Certificate 1177 - Luna PCM
intCertNum 1177
strVendorName SafeNet, Inc.
strURL http://www.safenet-inc.com
strAddress1 20 Colonnade Road
strAddress2 Suite 200
strAddress3
strCity Ottawa
strStateProv Ontario
strPostalCode K2E 7M6
strCountry K2E 7M6
strContact Terry Fletcher
strEmail tfletcher@ca.safenet-inc.com
strPhone 613-221-5009
strFax 613-723-5079
strContact2
strEmail2
strFax2
strPhone2
intCertNum 1177
strModuleName Luna PCM
strPartNumber Hardware Version: LTK-02-0501;
Firmware Version: 4.6.8
memModuleNotes When operated in FIPS mode
str140Version 140-2
_sp_ Security Policy   [pdf][html][txt]
_cert_ Certificate   [pdf][txt]
strPURL
strModuleType Hardware
strValidationDate 08/31/2009;05/17/2010
intOverallLevel 2
memIndividualLevelNotes -Physical Security: Level 3;-EMI/EMC: Level 3
strFIPSAlgorithms AES (Cert. #933);
DSA (Cert. #331);
ECDSA (Cert. #116);
HMAC (Cert. #522);
RNG (Cert. #534);
RSA (Cert. #452);
SHS (Cert. #917);
Triple-DES (Cert. #747);
Triple-DES MAC (Triple-DES Cert. #747, vendor affirmed)
strOtherAlgorithms ARIA;
DES;
RC2;
RC4;
RC5;
CAST;
CAST3;
CAST5;
SEED;
DES-MAC;
RC2-MAC;
RC5-MAC;
CAST-MAC;
CAST3-MAC;
CAST5-MAC;
MD2;
MD5;
HAS-160;
HMAC-MD5;
SSL3-MD5-MAC;
SSL3-SHA1-MAC;
SSL PRE-MASTER;
PBE-MD2-DES;
PBE-MD5-DES;
PBE-MD5-CAST;
PBE-MD5-CAST3;
PBE-SHA-1-CAST5;
KCDSA;
Diffie-Hellman (key agreement: key establishment methodology provides 80 bits of encryption strength;
non-compliant);
RSA (key wrapping;
key establishment methodology provides between 112 and 150 bits of encryption strength;
non-compliant less than 112 bits of encryption strength);
EC Diffie-Hellman (key agreement: key establishment methodology provides 80 bits of encryption strength;
non-compliant)
strConfiguration Multi-chip standalone
memModuleDescription The Luna PCM cryptographic module is a multi-chip standalone hardware cryptographic module in the form of a PCMCIA card that typically resides within a custom computing or secure communications appliance. It is contained in its own secure enclosure that provides physical resistance to tampering. The module provides secure key generation and storage for symmetric keys and asymmetric key pairs along with symmetric and asymmetric cryptographic services. Access to key material and cryptographic services for users and user application software is provided indirectly through the host appliance.
intModuleCount 1
memAdditionalNotes 05/17/10: Corrected AES-MAC entry.
strFirstValidtionDate 08/31/09 00:00:00
strLabName Leidos
strValidationYear 2009