通用硬件安全模块

Entrust nShield 5s

Deliver cryptographic key services to applications with a crypto-agile, dedicated, PCI-Express (PCIe) hardware security module (HSM).

联系 Entrust 销售客服

entrust nshield 5s with fips certification product image

Entrust nShield 5s HSMs

nShield 5s HSMs are PCIe cards that perform encryption, digital signing, and key generation for an extensive range of commercial and custom-built applications, including certificate authorities, code signing, and more. With their comprehensive capabilities and quantum crypto-agility, they are 100% compatible with existing nShield HSM deployments and APIs, and they are highly secure, with FIPS 140-3 Level 3 certification*.

*FIPS 140-3 Validated, Certificate #4745

Models

The nShield 5s HSM series includes the new high-performance nShield 5s High, which offers superior asymmetric and symmetric performance and best-in-class elliptic curve cryptography (ECC) transaction rates.

查看数据表

Next-Generation HSMs

nShield 5s Benefits

强大的架构

nShield HSM 通过 Security World 架构集成在统一的生态系统当中，可为您提供可扩展性和负载平衡等功能。

更快的数据处理

nShield 5s HSMs are ideal for enterprise retail, IoT 5G, and other environments where throughput is critical.

保护敏感的业务和应用逻辑

在 nShield 的边界内执行代码，保护您的应用程序及其处理的数据。

技术规格

通过认证的硬件解决方案

Entrust has earned a broad set of certifications for nShield HSM products. These certifications help our customers to demonstrate compliance while also helping to give them the assurance that their nShield HSMs meet stringent industry standards.

安全和环境标准合规性

UL, CE, FCC, Canada ICES, KC, VCCI, RCM, UKCA RoHS, WEEE, REACH

安全合规性

FIPS 140-3 Level 3 eIDAS and Common Criteria EAL4 + AVA_VAN.5 and ALC_FLR.2 certification against EN 419 221-5 Protection Profile, under the Dutch NSCIB scheme
- Can form the basis of an EN 419 241-2 certified remote signing system for eIDAS
- 符合 BSI AIS 31 生成真实和确定性随机数的要求

支持的 API

PKCS#11, OpenSSL, Java (JCE), Microsoft CAPI and CNG, nCore, and Web Services

支持的加密算法

Full NIST Suite B implementation
非对称算法： RSA, Diffie-Hellman, ECMQV, DSA, El- Gamal, KCDSA, ECDSA (including NIST, Brainpool & secp256k1 curves), ECDH, Edwards (Ed25519, Ed25519ph)
对称算法： AES, AES-GCM, Arcfour, ARIA, Camellia, MD5 HMAC, RIPEMD160 HMAC, SEED, SHA-1 HMAC, SHA-224 HMAC, SHA-256 HMAC, SHA-384 HMAC, SHA-512 HMAC, Tiger HMAC, 3DES
哈希/消息摘要： MD5, SHA-1, SHA-2 (224, 256, 384, 512 bit), HAS-160, RIPEMD160, SHA-3 (224, 256, 384, 512 bit)
Elliptic Curve Key Agreement (ECKA) available via Java API and nCore APIs
Elliptic Curve Integrated Encryption Scheme (ECIES) available via Java API, PKCS#11 and nCore APIs
TUAK & MILENAGE algorithm support for mutual authentication and key generation (3GPP)
NIST short-listed post-quantum cryptographic algorithms supported using the nShield Post-Quantum SDK with CodeSafe

支持的平台

Windows and Linux operating systems including distributions from Red Hat and SUSE.

可靠性

使用 Telcordia SR-332 “电子设备可靠性预测程序” MTBF 标准在 25°C 的工作温度下进行计算

nShield 5s HSM: 1,702,841 小时

nShield 5s models	Base	Mid	高
RSA 签名性能 (tps)（使用 NIST 推荐密钥长度）
2048 位	670	3,949	13,614
4096 位	135	814	2,200
8192 位	19	115	309
ECC 主曲线签名性能 (tps) （使用 NIST 推荐密钥长度）
256 位	2,085	7,553	21,826
521 位	1,010	5,977	16,164
Key generation (key/sec)
RSA 2048 bit	7	20	23
ECDSA P-256 bit	1,040	3,580	3,494
ECDSA P-521 bit	518	2,480	2,724
Key agreement performance (transaction/sec)
ECDH P-256 bit	2,085	7,550	21,436

Each nShield 5s HSM is supplied with an external smart card reader for local use.

