YubiHSM 2 FIPS

The YubiHSM 2 FIPS (firmware 2.4) is a FIPS 140-3 validated hardware security module at Overall Level 3, listed under NIST CMVP Certificate #5302. It provides enterprise-grade cryptographic key protection and lifecycle management for certificate authorities, code signing and critical infrastructure, in a 12 × 13 × 3.1 mm USB-A nano device weighing 1 gram.

• FIPS 140-3 validated at Overall Level 3 (NIST CMVP Certificate #5302)
  
• Advanced physical security protections
  
• Nano form factor for internal or confined USB ports
  
• Secure key generation, storage and cryptographic operations on-chip
  
• RSA up to 4096-bit, ECC including curve25519, ECDSA and EdDSA
  
• AES-CCM key wrapping at 128, 192 and 256 bits
  
• Mutual authentication and secure channel
  
• Asymmetric key attestation and role-based access control
  
• Tamper-evident audit logging with hash chaining
  
• M of N unwrap key restore via the YubiHSM Setup Tool

• USB Type: USB-A nano

• Firmware: 2.4

• Certification: FIPS 140-3 validated, Overall Level 3 (NIST CMVP Certificate #5302)

• Cryptography: RSA 2048 / 3072 / 4096 (PKCS#1v1.5, PSS signing; PKCS#1v1.5, OAEP decryption)

• Elliptic curves: secp224r1, secp256r1, secp256k1, secp384r1, secp521r1, bp256r1, bp384r1, bp512r1, curve25519 — ECDSA and EdDSA

• Hashing: SHA-1, SHA-256, SHA-384, SHA-512

• Key wrap: NIST AES-CCM at 128 / 192 / 256 bits

• Random numbers: on-chip TRNG seeding NIST SP 800-90 AES-256 CTR_DRBG

• Attestation: asymmetric key pairs, factory or own attestation key

• Storage: 256 object slots, 128 KB total — up to 127 × RSA-2048, 93 × RSA-3072, 68 × RSA-4096, or 255 elliptic-curve keys

• Sessions: 16 concurrent connections

• Performance: RSA-2048-PKCS1-SHA256 ~139 ms, ECDSA-P256-SHA256 ~73 ms

• Dimensions: 12 mm × 13 mm × 3.1 mm

• Weight: 1 g

• Power: 20 mA average, 30 mA maximum

• Compliance: FCC, CE, WEEE, RoHS

Integrates with: Microsoft CNG (KSP), PKCS#11 on Windows, Linux and macOS, Microsoft Active Directory Certificate Services, and the native YubiHSM Core Libraries (C and Python).

Supported operating systems: Windows 10 and Windows Server 2012, 2016, 2019 and 2025; major Linux distributions including CentOS, Debian, Fedora and Ubuntu; macOS.