Luna Network Hardware Security Module (HSM) from Thales Trusted Cyber Technologies (TCT) is the choice for government agencies when generating, storing, protecting and managing cryptographic keys used to secure sensitive data and critical applications. Meeting government mandates for U.S. Supply Chain, the high assurance, tamper-resistant Luna T-Series HSM is designed, developed, manufactured, sold, and supported in the United States.

Luna T-Series models offer secure storage of your cryptographic information in a controlled and highly secure environment. All Luna T-Series models can be initialized by the customer to protect proprietary information by using either multifactor (PED) authentication or password authentication.

Industry Leading Performance & Security

• Industry leading cryptographic performance
• Performance optimized for government mandated algorithms and key lengths
• Up to 10 times the performance as compared to Luna SA for Government
• Keys-in-hardware approach protects the entire life-cycle of keys within the FIPS 140-2 validated confines of the HSM
• Addresses compliance requirements with FIPS 140-2 Level 3 certification
• Approved by CNSS for use in National Security Systems PKI

Crypto Agility

Thales TCT’s Luna HSMs employ a crypto agile architecture that supports in-field introduction of new crypto algorithms. The Luna HSMs offer large amounts of memory (inside the crypto module) to support growth to larger key sizes. The Luna HSM’s CPU capabilities support new, compute intensive algorithms and features.

Post-Quantum Cryptography (PQC) Algorithms

Thales TCT’s Luna HSMs support ML-DSA and ML-KEM PQC algorithms as standardized by NIST. This enables agencies and technology partners to begin migrating their FIPS 140 Level 3 rooted cryptographic systems, guarding against Harvest Now, Decrypt Later and other quantum threats.

Additionally, the Luna HSMs support the Leighton-Micali Signature (LMS) stateful hash-based signature mechanism, along with its multi-tree variant, the Hierarchical Signature Scheme (HSS). Utilizing either LMS/HSS or ML-DSA, Luna HSMs enable customers to transition to quantum-resistant firmware/software signing in accordance with CNSA 2.0.

Quantum Enhanced Keys

By embedding a quantum random number generator (QRNG) chip within the Luna HSM, Thales TCT is offering the industry’s first FIPS 140-2 compliant HSM capable of generating quantum enhanced keys. Using principles of quantum physics, the QRNG chip produces high quality entropy which is the basis for all random numbers and cryptographic keys generated by the HSM.  With a choice of operating the HSM in FIPS-approved mode using either the embedded, classic physical RNG or the embedded quantum RNG, customers can dynamically change between classical key generation and quantum enhanced keys as threats emerge over time.

LEARN MORE ABOUT QUANTUM ENHANCED KEYS

Available Models and Performance

Technical Specifications

Resources