808bits

Junos® OS Evolved Kernel Cryptographic Module

FIPS 140-3 certificate #4776 · Juniper Networks, Inc. · data as of 2026-08-28
Historical. Moved to historical list due to dependency on certificate #4775. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated in the approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy with module Junos® OS Evolved OpenSSL Cryptographic Module version 3.0.8 validated to FIPS 140-3 under Cert. #4775 operating in the approved mode. The module generates random strings whose strengths are modified by available entropy.

Certificate

Certificate number4776
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorJuniper Networks, Inc. · website
Software versions2.0

Module description

The Juniper Kernel Cryptographic Module is a software module running as part of the operating system kernel that provides general purpose cryptographic services.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA3599
AES-CBCA3600
AES-CBCA3601
AES-CBCA3602
AES-CMACA3599
AES-CMACA3601
AES-CMACA3602
AES-CTRA3599
AES-CTRA3600
AES-CTRA3601
AES-CTRA3602
AES-ECBA3599
AES-ECBA3600
AES-ECBA3601
AES-ECBA3602
AES-XTS Testing Revision 2.0A3599
AES-XTS Testing Revision 2.0A3600
AES-XTS Testing Revision 2.0A3601
AES-XTS Testing Revision 2.0A3602
Counter DRBGA3599
Counter DRBGA3600
Counter DRBGA3601
Counter DRBGA3602
Hash DRBGA3599
Hash DRBGA3600
Hash DRBGA3601
Hash DRBGA3603
Hash DRBGA3604
Hash DRBGA3605
HMAC DRBGA3599
HMAC DRBGA3600
HMAC DRBGA3601
HMAC DRBGA3603
HMAC DRBGA3604
HMAC DRBGA3605
HMAC-SHA-1A3599
HMAC-SHA-1A3603
HMAC-SHA-1A3604
HMAC-SHA-1A3605
HMAC-SHA2-224A3599
HMAC-SHA2-224A3603
HMAC-SHA2-224A3604
HMAC-SHA2-224A3605
HMAC-SHA2-256A3599
HMAC-SHA2-256A3603
HMAC-SHA2-256A3604
HMAC-SHA2-256A3605
HMAC-SHA2-384A3599
HMAC-SHA2-384A3603
HMAC-SHA2-384A3604
HMAC-SHA2-384A3605
HMAC-SHA2-512A3599
HMAC-SHA2-512A3603
HMAC-SHA2-512A3604
HMAC-SHA2-512A3605
SHA-1A3599
SHA-1A3603
SHA-1A3604
SHA-1A3605
SHA2-224A3599
SHA2-224A3603
SHA2-224A3604
SHA2-224A3605
SHA2-256A3599
SHA2-256A3603
SHA2-256A3604
SHA2-256A3605
SHA2-384A3599
SHA2-384A3603
SHA2-384A3604
SHA2-384A3605
SHA2-512A3599
SHA2-512A3603
SHA2-512A3604
SHA2-512A3605

Tested configurations

  • Junos® OS Evolved version 22.4 running on Juniper Networks® Packet Transport Router Model PTX10001-36MR with Intel® Xeon® D-2163IT with PAA
  • Junos® OS Evolved version 22.4 running on Juniper Networks® Packet Transport Router Model PTX10001-36MR with Intel® Xeon® D-2163IT without PAA

Validation history

DateTypeLab
2024-09-03Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-09-03

Source documents