN DRBG_GEN
DRBG V
Internal
CTR_DRB
G state value is
used for SP800-
90A CTR_DRB
G (Consists of
128 bits)
128 - 128
state value -
CSP DRBG_GEN DRBG_GEN
DRBG Key
Internal
CTR_DRB
G state value is
used for SP800-
90A CTR_DRB
G (Consists of
128 bits)
128 - 128 key value
- CSP
DRBG_GEN DRBG_GEN
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
51 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Size -
Strength
Type -
Category
Generated By Established By Used By
Managing Key
128-bit AES key,
used to encrypt
SSPs and
keys
128 - 128
Symmetric
Key - CSP AES_KEY_GEN
AES_ENC AES_DEC
Device
authenticate key
128-bit AES key
used for CO role
to reach a
safe state
128 - 128
Authentication
- CSP
input during
manufacturing AES_DEC
INIT_KEYenc
AES 128-
bit key, used to
derive KSenc
and KSmac
which is then
used to
encrypt/decrypt
data over a
secure session
between an
authorized
external entity
and the Module.
128 - 128
Symmetric
Key - CSP
input during
manufacturing
SESSIONKEY_GEN
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
52 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Size -
Strength
Type -
Category
Generated By Established By Used By
INIT_KEY
mac
AES CMAC
128-bit key,
used to derive a
KSenc, KSmac
which is then
used to
authenticate an
operator or data
over a secure
session between
an authorized
external entity
and
the Module.
128 - 128
Symmetric
Key - CSP
input during
manufacturing SESSIONKEY_GEN
KSenc
AES 128-
bit key used to
encrypt/decrypt
data over a
secure
session
128 - 128
session Key -
CSP SESSIONKEY_GEN KTS_SCP03_WRAP
KSmac
AES CMAC
128-bit key used
to
authenticate
data over
a secure session
128 - 128
session Key -
CSP SESSIONKEY_GEN KTS_SCP03_WRAP
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
53 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Size -
Strength
Type -
Category
Generated By Established By Used By
AES-GCM
Key
128-bit AES-
GCM
key used to
encrypt the key
handle or
credentialID
128 - 128
Symmetric
Key - CSP AES_KEY_GEN
AES_ENC_AUTH AES_DEC_AUTH
AES-GCM IV
96-bit AES-GCM
IV
used to encrypt
the key handle
or credentialID
96 - N/A
Random IV -
CSP DRBG_GEN
AES_ENC_AUTH AES_DEC_AUTH
FIDO
Device ECDSA
Private Key
256-bit ECC
private key used
to generate
signature
for registration.
256 - 128
Asymmetric
Private Key –
CSP
input during
manufacturing ECC_SIG_GEN
FIDO
Device ECDSA
Public Key
256-bit ECC
FIDO
public key, it is
returned to
the server via
the certificate to
verify the
signature
generated after
registration
256 - 128
Asymmetric
Public Key -
PSP
input during
manufacturing ECC_SIG_VER
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
54 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Size -
Strength
Type -
Category
Generated By Established By Used By
FIDO User
ECDSA
Private Key
256-bit ECC
private key used
to Attestation
signature
256 - 128
Asymmetric
Private Key -
CSP ECC_GEN_KEY_PAI
R
ECC_SIG_GEN
FIDO User
ECDSA
Public Key
256-bit ECC
FIDO
public key, it is
transmitted to
the server for
verifying
signature
generated after
authentication
256 - 128
Asymmetric
public Key -
PSP
ECC_GEN_KEY_PAI
R
ECC_SIG_VER
FIDO
Agreement ECC
Private Key
256-bit ECC
private key used
to perform key
agreement with
external public
ECC key to get
shared Secret
256 - 128
Asymmetric
Private Key -
CSP ECC_GEN_KEY_PAI
R
SHAREDSECRETKEY
_GEN_KAS
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
55 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Size -
Strength
Type -
Category
Generated By Established By Used By
FIDO
Agreement ECC
Public Key
256-bit ECC
public key used
to perform key
agreement, the
Module returns
it to external to
get sharedSecret
256 - 128
Asymmetric
public Key -
PSP ECC_GEN_KEY_PAI
R
SHAREDSECRETKEY
_GEN_KAS
FIDO
Agreement
sharedSecret
256-bit key
Used to derived
