HPE Juniper Networking
Junos® OS Evolved Kernel Cryptographic
Module version 2.1
FIPS 140-3 Non-Proprietary Security Policy
Document Version: 1.1
Last update: 2026-07-07
Prepared by: Prepared for:
atsec information security corporation HPE Juniper Networking
4516 Seton Center Pkwy, Suite 250 1133 Innovation Way
Austin, TX 78759 Sunnyvale, CA 94089
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 2
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
www.atsec.com www.hpe.com/
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 3
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Table of Contents
1 General.......................................................................................................................................................................6
1.1 Overview ............................................................................................................................................................6
1.2 Security Levels....................................................................................................................................................6
1.3 Additional Information......................................................................................................................................6
2 Cryptographic Module Specification........................................................................................................................7
2.1 Description .........................................................................................................................................................7
2.2 Tested and Vendor Affirmed Module Version and Identification ..................................................................8
2.3 Excluded Components .......................................................................................................................................9
2.4 Modes of Operation............................................................................................................................................9
2.5 Algorithms........................................................................................................................................................10
2.6 Security Function Implementations................................................................................................................12
2.7 Algorithm Specific Information ......................................................................................................................15
2.7.1 AES XTS.........................................................................................................................................................15
2.7.2 SHA-3 ............................................................................................................................................................16
2.8 RBG and Entropy .............................................................................................................................................16
2.9 Key Generation ................................................................................................................................................17
2.10 Key Establishment..........................................................................................................................................17
2.11 Industry Protocols..........................................................................................................................................17
3 Cryptographic Module Interfaces...........................................................................................................................18
3.1 Ports and Interfaces..........................................................................................................................................18
4 Roles, Services, and Authentication .......................................................................................................................19
4.1 Authentication Methods..................................................................................................................................19
4.2 Roles..................................................................................................................................................................19
4.3 Approved Services............................................................................................................................................19
4.4 Non-Approved Services ...................................................................................................................................23
4.5 External Software/Firmware Loaded...............................................................................................................23
5 Software/Firmware Security ...................................................................................................................................24
5.1 Integrity Techniques........................................................................................................................................24
5.2 Initiate on Demand ..........................................................................................................................................24
6 Operational Environment .......................................................................................................................................25
6.1 Operational Environment Type and Requirements .......................................................................................25
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 4
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
6.2 Configuration Settings and Restrictions..........................................................................................................25
7 Physical Security .....................................................................................................................................................26
8 Non-Invasive Security.............................................................................................................................................27
9 Sensitive Security Parameters Management ..........................................................................................................28
9.1 Storage Areas....................................................................................................................................................28
9.2 SSP Input-Output Methods .............................................................................................................................28
9.3 SSP Zeroization Methods.................................................................................................................................28
9.4 SSPs...................................................................................................................................................................29
9.5 Transitions........................................................................................................................................................31
10 Self-Tests................................................................................................................................................................32
10.1 Pre-Operational Self-Tests.............................................................................................................................32
10.2 Conditional Self-Tests....................................................................................................................................32
10.3 Periodic Self-Test Information ......................................................................................................................44
10.4 Error States .....................................................................................................................................................49
10.5 Operator Initiation of Self-Tests....................................................................................................................49
11 Life-Cycle Assurance.............................................................................................................................................50
11.1 Installation, Initialization, and Startup Procedures......................................................................................50
11.2 Administrator Guidance ................................................................................................................................50
11.3 Non-Administrator Guidance........................................................................................................................50
11.6 End of Life ......................................................................................................................................................51
12 Mitigation of Other Attacks..................................................................................................................................52
Appendix A. Glossary and Abbreviations .................................................................................................................53
Appendix B. References .............................................................................................................................................54
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 5
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
List of Tables
Table 1: Security Levels................................................................................................................................................6
Table 2: Tested Module Identification – Software, Firmware, Hybrid (Executable Code Sets) ...............................8
Table 3: Tested Operational Environments - Software, Firmware, Hybrid ..............................................................9
Table 4: Modes List and Description ...........................................................................................................................9
Table 5: Approved Algorithms - ................................................................................................................................11
Table 6: Approved Algorithms - [EVM]....................................................................................................................11
Table 7: Non-Approved, Not Allowed Algorithms...................................................................................................12
Table 8: Security Function Implementations............................................................................................................15
Table 9: Entropy Certificates .....................................................................................................................................16
Table 10: Entropy Sources..........................................................................................................................................16
Table 11: Ports and Interfaces....................................................................................................................................18
Table 12: Roles............................................................................................................................................................19
Table 13: Approved Services......................................................................................................................................22
Table 14: Non-Approved Services .............................................................................................................................23
Table 15: Storage Areas ..............................................................................................................................................28
Table 16: SSP Input-Output Methods .......................................................................................................................28
Table 17: SSP Zeroization Methods...........................................................................................................................29
Table 18: SSP Table 1 .................................................................................................................................................30
Table 19: SSP Table 2 .................................................................................................................................................31
Table 20: Pre-Operational Self-Tests.........................................................................................................................32
Table 21: Conditional Self-Tests ................................................................................................................................44
Table 22: Pre-Operational Periodic Information......................................................................................................44
Table 23: Conditional Periodic Information .............................................................................................................48
Table 24: Error States .................................................................................................................................................49
List of Figures
Figure 1: Block Diagram...............................................................................................................................................8
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 6
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
1 General
1.1 Overview
This document is the non-proprietary FIPS 140-3 Security Policy for version 2.1 of the Junos® OS Evolved
Kernel Cryptographic Module. It contains the security rules under which the module must operate and
describes how this module meets the requirements as specified in FIPS PUB 140-3 (Federal Information
Processing Standards Publication 140-3) for an overall Security Level 1 module.
This non-proprietary Security Policy may be reproduced and distributed, but only whole and intact and
including this notice. Other documentation is proprietary to their authors.
1.2 Security Levels
Section Title Security Level
1 General 1
2 Cryptographic module specification 1
3 Cryptographic module interfaces 1
4 Roles, services, and authentication 1
5 Software/Firmware security 1
6 Operational environment 1
7 Physical security N/A
8 Non-invasive security N/A
9 Sensitive security parameter management 1
10 Self-tests 1
11 Life-cycle assurance 1
12 Mitigation of other attacks N/A
Overall Level 1
Table 1: Security Levels
1.3 Additional Information
In preparing the Security Policy document, the laboratory formatted the vendor-supplied documentation for
consolidation without altering the technical statements therein contained. The further refining of the Security
Policy document was conducted iteratively throughout the conformance testing, wherein the Security Policy
was submitted to the vendor, who would then edit, modify, and add technical contents. The vendor would also
supply additional documentation, which the laboratory formatted into the existing Security Policy, and
resubmitted to the vendor for their final editing.
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 7
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
2 Cryptographic Module Specification
2.1 Description
Purpose and Use:
The Junos® OS Evolved Kernel Cryptographic Module (hereafter referred to as “the module”) is a software
module running as part of the operating system kernel that provides general purpose cryptographic services.
The module also uses the Junos®
OS Evolved OpenSSL Cryptographic Module Version 3.0 as a bound module
(also referred to as “the bound OpenSSL module”) for providing the HMAC-SHA2-256 service used for integrity
tests. Sections of this Security Policy which refer to information from the bound module, also known as the
Existing Validated Module (or EVM) are marked by [EVM] as per IG 1.A Resolution 5.
Module Type: Software
Module Embodiment: MultiChipStand
Cryptographic Boundary:
The cryptographic boundary of the module is defined as the kernel binary and the fips_chk_hmac binary,
which verifies the integrity of the static kernel binary using the bound OpenSSL module HMAC service. In
addition, the cryptographic boundary contains the .hmac files which store the expected integrity values for
each of the software components. The cryptographic boundary is indicated by the cyan box within black bold
borders in Figure 1 labeled as “Cryptographic Module”.
Tested Operational Environment’s Physical Perimeter (TOEPP):
The TOEPP of the module is defined as the general-purpose computer on which the module is installed. The
TOEPP is indicated by the large thin border in Figure 1.
