808bits

Cisco 2811 and Cisco 2821 Integrated Services Routers with AIM-VPN/SSL-2

FIPS 140-2 certificate #1030 · Cisco Systems, Inc. · data as of 2026-08-28
Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number1030
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-chip standalone
VendorCisco Systems, Inc. · website
Hardware versions2811 and 2821, AIM Version: 1.0, Board Version: 01
Firmware versions12.4(15)T3[1] and 12.4(15)T10[2]

Module description

The Cisco 2800 Series features the ability to deliver multiple high-quality simultaneous services at wire speeds up to multiple T1/E1/xDSL connections. The Cisco 2800 Series routers offer embedded encryption acceleration on the motherboard. For additional performance, the Cisco 2811 and 2821 routers feature the ability to optionally add encryption acceleration advanced integration modules (AIM-VPN/SSL-2).

Approved algorithms

AlgorithmCAVP certificate
AES173, 265, 795, 1199
HMAC39, 77, 436, 696
RNG83, 456, 663
RSA379, 382, 576
SHS258, 344, 794, 1104
Triple-DES275, 347, 683, 867

Other algorithms

Diffie-Hellman (key agreement; key establishment methodology provides 80 or 96 bits of encryption strength; non-compliant); RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength); MD5; HMAC-MD5; RC4; DES

Validation history

DateTypeLab
2008-10-07InitialSAIC-VA
2009-08-28Update
2009-10-23Update
2010-05-28Update
2012-02-23Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2008-10-07, 2009-08-28, 2009-10-23, 2010-05-28, 2012-02-23

Source documents