FIDO
SharedSecret
AES Key and
FIDO
SharedSecret
HMAC Key by
HKDF
256 - 128
Shared Secret
- CSP
SHAREDSECRETKEY
_GEN_KAS
KAS-ECC Sp800-56Ar3 (A4980)
FIDO
SharedSecret
AES Key
256-bit AES CBC
key used for
encryption
calculation of pin
related
operations
256 - 128 Symmetric
Key -
CSP
SHAREDSECRETKEY
_GEN_KAS
SHAREDSECRETKEY
_GEN_KAS
FIDO
SharedSecret
HMAC Key
256-bit AES CBC
key used for
HMAC SHA-256
calculation of pin
related
operations
256 - 128
Symmetric
Key - CSP SHAREDSECRETKEY
_GEN_KAS
SHAREDSECRETKEY
_GEN_KAS
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
56 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Size -
Strength
Type -
Category
Generated By Established By Used By
FIDO
PinUvAuthToken
256-bit HMAC
SHA-256
Key used to
authorize
operator after
PIN
authentication
256 - 128
Authentication
- CSP DRBG_GEN HMAC_GEN
FIDO PIN
Authenticate the
User,4 to
63-byte PIN
value
32-248 -
N/A
Authentication
– CSP KTS_CTAP_WRAP
PIV
Authentication
Key
128-bit AES ECB
key, used for
authentication of
PIV CO
128 - 128
Authentication
- CSP AES_ENC_AUTH
PIV ECC
Signature
Private Key
256-bit ECC
private key,
used for
signature
operations
256 - 128
Asymmetric
Private Key -
CSP ECC_GEN_KEY_PAI
R
ECC_SIG_GEN
PIV ECC
verification
Public Key
256-bit ECC
public key, used
for client
verification
operations
256 - 128
Asymmetric
public Key –
PSP ECC_GEN_KEY_PAI
R
PIV RSA
Signature
Private Key
2048 -bit RSA
private key,
used for
signature
operations
2048 - 112
Asymmetric
Private Key –
CSP RSA_GEN_KEY_PAI
R
RSA_SIG_GEN
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
57 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Size -
Strength
Type -
Category
Generated By Established By Used By
PIV RSA
verification
Public Key
2048-bit RSA
public key, used
for client
verification
operations
2048 - 112
Asymmetric
public Key –
PSP RSA_GEN_KEY_PAI
R
PIV User PIN
8-byte pin, used
for
authenticating
the PIV
user for
Asymmetric
services
64 - N/A
Authentication
- CSP KTS_SCP03_WRAP
PIV PUK PIN
8-byte pin, used
for unblocking
the PIV
admin pin
64 - N/A
Authentication
- CSP KTS_SCP03_WRAP
2003
Internal Auth
Key
AES 128,192,25
6-bit, used to
authenticate the
Module to an
external
entity
128-256 -
128-256
Authentication
- CSP AES_ENC
2003
External Auth
Key
AES 128,192,25
6-bit, used to
modify the
security state of
the currently
selected
DF.
128-256 -
128-256
Authentication
- CSP AES_DEC
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
58 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Size -
Strength
Type -
Category
Generated By Established By Used By
2003 PIN
8-16 byte secret
used to modify
the security
state of the
currently
selected
DF.
64-128 -
N/A
Authentication
- CSP
2003 PSO
calculation key
AES 128, 192,
25 6-bit, used to
encryption,
decryption,
checksum
calculation, and
checksum
verification in
Unit
2003
128-256 -
128-256
Symmetric
Key - CSP AES_ENC AES_DEC
2003
Unblock PIN
8-16 byte secret
used to unblock
the 2003 pin the
currently
selected
DF.
64-128 -
N/A
Authentication
- CSP AES_ENC
2003 RSA
Private Key
2048, 3072,
4096-bit RSA
private key is
used to sign
data
2048,3072
,4096 -
112-152
Asymmetric
Private Key -
CSP RSA_GEN_KEY_PAI
R
RSA_SIG_GEN
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
59 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Size -
Strength
Type -
Category
Generated By Established By Used By
2003 RSA
Public Key
2048, 3072,
4096-bit RSA
public key used
to
verify data
2048,3072
,4096 -
112-152
Asymmetric
public Key -
PSP
RSA_GEN_KEY_PAI
R
RSA_SIG_VER
2003
ECDSA
Private Key
256, 384, 52
1-bit ECDSA
private key
used to sign
data.
256,384,5
21 - 128-
256
Asymmetric
Private Key -
CSP ECC_GEN_KEY_PAI
R
ECC_SIG_GEN
2003
ECDSA
Public Key
256, 384, 52
1-bit ECDSA
public key used
to
verify data.