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 8
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Figure 1: Block Diagram
2.2 Tested and Vendor Affirmed Module Version and Identification
Tested Module Identification – Software, Firmware, Hybrid (Executable Code Sets):
Package or File Name Software/ Firmware
Version
Features Integrity Test
bzImage-re-64b.bin;
fips_chk_hmac;
.bzImage-re-
64b.bin.hmac;
.fips_chk_hmac.hmac
2.1 N/A bzImage-re-64b.bin,
fips_chk_hmac: HMAC-
SHA2-256
Table 2: Tested Module Identification – Software, Firmware, Hybrid (Executable Code Sets)
Tested Operational Environments - Software, Firmware, Hybrid:
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 9
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Operating System Hardware Platform Processors PAA/PAI Hypervisor
or Host OS
Version(s)
Junos OS Evolved
version 24.4R2
Juniper Networks® Packet
Transport Router Model
PTX10001-36MR
Intel® Xeon®
D-2163IT
Yes N/A 2.1
Junos OS Evolved
version 24.4R2
Juniper Networks® Packet
Transport Router Model
PTX10002-36QDD
Intel® Xeon®
D-1749NT
Yes N/A 2.1
Junos OS Evolved
version 24.4R2
Juniper Networks® Switch
Model QFX5700
Intel® Xeon®
D-1637
Yes N/A 2.1
Junos OS Evolved
version 24.4R2
Juniper Networks® Packet
Transport Router Model
PTX10001-36MR
Intel® Xeon®
D-2163IT
No N/A 2.1
Junos OS Evolved
version 24.4R2
Juniper Networks® Packet
Transport Router Model
PTX10002-36QDD
Intel® Xeon®
D-1749NT
No N/A 2.1
Junos OS Evolved
version 24.4R2
Juniper Networks® Switch
Model QFX5700
Intel® Xeon®
D-1637
No N/A 2.1
Table 3: Tested Operational Environments - Software, Firmware, Hybrid
2.3 Excluded Components
There are no components within the cryptographic boundary excluded from the FIPS 140-3 requirements.
2.4 Modes of Operation
Modes List and Description:
Mode Name Description Type Status Indicator
Approved
mode
Automatically entered
whenever an approved
service is requested
Approved Mapped to approved service indicator in
Section 4.3: For all approved algorithms, the
respective approved service function returns
indicator 0.
Non-
approved
mode
Automatically entered
whenever a non-approved
service is requested
Non-
Approved
No service indicator required for non-approved
services per IG 2.4.C
Table 4: Modes List and Description
After passing all pre-operational self-tests and cryptographic algorithm self-tests executed on start-up, the
module automatically transitions to the approved mode.
Mode Change Instructions and Status:
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 10
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
The module automatically switches between the approved and non-approved modes depending on the services
requested by the operator. The status indicator of the mode of operation is equivalent to the indicator of the
service that was requested.
2.5 Algorithms
Approved Algorithms:
Algorithm CAVP Cert Properties Reference
AES-CBC A7308, A7310, A7311,
A7312
Direction - Decrypt, Encrypt
Key Length - 128, 192, 256
SP 800-38A
AES-CBC-CS3 A7308, A7310, A7311,
A7312
Direction - decrypt, encrypt
Key Length - 128, 192, 256
SP 800-38A
AES-CMAC A7308, A7311, A7312 Direction - Generation, Verification
Key Length - 128, 192, 256
SP 800-38B
AES-CTR A7308, A7310, A7311,
A7312
Direction - Decrypt, Encrypt
Key Length - 128, 192, 256
SP 800-38A
AES-ECB A7308, A7310, A7311,
A7312
Direction - Decrypt, Encrypt
Key Length - 128, 192, 256
SP 800-38A
AES-XTS Testing
Revision 2.0
A7308, A7310, A7311,
A7312
Direction - Decrypt, Encrypt
Key Length - 128, 256
SP 800-38E
Counter DRBG A7308, A7310, A7311,
A7312
Prediction Resistance - No, Yes
Mode - AES-128, AES-192, AES-256
Derivation Function Enabled - Yes
SP 800-90A
Rev. 1
Hash DRBG A7308, A7310, A7311,
A7313, A7314, A7315
Prediction Resistance - No, Yes
Mode - SHA-1, SHA2-256, SHA2-
512
SP 800-90A
Rev. 1
HMAC DRBG A7308, A7310, A7311,
A7313, A7314, A7315
Prediction Resistance - No, Yes
Mode - SHA-1, SHA2-256, SHA2-
512
SP 800-90A
Rev. 1
HMAC-SHA-1 A7308, A7313, A7314,
A7315
Key Length - Key Length: 112-
524288 Increment 8
FIPS 198-1
HMAC-SHA2-224 A7308, A7313, A7314,
A7315
Key Length - Key Length: 112-
524288 Increment 8
FIPS 198-1
HMAC-SHA2-256 A7308, A7313, A7314,
A7315
Key Length - Key Length: 112-
524288 Increment 8
FIPS 198-1
HMAC-SHA2-384 A7308, A7313, A7314,
A7315
Key Length - Key Length: 112-
524288 Increment 8
FIPS 198-1
HMAC-SHA2-512 A7308, A7313, A7314,
A7315
Key Length - Key Length: 112-
524288 Increment 8
FIPS 198-1
HMAC-SHA3-224 A7295 Key Length - Key Length: 112-
524288 Increment 8
FIPS 198-1
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 11
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Algorithm CAVP Cert Properties Reference
HMAC-SHA3-256 A7295 Key Length - Key Length: 112-
524288 Increment 8
FIPS 198-1
HMAC-SHA3-384 A7295 Key Length - Key Length: 112-
524288 Increment 8
FIPS 198-1
HMAC-SHA3-512 A7295 Key Length - Key Length: 112-
524288 Increment 8
FIPS 198-1
SHA-1 A7308, A7313, A7314,
A7315
Message Length - Message Length:
0-65536 Increment 8
Large Message Sizes - 1, 2
FIPS 180-4
SHA2-224 A7308, A7313, A7314,
A7315
Message Length - Message Length:
0-65536 Increment 8
Large Message Sizes - 1, 2
FIPS 180-4
SHA2-256 A7308, A7313, A7314,
A7315
Message Length - Message Length:
0-65536 Increment 8
Large Message Sizes - 1, 2
FIPS 180-4
SHA2-384 A7308, A7313, A7314,
A7315
Message Length - Message Length:
0-65536 Increment 8
Large Message Sizes - 1, 2
FIPS 180-4
SHA2-512 A7308, A7313, A7314,
A7315
Message Length - Message Length:
0-65536 Increment 8
Large Message Sizes - 1, 2
FIPS 180-4
SHA3-224 A7295 Message Length - Message Length:
0-65536 Increment 8
Large Message Sizes - 1, 2
FIPS 202
SHA3-256 A7295 Message Length - Message Length:
0-65536 Increment 8
Large Message Sizes - 1, 2
FIPS 202
SHA3-384 A7295 Message Length - Message Length:
0-65536 Increment 8
Large Message Sizes - 1, 2
FIPS 202
SHA3-512 A7295 Message Length - Message Length:
0-65536 Increment 8
Large Message Sizes - 1, 2
FIPS 202
Table 5: Approved Algorithms -
[EVM]
Algorithm CAVP Cert Properties Reference
HMAC-SHA2-256 A7243 Key Length - Key Length: 112-524288 Increment 8 FIPS 198-1
Table 6: Approved Algorithms - [EVM]
Non-Approved, Not Allowed Algorithms:
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 12
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Name Use and Function
AES-GCM Authenticated Encryption and Decryption (not tested by CAVP)
RSA Encryption and
Decryption
RSA Encryption and Decryption primitives (not compliant to SP 800-56Br2)
RSA with PKCS#1 v1.5
padding
RSA Signature Generation and Signature Verification primitives with PKCS#1
v1.5 padding (not tested by CAVP)
RSA Signature
Verification
RSA Signature Verification (not tested by CAVP)
Table 7: Non-Approved, Not Allowed Algorithms
2.6 Security Function Implementations
Name Type Description Properties Algorithms
Symmetric
encryption
BC-UnAuth Symmetric
encryption
AES-CBC: (A7308,
A7310, A7311,
A7312)
AES-CBC-CS3:
(A7308, A7310,
A7311, A7312)
AES-CTR: (A7308,
A7310, A7311,
A7312)
AES-ECB: (A7308,
A7310, A7311,
A7312)
AES-XTS Testing
Revision 2.0:
(A7308, A7310,
A7311, A7312)
Authenticated
encryption
BC-AuthEncrypt Authenticated
