nShield Connect 6000 [1], nShield Connect 1500 [2] and nShield Connect 500 [3]

Certificate details

Certificate ID #1571
Status historical
Historical reason RNG SP800-131A Revision 1 Transition
Validation dates 13.07.2011
Standard FIPS 140-2
Security level 3
Type Hardware
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode with nShield PCIe validated to FIPS 140-2 under Cert. #1063
Description The Thales nShield Connect is a network-attached hardware security module for business continuity of always-on, mission-critical systems in shared infrastructures, providing high availability, scalability and remote management for cryptographic infrastructures. Part of the nCipher product line, nShield Connect is the world's first HSM with redundant, hot-swappable power supplies, and enables organizations to build reliable, large-scale cryptographic services for their infrastructures.
Version (Hardware) NH2047 [1], NH2040 [2] and NH2033 [3], Build Standard N
Version (Firmware) V11.30
Vendor Thales - nCipher http://www.thalesgroup.com/iss
Lab CYGNACOM SOLUTIONS INC
Algorithms
References

This certificate's webpage directly references 1 certificates, transitively this expands into 1 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, CAST, RC4, DES, Triple-DES, Camellia, SEED, HMAC, HMAC-SHA-256, HMAC-SHA-512, CMAC
Asymmetric Algorithms
ECDSA, Diffie-Hellman, DSA
Hash functions
SHA-1, SHA-256, SHA-512, SHA-224, SHA-384, MD5, RIPEMD, RIPEMD160
Schemes
MAC, Key exchange, Key agreement
Protocols
SSL, TLS
Randomness
RNG
Block cipher modes
ECB, CBC, GCM

Vendor
Thales

Security level
Level 3, level 3, level 2

Cross-references

Outgoing
  • 1063 - historical - nShield F3 6000e [1], nShield F3 1500e [2], nShield F3 500e [3], nShield F3 10e [4], nShield F3 6000e for nShield Connect [5], nShield F3 1500e for nShield Connect [6] and nShield F3 500e for nShield Connect [7]
Title policy.fm
Author marcus
Creation date D:20101130155048Z
Modification date D:20110712075920-04'00'
Pages 24
Creator PScript5.dll Version 5.2.2
Producer GPL Ghostscript 8.15

