808bits

SR-OS Cryptographic Module

FIPS 140-2 certificate #4320 · Nokia Corporation · data as of 2026-08-28
Historical. Diffie-Hellman was included on the allowed line per D.8 after the cut off date of June 2022.. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number4320
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeFirmware
EmbodimentMulti-Chip Stand Alone
VendorNokia Corporation · website
Firmware versions20.10R4

Module description

The SR-OS Cryptographic Module (SRCM) provides the cryptographic algorithm functions needed to allow SR-OS to implement cryptography for those services and protocols that require it.

Security level exceptions

  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AESC2074, C2075, C2084
CVLC2074, C2075, C2084
DRBGC2074, C2075, C2084
DSAC2074, C2075, C2084
ECDSAC2074, C2075, C2084
HMACC2074, C2075, C2084
KTS
RSAC2074, C2075, C2084
SHSC2074, C2075, C2084

Allowed algorithms

Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 150 bits of encryption strength); NDRNG

Tested configurations

  • SR-OS 20.10R4 running on 7750 SR-1 with Cavium OCTEON II CN7360
  • SR-OS 20.10R4 running on 7750 SR-14s with Cavium OCTEON II CN6645
  • SR-OS 20.10R4 running on 7750 SR-1s with Cavium OCTEON II CN7360
  • SR-OS 20.10R4 running on 7750 SR-2e with Cavium OCTEON II CN6645
  • SR-OS 20.10R4 running on 7750 SR-2s with Cavium OCTEON II CN7360
  • SR-OS 20.10R4 running on 7750 SR-7s with Cavium OCTEON II CN6645 (single-user mode)
  • SR-OS 20.10R4 running on 7750 SR-a4 with Cavium OCTEON II CN6635
  • SR-OS 20.10R4 running on 7950 SR-7 with Cavium OCTEON II CN6645
  • SR-OS 20.10R4 running on 7950 XRS-16c with Cavium OCTEON II CN6645
  • SR-OS 20.10R4 running on 7950 XRS-20 with Cavium OCTEON II CN6645

Validation history

DateTypeLab
2022-10-05InitialEWA - Canada

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2022-10-05

Source documents