256,384,5
21 - 128-
256
Asymmetric
public Key -
PSP ECC_GEN_KEY_PAI
R
ECC_SIG_VER
OTP HMAC
Seed Key
16 to 64-
byte HMAC SHA-
1, HMAC SHA-
256
key, used to
calculate OTP
values
for the User
128-512 -
128
Authentication
- CSP HMAC_GEN
OTP
AccessCode
8-byte pin, used
for
authenticating
the OTP
user
64 - N/A
Authentication
- CSP HMAC_GEN KTS_SCP03_WRAP
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
60 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Size -
Strength
Type -
Category
Generated By Established By Used By
PGP
Admin PIN(PW3)
8 to 127-
byte, used for
authentication of
the OpenPGP
CO.
64-1024 -
N/A
Authentication
- CSP KTS_SCP03_WRAP
PGP User
PIN(PW1)
8 to 127-
byte, used for
authenticating
the OpenPGP
user for
Asymmetric
services.
64-1024 -
N/A
Authentication
- CSP KTS_SCP03_WRAP
PGP
Resetting Code
8 to 127-
byte. Used for
resetting
the User PIN
64-1024 -
N/A
Authentication
- CSP KTS_SCP03_WRAP
PGP
Signature
Private Key
2048, 3072,
4096-bit RSA
private key,
used for
PKCS#1 v1.5
signing operation
2048,3072
,4096 -
112-152
Asymmetric
Private Key -
CSP RSA_GEN_KEY_PAI
R
RSA_SIG_GEN
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
61 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Description Size -
Strength
Type -
Category
Generated By Established By Used By
PGP
Verification
Public Key
2048, 3072,
4096-bit RSA
public key, used
for verification
specified in
PKCS#1
v1.5
2048,3072
,4096 -
112-152
Asymmetric
public Key -
PSP
RSA_GEN_KEY_PAI
R
External
Agreement ECC
Public Key
256-bit ECC
Public key used
to perform key
agreement with
FIDO Agreement
ECC
Private Key to
get sharedSecret
256 - 128
Asymmetric
public Key -
PSP
SHAREDSECRETKEY
_GEN_KAS
Table 19: SSP Table 1
Name Input - Output Storage Storage
Duration
Zeroization Related SSPs
DRBG-EI CHIPRAM(S1):Plaintext after usage is
complete
Z2
DRBG Seed CHIPRAM(S1):Plaintext after usage is
complete
Z2
DRBG V CHIPRAM(S1):Plaintext after usage is
complete
Z2 DRBG-EI:Derived From
DRBG Key CHIPRAM(S1):Plaintext after usage is
complete
Z2 DRBG-EI:Derived From
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
62 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Input - Output Storage Storage
Duration
Zeroization Related SSPs
Managing Key CHIPNVM(S5):Plaintext Z1
Device authenticate key:Encrypts
INIT_KEYenc:Encrypts
INIT_KEYmac:Encrypts FIDO
Device ECDSA Private Key:Encrypts
FIDO User ECDSA Private
Key:Encrypts
PIV Authentication Key:Encrypts
PIV ECC Signature Private
Key:Encrypts
PIV RSA Signature Private
Key:Encrypts
2003 Internal Auth Key:Encrypts
2003 External Auth Key:Encrypts
2003 PSO calculation key:Encrypts
2003 RSA Private Key:Encrypts
2003 ECDSA Private Key:Encrypts
OTP HMAC Seed
Key:Encrypts PGP Resetting
Code:Encrypts
PGP Signature Private Key:Encrypts
Device authenticate key CHIPNVM(S3):Encrypted Z1 Managing Key:Encrypted
by KSenc:Derives
INIT_KEYenc CHIPNVM(S3):Encrypted Z1 Managing Key:Encrypted by
KSenc:Derives
INIT_KEYmac CHIPNVM(S3):Encrypted Z1 Managing Key:Encrypted by
KSmac:Derives
KSenc CHIPRAM(S1):Plaintext after usage is
completed
Z7 INIT_KEYenc:Derived From
KSmac CHIPRAM(S1):Plaintext after usage is
completed
Z7 INIT_KEYmac:Derived From
AES-GCM Key CHIPNVM(S5):Plaintext Z5 FIDO User ECDSA Private
Key:Wraps
AES-GCM IV CHIPNVM(S5):Plaintext Z5 FIDO User ECDSA Private
Key:Wraps
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
63 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Input - Output Storage Storage
Duration
Zeroization Related SSPs
FIDO Device ECDSA
Private Key CHIPNVM(S3):Encrypted Z1
FIDO Device ECDSA Public
Key:Paired With Managing
Key:Encrypted by
