ASI-HSM AHX5 kNET Cryptographic Module

Certificate #5282

Webpage information

Status active
Validation dates 20.05.2026
Sunset date 19-05-2031
Standard FIPS 140-3
Security level 3
Type Hardware
Embodiment MultiChipStand
Caveat When installed, initialized and configured as specified in Section 11 of the Security Policy. When operated in approved mode.
Exceptions
  • Operational environment: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description The ASI-HSM AHX5 kNET Cryptographic Module is a Hardware Security Module that provides cryptographic services with native implementation of the Key Management Interoperability Protocol to applications. The hardware is optimized for cryptographic operations along with proprietary firmware and software developed exclusively for the module. Its operators communicate with it via a standard Ethernet interface using IP protocols. The module is usually sold embedded within a stand-alone network appliance, which is typically used in large-scale cloud infrastructures, where ease of remote configuration and operation is required.
Vendor Kryptus
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms
AES-, AES, CAST, DES, TDES, HMAC, CBC-MAC
Asymmetric Algorithms
RSA 2048, ECDH, ECDSA, EdDSA, DSA
Post-quantum Algorithms
ML-DSA, ML-KEM
Hash functions
SHA-1, SHA-256, SHA-384, SHA3-224, SHA3-256, SHA3-384, SHA3-512, MD5
Schemes
MAC, KEM, Key Agreement
Protocols
SSL, TLS, TLS 1.2, TLS v1.2
Randomness
TRNG, DRBG, RNG, RBG
Elliptic Curves
P-224, P-256, P-384, P-521, P-192, P-160, P-320, P-512, NIST P-521, Ed25519
Block cipher modes
ECB, CBC, CTR, GCM

Trusted Execution Environments
PSP, SSC, Secure Execution, SE
Vendor
STMicroelectronics

Security level
Level 1, Level 3, level 3
Side-channel analysis
malfunction, Fault Induction

File metadata

Creation date D:20260518084711-04'00'
Modification date D:20260518084711-04'00'
Pages 168
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates

  • The certificate data changed.
  • The certificate was first processed.

Raw data 

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5282,
  "dgst": "f58210f7b0278ba1",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": []
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDH": {
            "ECDH": 25
          },
          "ECDSA": {
            "ECDSA": 56
          },
          "EdDSA": {
            "EdDSA": 1
          }
        },
        "FF": {
          "DSA": {
            "DSA": 6
          }
        },
        "RSA": {
          "RSA 2048": 3
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 3
        },
        "CTR": {
          "CTR": 2
        },
        "ECB": {
          "ECB": 2
        },
        "GCM": {
          "GCM": 3
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 4
          },
          "TLS": {
            "TLS": 194,
            "TLS 1.2": 3,
            "TLS v1.2": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 10
        },
        "KEM": {
          "KEM": 4
        },
        "MAC": {
          "MAC": 19
        }
      },
      "device_model": {},
      "ecc_curve": {
        "Edwards": {
          "Ed25519": 2
        },
        "NIST": {
          "NIST P-521": 2,
          "P-160": 1,
          "P-192": 2,
          "P-224": 18,
          "P-256": 32,
          "P-320": 1,
          "P-384": 30,
          "P-512": 2,
          "P-521": 28
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 256": 1,
          "DSA-44": 2,
          "DSA-65": 2,
          "DSA-87": 2,
          "HMAC- SHA-1": 2,
          "HMAC-SHA- 1": 2,
          "HMAC-SHA-1": 4,
          "HMAC-SHA1": 2,
          "HMACSHA1": 1,
          "PKCS#1": 2,
          "RSA 2048": 3,
          "SHA- 256": 1,
          "SHA-1": 3,
          "SHA-256": 4,
          "SHA-384": 2,
          "SHA2-224": 7,
          "SHA2-256": 11,
          "SHA2-384": 8,
          "SHA2-512": 7,
          "SHA3-224": 7,
          "SHA3-256": 7,
          "SHA3-384": 7,
          "SHA3-512": 7
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "Level 3": 1,
          "level 3": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 2
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 3
          },
          "SHA2": {
            "SHA-256": 4,
            "SHA-384": 2
          },
          "SHA3": {
            "SHA3-224": 7,
            "SHA3-256": 7,
            "SHA3-384": 7,
            "SHA3-512": 7
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {
        "FIPS": {
          "ML-DSA": 43,
          "ML-KEM": 40
        }
      },
      "randomness": {
        "PRNG": {
          "DRBG": 51
        },
        "RNG": {
          "RBG": 2,
          "RNG": 7
        },
        "TRNG": {
          "TRNG": 2
        }
      },
      "side_channel_analysis": {
        "FI": {
          "Fault Induction": 2,
          "malfunction": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 2,
          "FIPS 140-3": 8,
          "FIPS 180-4": 6,
          "FIPS 186-5": 9,
          "FIPS 198-1": 11,
          "FIPS 202": 5,
          "FIPS 203": 4,
          "FIPS 204": 4,
          "FIPS186-5": 32
        },
        "NIST": {
          "SP 800-135": 1,
          "SP 800-38A": 3,
          "SP 800-38B": 1,
          "SP 800-38D": 3,
          "SP 800-38F": 2,
          "SP 800-52": 1,
          "SP 800-56A": 1,
          "SP 800-67": 2,
          "SP 800-90A": 1,
          "SP 800-90B": 2
        },
        "PKCS": {
          "PKCS#1": 1
        },
        "RFC": {
          "RFC 5288": 1
        },
        "X509": {
          "X.509": 18
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 29,
            "AES-": 1
          },
          "CAST": {
            "CAST": 88
          }
        },
        "DES": {
          "3DES": {
            "TDES": 1
          },
          "DES": {
            "DES": 2
          }
        },
        "constructions": {
          "MAC": {
            "CBC-MAC": 1,
            "HMAC": 21
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 23
        },
        "IBM": {
          "SE": 1,
          "SSC": 6,
          "Secure Execution": 2
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "STMicroelectronics": {
          "STMicroelectronics": 2
        }
      },
      "vulnerability": {}
    },
    "policy_metadata": {
      "/CreationDate": "D:20260518084711-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20260518084711-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 1950328,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 168
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "d1053d01d123f688f67b0bb17309cccb09f6f7677071c5bf680c7e245f23336f",
      "txt_hash": "1d7d055b823c5b1db43cbb60a59b6c49d27d8eb0b56b04929c6f711d831b5416"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When installed, initialized and configured as specified in Section 11 of the Security Policy. When operated in approved mode.",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/May 2026_030626_0716.pdf",
    "date_sunset": "2031-05-19",
    "description": "The ASI-HSM AHX5 kNET Cryptographic Module is a Hardware Security Module that provides cryptographic services with native implementation of the Key Management Interoperability Protocol to applications. The hardware is optimized for cryptographic operations along with proprietary firmware and software developed exclusively for the module. Its operators communicate with it via a standard Ethernet interface using IP protocols. The module is usually sold embedded within a stand-alone network appliance, which is typically used in large-scale cloud infrastructures, where ease of remote configuration and operation is required.",
    "embodiment": "MultiChipStand",
    "exceptions": [
      "Operational environment: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 3,
    "mentioned_certs": {},
    "module_name": "ASI-HSM AHX5 kNET Cryptographic Module",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-05-20",
        "lab": "EWA - Canada",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Kryptus",
    "vendor_url": "http://www.kryptus.com"
  }
}