Default banner

SafeNet Luna PCIe HSM – Cryptographic Acceleration from an Embedded HSM

  • Overview
  • Specifications
  • Features

discSafeNet Luna PCIe Hardware Security Modules (HSMs) can be embedded directly in an appliance or application server for an easy-to-integrate and cost-efficient solution for cryptographic acceleration and security.  The high-security hardware design of SafeNet Luna PCIe HSM ensures the integrity and protection of encryption keys throughout their life cycle.

All digital signing and verification operations are performed within the HSM to increase performance and maintain security.

Download the SafeNet Luna PCIe HSM 7 Product Brief

Request More Info

 

 

SafeNet Luna PCIe HSM at a Glance:

tick

 Meet Your Compliance Needs

 Meet your compliance needs by leveraging our certified SafeNet Luna PCIe HSMs. As Gemalto's sole focus is security, we make third-   party certifications a priority.

 

 

arrowsOvercome Resource Constraints

As the need to provide security for resource constrained devices (smart phones, tablets, smart meters) grows, vendors must be able to provide solutions that leverage ECC algorithms. ECC algorithms offer high key strength, at a greatly reduced key length when compared to RSA keys.

SafeNet Luna PCIe HSM includes a wide range of hardware accelerated ECC algorithms, including custom curves, that can be used in the development of solutions.

dollar

 

Operational Cost Savings

SafeNet Luna PCIe HSM benefits from a robust and forward thinking feature set. These features – including remote management, secure transport, and remote backup – will greatly reduce the management and operational costs of a deployment that utilizes this HSM.

 

Partner Spotlight: Microsoft Forefront TMG

Microsoft logo

Microsoft Forefront Threat Management Gateway (TMG), the company's secure web gateway, integrates with SafeNet Luna PCIe HSMs to secure SSL transactions by storing master SSL private key in Gemalto's FIPS 140-2 Level 3 tamper-proof hardware appliance.

The SafeNet Luna PCIe HSM integration also significantly improves server performance by offloading resource intensive cryptographic operations to the purpose-built encryption appliance.

Learn more about this partnership

Explore our technology partners

Download the SafeNet Luna PCIe HSM 7 Product Brief

Request More Info

SafeNet Luna PCIe HSM 7 Specifications

Specifications listed below are for SafeNet Luna PCIe HSM 7. 

For specifications on SafeNet Luna PCIe HSM 5 and 6, download the Product Brief.

 

Feature

Details

OS SupportWindows, Linux

Cryptography

  • Full Suite B support
  • Asymmetric: RSA, DSA, Diffie-Hellman, Elliptic Curve Cryptography (ECDSA, ECDH, Ed25519, ECIES) with named, user-defined and Brainpool curves, KCDSA, and more
  • Symmetric: AES, AES-GCM, Triple DES, ARIA, SEED, RCS, RC4, RC5, CAST, and more
  • Hash/Message Digest/HMAC: SHA-1, SHA-2, SM3, and more
  • Key Derivation: SP800-108 Counter Mode
  • Key Wrapping: SP800-38F
  • Random Number Generation: Replace with: designed to comply with AIS 20/31 to DRG.4 using HW based true noise source alongside NIST 800-90A compliant CTR-DRBG

Crytographic APIsPKCS#11, Java (JCA/JCE), Microsoft CAPI and CNG, OpenSSL

DimensionsLow Profile PCIe card, 2.74” x 6.57” x .074”
(69.6mm x 167mm x 187mm)

Power Consumption18W maximum, 14W typical

TemperatureOperating 0° to 50°C

Host InterfacePCI-Express CEM 3.0, PCI, PCI Express Base 2.0

CertificationsFIPS 140-2 Level 3—Password and Multi-Factor (PED)

Safety & Environmental Compliance

  • UL, CSA, CE
  • FCC, CE, VCCI, C-TICK, KC MARK
  • RoHS2, WEEE
  • TAA

ManagementMofN support for division of command

DimensionsLow Profile PCIe card, 2.74” x 6.57” x .074”
(69.6mm x 167mm x 187mm)

Reliability 

  • Back/Restore
  • High Availability (HA)
  • Mean Time Between Failure (MTBF) 997,508 hours

Available SafeNet Luna PCIe HSM 7 Models

SafeNet Luna PCIe HSM "A" Series:

SafeNet Luna PCIe HSM A700, A750, and A790 offer FIPS 140-2 Level 3 Certification, and password authentication for easy management.

SafeNet Luna PCIe HSM “S” Series:

SafeNet Luna PCIe HSMs S700, S750, and S790 feature Multi-factor (PED) Authentication, for high-assurance use cases.

All SafeNet Luna PCIe HSMs offer the highest levels of performance. Across a breadth of algorithms including ECC, RSA, and symmetric transactions. Additional product highlights include key ownership regardless of the cloud environment, and multiple roles for strong separation of duties.

 

 

Algorithm

SafeNet Luna PCIe HSM 700 Models

SafeNet Luna PCIe HSM 750 Models

SafeNet Luna PCIe HSM 790 Models

RSA-2048 signing ops

1,000 tps

5,000 tps

10,000 tps

ECC P256 signing ops

2,000 tps

10,000 tps

20,000 tps

AES-GCM small packet encryption ops

2,000 tps

10,000 tps

20,000 tps

Download the SafeNet Luna PCIe HSM 7 Product Brief

Request More Info

SafeNet PCIe HSM Features & Benefitsicon

Sample Applications:

  • PKI Certificate Signing & Validation
  • SSL & TLS
  • Storage (online CA keys & offline CA keys)
  • Smart Card Issuance & Management
  • Code & Document Signing
  • Database & File Encryption
  • Email Encryption
  • Infrastructure Security
  • DNSSEC
  • Identity & Rights Management
  • Key Management
  • Cryptographic Acceleration
  • Timestamping
  • Secure Manufacturing
  • Blockchain
  • Internet of Things (IoT)

Security at a Glance:

  • Keys in hardware
  • Remote Management
  • Meet compliance needs for GDPR, HIPAA, PCI-DSS, eIDAS and more
  • Multi-level access control
  • Multi-part splits for all access control keys
  • Intrusion-resistant, tamper evident hardware
  • Secure Audit Logging
  • Strongest cryptographic algorithms
  • Suite B algorithm support
  • Secure decommission

Features:

  • Intrusion-resistant, tamper-evident hardware
  • Field Serviceable Components
  • Software upgradable
  • Multiple Roles for Administration
  • Strong Separation of Duties
  • Load Balancing and Scalability

Download the SafeNet Luna PCIe HSM 7 Product Brief

Download the SafeNet Luna PCIe HSM 5/6 Product Brief

Request More Info