AES-GCM Key:Wrapped by
FIDO Device ECDSA Public
Key
Output in plaintext (IO8) CHIPNVM(S6):Plaintext Z1 FIDO Device ECDSA Private
Key:Paired With
FIDO User ECDSA
Private Key
Input encapsulated by KTS-
Wrap AES-GCM (IO2)
Output encapsulated by
KTS-Wrap AES-GCM (IO3)
CHIPNVM(S3):Encrypted Z5
FIDO User ECDSA Public Key:Paired
With Managing Key:Encrypted by
AES-GCM Key:Wrapped by
AES-GCM IV:Wrapped by
FIDO User ECDSA
Public Key
Output in plaintext (IO7) CHIPNVM(S6):Plaintext Z5 FIDO User ECDSA Private
Key:Paired With
FIDO Agreement ECC
Private Key CHIPRAM(S1):Plaintext Z2
FIDO Agreement ECC Public
Key:Paired With FIDO Agreement
sharedSecret:Derives
FIDO Agreement ECC
Public Key
Output in plaintext (IO7) CHIPRAM(S1):Plaintext Z2 FIDO Agreement ECC Private
Key:Paired With
FIDO Agreement
sharedSecret CHIPRAM(S1):Plaintext
after their usage
is completed Z2
FIDO Agreement ECC Private
Key:Derived From External
Agreement ECC
Public Key:Derived From FIDO
SharedSecret AES Key:Derives
FIDO SharedSecret HMAC
Key:Derives
FIDO SharedSecret AES
Key
CHIPRAM(S1):Plaintext Z5 FIDO Agreement
sharedSecret:Derived From
FIDO SharedSecret HMAC
Key
CHIPRAM(S1):Plaintext Z5 FIDO Agreement
sharedSecret:Derived From
FIDO
PinUvAuthToken
Output encapsulated by
KTS-Wrap AES-CBC with
HMAC
(IO5)
CHIPRAM(S1):Plaintext
after their usage
is completed Z5
FIDO SharedSecret AES
Key:Wrapped by
FIDO SharedSecret HMAC
Key:Wrapped by
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
64 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Input - Output Storage Storage
Duration
Zeroization Related SSPs
FIDO PIN
Input encapsulated by KTS-
Wrap AES-CBC with HMAC
(IO4)
CHIPNVM(S4):Encrypted Z5
PIV Authentication Key
Input encapsulated by KTS-
Wrap SCP03(IO1) CHIPNVM(S3):Encrypted Z6
Managing Key:Encrypted by
KSenc:Unwrapped by
KSmac:Unwrapped by
PIV ECC Signature Private
Key CHIPNVM(S3):Encrypted Z6
PIV ECC verification Public
Key:Paired With
Managing Key:Encrypted
by
PIV ECC
verification Public Key
Output in plaintext (IO8)
CHIPNVM(S6):Plaintext Z6
PIV ECC Signature Private
Key:Paired With
PIV RSA Signature Private
Key
CHIPNVM(S3):Encrypted Z6
PIV RSA verification Public
Key:Paired With
Managing Key:Encrypted by
PIV RSA
verification Public Key
Output in plaintext (IO8) CHIPNVM(S6):Plaintext Z6 PIV RSA Signature Private
Key:Paired With
PIV User PIN
Input encapsulated by KTS-
Wrap SCP03(IO1) CHIPNVM(S4):Encrypted Z6
KSenc:Unwrapped by
KSmac:Unwrapped by
PIV PUK PIN Input encapsulated by KTS-
Wrap
SCP03(IO1)
CHIPNVM(S4):Encrypted Z6 KSenc:Unwrapped by
KSmac:Unwrapped by
2003 Internal Auth Key
Input encapsulated by KTS-
Wrap SCP03(IO1) CHIPNVM(S3):Encrypted Z3
Managing Key:Encrypted by
KSenc:Unwrapped by
KSmac:Unwrapped by
2003 External Auth Key Input encapsulated by KTS-
Wrap SCP03(IO1) CHIPNVM(S3):Encrypted Z3
Managing Key:Encrypted by
KSenc:Unwrapped by
KSmac:Unwrapped by
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
65 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Input - Output Storage Storage
Duration
Zeroization Related SSPs
2003 PIN Input encapsulated by KTS-
Wrap
SCP03(IO1)
CHIPNVM(S4):Encrypted Z3
2003 PSO
calculation key
Input encapsulated by KTS-
Wrap SCP03(IO1) CHIPNVM(S3):Encrypted Z3
Managing Key:Encrypted by
KSenc:Unwrapped by
KSmac:Unwrapped by
2003 Unblock PIN
Input encapsulated by KTS-
Wrap SCP03(IO1) CHIPNVM(S4):Encrypted Z3
Managing Key:Encrypted by
KSenc:Unwrapped by
KSmac:Unwrapped by
2003 RSA Private Key
CHIPNVM(S3):Encrypted Z3
2003 RSA Public Key:Paired With
Managing Key:Encrypted
by
2003 RSA Public Key Output in plaintext (IO8) CHIPNVM(S6):Plaintext Z3 2003 RSA Private Key:Paired With
