Module Name
Juniper Networks MX80, MX104, MX240, MX480, MX960 3D Universal Edge Routers with RE-S-X6-64G/RE-S-X6-128G Routing Engine and MIC-MACSEC-20GE MACSec Card
Caveat
When operated in FIPS mode, installed, initialized and configured as specified in Section 1.2 and 6 of the Security Policy
Security Level Exceptions
- Roles, Services, and Authentication: Level 3
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
Juniper Networks MX Series is a robust portfolio of SDN enabled routing and switching platforms that provide industry leading system capacity, density, security and performance. MX80 and MX104 are fixed configuration platforms that support modular interfaces. MIC-MACSEC-20GE provides GCM-AES-256 MACSEC encryption.
Approved Algorithms
| AES |
Certs. #C488, #C502, #3504 and #3505 |
| CVL |
Cert. #C488 |
| DRBG |
Certs. #C484, #C486 and #C488 |
| ECDSA |
Cert. #C488 |
| HMAC |
Certs. #C484, #C485, #C486 and #C488 |
| KAS-SSC |
vendor affirmed |
| KBKDF |
Cert. #C502 |
| KTS |
AES Cert. #C502, key establishment methodology provides 128 bits of encryption strength |
| KTS |
AES Cert. #C488 and HMAC Cert. #C488; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
Triple-DES Cert. #C488 and HMAC Cert. #C488; key establishment methodology provides 112 bits of encryption strength |
| RSA |
Cert. #C488 |
| SHS |
Certs. #C484, #C485, #C486 and #C488 |
| Triple-DES |
Cert. #C488 |
Hardware Versions
MX80, MX104, MX240, MX480, MX960 with components identified in Security Policy Table 1
Firmware Versions
Junos OS 18.3R1-S1
