U.S. flag   An official website of the United States government

Cryptographic Module Validation Program CMVP

Certificate #1813

Details

Module Name
Junos-FIPS 10.4 L2 OS Cryptographic Module
Standard
FIPS 140-2
Status
Historical
 Historical Reason
RNG SP800-131A Revision 1 Transition
Validation Dates
10/11/2012
Overall Level
2
Caveat
When operated only on the specific platforms specified on the reverse. The routing engine and chassis configured with tamper evident seals installed as indicated in the Security Policy.
Security Level Exceptions
  • Design Assurance: Level 3
  • Tested: M120 [1], M320 [2], MX240 [3], MX480 [4], MX960 [5] and T1600 [6]
  • Routing Engines: (RE-A-2000-4096 [1,2] and RE-S-2000-4096 [3,4,5,6])
  • Routing Engine Control Boards: (750-011402 [1] and 750-021524 [3,4,5])
  • Blanking Plate (540-015089 Rev02 [5])
  • Control Boards: (750-009188 [2] and 750-024570 [6])
  • with Tamper Evident Seal Kit: (JNPR-FIPS-TAMPER-LBLS [1,2,3,4,5,6])
Module Type
Firmware
Embodiment
Multi-chip embedded
Description
Juniper Networks M, T and MX series routing platforms are complete routing systems that support a variety of high-speed interfaces for medium/large networks and network applications and numerous routing standards. All platforms are physically self-contained, housing software, firmware, and hardware necessary for routing. The router architecture provides for streamlined forwarding and routing control and the capability to run Internet-scale networks at high speeds. They are powered by the same JUNOS software, which provides both management and control functions as well as all IP routing.
FIPS Algorithms
AES Certs. #1719, #1726 and #1727
DSA Cert. #531
ECDSA Cert. #225
HMAC Certs. #994, #1000, #1001 and #1002
RNG Cert. #909
RSA Cert. #847
SHS Certs. #1502, #1508, #1509 and #1510
Triple-DES Certs. #1106, #1112 and #1113
Other Algorithms
MD5; Diffie-Hellman (key agreement; key establishment methodology provides 80 bits of encryption strength; non-compliant); RSA (key wrapping; key establishment methodology provides 80 bits of encryption strength; non-compliant)
Firmware Versions
10.4R5

Vendor

Juniper Networks, Inc.
1194 N. Mathilda Ave.
Sunnyvale, CA 94089
USA

Guillaume Gavillet
gavillet@juniper.net
Fax: 408-936-1801
Seyed Safakish
seyeds@juniper.net
Phone: 408-745-8158
Fax: 408-936-1801

Lab

CEAL
NVLAP Code: 200002-0