2621XM and 2651XM Modular Access Routers with AIM-VPN/EP
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 438 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-chip standalone |
| Vendor | Cisco Systems, Inc. · website |
| Hardware versions | 2621XM and 2651XM with AIM-VPN/EP Version 1.0 and Board Version B0 |
| Firmware versions | IOS 12.3(3d) |
Module description
The Cisco Modular Access Routers are routers that provides data protection on a network providing packet encryption. The modules perform all of the functions typical of a router. In addition to the normal routing functions, the modules also provide packet encryption. The modules are capable of encrypting traffic between one or more modules: providing a secure connection at the packet level.
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 46 |
| HMAC-SHA-1 | vendor affirmed |
| RSA | vendor affirmed |
| SHA-1 | 26, 38 |
| Triple-DES | 32, 156 |
| Triple-DES MAC | vendor affirmed |
Other algorithms
DES (Certs. #100 and #202); DES MAC (Cert. #202, vendor affirmed); MD4; MD5; HMAC-MD5; Diffie-Hellman (key agreement)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2004-06-16 | Initial | SAIC-VA |
| 2005-05-24 | Update | |
| 2010-05-28 | Update | |
| 2012-02-23 | Update |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2004-06-16, 2005-05-24, 2010-05-28, 2012-02-23