The Luna USB HSM delivers high assurance key protection, maintaining all key materials encrypted within the confines of the tamper-resistant hardware. The small form factor and offline key storage capability set the product apart, making it ideal for protecting business critical keys in a secure offline environment.
Luna USB HSM delivers industry leading key management in a portable appliance with an USB interface. All key materials are maintained exclusively within the confines of the hardware.The Luna USB HSM is a small form factor HSM that is widely used by governments, financial institutions and large enterprises to protect data, applications and digital identities in order to reduce risk and ensure regulatory compliance. It is well suited for the strong protection of PKI root keys.
Crytographic Capabilities
Operation | Key | TPS |
---|---|---|
Sign | RSA-1024 | 340 |
Sign | RSA-2048 | 62 |
Sign | RSA-4096 | 8 |
Sign | ECC P256 | 48 |
Sign | ECC P521 | 8 |
Encrypt | ECIES (AES128-SHA256 HMAC P256) | 24 |
Encrypt | AES256-GCM | 1350 |
Luna USB HSM supports a broad range of asymmetric key encryption and key exchange capabilities, as well as support for all standard symmetric encryption algorithms. It also supports all standard hashing algorithms and message authentication codes (MAC). The Luna USB HSM has a hardware based random number generator, compliant with NIST SP 800-90A and B.
Luna USB HSM - Product Brief
The Luna USB HSM delivers high assurance key protection, maintaining all key materials encrypted within the confines of the tamper-resistant hardware. The small form factor and offline key storage capability set the product apart, making it ideal for protecting business...
- Benefits & Features
- Specifications
High Assurance Security
- Keys always remain in FIPS 140-3 validated (in progress), intrusion-resistant hardware
- Remote management, backup and restore for quick disaster recovery
- Password Authentication or Quorum (MofN) multi-factor authentication for increased security and strong separation of duties
- High-assurance delivery with secure transport mode
Sample Applications
- PKI key generation and key storage/protection (online and offline CA keys)
- Certificate validation and signing
- Offline hardware protection/security of business critical keys
- Support Bring your own Key (BYOK) use cases
Features
- Portable, handheld, small form factor device
- Easy setup – up and running in minutes
- LCD touch screen enables quick review of status including firmware, memory capacity, and more
- Host powered USB – no need for an external power adaptor
- Standalone support of Quorum (MofN) multi-factor authentication for increased security
Luna USB HSM Technical Specifications:
Feature | Details |
---|---|
Luna USB HSM U700 | 1 partition, 32MB |
OS Support | Windows, Linux |
Cryptography |
|
Crytographic APIs | PKCS#11, Java (JCA/JCE), Microsoft CAPI and CNG, OpenSSL |
Security Certification | FIPS 140-3 Level 3 (in progress) |
Physical Characteristics |
|
Safety and Environmental Compliance |
|
Reliability | MTBF: 560073 hrs@40C, Telcordia SR-332, Issue C |
Trade Agreement Compliance | TAA |