encryption
AES-CBC: (A7308,
A7310, A7311,
A7312)
AES-CTR: (A7308,
A7310, A7311,
A7312)
HMAC-SHA-1:
(A7308, A7313,
A7314, A7315)
HMAC-SHA2-256:
(A7308, A7313,
A7314, A7315)
HMAC-SHA2-384:
(A7308, A7313,
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 13
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Name Type Description Properties Algorithms
A7314, A7315)
HMAC-SHA2-512:
(A7308, A7313,
A7314, A7315)
SHA-1: (A7308,
A7313, A7314,
A7315)
SHA2-256: (A7308,
A7313, A7314,
A7315)
SHA2-384: (A7308,
A7313, A7314,
A7315)
SHA2-512: (A7308,
A7313, A7314,
A7315)
Symmetric
decryption
BC-UnAuth Symmetric
decryption
AES-CBC: (A7308,
A7310, A7311,
A7312)
AES-CBC-CS3:
(A7308, A7310,
A7311, A7312)
AES-CTR: (A7308,
A7310, A7311,
A7312)
AES-ECB: (A7308,
A7310, A7311,
A7312)
AES-XTS Testing
Revision 2.0:
(A7308, A7310,
A7311, A7312)
Authenticated
decryption
BC-AuthDecrypt Authenticated
decryption
AES-CBC: (A7308,
A7310, A7311,
A7312)
AES-CTR: (A7308,
A7310, A7311,
A7312)
HMAC-SHA-1:
(A7308, A7313,
A7314, A7315)
HMAC-SHA2-256:
(A7308, A7313,
A7314, A7315)
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 14
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Name Type Description Properties Algorithms
HMAC-SHA2-384:
(A7308, A7313,
A7314, A7315)
HMAC-SHA2-512:
(A7308, A7313,
A7314, A7315)
SHA-1: (A7308,
A7313, A7314,
A7315)
SHA2-256: (A7308,
A7313, A7314,
A7315)
SHA2-384: (A7308,
A7313, A7314,
A7315)
SHA2-512: (A7308,
A7313, A7314,
A7315)
Message
authentication
MAC Message
authentication
HMAC-SHA-1:
(A7308, A7313,
A7314, A7315)
HMAC-SHA2-224:
(A7308, A7313,
A7314, A7315)
HMAC-SHA2-256:
(A7308, A7313,
A7314, A7315)
HMAC-SHA2-384:
(A7308, A7313,
A7314, A7315)
HMAC-SHA2-512:
(A7308, A7313,
A7314, A7315)
HMAC-SHA3-224:
(A7295)
HMAC-SHA3-256:
(A7295)
HMAC-SHA3-384:
(A7295)
HMAC-SHA3-512:
(A7295)
AES-CMAC:
(A7308, A7311,
A7312)
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 15
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Name Type Description Properties Algorithms
Random number
generation
DRBG Random number
generation
Counter DRBG:
(A7308, A7310,
A7311, A7312)
Hash DRBG:
(A7308, A7310,
A7311, A7313,
A7314, A7315)
HMAC DRBG:
(A7308, A7310,
A7311, A7313,
A7314, A7315)
Message digest SHA Message digest SHA-1: (A7308,
A7313, A7314,
A7315)
SHA2-224: (A7308,
A7313, A7314,
A7315)
SHA2-256: (A7308,
A7313, A7314,
A7315)
SHA2-384: (A7308,
A7313, A7314,
A7315)
SHA2-512: (A7308,
A7313, A7314,
A7315)
SHA3-224: (A7295)
SHA3-256: (A7295)
SHA3-384: (A7295)
SHA3-512: (A7295)
Integrity message
authentication
MAC [EVM] Message
authentication used
for integrity tests
HMAC-SHA2-256:
(A7243)
Table 8: Security Function Implementations
2.7 Algorithm Specific Information
2.7.1 AES XTS
The length of a single data unit encrypted or decrypted with AES XTS shall not exceed 220
AES blocks, that is
16MB, of data per XTS instance. An XTS instance is defined in Section 4 of SP 800-38E.
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 16
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
The two component AES keys used in AES XTS mode shall be generated independently according to the rules
for component symmetric keys from SP 800-133 Rev. 2 Section 6.3. The resultant key generated from the two
AES keys is formed through concatenation in compliance with SP 800-133 Rev. 2 Section 6.3. To meet the
requirements stated in IG C.I, the module implements a check to ensure that the two AES keys input to the
module are not identical.
The XTS mode shall only be used for the cryptographic protection of data on storage devices. It shall not be
used for other purposes, such as the encryption of data in transit.
2.7.2 SHA-3
The module implements HMAC with SHA3-224, SHA3-256, SHA3-384, SHA3-512 and have been tested as
required by IG C.C. The CAVP certificates have been obtained for the HMAC algorithm as well as for all the
SHA3 implementations. The CAVP certificates are listed in the Approved Algorithms table.
2.8 RBG and Entropy
Cert
Number
Vendor Name
E123 Juniper Networks, Inc.
E141 Juniper Networks, Inc.
E291 Juniper Networks, Inc.
Table 9: Entropy Certificates
Name Type Operational Environment Sample
Size
Entropy
per
Sample
Conditioning
Component
Junos OS Physical Entropy
Source – Intel Xeon D-2100
Series (Skylake) 18 Core Die
with FCBGA2518 Package
1.0 (E123)
Physical 128 Full
entropy
AES-CBC-
MAC cert.
A2138
Junos OS Physical Entropy
Source – Intel Xeon D-10
Series (Ice Lake-D-10) Die
with FCBGA2227 Package
(E141)
Physical 128 Full
entropy
AES-CBC-
MAC cert.
A2518
Juniper Junos Evolved
Kernel CPU Time Jitter
Entropy Source version 3.4.0
(E291)
Non-
Physical
Junos OS Evolved version
24.4R2, Juniper
Networks® Switch Model
QFX5700, Intel® Xeon®
D-1637
256 Full
entropy
SHA3-256 cert.
A7295
Table 10: Entropy Sources
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 17
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
The module employs the Deterministic Random Bit Generator (DRBG) based on SP 800-90A Rev. 1 for the
random number generation. The DRBG supports the Hash_DRBG, HMAC_DRBG and CTR_DRBG
mechanisms. When instantiated, these DRBGs can be used to generate random numbers for external usage.
The module loads by default the DRBG using the HMAC_DRBG mechanism with SHA2-512 without
prediction resistance.
The module obtains an entropy input string from the entropy pool that is populated with the entropy source
that corresponds to the Operational environment. The Junos OS Physical Entropy Source and the Juniper Junos
Evolved Kernel CPU Time Jitter Entropy Source version 3.4.0 each provide full entropy to the DRBG.
The HMAC-SHA2-512 DRBG is instantiated with a 384-bit entropy input and reseeded with a 256-bits long
entropy input. Outputs of multiple GetEntropy() calls are concatenated to receive an entropy input length
greater than 256 bits. The output is truncated to get the entropy input string in case the entropy output is not a
multiple of 256. For instance, in the case of the Juniper Junos Evolved Kernel CPU Time Jitter Entropy Source
(E291), the 384 bits of entropy source output are obtained by calling the GetEntropy() function twice, with
each call providing 256 bits of output. The second call output is truncated to 128 bits and concatenated to the
256 bit output from the first call. Meanwhile, the Junos OS Physical Entropy Source (Intel Xeon D-2100 Series
in E123, Intel Xeon D-10 Series in E141) provides an output of 128 bits, therefore, the 384 bits of entropy
source are obtained by calling the GetEntropy() function three times, and no truncation is necessary.
2.9 Key Generation
The module does not provide key generation.
2.10 Key Establishment
The module does not provide key establishment.
2.11 Industry Protocols
The module does not claim cipher suites in compliance to industry protocols.
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 18
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
3 Cryptographic Module Interfaces
3.1 Ports and Interfaces
Physical
Port
Logical
Interface(s)
Data That Passes
N/A Data Input API Input parameters from kernel system calls, AF_ALG type socket.
N/A Data Output API output parameters from kernel system calls, AF_ALG type socket.
