Module Name
Foundry Networks FIPS 140-2 Cryptographic Module
Historical Reason
RNG SP800-131A Revision 1 Transition
Caveat
When operated in FIPS mode
Security Level Exceptions
- Physical Security: Level 3
- EMI/EMC: Level 3
Embodiment
Multi-chip embedded
Description
The Foundry Networks FIPS 140-2 Cryptographic Module resides on a PCI card and provides cryptographic key protection and acceleration for both asymmetric and symmetric encryption operations. It is contained in its own secure enclosure that provides physical resistance to tampering and zeroization of plaintext cryptographic material in the event the enclosure is opened.
Approved Algorithms
| AES |
Certs. #551 and #189 |
| DSA |
Cert. #224 |
| ECDSA |
Cert. #58 |
| HMAC |
Cert. #292 |
| RNG |
Cert. #319 |
| RSA |
Cert. #247 |
| SHS |
Cert. #616 |
| Triple-DES |
Certs. #547 and #286 |
| Triple-DES MAC |
Triple-Des Certs. #547 and #286, vendor affirmed |
Other Algorithms
AES-MAC (Certs. #551 and #189; non-compliant); DES; RC2; RC4; RC5; CAST; CAST3; CAST5; SEED; MD2; MD5; HAS-160; DES-MAC; RC2-MAC; RC5-MAC; CAST-MAC; CAST3-MAC; CAST5-MAC; SSL3-MD5-MAC; SSL3-SHA1-MAC; HMAC-MD5; KCDSA; PBE-MD2-DES; PBE-MD5-DES; PBE-MD5-CAST; PBE-MD5-CAST3; PBE-SHA-1-CAST5; GENERIC-SECRET; SSL PRE-MASTER; SEED; RC2-MAC; RC5-MAC; Diffie-Hellman (key agreement; key establishment methodology provides 80 bits of encryption strength; non-compliant); RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant less than 112 bits of encryptino strength); EC Diffie Hellman (key agreement; key establishment methodology provides 80 bits of encryption strength; non-compliant)
Hardware Versions
FN1120-VBD-03-0200, FN1010-VBD-03-0200 and FN1005-VBD-03-0200
