808bits

Juniper Express 4 MACsec Cryptographic Module

FIPS 140-3 certificate #4878 · Juniper Networks, Inc. · data as of 2026-10-21

Juniper Express 4 MACsec Cryptographic Module, from Juniper Networks, Inc., holds FIPS 140-3 certificate #4878 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5489. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated with module Junos® OS Evolved OpenSSL Cryptographic Module version 3.0.8 validated to FIPS 140-3 under Cert. #4775 operating in approved mode, and module Junos® OS Evolved Kernel Cryptographic Module version 2.0 validated to FIPS 140-3 under Cert. #4776, operating in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy

Certificate

Certificate number4878
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware-hybrid
EmbodimentMulti-Chip Stand Alone
VendorJuniper Networks, Inc. · website
Software versions1.0
Hardware versionsJTAG ID 20611361

Module description

Quoted from the NIST CMVP entry for this certificate.

Juniper Express 4 MACsec Cryptographic Module is composed by the MACsec blocks that are part of the Juniper Networks® Express 4 processor in hardware, which provides the AES GCM and XPN algorithm implementations for encrypting and decrypting MACsec traffic, and a device driver in software, which provides the functionality to comply with FIPS 140-3 requirements (i.e. integrity test, self-tests), as well as the API to configure the hardware component.

Security level exceptions

  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (2)

AlgorithmCAVP certificates
AES-GCMA4089
HMAC-SHA2-256A4246, A4247, A4248, A4249

Tested configurations

  • Junos® OS Evolved 22.4 running on Juniper Networks® Packet Transport Router Model PTX10001-36MR with Intel® Xeon® D-2163IT

Validation history

DateTypeLab
2024-11-13Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-11-13

Source documents