N/A Control
Input
API function calls, API input parameters for control from kernel system calls,
AF_ALG type socket, kernel command line.
N/A Status
Output
API return codes, AF_ALG type socket, kernel logs.
Table 11: Ports and Interfaces
The logical interfaces are the API through which kernel components request services, and the AF_ALG type
socket that allows the applications running in the user space to request cryptographic services from the module.
These logical interfaces are logically separated from each other by the API design.
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 19
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
4 Roles, Services, and Authentication
4.1 Authentication Methods
The module does not implement authentication.
4.2 Roles
Name Type Operator Type Authentication Methods
Crypto Officer Role Crypto Officer None
Table 12: Roles
The module supports the Crypto Officer role only. This sole role is implicitly and always assumed by the
operator of the module. No support is provided for multiple concurrent operators.
4.3 Approved Services
The following table lists the approved services. The following convention is used to specify access rights to
SSPs:
• Generate (G): The module generates or derives the SSP.
• Read (R): The SSP is read from the module (e.g. the SSP is output).
• Write (W): The SSP is updated, imported, or written to the module.
• Execute (E): The module uses the SSP in performing a cryptographic operation.
• Zeroize (Z): The module zeroizes the SSP.
Name Description Indicator Inputs Outputs Security
Functions
SSP Access
Symmetric
Encryption
Perform
AES
Encryption
crypto_skcipher_set
key returns 0
Plaintext,
AES key,
IV
Ciphertext Symmetric
encryption
Crypto
Officer
- AES key:
W,E
Symmetric
Decryption
Perform
AES
Decryption
crypto_skcipher_set
key returns 0
Cipherte
xt, AES
key, IV
Plaintext Symmetric
decryption
Crypto
Officer
- AES key:
W,E
Random
Number
Generation
Generate
random
numbers
crypto_rng_get_byt
es returns 0
Output
length
Random
bytes
Random
number
generation
Crypto
Officer
- DRBG
entropy
input string:
W,E,Z
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 20
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Name Description Indicator Inputs Outputs Security
Functions
SSP Access
-
HMAC_DR
BG internal
state (V,
Key): G,W,E
-
CTR_DRBG
internal
state (V,
Key): G,W,E
-
Hash_DRBG
internal
state (V, C):
G,W,E
-
Hash_DRBG
Seed: G,E,Z
-
HMAC_DR
BG Seed:
G,E,Z
-
CTR_DRBG
Seed: G,E,Z
Message
Digest
Compute
SHA hashes
crypto_shash_init
returns 0
Message Digest Message
digest
Crypto
Officer
Message
Authenticati
on
Compute
HMAC or
CMAC
crypto_shash_init
returns 0
Message,
HMAC
or AES
key
MAC tag Message
authenticati
on
Crypto
Officer
- AES key:
W,E
- HMAC
key: W,E
Authenticate
d Encryption
Encrypt a
plaintext
crypto_aead_setkey
returns 0
Plaintext,
AES key,
HMAC
key, IV
Ciphertext,
MAC tag
Authenticat
ed
encryption
Crypto
Officer
- AES key:
W,E
- HMAC
key: W,E
Authenticate
d Decryption
Decrypt a
plaintext
crypto_aead_setkey
returns 0
Cipherte
xt, AES
key,
Authenticat
ed Plaintext
Authenticat
ed
decryption
Crypto
Officer
- AES key:
W,E
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 21
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Name Description Indicator Inputs Outputs Security
Functions
SSP Access
HMAC
key, IV
- HMAC
key: W,E
Error
Detection
Code
Compute
an EDC
(crc32c,
crct10dif)
None Data EDC None Crypto
Officer
Memory
Copy
Operation
Copy
memory
None Source
location,
destinatio
n
location
N/A None Crypto
Officer
Generic
System Call
Use the
kernel to
perform
various
non-
cryptograp
hic
operations
None [various] [various] None Crypto
Officer
Show Status Return the
module
status
None N/A Module
status
None Crypto
Officer
Self-Test Perform
the CASTs
and the
integrity
test
None None Pass/fail
results of
tests
Symmetric
encryption
Authenticat
ed
encryption
Symmetric
decryption
Authenticat
ed
decryption
Message
authenticati
on
Random
number
generation
Message
digest
Integrity
message
Crypto
Officer
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 22
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Name Description Indicator Inputs Outputs Security
Functions
SSP Access
authenticati
on
Zeroization Zeroize all
SSPs
None SSPs to
be
zeroized
None None Crypto
Officer
- AES key: Z
- HMAC
key: Z
- DRBG
entropy
input string:
Z
-
Hash_DRBG
internal
state (V, C):
Z
-
HMAC_DR
BG internal
state (V,
Key): Z
-
CTR_DRBG
internal
state (V,
Key): Z
-
Hash_DRBG
Seed: Z
-
HMAC_DR
BG Seed: Z
-
CTR_DRBG
Seed: Z
Show
Version
Return
module
name and
version
information
None None Module
name,
module
version
None Crypto
Officer
Table 13: Approved Services
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 23
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
4.4 Non-Approved Services
Name Description Algorithms Role
AES-GCM Authenticated Encryption and Decryption AES-GCM CO
RSA
Encrypt/Decrypt
RSA Encryption and Decryption primitives RSA Encryption and
Decryption
CO
RSA PKCS#1 v1.5 Signature Generation and Signature Verification
primitives with PKCS#1 v1.5 padding
RSA with PKCS#1 v1.5
padding
CO
RSA SigVer RSA Signature Verification RSA Signature
Verification
CO
Table 14: Non-Approved Services
4.5 External Software/Firmware Loaded
The module does not support the loading of external software/firmware.
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 24
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
5 Software/Firmware Security
5.1 Integrity Techniques
The module verifies its integrity through the following mechanisms:
• The integrity of the static kernel binary is ensured with the HMAC-SHA2-256 value stored in the
corresponding .hmac file that is computed at kernel build time. During Pre-Operational Self-Tests, the
module invokes the fips_chk_hmac utility to calculate the HMAC value of the static kernel binary file
(relying on the HMAC service provided by the bound OpenSSL module), and then compares it with
the pre-stored one. If the two HMAC values do not match, the kernel panics to indicate that the test
fails and the module enters the error state.
• The integrity of the fips_chk_hmac utility itself is performed before the integrity tests of the static
kernel binary, and ensured with the HMAC-SHA2-256 value stored in the corresponding .hmac file
that is computed at the utility build time. The HMAC key is stored within the fips_chk_hmac utility
binary. The utility makes use of the bound OpenSSL module’s HMAC service to calculate the HMAC
value and then compares it with the pre-stored one. If the two HMAC values do not match, the kernel
panics to indicate that the test fails and the module enters the error state.
5.2 Initiate on Demand
Integrity tests are performed as part of the pre-operational self-tests, which are executed when the module is
initialized. The integrity tests can be invoked on demand by unloading and subsequently re-initializing the
module, which will perform (among others) the software integrity tests.
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 25
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
6 Operational Environment
6.1 Operational Environment Type and Requirements
Type of Operational Environment: Modifiable
How Requirements are Satisfied:
The operating system provides process isolation and memory protection mechanisms that ensure appropriate
separation for memory access among the processes on the system. Each process has control over its own data
and uncontrolled access to the data of other processes is prevented.
6.2 Configuration Settings and Restrictions
The module shall be installed as stated in Section 11.1.
Instrumentation tools like the ptrace system call, gdb and strace, as well as other tracing mechanisms offered by
the Linux environment such as ftrace or systemtap, shall not be used in the operational environments. The use
of any of these tools implies that the cryptographic module is running in a non-validated operational
environment.
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 26
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
7 Physical Security
The module is comprised of software only and therefore this section is not applicable.
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 27
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
8 Non-Invasive Security
This module does not implement any non-invasive security mechanism and therefore this section is not
applicable.
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 28
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
9 Sensitive Security Parameters Management
9.1 Storage Areas
Storage
Area
Name
Description Persistence
Type
RAM Temporary storage for SSPs used by the module as part of service execution. Dynamic
Table 15: Storage Areas
The module does not perform persistent storage of SSPs. The SSPs are temporarily stored in the RAM in
plaintext form. SSPs are provided to the module by the calling process and are destroyed when released by the
appropriate zeroization function calls.
