Module Name
Juniper Networks MX10003 3D Universal Edge Router with JNP-MIC1-MACSEC MACSec MIC and EX9253 Ethernet Switch with EX9253-6Q12C-M MACSec Line Card
Caveat
When operated in FIPS mode, installed, initialized and configured as specified in Section 1.2 and 6 of the Security Policy
Security Level Exceptions
- Roles, Services, and Authentication: Level 3
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
Juniper MX and EX9200 Series are comprehensive, Scalable and secure switching and routing solutions specifically designed to meet the needs of campus, enterprises and service providers. They deliver high performance, reliability and scale to enable a cost-effective solution.
Approved Algorithms
| AES |
Certs. #C1469, #C1471, and #4545 |
| CVL |
Cert. #C1469 |
| DRBG |
Certs. #C1467, #C1469 and #C1470 |
| ECDSA |
Cert. #C1469 |
| HMAC |
Certs. #C1467, #C1468, #C1469 and #C1470 |
| KAS-SSC |
vendor affirmed |
| KBKDF |
Cert. #C1471 |
| KTS |
AES Cert. #C1471, key establishment methodology provides 128 bits of encryption strength |
| KTS |
AES Cert. #C1469 and HMAC Cert. #C1469; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
Triple-DES Cert. #C1469 and HMAC Cert. #C1469; key establishment methodology provides 112 bits of encryption strength |
| RSA |
Cert. #C1469 |
| SHS |
Certs. #C1467, #C1468, #C1469 and #C1470 |
| Triple-DES |
Cert. #C1469 |
Hardware Versions
MX10003 and EX9253 with components identified in Security Policy Table 1
Firmware Versions
Junos OS 19.3R1