2003 ECDSA
Private Key CHIPNVM(S3):Encrypted Z3
Managing Key:Encrypted by
2003 ECDSA Public Key:Paired With
2003 ECDSA
Public Key
Output in plaintext
(IO8)
CHIPNVM(S6):Plaintext Z3 2003 ECDSA Private
Key:Paired With
OTP HMAC Seed
Key
Input encapsulated by KTS-
Wrap SCP03(IO1) CHIPNVM(S3):Encrypted Z1
Managing Key:Encrypted by
KSenc:Unwrapped by
KSmac:Unwrapped by
OTP AccessCode Input encapsulated by KTS-
Wrap
SCP03(IO1)
CHIPNVM(S4):Encrypted Z8 KSenc:Unwrapped by
KSmac:Unwrapped by
PGP Admin PIN(PW3) Input encapsulated
by KTS-Wrap SCP03(IO1) CHIPNVM(S4):Encrypted Z4
KSenc:Unwrapped by
KSmac:Unwrapped by
PGP User PIN(PW1) Input encapsulated
by KTS-Wrap SCP03(IO1) CHIPNVM(S4):Encrypted Z4
KSenc:Unwrapped by
KSmac:Unwrapped by
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
66 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Name Input - Output Storage Storage
Duration
Zeroization Related SSPs
PGP Resetting Code Input encapsulated by KTS-
Wrap
SCP03(IO1)
CHIPNVM(S3):Encrypted Z4 KSenc:Unwrapped by
KSmac:Unwrapped by
PGP Signature Private Key CHIPNVM(S3):Encrypted Z4
Managing Key:Encrypted by
PGP Verification Public Key:Paired
With
PGP Verification Public KeyOutput in plaintext (IO8) CHIPNVM(S6):Plaintext Z4 PGP Signature Private Key:Paired
With
External Agreement ECC
Public Key
Input in plaintext (IO6) CHIPRAM(S1):Plaintext Z2 FIDO Agreement ECC Private
Key:Used With FIDO Agreement
sharedSecret:Derives
Table 20: SSP Table 2
9.5 Transitions
The SHA-1 algorithm as implemented by the module will be non-approved for all purposes, starting January 1, 2031.
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
67 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
10 Self-Tests
The Module performs self-tests to ensure the proper operation of the Module. Per FIPS 140-3 these are categorized as
either pre-operational self-tests or conditional self-tests.
10.1 Pre-Operational Self-Tests
The Module performs the following pre-operational self-tests in table below
Algorithm or Test Test
Properties
Test
Method
Test Type Indicator Details
FIPS_CRC16_FIT CRC-16 KAT SW/FW
Integrity
9000 or 6F90 Executed on the whole firmware stored in
EEPROM before the Module transition to the idle
state.
Table 21: Pre-Operational Self-Tests
10.2 Conditional Self-Tests
The Module performs the following conditional self-tests in the table below
Algorithm or Test Test Properties Test Method Test Type Indicator Details Conditions
AES Encrypt AES-128-bit - ECB KAT CAST 9000(meaning
Successful) or
6F90(meaning fail)
AES Encryption Bootup
AES Decrypt AES-128-bit - ECB KAT CAST 9000(meaning
Successful) or
6F90(meaning fail)
AES decryption Bootup
AES-CMAC AES-128-bit CMAC KAT CAST 9000(meaning
Successful) or
6F90(meaning fail)
Message
Authentication
Bootup
AES-GCM
Encrypt
AES-128-bit GCM KAT CAST 9000(meaning
Successful) or
6F90(meaning fail)
Authenticated
encryption
Bootup
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
68 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Algorithm or Test Test Properties Test Method Test Type Indicator Details Conditions
AES-GCM
Decrypt
AES-128-bit GCM KAT CAST 9000(meaning
Successful) or
6F90(meaning fail)
Authenticated
decryption
Bootup
Counter DRBG AES-128-bit- ECB KAT CAST
9000(meaning
Successful) or
6F90(meaning fail)
AES-128
CTR_DRBG
instantiation,
generate, and
reseed KATs
performed before
the first random
data
generation
Bootup
KAS-ECC Sp800-
56Ar3
ECDH: P-256 HKDF:
Using HMAC-Two
step
KAT CAST 9000(meaning
Successful) or
6F90(meaning fail)
KAS-SSC Shared
Secret generation
with P-256 per IG
D.F.