9.2 SSP Input-Output Methods
Name From To Format
Type
Distribution
Type
Entry
Type
SFI or
Algorithm
API input
parameters
Operator calling
application
(TOEPP)
Cryptographic
module
Plaintext Manual Electronic
Table 16: SSP Input-Output Methods
9.3 SSP Zeroization Methods
Zeroization
Method
Description Rationale Operator Initiation
Wipe and
Free memory
block
allocated
Zeroizes the SSPs
contained within
the cipher
handle.
Memory occupied by SSPs is
overwritten with zeroes and
then it is released, which
renders the SSP values
irretrievable. The completion
of the zeroization routine
indicates that the zeroization
procedure succeeded.
By calling the cipher related
zeroization API function:
crypto_free_cipher(),
crypto_free_skcipher(),
crypto_free_aead() for AES keys;
crypto_free_shash(),
crypto_free_ahash() for HMAC keys;
crypto_free_rng() for DRBG SSPs
Automatic Automatically
zeroized by the
module when no
longer needed
Memory occupied by SSPs is
overwritten with zeroes,
which renders the SSP values
irretrievable.
N/A
Module Reset De-allocates the
volatile memory
used to store SSPs
Volatile memory used by the
module is overwritten
By unloading and reloading the module
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 29
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Zeroization
Method
Description Rationale Operator Initiation
within nanoseconds when
power is removed.
Table 17: SSP Zeroization Methods
All data output is inhibited during zeroization.
9.4 SSPs
Name Description Size -
Strength
Type -
Category
Generated
By
Established
By
Used By
AES key AES key 256, 512 bits
for XTS,
128, 196,
256 bits for
all other
modes - 128,
196, 256 bits
Symmetric
Key - CSP
Symmetric
encryption
Authenticated
encryption
Symmetric
decryption
Authenticated
decryption
Message
authentication
HMAC key HMAC key 112-524288
bits - 112-
256 bits
Symmetric
Key - CSP
Authenticated
encryption
Authenticated
decryption
Message
authentication
DRBG entropy
input string
Entropy input
string (IG D.L
compliant)
128-384 bits
- 128-384
bits
Entropy
Input -
CSP
Random
number
generation
Hash_DRBG
internal state
(V, C)
Internal state
of DRBG (IG
D.L
compliant)
880, 1776
bits - 128,
256 bits
Internal
State - CSP
Random
number
generation
Random
number
generation
HMAC_DRBG
internal state
(V, Key)
Internal state
of DRBG (IG
D.L
compliant)
320, 512,
1024 bits -
128, 256 bits
Internal
State - CSP
Random
number
generation
Random
number
generation
CTR_DRBG
internal state
(V, Key)
Internal state
of DRBG (IG
D.L
compliant)
256, 320,
384 bits -
128, 192,
256 bits
Internal
State - CSP
Random
number
generation
Random
number
generation
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 30
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Name Description Size -
Strength
Type -
Category
Generated
By
Established
By
Used By
Hash_DRBG
Seed
DRBG seed
derived from
entropy input
(IG D.L
compliant)
440, 888 bits
- 128, 256
bits
Seed - CSP Random
number
generation
Random
number
generation
HMAC_DRBG
Seed
DRBG seed
derived from
entropy input
(IG D.L
compliant)
160, 256,
512 bits -
128, 256 bits
Seed - CSP Random
number
generation
Random
number
generation
CTR_DRBG
Seed
DRBG seed
derived from
entropy input
(IG D.L
compliant)
256, 320,
384 bits -
128, 192,
256 bits
Seed - CSP Random
number
generation
Random
number
generation
Table 18: SSP Table 1
Name Input -
Output
Storage Storage Duration Zeroization Related SSPs
AES key API input
parameters
RAM:Plaintext From service
invocation to
service
completion
Wipe and Free
memory block
allocated
Module Reset
HMAC key API input
parameters
RAM:Plaintext From service
invocation to
service
completion
Wipe and Free
memory block
allocated
Module Reset
DRBG entropy
input string
RAM:Plaintext From generation
until DRBG seed
is created
Wipe and Free
memory block
allocated
Automatic
Module Reset
Hash_DRBG
Seed:Derives
HMAC_DRBG
Seed:Derives
CTR_DRBG
Seed:Derives
Hash_DRBG
internal state (V,
C)
RAM:Plaintext From DRBG
instantiation to
DRBG
termination
Wipe and Free
memory block
allocated
Automatic
Module Reset
Hash_DRBG
Seed:Derived
From
HMAC_DRBG
internal state (V,
Key)
RAM:Plaintext From DRBG
instantiation to
DRBG
termination
Wipe and Free
memory block
allocated
HMAC_DRBG
Seed:Derived
From
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 31
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Name Input -
Output
Storage Storage Duration Zeroization Related SSPs
Automatic
Module Reset
CTR_DRBG
internal state (V,
Key)
RAM:Plaintext From DRBG
instantiation to
DRBG
termination
Wipe and Free
memory block
allocated
Automatic
Module Reset
CTR_DRBG
Seed:Derived
From
Hash_DRBG
Seed
RAM:Plaintext While DRBG is
instantiated
Wipe and Free
memory block
allocated
Automatic
Module Reset
DRBG entropy
input
string:Derived
From
Hash_DRBG
internal state (V,
C):Derives
HMAC_DRBG
Seed
RAM:Plaintext While DRBG is
instantiated
Wipe and Free
memory block
allocated
Automatic
Module Reset
DRBG entropy
input
string:Derived
From
HMAC_DRBG
internal state (V,
Key):Derives
CTR_DRBG Seed RAM:Plaintext While DRBG is
instantiated
Wipe and Free
memory block
allocated
Automatic
Module Reset
DRBG entropy
input
string:Derived
From
CTR_DRBG
internal state (V,
Key):Derives
Table 19: SSP Table 2
9.5 Transitions
The SHA-1 algorithm as implemented by the module will be non-approved for all purposes except signature
verification, starting January 1, 2031.
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 32
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
10 Self-Tests
10.1 Pre-Operational Self-Tests
Algorithm or Test Test
Properties
Test Method Test Type Indicator Details
HMAC-SHA2-256
(A7243) - kernel
128-bit
key
Message
Authentication
SW/FW
Integrity
Module becomes
operational and
services are
available for use
[EVM] Integrity
test for static kernel
binary
HMAC-SHA2-256
(A7243) -
fips_chk_hmac
128-bit
key
Message
Authentication
SW/FW
Integrity
Module becomes
operational and
services are
available for use
[EVM] Integrity
test for
fips_chk_hmac
binary
Table 20: Pre-Operational Self-Tests
The pre-operational software integrity tests are performed automatically when the module is powered on,
before the module transitions into the operational state. The algorithms used for the integrity test (i.e., HMAC-
SHA2-256) run their CASTs before the integrity test is performed. While the module is executing the self-tests,
services are not available, and data output (via the data output interface) is inhibited until the pre-operational
software integrity self-tests are successfully completed. The module transitions to the operational state only
after the pre-operational self-tests are passed successfully.
10.2 Conditional Self-Tests
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
AES-CBC
(A7308) -
Encrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CBC
(A7310) -
Encrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CBC
(A7311) -
Encrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CBC
(A7312) -
Encrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 33
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
AES-CBC-
CS3 (A7308) -
Encrypt
128-bit keys KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CBC-
CS3 (A7310) -
Encrypt
128-bit keys KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CBC-
CS3 (A7311) -
Encrypt
128-bit keys KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CBC-
CS3 (A7312) -
Encrypt
128-bit keys KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CTR
(A7308) -
Encrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CTR
(A7310) -
Encrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CTR
(A7311) -
Encrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CTR
(A7312) -
Encrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-ECB
(A7308) -
Encrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-ECB
(A7310) -
Encrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-ECB
(A7311) -
Encrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 34
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
before the
integrity test
AES-ECB
(A7312) -
Encrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CMAC
(A7308)
128, 256-bit keys,
generation
KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
AES-CMAC
(A7311)
128, 256-bit keys,
generation
KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
AES-CMAC
(A7312)
128, 256-bit keys,
generation
KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
AES-CBC
(A7308) -
Decrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CBC
(A7310) -
Decrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CBC
(A7311) -
Decrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CBC
(A7312) -
Decrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CBC-
CS3 (A7308) -
Decrypt
128-bit keys KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CBC-
CS3 (A7310) -
Decrypt
128-bit keys KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 35
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
AES-CBC-
CS3 (A7311) -
Decrypt
128-bit keys KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CBC-
CS3 (A7312) -
Decrypt
128-bit keys KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CTR
(A7308) -
Decrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CTR
(A7310) -
Decrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CTR
(A7311) -
Decrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-CTR
(A7312) -
Decrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-ECB
(A7308) -
Decrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-ECB
(A7310) -
Decrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-ECB
(A7311) -
Decrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-ECB
(A7312) -
Decrypt
128, 192, 256-bit
keys
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
Counter
DRBG
(A7308)
AES-128, AES-
192, AES-256
without
KAT CAST Module
becomes
operational
SP 800-90A Rev.
