808bits

Junos® OS Evolved MACsec Cryptographic Library

FIPS 140-3 certificate #4820 · Juniper Networks, Inc. · data as of 2026-10-21

Junos® OS Evolved MACsec Cryptographic Library, from Juniper Networks, Inc., holds FIPS 140-3 certificate #4820 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5490. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated with module Junos® OS Evolved OpenSSL Cryptographic Module version 3.0.8 validated to FIPS 140-3 under Cert. #4775 in approved mode, and module Junos® OS Evolved Kernel Cryptographic Module version 2.0 validated to FIPS 140-3 under Cert. #4776, operating in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy. The module generates random strings whose strength is modified by available entropy

Certificate

Certificate number4820
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorJuniper Networks, Inc. · website
Software versions1.2

Module description

Quoted from the NIST CMVP entry for this certificate.

Junos® OS Evolved MACsec Cryptographic Library is a shared library in software, which provides cryptographic services for key wrapping, key derivation and random number generation.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (5)

AlgorithmCAVP certificates
AES-CMACA4156
AES-ECBA4156
AES-KWA4156
HMAC DRBGA3599, A3600, A3601, A3603, A3604, A3605
HMAC-SHA2-256A4246, A4247, A4248, A4249

Tested configurations

  • Junos® OS Evolved 22.4 running on Juniper Networks® Packet Transport Router Model PTX10001-36MR with Intel® Xeon® D-2163IT without PAA

Validation history

DateTypeLab
2024-10-02Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-10-02

Source documents