The nShield Edge hardware security module (HSM) is a full-featured, portable USB HSM designed for low-volume transaction environments. It’s capable of encryption and key protection and is ideally suited for off-line key generation for certificate authorities (CAs) as well as development and Bring Your Own Key (BYOK) environments.

Tech Specs

Certifications

nShield Edge USB HSMs are certified to FIPS 140-2 Level 2 and Level 3.

Safety and Environmental Standards Compliance

• UL, CE, FCC, RCM, Canada ICES
• RoHS2, WEEE

Supported APIs

• PKCS#11, OpenSSL, Java (JCE), Microsoft CAPI and CNG

Supported Cryptographic Algorithms

• Asymmetric public key algorithms: RSA, Diffie-Hellman, ECMQV, DSA, KCDSA, ECDSA, ECDH, Edwards (X25519, Ed25519ph)
• Symmetric algorithms: AES, AES-GCM, ARIA, Camellia, CAST, RIPEMD160 HMAC, SEED, Triple DES
• Hash/message digest: SHA-1, SHA-2 (224, 256, 384, 512 bit), HAS-160
• Full Suite B implementation with fully licensed ECC, including Brainpool and custom curves
• Elliptic Curve Key Agreement (ECKA) available via Java API and nCore APIs
• Elliptic Curve Integrated Encryption Scheme (ECIES) available via Java API, PKCS#11 and nCore APIs

nShield HSMs offers the majority of these cryptographic algorithms as part of the standard feature set. For organizations wishing to use ECC or South Korean algorithms, optional activation licenses are needed.

Operating Systems

Windows and Linux operating systems including distributions from RedHat and SUSE.

Options and Accessories