Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #5308

Details

Module Name
FortiSwitch Crypto Library
Standard
FIPS 140-3
Status
Active
Sunset Date
6/2/2031
Overall Level
1
Caveat
When installed, initialized and configured as specified in Section 11 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs
Security Level Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Software
Embodiment
MultiChipStand
Description
The Module is intended for use by US Federal agencies or other markets that require FIPS 140-3 validated Ethernet Switches. The Module is exclusively used in the FortiSwitch appliances.
Approved Algorithms
AES-CBC
AES-CTR
AES-GCM
Counter DRBG
ECDSA KeyGen (FIPS186-5)
ECDSA KeyVer (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigVer (FIPS186-5)
HMAC-SHA-1
HMAC-SHA2-224
HMAC-SHA2-256
HMAC-SHA2-384
HMAC-SHA2-512
KAS-ECC-SSC Sp800-56Ar3
KAS-FFC-SSC Sp800-56Ar3
KDF SNMP
KDF SSH
RSA KeyGen (FIPS186-5)
RSA SigGen (FIPS186-5)
RSA SigVer (FIPS186-5)
Safe Primes Key Generation
Safe Primes Key Verification
SHA-1
SHA2-224
SHA2-256
SHA2-384
SHA2-512
SHA3-256
TLS v1.2 KDF RFC7627
TLS v1.3 KDF

Vendor

Fortinet Technologies Inc
909 Kifer Road
Sunnyvale, CA 94086
USA

Marc Boire
[email protected]
Phone: 613-225-9381
Kerrie Newton
[email protected]
Phone: 613-225-9381

Validation History

Date Type Lab
6/3/2026 Initial Lightship Security, Inc.
6/8/2026 Update Lightship Security, Inc.