808bits

Ciena Waveserver Ai Encryption Module

FIPS 140-2 certificate #3498 · Ciena® Corporation · data as of 2026-10-21

Ciena Waveserver Ai Encryption Module, from Ciena® Corporation, holds FIPS 140-2 certificate #3498 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. SP 800-56Arev3 transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When installed, initialized and configured as specified in Section 12 of the Security Policy

Certificate

Certificate number3498
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-Chip Embedded
VendorCiena® Corporation · website
Hardware versions186-1606-820-EB, Revision 003 with PCB P/N: 174-0534-220 Revision 002 [1], [2], [3], [4], PCB P/N: 174-0534-221 Revision 001 [2], [3], [4], or PCB P/N: 174-0534-222 Revision 001 [1], [2], [3], [4] or PCB P/N: 174-0534-223 Revision 001 [2], [3], [4]
Firmware versions1.3.5 [1], 1.3.6 [2], 1.3.61 [3] or 1.3.62 [4]

Module description

Quoted from the NIST CMVP entry for this certificate.

The Ciena Waveserver Ai, with WCS2 and Encryption cards, offers a Layer 1 AES-256-GCM encryption solution for 100GE clients supporting 100Gbs to 400Gb/s wirespeed encryption per line port for enterprises, datacenters and government deployments.

Security level exceptions

  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms (9)

AlgorithmCAVP certificates
AESC120, C122, C186, 4438
CKGvendor affirmed
CVLC122, C186
DRBGC122, C186
ECDSAC122, C186
HMACC122, C186
KTS4438, C120, C122
RSAC186
SHSC122, C186

Allowed algorithms

EC Diffie-Hellman (CVL Cert. #C122, key agreement; key establishment methodology provides between 128 bits and 256 bits of encryption strength); NDRNG

Tested configurations

  • N/A

Validation history

DateTypeLab
2019-07-24InitialAcumen Security
2019-12-26UpdateAcumen Security
2020-02-21UpdateAcumen Security
2020-09-08UpdateAcumen Security
2021-12-13UpdateAcumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2019-07-24, 2019-12-26, 2020-02-21, 2020-09-08, 2021-12-13

Source documents