选项和配件

性能评级和选项

We have a variety of nShield 5s models to meet your performance needs. You can select among the performance models shown in the Tech Specs tab and can also purchase in-field upgrades from lower nShield 5s performance models to higher performance models.

软件选项包

Entrust offers a range of software option packs that can be used in conjunction with your nShield HSMs.

了解更多

nShield Monitoring

The nShield HSM monitoring platform enables operations teams to gain 24/7 visibility into the status of all their nShield HSMs, including those residing across distributed data centers. With this solution, security teams can efficiently inspect HSMs and find out immediately if any potential security, configuration, or utilization issue may compromise their mission-critical infrastructure.

远程管理模块

nShield 远程管理支持操作人员从办公地点远程管理分布式 nShield HSM（包括添加应用程序、升级固件、检查运行状态、重新启动等），从而减少差旅时间并节约了成本。远程管理套件包含设置和使用该工具所需的硬件和软件。

CodeSafe

CodeSafe 是一个功能强大且安全的环境，允许您在 nShield HSM 的安全边界内执行应用程序。示例应用程序包括数字仪表、身份验证代理、数字签名代理和自定义加密流程。 CodeSafe is available with FIPS Level 3 certified network attached and PCIe nShield HSMs

CipherTools

CipherTools 是一套包含教程、参考文档、示例程序和其他库的工具包。借助此工具包，开发人员可以充分利用 nShield HSM 的高级集成功能。除了为标准 API 提供支持外，该工具包还支持您使用 nShield HSM 运行自定义应用程序。 CipherTools 包含在 Security World 软件的 ISO/DVD 中，免费向您提供。

KCDSA 激活

With the KCDSA activation license, you can use the Korean Certificate-based Digital Signature Algorithm (KCSDA) as well as HAS-160, SEED, and ARIA algorithms on nShield HSMs.

智能卡读卡器机架

For organizations deploying one or more nShield 5s modules in a 19" rack, the optional nShield smart card reader rackmount provides a practical and clean solution for attaching card readers in the data center. The rackmount is 1U in height and can be equipped with up to four smart card readers, which come standard with nShield 5s cards. 每个单元都配备了三个封板，用于盖住尚未使用的插槽。

常见问题解答

What is a PCIe HSM?

An HSM device is a physical appliance used to manage cryptographic keys and perform encryption operations securely. PCIe refers to the device’s connection interface, Peripheral Component Interconnect Express — a high-speed method of connecting HSMs to the motherboard of a computer or application server.

Why Use a PCIe HSM?

An HSM device with a PCIe interface offers several advantageous capabilities. Key features include:

Secure key storage: Stores cryptographic keys in tamper-resistant hardware
High performance: Speeds up cryptographic operations compared to software-based solutions
合规性：Helps organizations meet regulatory standards like FIPS 140-2 3 and PCI DSS

What is the nShield 5s HSM?

The nShield 5s HSM (Hardware Security Module) is a high-performance, certified cryptographic device designed to protect sensitive data, keys, and cryptographic operations. It ensures compliance with regulatory standards, supports secure integration with various systems, and offers flexible deployment options, including cloud, hybrid, and on-premises environments.

Each model provides robust cryptographic operations to support essential security functions like encryption, digital signing, and key generation. Between Base, Mid, and High, organizations can choose the nShield 5s that aligns best with their operational requirements. This flexibility allows them to scale and upgrade their cryptographic functions as security needs evolve.

How Can I Use an HSM?

nShield HSMs deliver high-assurance data security and cryptographic protection for a broad range of use cases, including:

Cloud computing and container security
密钥管理
Digital Signing
代码签名
Public key infrastructure and certificate management
Identity authentication
支付安全
Encryption, database security, and tokenization
特权访问和机密管理

Entrust nShield 5s

Entrust nShield 5s HSMs

Models

查看数据表

nShield 5s Benefits

强大的架构

更快的数据处理

保护敏感的业务和应用逻辑

技术规格

选项和配件

常见问题解答

What is a PCIe HSM?

Why Use a PCIe HSM?

What is the nShield 5s HSM?

How Can I Use an HSM?

相关产品

相关产品

nShield 5c

nShield Edge

nShield 即服务

远程管理

相关资源

Entrust nShield HSM 手册

nShield Security World 架构

nShield 硬件安全模块远程管理

Entrust Security Certification

CodeSafe Data Sheet

联系信息

公司

新闻中心

产品资源