1 (instantiate,
Test runs at
power-on
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 36
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
prediction
resistance; AES-
128 with
prediction
resistance
reseed, generate)
health test
before the
integrity test
Counter
DRBG
(A7310)
AES-128, AES-
192, AES-256
without
prediction
resistance; AES-
128 with
prediction
resistance
KAT CAST Module
becomes
operational
SP 800-90A Rev.
1 (instantiate,
reseed, generate)
health test
Test runs at
power-on
before the
integrity test
Counter
DRBG
(A7311)
AES-128, AES-
192, AES-256
without
prediction
resistance; AES-
128 with
prediction
resistance
KAT CAST Module
becomes
operational
SP 800-90A Rev.
1 (instantiate,
reseed, generate)
health test
Test runs at
power-on
before the
integrity test
Counter
DRBG
(A7312)
AES-128, AES-
192, AES-256
without
prediction
resistance; AES-
128 with
prediction
resistance
KAT CAST Module
becomes
operational
SP 800-90A Rev.
1 (instantiate,
reseed, generate)
health test
Test runs at
power-on
before the
integrity test
Hash DRBG
(A7308)
SHA2-256, SHA2-
512 without
prediction
resistance; SHA2-
256 with
prediction
resistance
KAT CAST Module
becomes
operational
SP 800-90A Rev.
1 (instantiate,
reseed, generate)
health test
Test runs at
power-on
before the
integrity test
Hash DRBG
(A7310)
SHA2-256, SHA2-
512 without
prediction
resistance; SHA2-
256 with
prediction
resistance
KAT CAST Module
becomes
operational
SP 800-90A Rev.
1 (instantiate,
reseed, generate)
health test
Test runs at
power-on
before the
integrity test
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 37
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
Hash DRBG
(A7311)
SHA2-256, SHA2-
512 without
prediction
resistance; SHA2-
256 with
prediction
resistance
KAT CAST Module
becomes
operational
SP 800-90A Rev.
1 (instantiate,
reseed, generate)
health test
Test runs at
power-on
before the
integrity test
Hash DRBG
(A7313)
SHA2-256, SHA2-
512 without
prediction
resistance; SHA2-
256 with
prediction
resistance
KAT CAST Module
becomes
operational
SP 800-90A Rev.
1 (instantiate,
reseed, generate)
health test
Test runs at
power-on
before the
integrity test
Hash DRBG
(A7314)
SHA2-256, SHA2-
512 without
prediction
resistance; SHA2-
256 with
prediction
resistance
KAT CAST Module
becomes
operational
SP 800-90A Rev.
1 (instantiate,
reseed, generate)
health test
Test runs at
power-on
before the
integrity test
Hash DRBG
(A7315)
SHA2-256, SHA2-
512 without
prediction
resistance; SHA2-
256 with
prediction
resistance
KAT CAST Module
becomes
operational
SP 800-90A Rev.
1 (instantiate,
reseed, generate)
health test
Test runs at
power-on
before the
integrity test
HMAC
DRBG
(A7308)
HMAC-SHA2-
256, HMAC-
SHA2-512
without
prediction
resistance;
HMAC-SHA2-256
with prediction
resistance
KAT CAST Module
becomes
operational
SP 800-90A Rev.
1 (instantiate,
reseed, generate)
health test
Test runs at
power-on
before the
integrity test
HMAC
DRBG
(A7310)
HMAC-SHA2-
256, HMAC-
SHA2-512
without
prediction
resistance;
KAT CAST Module
becomes
operational
SP 800-90A Rev.
1 (instantiate,
reseed, generate)
health test
Test runs at
power-on
before the
integrity test
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 38
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
HMAC-SHA2-256
with prediction
resistance
HMAC
DRBG
(A7311)
HMAC-SHA2-
256, HMAC-
SHA2-512
without
prediction
resistance;
HMAC-SHA2-256
with prediction
resistance
KAT CAST Module
becomes
operational
SP 800-90A Rev.
1 (instantiate,
reseed, generate)
health test
Test runs at
power-on
before the
integrity test
HMAC
DRBG
(A7313)
HMAC-SHA2-
256, HMAC-
SHA2-512
without
prediction
resistance;
HMAC-SHA2-256
with prediction
resistance
KAT CAST Module
becomes
operational
SP 800-90A Rev.
1 (instantiate,
reseed, generate)
health test
Test runs at
power-on
before the
integrity test
HMAC
DRBG
(A7314)
HMAC-SHA2-
256, HMAC-
SHA2-512
without
prediction
resistance;
HMAC-SHA2-256
with prediction
resistance
KAT CAST Module
becomes
operational
SP 800-90A Rev.
1 (instantiate,
reseed, generate)
health test
Test runs at
power-on
before the
integrity test
HMAC
DRBG
(A7315)
HMAC-SHA2-
256, HMAC-
SHA2-512
without
prediction
resistance;
HMAC-SHA2-256
with prediction
resistance
KAT CAST Module
becomes
operational
SP 800-90A Rev.
1 (instantiate,
reseed, generate)
health test
Test runs at
power-on
before the
integrity test
HMAC-SHA-
1 (A7308)
SHA-1 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 39
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
HMAC-SHA-
1 (A7313)
SHA-1 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-SHA-
1 (A7314)
SHA-1 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-SHA-
1 (A7315)
SHA-1 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA2-224
(A7308)
SHA2-224 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA2-224
(A7313)
SHA2-224 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA2-224
(A7314)
SHA2-224 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA2-224
(A7315)
SHA2-224 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA2-256
(A7308)
SHA2-256 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA2-256
(A7313)
SHA2-256 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA2-256
(A7314)
SHA2-256 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA2-256
(A7315)
SHA2-256 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 40
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
before the
integrity test
HMAC-
SHA2-384
(A7308)
SHA2-384 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA2-384
(A7313)
SHA2-384 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA2-384
(A7314)
SHA2-384 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA2-384
(A7315)
SHA2-384 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA2-512
(A7308)
SHA2-512 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA2-512
(A7313)
SHA2-512 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA2-512
(A7314)
SHA2-512 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA2-512
(A7315)
SHA2-512 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA3-224
(A7295)
SHA3-224 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA3-256
(A7295)
SHA3-256 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 41
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
HMAC-
SHA3-384
(A7295)
SHA3-384 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
HMAC-
SHA3-512
(A7295)
SHA3-512 KAT CAST Module
becomes
operational
Message
authentication
Test runs at
power-on
before the
integrity test
SHA-1
(A7308)
SHA-1 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA-1
(A7313)
SHA-1 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA-1
(A7314)
SHA-1 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA-1
(A7315)
SHA-1 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-224
(A7308)
SHA2-224 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-224
(A7313)
SHA2-224 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-224
(A7314)
SHA2-224 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-224
(A7315)
SHA2-224 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-256
(A7308)
SHA2-256 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 42
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
before the
integrity test
SHA2-256
(A7313)
SHA2-256 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-256
(A7314)
SHA2-256 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-256
(A7315)
SHA2-256 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-384
(A7308)
SHA2-384 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-384
(A7313)
SHA2-384 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-384
(A7314)
SHA2-384 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-384
(A7315)
SHA2-384 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-512
(A7308)
SHA2-512 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-512
(A7313)
SHA2-512 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-512
(A7314)
SHA2-512 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 43
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
SHA2-512
(A7315)
SHA2-512 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA3-224
(A7295)
SHA3-224 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA3-256
(A7295)
SHA3-256 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA3-384
(A7295)
SHA3-384 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA3-512
(A7295)
SHA3-512 KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
Entropy
Source
Initialization
RCT
1024 samples RCT CAST Module
becomes
operational
and services
are available
for use
Entropy source
startup test
Entropy source
initialization
Entropy
Source
Initialization
APT
1024 samples APT CAST Module
becomes
operational
and services
are available
for use
Entropy source
startup test
Entropy source
initialization
Entropy
Source
Operational
RCT
Intermittent
Cutoff: 31
samples,
Permanent
Cutoff: 61 samples
RCT CAST Entropy
source is
operational
Entropy source
continuous test
Continuously
Entropy
Source
Operational
APT
512 samples,
Intermittent
Cutoff: 325
samples,
Permanent
APT CAST Entropy
source is
operational
Entropy source
continuous test
Continuously
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 44
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
Cutoff: 355
samples
HMAC-
SHA2-256
(A7243)
SHA2-256 KAT CAST Module
becomes
operational
[EVM] Test runs at
power-on
before the
integrity test
Table 21: Conditional Self-Tests
The module performs self-tests on all approved cryptographic algorithms as part of the approved services
supported in the approved mode of operation, using the tests shown in the table above. Services are not
available, and data output (via the data output interface) is inhibited during the conditional self-tests. If any of
these tests fails, the module transitions to the Error State.
