808bits

Juniper Express 4 MACsec Cryptographic Module

FIPS 140-3 certificate #4878 · Juniper Networks, Inc. · data as of 2026-08-28
Historical. Replaced by certificate #5489. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated with module Junos® OS Evolved OpenSSL Cryptographic Module version 3.0.8 validated to FIPS 140-3 under Cert. #4775 operating in approved mode, and module Junos® OS Evolved Kernel Cryptographic Module version 2.0 validated to FIPS 140-3 under Cert. #4776, operating in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy

Certificate

Certificate number4878
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware-hybrid
EmbodimentMulti-Chip Stand Alone
VendorJuniper Networks, Inc. · website
Software versions1.0
Hardware versionsJTAG ID 20611361

Module description

Juniper Express 4 MACsec Cryptographic Module is composed by the MACsec blocks that are part of the Juniper Networks® Express 4 processor in hardware, which provides the AES GCM and XPN algorithm implementations for encrypting and decrypting MACsec traffic, and a device driver in software, which provides the functionality to comply with FIPS 140-3 requirements (i.e. integrity test, self-tests), as well as the API to configure the hardware component.

Security level exceptions

  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-GCMA4089
AES-GCMA4089
HMAC-SHA2-256A4246
HMAC-SHA2-256A4247
HMAC-SHA2-256A4248
HMAC-SHA2-256A4249

Tested configurations

  • Junos® OS Evolved 22.4 running on Juniper Networks® Packet Transport Router Model PTX10001-36MR with Intel® Xeon® D-2163IT

Validation history

DateTypeLab
2024-11-13Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-11-13

Source documents