808bits

Junos® OS Evolved OpenSSL Cryptographic Module

FIPS 140-3 certificate #4775 · Juniper Networks, Inc. · data as of 2026-10-21

Junos® OS Evolved OpenSSL Cryptographic Module, from Juniper Networks, Inc., holds FIPS 140-3 certificate #4775 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5400. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim Validation. When operated in approved mode with module Junos® OS Evolved Kernel Cryptographic Module version 2.0 validated to FIPS 140-3 under Cert. #4776 operating in the Approved mode. When installed, initialized and configured as specified in section 11 of the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy

Certificate

Certificate number4775
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorJuniper Networks, Inc. · website
Software versions3.0.8

Module description

Quoted from the NIST CMVP entry for this certificate.

The Junos® OS Evolved OpenSSL Cryptographic Module provides a C language application program interface (API) for use by other applications that require cryptographic functionality.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A

Approved algorithms (66)

AlgorithmCAVP certificates
AES-CBCA4229, A4230, A4231
AES-CBC-CS1A4229, A4230, A4231
AES-CBC-CS2A4229, A4230, A4231
AES-CBC-CS3A4229, A4230, A4231
AES-CCMA4229, A4230, A4231
AES-CFB1A4229, A4230, A4231
AES-CFB128A4229, A4230, A4231
AES-CFB8A4229, A4230, A4231
AES-CMACA4229, A4230, A4231
AES-CTRA4229, A4230, A4231
AES-ECBA4229, A4230, A4231, A4232, A4233, A4234, A4235
AES-GCMA4237, A4238, A4239, A4240, A4241, A4242, A4243, A4244, A4245
AES-GMACA4237, A4238, A4239, A4240, A4241, A4242, A4243, A4244, A4245
AES-KWA4229, A4230, A4231
AES-KWPA4229, A4230, A4231
AES-OFBA4229, A4230, A4231
AES-XTS Testing Revision 2.0A4229, A4230, A4231
Counter DRBGA3599
ECDSA KeyGen (FIPS186-4)A4225, A4246, A4247, A4248, A4249
ECDSA KeyVer (FIPS186-4)A4225, A4246, A4247, A4248, A4249
ECDSA SigGen (FIPS186-4)A4225, A4226, A4236, A4246, A4247, A4248, A4249
ECDSA SigVer (FIPS186-4)A4225, A4226, A4236, A4246, A4247, A4248, A4249
Hash DRBGA3599, A3600, A3601
HMAC DRBGA3599
HMAC-SHA-1A4246, A4247, A4248, A4249
HMAC-SHA2-224A4246, A4247, A4248, A4249
HMAC-SHA2-256A4246, A4247, A4248, A4249
HMAC-SHA2-384A4246, A4247, A4248, A4249
HMAC-SHA2-512A4246, A4247, A4248, A4249
HMAC-SHA2-512/224A4246, A4247, A4248, A4249
HMAC-SHA2-512/256A4246, A4247, A4248, A4249
HMAC-SHA3-224A4236
HMAC-SHA3-256A4236
HMAC-SHA3-384A4236
HMAC-SHA3-512A4236
KAS-ECC-SSC Sp800-56Ar3A4227, A4246, A4247, A4248, A4249
KAS-FFC-SSC Sp800-56Ar3A4251
KDA HKDF Sp800-56Cr1A4228
KDA OneStep SP800-56Cr2A4224
KDF ANS 9.42A4236, A4246, A4247, A4248, A4249
KDF ANS 9.63A4246, A4247, A4248, A4249
KDF SP800-108A4250
KDF SSHA4232, A4233, A4234, A4235
KMAC-128A4236
KMAC-256A4236
PBKDFA4236, A4246, A4247, A4248, A4249
RSA KeyGen (FIPS186-4)A4246, A4247, A4248, A4249
RSA SigGen (FIPS186-4)A4246, A4247, A4248, A4249
RSA SigVer (FIPS186-4)A4246, A4247, A4248, A4249
Safe Primes Key GenerationA4251
Safe Primes Key VerificationA4251
SHA-1A4246, A4247, A4248, A4249
SHA2-224A4246, A4247, A4248, A4249
SHA2-256A4246, A4247, A4248, A4249
SHA2-384A4246, A4247, A4248, A4249
SHA2-512A4246, A4247, A4248, A4249
SHA2-512/224A4246, A4247, A4248, A4249
SHA2-512/256A4246, A4247, A4248, A4249
SHA3-224A4236
SHA3-256A4236
SHA3-384A4236
SHA3-512A4236
SHAKE-128A4236
SHAKE-256A4236
TLS v1.2 KDF RFC7627A4246, A4247, A4248, A4249
TLS v1.3 KDFA4228

Tested configurations

  • Junos® OS Evolved version 22.4 running on Juniper Networks® Packet Transport Router Model PTX10001-36MR with Intel® Xeon® D-2163IT with PAA
  • Junos® OS Evolved version 22.4 running on Juniper Networks® Packet Transport Router Model PTX10001-36MR with Intel® Xeon® D-2163IT without PAA

Validation history

DateTypeLab
2024-09-03Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-09-03

Source documents