Supported Algorithms
This section lists the algorithms and functions that are supported by Primus HSM. These vary by firmware version. See the separate lists for:
These lists are for the major versions. Algorithms still differ between minor versions. For full details, expand the "Firmware Version Support" note in the tables.
Glossary
In the algorithms listing, the following values are used to describe whether certain algorithms can be used when the HSM is operating in FIPS Mode or Common Criteria Evaluated Configuration.
For more information on enabling FIPS Mode or configuring Primus HSM in Common Criteria Evaluated Configuration, please see Section 3.10 "Operation Modes (Normal, Restricted, FIPS 140-3, CC)" of the Primus HSM User Guide.
| FIPS Mode Option | Description |
|---|---|
| Approved | The algorithm is certified and approved by NIST. The corresponding validation certificate is linked. |
| Non-Approved but Allowed | The algorithm is within the policy allowed by NIST, but the implementation is not certified. |
| Disabled | The algorithm is not allowed by NIST. It will be disabled and unavailable when the HSM is operating in FIPS Mode. |
| CC Evaluated Configuration Option | Description |
|---|---|
| Allowed | The algorithm is allowed to be used within the configuration and is Common Criteria certified. |
| Not Allowed | The algorithm is not allowed to be used within the configuration as it is not Common Criteria certified, but it is not disabled. It is up to the application and the operating environment to not use it. |
What Firmware Version Is Running?
For CloudHSM, you can call the GET /v1/hsmInfo endpoint
to query the current firmware version.
Note: this requires a valid authentication mechanism, such as a valid JWT.
$ curl https://sbx-rest-api.cloudshsm.com/v1/hsmInfo -H "Authorization: Bearer <jwt>"
{"HSMSystemTime":"2025-11-01T09:00:00","Version":"RE-3.2.9","Vendor":"Securosys SA"}
For on-premise HSMs, you can check the current firmware version as follows:
- PSO
- UI
- Console
The tile that you click when connecting to the HSM shows the firmware version.
System ➜ Diagnostics Device ➜ Firmware
hsm_diagnostics fw