10.3 Periodic Self-Test Information
Algorithm or Test Test Method Test Type Period Periodic Method
HMAC-SHA2-256
(A7243) - kernel
Message
Authentication
SW/FW Integrity On demand Manually
HMAC-SHA2-256
(A7243) -
fips_chk_hmac
Message
Authentication
SW/FW Integrity On demand Manually
Table 22: Pre-Operational Periodic Information
Algorithm or Test Test Method Test Type Period Periodic Method
AES-CBC (A7308)
- Encrypt
KAT CAST On Demand Manually
AES-CBC (A7310)
- Encrypt
KAT CAST On Demand Manually
AES-CBC (A7311)
- Encrypt
KAT CAST On Demand Manually
AES-CBC (A7312)
- Encrypt
KAT CAST On Demand Manually
AES-CBC-CS3
(A7308) - Encrypt
KAT CAST On Demand Manually
AES-CBC-CS3
(A7310) - Encrypt
KAT CAST On Demand Manually
AES-CBC-CS3
(A7311) - Encrypt
KAT CAST On Demand Manually
AES-CBC-CS3
(A7312) - Encrypt
KAT CAST On Demand Manually
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 45
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Algorithm or Test Test Method Test Type Period Periodic Method
AES-CTR (A7308)
- Encrypt
KAT CAST On Demand Manually
AES-CTR (A7310)
- Encrypt
KAT CAST On Demand Manually
AES-CTR (A7311)
- Encrypt
KAT CAST On Demand Manually
AES-CTR (A7312)
- Encrypt
KAT CAST On Demand Manually
AES-ECB (A7308) -
Encrypt
KAT CAST On Demand Manually
AES-ECB (A7310) -
Encrypt
KAT CAST On Demand Manually
AES-ECB (A7311) -
Encrypt
KAT CAST On Demand Manually
AES-ECB (A7312) -
Encrypt
KAT CAST On Demand Manually
AES-CMAC
(A7308)
KAT CAST On Demand Manually
AES-CMAC
(A7311)
KAT CAST On Demand Manually
AES-CMAC
(A7312)
KAT CAST On Demand Manually
AES-CBC (A7308)
- Decrypt
KAT CAST On Demand Manually
AES-CBC (A7310)
- Decrypt
KAT CAST On Demand Manually
AES-CBC (A7311)
- Decrypt
KAT CAST On Demand Manually
AES-CBC (A7312)
- Decrypt
KAT CAST On Demand Manually
AES-CBC-CS3
(A7308) - Decrypt
KAT CAST On Demand Manually
AES-CBC-CS3
(A7310) - Decrypt
KAT CAST On Demand Manually
AES-CBC-CS3
(A7311) - Decrypt
KAT CAST On Demand Manually
AES-CBC-CS3
(A7312) - Decrypt
KAT CAST On Demand Manually
AES-CTR (A7308)
- Decrypt
KAT CAST On Demand Manually
AES-CTR (A7310)
- Decrypt
KAT CAST On Demand Manually
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 46
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Algorithm or Test Test Method Test Type Period Periodic Method
AES-CTR (A7311)
- Decrypt
KAT CAST On Demand Manually
AES-CTR (A7312)
- Decrypt
KAT CAST On Demand Manually
AES-ECB (A7308) -
Decrypt
KAT CAST On Demand Manually
AES-ECB (A7310) -
Decrypt
KAT CAST On Demand Manually
AES-ECB (A7311) -
Decrypt
KAT CAST On Demand Manually
AES-ECB (A7312) -
Decrypt
KAT CAST On Demand Manually
Counter DRBG
(A7308)
KAT CAST On Demand Manually
Counter DRBG
(A7310)
KAT CAST On Demand Manually
Counter DRBG
(A7311)
KAT CAST On Demand Manually
Counter DRBG
(A7312)
KAT CAST On Demand Manually
Hash DRBG
(A7308)
KAT CAST On Demand Manually
Hash DRBG
(A7310)
KAT CAST On Demand Manually
Hash DRBG
(A7311)
KAT CAST On Demand Manually
Hash DRBG
(A7313)
KAT CAST On Demand Manually
Hash DRBG
(A7314)
KAT CAST On Demand Manually
Hash DRBG
(A7315)
KAT CAST On Demand Manually
HMAC DRBG
(A7308)
KAT CAST On Demand Manually
HMAC DRBG
(A7310)
KAT CAST On Demand Manually
HMAC DRBG
(A7311)
KAT CAST On Demand Manually
HMAC DRBG
(A7313)
KAT CAST On Demand Manually
HMAC DRBG
(A7314)
KAT CAST On Demand Manually
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 47
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Algorithm or Test Test Method Test Type Period Periodic Method
HMAC DRBG
(A7315)
KAT CAST On Demand Manually
HMAC-SHA-1
(A7308)
KAT CAST On Demand Manually
HMAC-SHA-1
(A7313)
KAT CAST On Demand Manually
HMAC-SHA-1
(A7314)
KAT CAST On Demand Manually
HMAC-SHA-1
(A7315)
KAT CAST On Demand Manually
HMAC-SHA2-224
(A7308)
KAT CAST On Demand Manually
HMAC-SHA2-224
(A7313)
KAT CAST On Demand Manually
HMAC-SHA2-224
(A7314)
KAT CAST On Demand Manually
HMAC-SHA2-224
(A7315)
KAT CAST On Demand Manually
HMAC-SHA2-256
(A7308)
KAT CAST On Demand Manually
HMAC-SHA2-256
(A7313)
KAT CAST On Demand Manually
HMAC-SHA2-256
(A7314)
KAT CAST On Demand Manually
HMAC-SHA2-256
(A7315)
KAT CAST On Demand Manually
HMAC-SHA2-384
(A7308)
KAT CAST On Demand Manually
HMAC-SHA2-384
(A7313)
KAT CAST On Demand Manually
HMAC-SHA2-384
(A7314)
KAT CAST On Demand Manually
HMAC-SHA2-384
(A7315)
KAT CAST On Demand Manually
HMAC-SHA2-512
(A7308)
KAT CAST On Demand Manually
HMAC-SHA2-512
(A7313)
KAT CAST On Demand Manually
HMAC-SHA2-512
(A7314)
KAT CAST On Demand Manually
HMAC-SHA2-512
(A7315)
KAT CAST On Demand Manually
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 48
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Algorithm or Test Test Method Test Type Period Periodic Method
HMAC-SHA3-224
(A7295)
KAT CAST On Demand Manually
HMAC-SHA3-256
(A7295)
KAT CAST On Demand Manually
HMAC-SHA3-384
(A7295)
KAT CAST On Demand Manually
HMAC-SHA3-512
(A7295)
KAT CAST On Demand Manually
SHA-1 (A7308) KAT CAST On Demand Manually
SHA-1 (A7313) KAT CAST On Demand Manually
SHA-1 (A7314) KAT CAST On Demand Manually
SHA-1 (A7315) KAT CAST On Demand Manually
SHA2-224 (A7308) KAT CAST On Demand Manually
SHA2-224 (A7313) KAT CAST On Demand Manually
SHA2-224 (A7314) KAT CAST On Demand Manually
SHA2-224 (A7315) KAT CAST On Demand Manually
SHA2-256 (A7308) KAT CAST On Demand Manually
SHA2-256 (A7313) KAT CAST On Demand Manually
SHA2-256 (A7314) KAT CAST On Demand Manually
SHA2-256 (A7315) KAT CAST On Demand Manually
SHA2-384 (A7308) KAT CAST On Demand Manually
SHA2-384 (A7313) KAT CAST On Demand Manually
SHA2-384 (A7314) KAT CAST On Demand Manually
SHA2-384 (A7315) KAT CAST On Demand Manually
SHA2-512 (A7308) KAT CAST On Demand Manually
SHA2-512 (A7313) KAT CAST On Demand Manually
SHA2-512 (A7314) KAT CAST On Demand Manually
SHA2-512 (A7315) KAT CAST On Demand Manually
SHA3-224 (A7295) KAT CAST On Demand Manually
SHA3-256 (A7295) KAT CAST On Demand Manually
SHA3-384 (A7295) KAT CAST On Demand Manually
SHA3-512 (A7295) KAT CAST On Demand Manually
Entropy Source
Initialization RCT
RCT CAST On Demand Manually
Entropy Source
Initialization APT
APT CAST On Demand Manually
Entropy Source
Operational RCT
RCT CAST On Demand Manually
Entropy Source
Operational APT
APT CAST On Demand Manually
HMAC-SHA2-256
(A7243)
KAT CAST On Demand Manually
Table 23: Conditional Periodic Information
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 49
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
10.4 Error States
Name Description Conditions Recovery
Method
Indicator
Error General-purpose error
state
Failure of pre-operational or conditional
tests
Failure of Entropy source Health Tests
Restart
module
Kernel
panic
Table 24: Error States
In the Error State, the output interface is inhibited, and the module accepts no more inputs or requests (as the
module is no longer running).
