YubiHSM 2

The YubiHSM 2 (firmware 2.4) is a nano-form-factor hardware security module that safeguards the cryptographic keys used by servers and applications. It protects Certificate Authority root keys and digital signing operations from theft or misuse, in a 12 × 13 × 3.1 mm USB-A device weighing 1 gram that can sit permanently in an internal USB port.

• Nano form factor for internal or confined USB ports
  
• Secure key generation, storage and cryptographic operations on-chip
  
• RSA up to 4096-bit, ECC including curve25519, ECDSA and EdDSA
  
• AES-CCM key wrapping at 128, 192 and 256 bits
  
• On-chip true random number generator (TRNG)
  
• Asymmetric key attestation
  
• Role-based access control across 16 concurrent connections
  
• Tamper-evident audit logging with hash chaining
  
• M of N wrap key backup and restore
  
• Remote and local management

• USB Type: USB-A nano

• Firmware: 2.4

• Cryptography: RSA 2048 / 3072 / 4096 (PKCS#1v1.5, PSS signing; PKCS#1v1.5, OAEP decryption)

• Elliptic curves: secp224r1, secp256r1, secp256k1, secp384r1, secp521r1, bp256r1, bp384r1, bp512r1, curve25519 — ECDSA and EdDSA

• Hashing: SHA-1, SHA-256, SHA-384, SHA-512

• Key wrap: NIST AES-CCM at 128 / 192 / 256 bits

• Random numbers: on-chip TRNG seeding NIST SP 800-90 AES-256 CTR_DRBG

• Attestation: asymmetric key pairs, factory or own attestation key

• Storage: 256 object slots, 128 KB total — up to 127 × RSA-2048, 93 × RSA-3072, 68 × RSA-4096, or 255 elliptic-curve keys

• Sessions: 16 concurrent connections

• Performance: RSA-2048-PKCS1-SHA256 ~139 ms, ECDSA-P256-SHA256 ~73 ms

• Dimensions: 12 mm × 13 mm × 3.1 mm

• Weight: 1 g

• Power: 20 mA average, 30 mA maximum

• Compliance: FCC, CE, WEEE, RoHS

Integrates with: Microsoft CNG (KSP), PKCS#11 on Windows, Linux and macOS, Microsoft Active Directory Certificate Services, and the native YubiHSM Core Libraries (C and Python).

Supported operating systems: Windows 10 and Windows Server 2012, 2016, 2019 and 2025; major Linux distributions including CentOS, Debian, Fedora and Ubuntu; macOS.