Waveserver Ai Encryption Module
Waveserver Ai Encryption Module, from Ciena Corporation, holds FIPS 140-3 certificate #5449 at overall level 2. The validation is active, with a sunset date of 2031-07-28. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: No assurance of minimum security of SSPs that are externally loaded, or of SSPs established with externally loaded SSPs
Certificate
| Certificate number | 5449 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2031-07-28 |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | MultiChipEmbed |
| Vendor | Ciena Corporation · website |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Waveserver Ai Encryption Module provides fully secure cryptographic functionality, including peer authentication, key derivation, datapath encryption, physical security, and identification and authentication of the module’s Crypto Officer (CO). It is the physical security boundary and is composed of FPGA, processor, DDR4 (DRAM), Flash and the PCB-embedded wire connections between them, and all associated physical security mechanisms. All traffic entering and exiting the module is encrypted/decrypted at wire speed (100Gb/s, 200Gb/s, 300Gb/s and 400Gb/s depending on line modulation scheme selected) using AES-256 GCM mode.
Security level exceptions
- Operational environment: N/A
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2026-07-29 | Initial | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2026-07-29