808bits

Junos® OS Evolved OpenSSL Cryptographic Module

FIPS 140-3 certificate #4775 · Juniper Networks, Inc. · data as of 2026-08-28
Historical. Replaced by certificate #5400. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim Validation. When operated in approved mode with module Junos® OS Evolved Kernel Cryptographic Module version 2.0 validated to FIPS 140-3 under Cert. #4776 operating in the Approved mode. When installed, initialized and configured as specified in section 11 of the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy

Certificate

Certificate number4775
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorJuniper Networks, Inc. · website
Software versions3.0.8

Module description

The Junos® OS Evolved OpenSSL Cryptographic Module provides a C language application program interface (API) for use by other applications that require cryptographic functionality.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA4229
AES-CBCA4230
AES-CBCA4231
AES-CBC-CS1A4229
AES-CBC-CS1A4230
AES-CBC-CS1A4231
AES-CBC-CS2A4229
AES-CBC-CS2A4230
AES-CBC-CS2A4231
AES-CBC-CS3A4229
AES-CBC-CS3A4230
AES-CBC-CS3A4231
AES-CCMA4229
AES-CCMA4230
AES-CCMA4231
AES-CFB1A4229
AES-CFB1A4230
AES-CFB1A4231
AES-CFB128A4229
AES-CFB128A4230
AES-CFB128A4231
AES-CFB8A4229
AES-CFB8A4230
AES-CFB8A4231
AES-CMACA4229
AES-CMACA4230
AES-CMACA4231
AES-CTRA4229
AES-CTRA4230
AES-CTRA4231
AES-ECBA4229
AES-ECBA4230
AES-ECBA4231
AES-ECBA4232
AES-ECBA4233
AES-ECBA4234
AES-ECBA4235
AES-GCMA4237
AES-GCMA4238
AES-GCMA4239
AES-GCMA4240
AES-GCMA4241
AES-GCMA4242
AES-GCMA4243
AES-GCMA4244
AES-GCMA4245
AES-GMACA4237
AES-GMACA4238
AES-GMACA4239
AES-GMACA4240
AES-GMACA4241
AES-GMACA4242
AES-GMACA4243
AES-GMACA4244
AES-GMACA4245
AES-KWA4229
AES-KWA4230
AES-KWA4231
AES-KWPA4229
AES-KWPA4230
AES-KWPA4231
AES-OFBA4229
AES-OFBA4230
AES-OFBA4231
AES-XTS Testing Revision 2.0A4229
AES-XTS Testing Revision 2.0A4230
AES-XTS Testing Revision 2.0A4231
Counter DRBGA3599
Counter DRBGA3599
Counter DRBGA3599
Counter DRBGA3599
ECDSA KeyGen (FIPS186-4)A4225
ECDSA KeyGen (FIPS186-4)A4246
ECDSA KeyGen (FIPS186-4)A4247
ECDSA KeyGen (FIPS186-4)A4248
ECDSA KeyGen (FIPS186-4)A4249
ECDSA KeyVer (FIPS186-4)A4225
ECDSA KeyVer (FIPS186-4)A4246
ECDSA KeyVer (FIPS186-4)A4247
ECDSA KeyVer (FIPS186-4)A4248
ECDSA KeyVer (FIPS186-4)A4249
ECDSA SigGen (FIPS186-4)A4225
ECDSA SigGen (FIPS186-4)A4226
ECDSA SigGen (FIPS186-4)A4236
ECDSA SigGen (FIPS186-4)A4246
ECDSA SigGen (FIPS186-4)A4247
ECDSA SigGen (FIPS186-4)A4248
ECDSA SigGen (FIPS186-4)A4249
ECDSA SigVer (FIPS186-4)A4225
ECDSA SigVer (FIPS186-4)A4226
ECDSA SigVer (FIPS186-4)A4236
ECDSA SigVer (FIPS186-4)A4246
ECDSA SigVer (FIPS186-4)A4247
ECDSA SigVer (FIPS186-4)A4248
ECDSA SigVer (FIPS186-4)A4249
Hash DRBGA3599
Hash DRBGA3600
Hash DRBGA3601
