808bits

Arista Crypto Module v3.0 [Software, Software IPsec, Web Portal]

FIPS 140-3 certificate #4791 · Arista Networks, Inc. · data as of 2026-10-21

Arista Crypto Module v3.0 [Software, Software IPsec, Web Portal], from Arista Networks, Inc., holds FIPS 140-3 certificate #4791 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5403. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys)

Certificate

Certificate number4791
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorArista Networks, Inc. · website
Software versions3.0

Module description

Quoted from the NIST CMVP entry for this certificate.

This validation is for the library contained within the CloudVision Portal (CVP) products and all its related SKUs, which includes SS-CV-SWITCH-1M, SS-CV-SWITCH-1M-P, SS-CV-MOD-G-SWITCH-1M, SS-CV-G-SWITCH-1M, SS-CV-LT-SWITCH-1M, SS-CV-LT-MOD-G-SWITCH-1M, SS-CV-LT-G-SWITCH-1M, SS-CV-SWITCH-LAB-1M, SS-CV-ENT-1M, SS-CV-ENT-1M-P, SS-CV-T1-1M, SS-CV-T2-1M, SS-CV-LT-T1-1M, SS-CV-LT-T2-1M, SS-CV-G-T1-1M, SS-CV-G-T2-1M, SS-CV-LT-G-T1-1M, SS-CV-LT-G-T2-1M, SS-CV-MOD-G-T1-1M, SS-CV-MOD-G-T2-1M, SS-CV-LT-MOD-G-T1-1M, SS-CV-LT-MOD-G-T2-1M, SS-CV-ENT-1M-P, SS-CV-CG-SWITCH-1M, SS-CV-CG-T1-1M, SS-CV-CG-T2-1M, SS-CV-LT-CG-SWITCH-1M, SS-CV-LT-CG-T1-1M, SS-CV-LT-CG-T2-1M and any other future SKUs which use the validated library for the CloudVision Portal (CVP) product.

Security level exceptions

  • Roles, services, and authentication: Level 2
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (39)

AlgorithmCAVP certificates
AES-CBCA4153
AES-CCMA4153
AES-CFB1A4153
AES-CFB128A4153
AES-CFB8A4153
AES-CMACA4153
AES-CTRA4153
AES-ECBA4153
AES-GCMA4153
AES-XTS Testing Revision 2.0A4153
Counter DRBGA4153
ECDSA KeyGen (FIPS186-4)A4153
ECDSA KeyVer (FIPS186-4)A4153
ECDSA SigGen (FIPS186-4)A4153
ECDSA SigVer (FIPS186-4)A4153
Hash DRBGA4153
HMAC DRBGA4153
HMAC-SHA-1A4153
HMAC-SHA2-224A4153
HMAC-SHA2-256A4153
HMAC-SHA2-384A4153
HMAC-SHA2-512A4153
KAS-ECC-SSC Sp800-56Ar3A4153
KAS-FFC-SSC Sp800-56Ar3A4153
KDF IKEv1A4153
KDF IKEv2A4153
KDF SP800-108A4153
KDF SSHA4153
KDF TLSA4153
KTS-IFCA4153
RSA KeyGen (FIPS186-4)A4153
RSA SigGen (FIPS186-4)A4153
RSA SigVer (FIPS186-4)A4153
SHA-1A4153
SHA2-224A4153
SHA2-256A4153
SHA2-384A4153
SHA2-512A4153
TLS v1.2 KDF RFC7627A4153

Tested configurations

  • CloudVision Portal 2023.2.0 on VMware ESXi 6.7.0 on CentOS 7 running on a Supermicro SYS-6029TP-HTR with Intel Xeon Gold 5218R with PAA
  • CloudVision Portal 2023.2.0 on VMware ESXi 6.7.0 on CentOS 7 running on a Supermicro SYS-6029TP-HTR with Intel Xeon Gold 5218R without PAA

Validation history

DateTypeLab
2024-09-06InitialDEKRA Cybersecurity Certification Laboratory

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-09-06

Source documents