Deliver high-assurance cryptographic key services with a dedicated PCIe HSM designed for crypto-agility, native hardware-accelerated post-quantum algorithm support, and long-term cryptographic resilience.
nShield 5s HSMs are PCIe cards that perform encryption, digital signing, and key generation for an extensive range of commercial and custom-built applications, including certificate authorities, code signing, and more. With their comprehensive capabilities and quantum crypto-agility, they are 100% compatible with existing nShield HSM deployments and APIs, and they are highly secure, with FIPS 140-3 Level 3 certification*.
The nShield 5s HSM series includes the new high-performance nShield 5s High, which offers superior asymmetric and symmetric performance and best-in-class elliptic curve cryptography (ECC) transaction rates.
Our Security World architecture integrates nShield HSMs into a unified ecosystem, delivering scalability, load balancing, and more.
Prepare for quantum-era threats with native firmware support for hardware-accelerated, NIST-standardized post-quantum algorithms.
Execute code within nShield boundaries, protecting your applications and the data they process.
Full specifications for nShield 5s
| Specification | Details |
|---|---|
| Safety and Environmental Standards Compliance | UL, CE, FCC, Canada ICES, KC, VCCI, RCM, UKCA RoHS, WEEE, REACH |
| Security Compliance |
|
| Supported APIs | PKCS#11, OpenSSL |
| Supported Cryptographic Algorithms |
|
| Ed25519ph) |
|
| PKCS#11 and nCore APIs | TUAK & MILENAGE algorithm support for mutual authentication and key generation (3GPP), Supported Platforms |
| Specifications | nShield 5s HSM: 1,702,841 hours, nShield 5s modelsBaseMidHighML-DSA signing performance (tps) for NIST standardized PQC schemesML-DSA443407902,780ML-DSA652407901,920ML-DSA872107901,570RSA signing performance (tps) for NIST recommended key lengths2048 bit6703,94913,6144096 bit1358142,2008192 bit19115309ECC prime curve signing performance (tps) for NIST recommended key lengths256 bit2,0857,55321,826512 bit1,0105,97716,164Key generation (key/sec)RSA 2048 bit72023ECDSA P-256 bit1,0403,5803,494ECDSA P-521 bit5182,4802,724Key agreement performance (transaction/sec)ECDH P-256 bit2,0857,55021,436 |
Download product documentation and resources
Explore other configurations and models that might suit your needs.
Recommended
#nShield5c
Learn how a FIPS HSM like the Entrust nShield 5c can protect your most sensitive data with cryptographic key services.
Recommended
#nShieldEdge
nShield Edge hardware security modules (HSMs) are portable USB-connected HSMs that provide cryptographic key services for low-volume transaction environments.
Recommended
#nShieldasaService
Discover how nShield as a Service (nSaaS) can help your organization leverage cryptographic services in the cloud.
Recommended
#ManagementandMonitoring
Secure your cryptographic keys with remote HSM management solutions that offer scalable, cloud-based protection, compliance support, and seamless integration.
Our team of experts is ready to help you find the perfect solution for your business needs. Get personalized advice and competitive quotes.
We're here to help with any questions