Bootup
ECDSA KeyGen
(FIPS186-5)
ECDSA Key
Generation
PCT PCT 9000(meaning
Successful) or
6F90(meaning fail)
Signature and
Verification Per IG
C.A
Generate
ECDSA key
pairs
ECDSA SigGen
(FIPS186-5)
ECDSA Signature
Generation
KAT CAST 9000(meaning
Successful) or
6F90(meaning fail)
ECDSA P-256 with
SHA-256
Signature
Generation
Bootup
ECDSA SigVer
(FIPS186-5)
ECDSA Signature
Verification
KAT CAST 9000(meaning
Successful) or
6F90(meaning fail)
ECDSA P-256 with
SHA-256
Signature
Verification
Bootup
HMAC-SHA2-256 using HMAC-
SHA256
KAT CAST 9000(meaning
Successful) or
6F90(meaning fail)
HMAC-SHA-256
KAT
Bootup
RSA KeyGen
(FIPS186-5)
2048-bit 3072-bit
4096-bit RSA Key
Generation Pairwise
Consistency Test
PCT PCT
9000(meaning
Successful) or
6F90(meaning fail)
Signature and
Verification per IG
C.E.
Generate RSA
key pairs
RSA SigVer
(FIPS186-5)
2048-bit RSA
Signature
Verification
KAT CAST 9000 or 6F90 2048-bit RSA
PKCSv1.5 with
Bootup
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
69 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Algorithm or Test Test Properties Test Method Test Type Indicator Details Conditions
SHA-256 Signature
Verification
RSA SigGen
(FIPS186-5)
2048-bit RSA
Signature
Generation
KAT CAST 9000 or 6F90 2048-bit RSA
PKCSv1.5
with SHA-256
Signature
Generation
Bootup
SHA-1 SHA-1 KAT CAST 9000(meaning
Successful) or
6F90(meaning fail)
SHA-1 Bootup
SHA2-256 SHA2-256 KAT CAST 9000(meaning
Successful) or
6F90(meaning fail)
SHA2-256 Bootup
SHA2-384 SHA2-384 KAT CAST 9000(meaning
Successful) or
6F90(meaning fail)
SHA2-384 Bootup
SHA2-512 SHA2-512 KAT CAST 9000(meaning
Successful) or
6F90(meaning fail)
SHA2-512 Bootup
KDF SP800-108 Using AES128 CMAC KAT CAST 9000(meaning
Successful) or
6F90(meaning fail)
AES128 CMAC KAT Bootup
Entropy 90B Start-
up Repetition
Count
Test (RCT)
Repetition Count
Test RCT CAST
Success or Failure Code As specified in
[90B] RCT startup
health tests
At boot up
Entropy 90B Start-
up Adaptive
Proportion Test
(APT)
Adaptive Proportion
Test APT CAST
Success or Failure Code As specified in
[90B] APT startup
health tests
At boot up
Entropy 90B
Continuous
Repetition Count
Test (RCT)
Repetition Count
Test RCT CAST
Success or Failure Code As specified in
[90B] RCT
continuous health
tests
Continuous
when entropy is
requested
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
70 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Algorithm or Test Test Properties Test Method Test Type Indicator Details Conditions
Entropy 90B
Continuous
Adaptive
Proportion Test
(APT)
Adaptive Proportion
Test
APT CAST Success or Failure Code
As specified in
[90B] APT
continuous
health tests
Continuous when
entropy is requested
Table 22: Conditional Self-Tests
10.3 Periodic Self-Test Information
Algorithm or Test Test Method Test Type Period Periodic Method
FIPS_CRC16_FIT KAT SW/FW Integrity every 1000 services are
processed or power on
performed by the
Module
programmatically
Table 23: Pre-Operational Periodic Information
Algorithm or Test Test Method Test Type Period Periodic Method
AES Encrypt KAT CAST every 1000 services are
processed or power on
Automatic
AES Decrypt KAT CAST every 1000 services are
processed and power
on
Automatic
AES-CMAC KAT CAST every 1000 services are
processed or power on
Automatic
AES-GCM Encrypt KAT CAST every 1000 services are
processed or power on
Automatic
AES-GCM Decrypt KAT CAST every 1000 services are
processed or power on
Automatic
Counter DRBG KAT CAST every 1000 services are
processed or power on
Automatic
KAS-ECC Sp800-56Ar3 KAT CAST every 1000 services are
processed or power on
Automatic
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
71 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
ECDSA KeyGen
(FIPS186-5)
PCT PCT Everytime a key pair is
generated
Automatic
ECDSA SigGen
(FIPS186-5)
KAT CAST every 1000 services are
processed or power on
Automatic
ECDSA SigVer (FIPS186-
5)
KAT CAST every 1000 services are
processed or power on
Automatic
HMAC-SHA2-256 KAT CAST every 1000 services are
processed or power on
Automatic
RSA KeyGen (FIPS186-
5)
PCT PCT Everytime a key pair is
generated
Automatic
RSA SigVer (FIPS186-5) KAT CAST every 1000 services are
processed or power on
Automatic
