U.S. flag   An official website of the United States government

Cryptographic Module Validation Program CMVP

Certificate #2341

Details

Module Name
Cisco Catalyst 3850 Series Switches and Cisco Catalyst 3650 Series Switches
Standard
FIPS 140-2
Status
Historical
 Historical Reason
Moved to historical list in accordance with SP800-131A Revision 1 Transition (AES/TDES key wrapping)
Validation Dates
03/20/2015
Overall Level
1
Caveat
When operated in FIPS mode
Security Level Exceptions
  • Roles, Services, and Authentication: Level 2
  • Mitigation of Other Attacks: N/A
Module Type
Hardware
Embodiment
Multi-chip standalone
Description
The Cisco Catalyst 3650 and 3850 Series family is the next generation of enterprise-class standalone and stackable access/aggregation layer switches that provide full convergence between wired and wireless on a single platform.
FIPS Algorithms
AES Certs. #2685, #2817 and #2879
CVL Cert. #253
DRBG Certs. #435 and #481
HMAC Certs. #1672, #1764 and #1815
KBKDF Cert. #28
RSA Cert. #1471
SHS Certs. #2256, #2361 and #2420
Triple-DES Cert. #1688
Other Algorithms
AES (Cert. #2817, key wrapping; key establishment methodology provides 128 bits of encryption strength); Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength); HMAC-MD5, MD5, RC4; RSA (key wrapping; key establishment methodology provides between 112 and 128 bits of encryption strength; non-compliant less than 112 bits of encryption strength)
Hardware Versions
Cisco Catalyst 3650 Series Switches, Cisco Catalyst 3850 Series Switches [1] and Cisco Field Replaceable Uplink Network Modules [1]
Firmware Versions
IOS XE 03.06.00aE

Vendor

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134
USA

Global Certification Team
certteam@cisco.com

Lab

Leidos
NVLAP Code: 200427-0