{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "03b07ca887edb311", "cert_id": 5481, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "FortiGate 7.2 and 7.4", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-08-12", "validation_type": "Initial", "lab": "Lightship Security, Inc."}], "vendor_url": "http://www.fortinet.com", "vendor": "Fortinet, Inc.", "certificate_pdf_url": null, "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 2, "caveat": "When installed, initialized and configured as specified in Sections 2 and 11 of the Security Policy, and the tamper evident seals are installed/applied as indicated in the Security Policy.", "exceptions": ["Roles, services, and authentication: Level 3", "Operational environment: N/A", "Non-invasive security: N/A"], "embodiment": "MultiChipStand", "description": "The FortiGate Next-Generation Firewalls with FortiOS 7.2/7.4 are multiple chip, standalone cryptographic modules consisting of production grade components contained in a physically protected enclosure in accordance with FIPS 140-3 Level 2 requirements.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-08-11", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 2": 5, "Level 1": 1}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 26, "HMAC-SHA-2": 4, "SHA-1": 21, "SHA2-256": 25, "SHA2-384": 17, "SHA2-512": 16, "SHA2-224": 7, "SHA3-256": 4, "SHA2- 256": 1, "SHA-2": 2, "SHA-3": 2, "AES-256": 6, "AES-128": 2, "AES-192": 2, "DRBG 256": 1, "DRBG 384": 1, "DRBG 128": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-256": 6, "AES-128": 2, "AES-192": 2, "AES": 2}, "CAST": {"CAST": 46}}, "constructions": {"MAC": {"HMAC": 2}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDH": 29}, "ECDSA": {"ECDSA": 39}}, "FF": {"DH": {"Diffie-Hellman": 9, "DHE": 2, "DH": 35}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 21}, "SHA2": {"SHA-2": 2}, "SHA3": {"SHA3-256": 4, "SHA-3": 2}}}, "crypto_scheme": {"MAC": {"MAC": 8}, "AEAD": {"AEAD": 2}}, "crypto_protocol": {"SSH": {"SSH": 35, "SSHv2": 1}, "TLS": {"SSL": {"SSL": 2}, "TLS": {"TLS 1.2": 18, "TLS v1.2": 3, "TLS v1.3": 3, "TLS 1.3": 17, "TLS": 23}}, "IKE": {"IKEv1": 10, "IKEv2": 12, "IKE": 35}, "IPsec": {"IPsec": 17}, "VPN": {"VPN": 18}}, "randomness": {"PRNG": {"DRBG": 38}, "RNG": {"RBG": 2}}, "cipher_mode": {"CBC": {"CBC": 14}, "GCM": {"GCM": 14}}, "ecc_curve": {"NIST": {"P-256": 20, "P-384": 18, "P-521": 18}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 15}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 15, "FIPS 198-1": 21, "FIPS 180-4": 21, "FIPS186-5": 22, "FIPS 186-5": 13, "FIPS 202": 1, "FIPS140-3": 1}, "NIST": {"SP 800-38A": 9, "SP 800-38D": 5, "SP 800-90A": 2, "SP 800-56A": 6, "SP 800-135": 10, "SP 800-186": 1}, "RFC": {"RFC7627": 2, "RFC 8446": 1, "RFC 4106": 1, "RFC 5282": 1, "RFC 7296": 1, "RFC 5647": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 1621144, "pdf_is_encrypted": false, "pdf_number_of_pages": 62, "/Author": "Marc Boire", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260730085121-04'00'", "/ModDate": "D:20260730085121-04'00'", "/Producer": "Microsoft\u00ae Word for Microsoft 365", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://www.fortinet.com/doc/legal/EULA.pdf", "https://support.fortinet.com/", "https://www.fortiguard.com/", "https://docs.fortinet.com/document/fortigate/7.2.8/administration-guide/954635/getting-started", "https://fortiguard.com/", "https://blog.fortinet.com/", "https://www.fortinet.com/products", "https://www.fortinet.com/support-and-training/training.html", "https://www.fortinet.com/contact", "https://video.fortinet.com/", "https://csrc.nist.gov/projects/cryptographic-module-validation-program", "https://docs.fortinet.com/", "https://training.fortinet.com/", "https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/954635/getting-started"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["HMAC-SHA-1A6644", "TLS v1.2 KDF RFC7627A6644", "ECDSA SigGen (FIPS186-5)A6644", "KAS-ECC-SSC Sp800-56Ar3A6644", "SHA2-384A6644", "Counter DRBGA6642", "KDF IKEv2A6644", "HMAC-SHA2-224A6644", "HMAC-SHA2-512A6644", "SHA-1A6644", "SHA3-256A4977", "AES-CBCA6644", "SHA2-224A6644", "AES-GCMA6631", "KDF IKEv1A6644", "ECDSA KeyGen (FIPS186-5)A6644", "SHA2-256A6644", "Safe Primes Key GenerationA6644", "ECDSA SigVer (FIPS186-5)A6644", "RSA KeyGen (FIPS186-5)A6644", "RSA SigGen (FIPS186-5)A6644", "HMAC-SHA2-384A6644", "KAS-FFC-SSC Sp800-56Ar3A6644", "TLS v1.3 KDFA6644", "KDF SSHA6644", "RSA SigVer (FIPS186-5)A6644", "HMAC-SHA2-256A6644", "SHA2-512A6644"]}, "extracted_versions": {"_type": "Set", "elements": ["7.4", "7.2"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "50dad3603bf9c76b44c4708639cb06b3800f0cfb55fbdd708a8cfc826a5195d0", "txt_hash": "30ee194ed4f3a87980ed518d9cb7d2930a34de11b8158146e366ce0e143153a3", "json_hash": null}}}