RSA SigGen (FIPS186-5) KAT CAST every 1000 services are
processed or power on
Automatic
SHA-1 KAT CAST every 1000 services are
processed or power on
Automatic
SHA2-256 KAT CAST every 1000 services are
processed or power on
Automatic
SHA2-384 KAT CAST every 1000 services are
processed or power on
Automatic
SHA2-512 KAT CAST every 1000 services are
processed or power on
Automatic
KDF SP800-108 KAT CAST every 1000 services are
processed and power
on
Automatic
Entropy 90B Start-up
Repetition Count Test
(RCT)
RCT CAST On Demand Device Reset
Entropy 90B Start-up
Adaptive Proportion Test
(APT)
APT CAST On Demand Device Reset
Entropy 90B Continuous
Repetition
Count Test (RCT)
RCT CAST N/A N/A
Entropy 90B
Continuous Adaptive
Proportion Test (APT)
APT CAST N/A N/A
Table 24: Conditional Periodic Information
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
72 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
The condition of initiating Periodic Self-Test is to execute every 1000 services. Once every 1000 services being executed,
the periodic self-test function will call Pre-Operational Self-Tests and Conditional Self-Tests.
Self-test failures are indicated to the user through LED status and service return status.
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
73 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
10.4 Error States
Name Description Conditions Recovery Method Indicator
ES1
The Module fails at CRC16 FIT, ENT
RCT and APT, CTR DRBG KAT, ECDSA
KAT, RSA KAT, AES ECB KAT, AES
CMAC KAT, AES GCM KAT, HMAC
KAT, KBKDF KAT,
KAS-ECC KAT, SHS KAT, RSA
Generate key pair PCT, ECC Generate
key pair PCT
The Module
enters Critical
error state.
Reboot/Power
cycle the module
6F90 and
blinking LED
Table 25: Error States
10.5 Operator Initiation of Self-Tests
All self-tests, except for the continuous health tests, can be invoked on demand by restarting
the module.
11 Life-Cycle Assurance
11.1 Installation, Initialization, and Startup Procedures
Installation and Initialization:
The following steps must be performed in order to securely install, initialize, and start up the
HyperPKI cryptographic module in the FIPS 140-3 Approved mode of operation.
The steps for the CO to enter the module and change the default password gain authorized
access to the module.
The module is setup at manufacturing and delivered to the CO in approved mode.
Delivery:
The following steps must be performed in order to securely deliver the HyperPKI cryptographic
module to the authorized operator:
1. Set the required keys in a secure factory environment
2. Complete packaging and user manual
3. Shipping the modules to the final customer. For each shipment, our factory will use the
courier agreed with the customer, such as FedEx or DHL. Our factory will inform the
customer in advance with the shipment info by email. When the goods arrive in customer
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
74 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
site, the customer will first check the goods according to the shipment info they received,
and sign for acceptance.
4. The final customer checks the module information according to administrator manual.
11.2 Administrator Guidance
Refer to HYPERSECU HyperPKI Cryptographic Module Administrator Guidance.docx, which will
be provided to the issuer through secure communications.
11.3 Non-Administrator Guidance
Refer to HYPERSECU HyperPKI Cryptographic Module Non-Administrator Guidance.docx, which
will be provided to the issuer through secure communications.
11.4 Design and Rules
Rules of Operation
1. The Module provides two distinct operator roles: User and Cryptographic Officer.
2. The Module provides identity-based authentication.
3. The Module clears previous authentications on power cycle.
4. An operator does not have access to any cryptographic services prior to assuming an
authorized role.
5. The Module allows the operator to initiate power-up self-tests by power cycling power or
resetting the Module.
6. All self-tests do not require any operator action.
7. Data output is inhibited during key generation, self-tests, zeroization, and error states.
8. Status information does not contain CSPs or sensitive data that if misused could lead to a
compromise of the Module.