The error can be recovered by a restart (i.e., powering off and powering on) of the module.
The error can also be recovered by recovering from snapshot of the module as follows:
1. Issue the request system snapshot operational mode command:
request system snapshot
2. Use the show system snapshot operational mode command to see the snapshot images available on the
Routing Engines:
show system snapshot
3. To recover the primary Routing Engine using the snapshot, boot the Routing Engine from the
secondary SSD (disk2):
request node reboot re0 disk2
4. If the Routing Engine has successfully booted from the secondary SSD, after the Routing Engine boots
up, you see a message similar to the following before the login prompt:
WARNING: THIS DEVICE HAS BOOTED FROM ALTERNATE DEVICE (/dev/sdb)
10.5 Operator Initiation of Self-Tests
All self-tests, with the exception of the continuous health tests, can be invoked on demand by unloading and
subsequently re-initializing the module.
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 50
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
11 Life-Cycle Assurance
11.1 Installation, Initialization, and Startup Procedures
The module is pre-installed in the junos-evo-install-ptx-fixed-x86-64-24.4R2.15-EVO.iso image. The
procedures on how to mount and install the image are listed in the software-install-and-upgrade-overview-evo
documentation1
. The Crypto Officer shall follow this Security Policy to configure the operational environment
and to operate the module as a FIPS 140-3 validated module.
To configure the operating environment to run in the approved mode, the following shall be performed with
the root privilege:
5. Enter CLI configuration mode.
6. Configure FIPS level to 1:
set system fips level 1
7. Commit changes:
commit
8. Exit configuration mode to enter operational mode:
exit
9. Reboot the system with the new settings (answer yes to prompt):
request system reboot
The Crypto Officer should check the existence of the file, /proc/sys/crypto/fips_enabled, and that it contains
“1”. If the file does not exist or does not contain “1”, the operating environment is not configured to operate
properly in the approved mode.
11.2 Administrator Guidance
In order to run in the Approved mode, the module must be operated using the approved services, with their
corresponding approved and allowed cryptographic algorithms provided in this Security Policy. In addition,
key sizes must comply with SP 800-131A Rev. 2.
Once the OE is properly configured, the operator is responsible to verify that the installation and configuration
is completed. For such purpose, the following command “cat /proc/sys/crypto/fips_version” must return:
Junos OS Evolved Kernel Cryptographic Module 2.1
11.3 Non-Administrator Guidance
There is no non-administrator guidance.
1
URL: https://www.juniper.net/documentation/us/en/software/junos/junos-install-upgrade-
evo/topics/concept/software-install-and-upgrade-overview-evo.html
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 51
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
11.6 End of Life
As a first step for the secure sanitization, the module needs to be powered off which will erase the SSPs in the
volatile memory. Then, the files listed related to the static kernel binary and fips_chk_hmac utility must be
deleted using the command “shred -zu <file_name>”. Then, for the actual deprecation, the module will be
upgraded to a newer version that is approved.
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 52
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
12 Mitigation of Other Attacks
The module does not offer mitigation of other attacks and therefore this section is not applicable.
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 53
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Appendix A. Glossary and Abbreviations
AES Advanced Encryption Standard
API Application Programming Interface
CAST Cryptographic Algorithm Self-Test
CAVP Cryptographic Algorithm Validation Program
CBC Cipher Block Chaining
CMAC Cipher-based Message Authentication Code
CMVP Cryptographic Module Validation Program
CSP Critical Security Parameter
CTR Counter
DRBG Deterministic Random Bit Generator
ECB Electronic Code Book
ENT (NP) Non-physical Entropy Source
FIPS Federal Information Processing Standards
GCM Galois Counter Mode
HMAC Keyed-Hash Message Authentication Code
KAT Known Answer Test
MAC Message Authentication Code
NIST National Institute of Science and Technology
PAA Processor Algorithm Acceleration
PKCS Public-Key Cryptography Standards
RSA Rivest, Shamir, Adleman
SHA Secure Hash Algorithm
SSP Sensitive Security Parameter
XTS XEX-based Tweaked-codebook mode with cipher text Stealing
Junos® OS Evolved Kernel Cryptographic Module
FIPS 140-3 Non-Proprietary Security Policy
HPE Juniper Networking o +1 408 745 2000 54
1133 Innovation Way f +1 408 745 2100
Sunnyvale, CA 94089
www.hpe.com
Appendix B. References
FIPS 140-3 FIPS PUB 140-3 - Security Requirements For Cryptographic Modules
March 2019
https://doi.org/10.6028/NIST.FIPS.140-3
FIPS 140-3 IG Implementation Guidance for FIPS PUB 140-3 and the Cryptographic Module Validation
Program [09-02-2025]
https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-
announcements
SP 800-131A
Rev. 2
Transitioning the Use of Cryptographic Algorithms and Key Lengths
March 2019
https://doi.org/10.6028/NIST.SP.800-131Ar2
SP 800-38A Recommendation for Block Cipher Modes of Operation Methods and Techniques
December 2001
https://doi.org/10.6028/NIST.SP.800-38A
SP 800-38B Recommendation for Block Cipher Modes of Operation: The CMAC Mode for
Authentication
May 2005
https://doi.org/10.6028/NIST.SP.800-38B
SP 800-38E Recommendation for Block Cipher Modes of Operation: The XTS-AES Mode for
Confidentiality of Storage Devices
January 2010
https://doi.org/10.6028/NIST.SP.800-38E
SP 800-90A
Rev. 1
Recommendation for Random Number Generation Using Deterministic Random Bit
Generators
June 2015
https://doi.org/10.6028/NIST.SP.800-90Ar1
SP 800-90B Recommendation for the Entropy Sources Used for Random Bit Generation
January 2018
https://doi.org/10.6028/NIST.SP.800-90B
FIPS 198-1 The Keyed-Hash Message Authentication Code (HMAC)
July 2008
https://doi.org/10.6028/NIST.FIPS.198-1
FIPS 180-4 Secure Hash Standard (SHS)
August 2015
https://doi.org/10.6028/NIST.FIPS.180-4
FIPS 202 SHA-3 Standard: Permutation-Based Hash and Extendable-Output Functions
August 2015
https://doi.org/10.6028/NIST.FIPS.202