Hash DRBGA3601
Hash DRBGA3601
Hash DRBGA3601
HMAC DRBGA3599
HMAC DRBGA3599
HMAC DRBGA3599
HMAC DRBGA3599
HMAC DRBGA3599
HMAC DRBGA3599
HMAC-SHA-1A4246
HMAC-SHA-1A4247
HMAC-SHA-1A4248
HMAC-SHA-1A4249
HMAC-SHA2-224A4246
HMAC-SHA2-224A4247
HMAC-SHA2-224A4248
HMAC-SHA2-224A4249
HMAC-SHA2-256A4246
HMAC-SHA2-256A4247
HMAC-SHA2-256A4248
HMAC-SHA2-256A4249
HMAC-SHA2-384A4246
HMAC-SHA2-384A4247
HMAC-SHA2-384A4248
HMAC-SHA2-384A4249
HMAC-SHA2-512A4246
HMAC-SHA2-512A4247
HMAC-SHA2-512A4248
HMAC-SHA2-512A4249
HMAC-SHA2-512/224A4246
HMAC-SHA2-512/224A4247
HMAC-SHA2-512/224A4248
HMAC-SHA2-512/224A4249
HMAC-SHA2-512/256A4246
HMAC-SHA2-512/256A4247
HMAC-SHA2-512/256A4248
HMAC-SHA2-512/256A4249
HMAC-SHA3-224A4236
HMAC-SHA3-256A4236
HMAC-SHA3-384A4236
HMAC-SHA3-512A4236
KAS-ECC-SSC Sp800-56Ar3A4227
KAS-ECC-SSC Sp800-56Ar3A4246
KAS-ECC-SSC Sp800-56Ar3A4247
KAS-ECC-SSC Sp800-56Ar3A4248
KAS-ECC-SSC Sp800-56Ar3A4249
KAS-FFC-SSC Sp800-56Ar3A4251
KDA HKDF Sp800-56Cr1A4228
KDA OneStep SP800-56Cr2A4224
KDF ANS 9.42A4236
KDF ANS 9.42A4246
KDF ANS 9.42A4247
KDF ANS 9.42A4248
KDF ANS 9.42A4249
KDF ANS 9.63A4246
KDF ANS 9.63A4247
KDF ANS 9.63A4248
KDF ANS 9.63A4249
KDF SP800-108A4250
KDF SSHA4232
KDF SSHA4233
KDF SSHA4234
KDF SSHA4235
KMAC-128A4236
KMAC-256A4236
PBKDFA4236
PBKDFA4246
PBKDFA4247
PBKDFA4248
PBKDFA4249
RSA KeyGen (FIPS186-4)A4246
RSA KeyGen (FIPS186-4)A4247
RSA KeyGen (FIPS186-4)A4248
RSA KeyGen (FIPS186-4)A4249
RSA SigGen (FIPS186-4)A4246
RSA SigGen (FIPS186-4)A4247
RSA SigGen (FIPS186-4)A4248
RSA SigGen (FIPS186-4)A4249
RSA SigVer (FIPS186-4)A4246
RSA SigVer (FIPS186-4)A4247
RSA SigVer (FIPS186-4)A4248
RSA SigVer (FIPS186-4)A4249
Safe Primes Key GenerationA4251
Safe Primes Key VerificationA4251
SHA-1A4246
SHA-1A4247
SHA-1A4248
SHA-1A4249
SHA2-224A4246
SHA2-224A4247
SHA2-224A4248
SHA2-224A4249
SHA2-256A4246
SHA2-256A4247
SHA2-256A4248
SHA2-256A4249
SHA2-384A4246
SHA2-384A4247
SHA2-384A4248
SHA2-384A4249
SHA2-512A4246
SHA2-512A4247
SHA2-512A4248
SHA2-512A4249
SHA2-512/224A4246
SHA2-512/224A4247
SHA2-512/224A4248
SHA2-512/224A4249
SHA2-512/256A4246
SHA2-512/256A4247
SHA2-512/256A4248
SHA2-512/256A4249
SHA3-224A4236
SHA3-256A4236
SHA3-384A4236
SHA3-512A4236
SHAKE-128A4236
SHAKE-256A4236
TLS v1.2 KDF RFC7627A4246
TLS v1.2 KDF RFC7627A4247
TLS v1.2 KDF RFC7627A4248
TLS v1.2 KDF RFC7627A4249
TLS v1.3 KDFA4228

Tested configurations

  • Junos® OS Evolved version 22.4 running on Juniper Networks® Packet Transport Router Model PTX10001-36MR with Intel® Xeon® D-2163IT with PAA
  • Junos® OS Evolved version 22.4 running on Juniper Networks® Packet Transport Router Model PTX10001-36MR with Intel® Xeon® D-2163IT without PAA

Validation history

DateTypeLab
2024-09-03Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-09-03

Source documents