U.S. flag   An official website of the United States government

Cryptographic Module Validation Program CMVP

Certificate #1560

Details

Module Name
Cisco 3925E and Cisco 3945E Integrated Services Routers (ISRs)
Standard
FIPS 140-2
Status
Historical
 Historical Reason
RNG SP800-131A Revision 1 Transition
Validation Dates
06/14/2011;02/23/2012
Overall Level
2
Caveat
When operated in FIPS mode with tamper evident labels and security devices installed as indicated in the Security Policy
Security Level Exceptions
  • Roles, Services, and Authentication: Level 3
  • Design Assurance: Level 3
Module Type
Hardware
Embodiment
Multi-chip standalone
Description
The Cisco 3925E and 3945E Integrated Services Routers are routing platforms that provide comprehensive security services including VPN for small businesses, enterprise small branch and teleworkers. The new platforms are architected to enable the next phase of branch-office evolution, providing rich media collaboration and virtualization to the branch while offering a wide-range of connectivity options.
FIPS Algorithms
AES Certs. #803 and #1580
HMAC Certs. #443 and #926
RNG Cert. #850
RSA Cert. #771
SHS Certs. #801 and #1399
Triple-DES Certs. #1036 and #1037
Other Algorithms
DES; HMAC-MD5; MD5; RC4; Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength); RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength)
Hardware Versions
3925E (with PCB rev -A0 and -B0), 3945E (with PCB rev -A0 and -B0), [FIPS Kit (CISCO-FIPS-KIT=), Revision -B0], ISR: FIPS-SHIELD-3900=
Firmware Versions
15.1(2)T3

Vendor

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134
USA

Global Certification Team
certteam@cisco.com

Lab

SAIC
NVLAP Code: 200427-0