9. There are no restrictions on which keys or SSPs are zeroized by the zeroization service.
10. The Module does not support concurrent operators.
11. The Module does not support a maintenance interface or role.
12. The Module does not have any proprietary external input/output devices used for
entry/output of data.
13. The Module does not enter or output plaintext CSPs.
14. The Module does not store any plaintext CSPs.
15. The Module does not output intermediate key values.
16. The Module does not provide bypass services or ports/interfaces.
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
75 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
11.5 Maintenance Requirements
The module does not require any maintenance requirements
11.6 End of Life
Administrator SHALL invoke Terminate token service after authentication to switch device into
the terminated state as a result, all CSPs are cleared, and all services are not available
anymore. The device shall be destroyed.
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
76 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
12 Mitigation of Other Attacks
The Module does not implement any mitigation method against other attacks.
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
77 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
13 References and Definitions
The following standards are referred to in this Security Policy.
Abbreviation
*
Full Specification Name
[FIPS140-3] Security Requirements for Cryptographic Modules, March 22, 2019
[ISO19790] International Standard, ISO/IEC 19790, Information technology — Security
techniques — Test requirements for cryptographic modules, Third edition, March
2017
[ISO24759] International Standard, ISO/IEC 24759, Information technology — Security
techniques — Test requirements for cryptographic modules, Second and Corrected
version, 15 December 2015
[IG] Implementation Guidance for FIPS PUB 140-3 and the Cryptographic Module
Validation Program, October 23, 2024
[108r1] NIST Special Publication 800-108, Recommendation for Key Derivation Using
Pseudorandom Functions (Revised), August 2022 INCLUDES UPDATES AS OF 02-
02-2024
[133] NIST Special Publication 800-133, Recommendation for Cryptographic Key
Generation, Revision 2, June 2020
[135] National Institute of Standards and Technology, Recommendation for Existing
Application-Specific Key Derivation Functions, Special Publication 800-135rev1,
December 2011.
[186] National Institute of Standards and Technology, Digital Signature Standard (DSS),
Federal Information Processing Standards Publication 186-5, February 3, 2023.
[197] National Institute of Standards and Technology, Advanced Encryption Standard
(AES), Federal Information Processing Standards Publication 197, May 9, 2023
[198-1] National Institute of Standards and Technology, The Keyed-Hash Message
Authentication Code (HMAC), Federal Information Processing Standards
Publication 198-1, July, 2008
[180] National Institute of Standards and Technology, Secure Hash Standard, Federal
Information Processing Standards Publication 180-4, August, 2015
[38A] National Institute of Standards and Technology, Recommendation for Block Cipher
Modes of Operation, Methods and Techniques, Special Publication 800-38A,
December 2001
[38B] National Institute of Standards and Technology, Recommendation for Block Cipher
Modes of Operation: The CMAC Mode for Authentication, Special Publication 800-
38B, May 2005
[38D] National Institute of Standards and Technology, Recommendation for Block Cipher
Modes of Operation: Galois/Counter Mode (GCM) and GMAC, Special Publication
800-38D, November 2007
HYPERSECU HyperPKI Cryptographic Module
FIPS 140-3 Non-Propriety Security Policy
78 of 78
© Hypersecu Information Systems Inc 2026
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
Abbreviation
*
Full Specification Name
[56Ar3] NIST Special Publication 800-56A Revision 3, Recommendation for Pair-Wise Key
Establishment Schemes Using Discrete Logarithm Cryptography, April 2018
[56Br2] NIST Special Publication 800-56B Revision 2, Recommendation for Pair-Wise Key
Establishment Schemes Using Finite Field Cryptography, March 2019
[56Cr2] NIST Special Publication 800-56C Revision 2, Recommendation for Pair-Wise Key
Establishment Schemes Using Discrete Logarithm Cryptography, August 2020
[90A] National Institute of Standards and Technology, Recommendation for Random Number
Generation Using Deterministic Random Bit Generators, Special Publication 800-90A,
Revision 1, June 2015.
[90B] National Institute of Standards and Technology, Recommendation for the Entropy Sources
Used for Random Bit Generation, Special Publication 800-90B, January 2018.
Table 26: References
Acronym* Definition
APT Adaptative Proportion Test
KAT Know Answer Test
RCT Repetition Count Test
SSP Sensitive Security Parameter
PCT Pairwise Consistency Test
KDF Key Derivation Function
KTS Key Transport Scheme
KAS Key Agreement Scheme
VCC Voltage (at the) Common Collector
PIN Personal Identification Number
PGP User
PIN (PW1)
user-password
PGP Admin
PIN (PW3)
admin-password
CO Crypto Officer
PUK PIN Unblocking Key
Table 27: Acronyms and Definitions