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

Cross-references

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 1571,
  "dgst": "aded40e220d2587b",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "DSA#280",
        "#435",
        "#666",
        "#1127",
        "#681",
        "SHS#764",
        "Triple-DES#666",
        "#356",
        "AES#754",
        "#145",
        "Triple-DES#435",
        "DSA#407",
        "HMAC#410",
        "RSA#356",
        "#717",
        "#280",
        "AES#397",
        "RNG#681",
        "Triple-DES MAC#666",
        "Triple-DES#883",
        "#754",
        "ECDSA#81",
        "#764",
        "#883",
        "#436",
        "#81",
        "#397",
        "#1227",
        "ECDSA#145",
        "SHS#1127",
        "HMAC#717",
        "#407",
        "AES GCM#754",
        "RNG#436",
        "AES#1227",
        "#410"
      ]
    },
    "cpe_matches": {
      "_type": "Set",
      "elements": [
        "cpe:2.3:h:thalesesecurity:nshield_connect_500\\+:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:thalesesecurity:nshield_connect_6000:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:thalesesecurity:nshield_connect_1500\\+:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:thalesesecurity:nshield_connect_500:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:thalesesecurity:nshield_connect_6000\\+:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:thalesesecurity:nshield_connect_1500:-:*:*:*:*:*:*:*"
      ]
    },
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "11.30"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "1063"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "1063"
        ]
      }
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": [
        "1063"
      ]
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "1063"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "775",
          "1063"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "1063"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 45,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDSA": {
            "ECDSA": 6
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 2
          },
          "DSA": {
            "DSA": 7
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 6
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 1
          },
          "TLS": {
            "TLS": 2
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key agreement": 4
        },
        "KEX": {
          "Key exchange": 2
        },
        "MAC": {
          "MAC": 8
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1063": 1,
          "#1127": 3,
          "#1227": 1,
          "#145": 1,
          "#280": 1,
          "#356": 1,
          "#397": 1,
          "#407": 1,
          "#410": 3,
          "#435": 1,
          "#436": 1,
          "#666": 2,
          "#681": 1,
          "#717": 3,
          "#754": 2,
          "#764": 5,
          "#81": 1,
          "#883": 1,
          "Certificate 1063": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "#1127 HMAC": 1,
          "#1127 SHA": 2,
          "#280 RSA": 1,
          "#435 SHA": 1,
          "#717 HMAC": 2,
          "#754 AES": 1,
          "#764 SHA": 4,
          "AES CBC #1227": 1,
          "AES Certificate #754": 1,
          "DES CBC #666": 1,
          "DES CBC #883": 1,
          "DSA #280": 1,
          "DSA #407": 1,
          "HMAC-SHA-1": 2,
          "HMAC-SHA-1 #410": 2,
          "HMAC-SHA-1 #717": 2,
          "HMAC-SHA-256": 2,
          "HMAC-SHA-512": 2,
          "HMAC-SHA256 #410": 2,
          "HMAC-SHA256 #717": 2,
          "HMAC-SHA512 #410": 2,
          "HMAC-SHA512 #717": 2,
          "RSA #356": 1,
          "SHA-1": 5,
          "SHA-1 #1127": 1,
          "SHA-1 #764": 1,
          "SHA-224": 1,
          "SHA-256": 2,
          "SHA-384": 1,
          "SHA-512 #1127": 1,
          "SHA-512 #764": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 3": 1,
          "level 2": 2,
          "level 3": 4
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 3
          }
        },
        "RIPEMD": {
          "RIPEMD": 1,
          "RIPEMD160": 1
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 7
          },
          "SHA2": {
            "SHA-224": 1,
            "SHA-256": 2,
            "SHA-384": 1,
            "SHA-512": 2
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RNG": 6
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 10,
          "FIPS 186-2": 4,
          "FIPS PUB 140-2": 1
        },
        "RFC": {
          "RFC2612": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 8
          },
          "CAST": {
            "CAST": 1
          },
          "RC": {
            "RC4": 1
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 3
          },
          "DES": {
            "DES": 9
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 1,
            "HMAC": 4,
            "HMAC-SHA-256": 1,
            "HMAC-SHA-512": 1
          }
        },
        "miscellaneous": {
          "Camellia": {
            "Camellia": 1
          },
          "SEED": {
            "SEED": 1
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Thales": {
          "Thales": 5
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "DSA#280",
        "SHS#764",
        "Triple-DES#666",
        "AES#754",
        "Triple-DES#435",
        "DSA#407",
        "HMAC#410",
        "RSA#356",
        "AES#397",
        "RNG#681",
        "Triple-DES MAC#666",
        "Triple-DES#883",
        "ECDSA#81",
        "ECDSA#145",
        "HMAC#717",
        "SHS#1127",
        "AES GCM#754",
        "RNG#436",
        "AES#1227"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#717",
        "#436",
        "#407",
        "#280",
        "#435",
        "#666",
        "#1127",
        "#681",
        "#81",
        "#356",
        "#754",
        "#145",
        "#397",
        "#1227",
        "#410",
        "#883",
        "#764"
      ]
    },
    "policy_metadata": {
      "/Author": "marcus",
      "/CreationDate": "D:20101130155048Z",
      "/Creator": "PScript5.dll Version 5.2.2",
      "/ModDate": "D:20110712075920-04\u002700\u0027",
      "/Producer": "GPL Ghostscript 8.15",
      "/Title": "policy.fm",
      "pdf_file_size_bytes": 1574919,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 24
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "a2cf1e3e94d0989e2e3bcb705e49ee07e94abd41bdc04f98a316a7884f203fa9",
      "source_hash": "867dd1db396dc730b2c6d928fb6e7a7b3f04980793a33459c65a87a9990cb047",
      "txt_hash": "daa2c6989d1a4063971f57991fee92592c129d52346f2292df8a190734d61b29"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode with nShield PCIe validated to FIPS 140-2 under Cert. #1063",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0007.pdf",
    "date_sunset": null,
    "description": "The Thales nShield Connect is a network-attached hardware security module for business continuity of always-on, mission-critical systems in shared infrastructures, providing high availability, scalability and remote management for cryptographic infrastructures. Part of the nCipher product line, nShield Connect is the world\u0027s first HSM with redundant, hot-swappable power supplies, and enables organizations to build reliable, large-scale cryptographic services for their infrastructures.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": null,
    "fw_versions": "V11.30",
    "historical_reason": "RNG SP800-131A Revision 1 Transition",
    "hw_versions": "NH2047 [1], NH2040 [2] and NH2033 [3], Build Standard N",
    "level": 3,
    "mentioned_certs": {
      "1063": 1
    },
    "module_name": "nShield Connect 6000 [1], nShield Connect 1500 [2] and nShield Connect 500 [3]",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2011-07-13",
        "lab": "CYGNACOM SOLUTIONS INC",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Thales - nCipher",
    "vendor_url": "http://www.thalesgroup.com/iss"
  }
}