{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "0aa87b8bdb3232d7", "cert_id": 5372, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "PL-2000GM and PL-2000GA", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-07-07", "validation_type": "Initial", "lab": "Lightship Security, Inc."}], "vendor_url": "https://www.packetlight.com", "vendor": "PacketLight Networks Ltd.", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2026_040826_0807.pdf", "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 2, "caveat": "When installed, initialized and configured as specified in Section 11 of the Security Policy. The tamper evident seals installed as indicated in the Security Policy.", "exceptions": ["Operational environment: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "PacketLight's PL-2000GA and PL-2000GM Layer-1 encryption solutions with comprehensive line and service performance monitoring, ensure the confidentiality and integrity of data, based on GCM-AES-256 encryption standards, supporting Diffie-Hellman (DH) key exchange up to every 1-minute. In addition, the solutions support multiple protocols including 10G/40G/100G Ethernet, 16G Fibre Channel, OTU2/OTU2e/OTU4.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-07-06", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {"Cert": {"#1": 3, "#4": 1}}, "fips_security_level": {"Level": {"Level 2": 2, "Level 1": 1}}, "fips_certlike": {"Certlike": {"HMAC-SHA-384": 2, "SHA2-384": 18, "SHA2-256": 12, "SHA2-512": 6, "SHA-1": 1, "SHA1": 1, "SHA-256": 1, "SHA-384": 1, "SHA-512": 1, "AES-256": 2, "AES-128": 1, "AES-192": 1}}, "vendor": {"NXP": {"NXP": 2}}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-256": 2, "AES-128": 1, "AES-192": 1, "AES": 2}, "CAST": {"CAST": 43}}, "constructions": {"MAC": {"HMAC": 6, "HMAC-SHA-384": 1}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDH": 16}, "ECDSA": {"ECDSA": 16}, "ECC": {"ECC": 10}}, "FF": {"DH": {"DHE": 1, "DH": 24, "Diffie-Hellman": 44}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 1, "SHA1": 1}, "SHA2": {"SHA-256": 1, "SHA-384": 1, "SHA-512": 1}}}, "crypto_scheme": {"MAC": {"MAC": 10}, "KEX": {"KEX": 4, "Key Exchange": 2}, "KA": {"Key Agreement": 5}}, "crypto_protocol": {"SSH": {"SSH": 33, "SSHv2": 3}, "TLS": {"TLS": {"TLS v1.2": 7, "TLS v1.3": 9, "TLS": 95, "TLSv1.2": 1, "TLSv1.3": 1}}}, "randomness": {"PRNG": {"DRBG": 10}, "RNG": {"RBG": 2}}, "cipher_mode": {"GCM": {"GCM": 4}}, "ecc_curve": {"NIST": {"P-256": 12, "P-384": 24, "P-521": 10}}, "crypto_engine": {}, "tls_cipher_suite": {"TLS": {"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1}}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 61, "FIPS186-5": 20, "FIPS 186-5": 5, "FIPS 198-1": 3, "FIPS 180-4": 4}, "NIST": {"SP 800-38A": 4, "SP 800-38D": 3, "SP 800-90A": 43, "SP 800-56A": 4, "SP 800-56C": 1, "SP 800-135": 4, "NIST SP 800-90A": 1, "SP 800-52": 2, "NIST SP 800-38D": 1, "NIST SP 800-140F": 1, "SP 800-131A": 1, "SP 800-90B": 2}, "RFC": {"RFC7627": 3, "RFC 5246": 1, "RFC 8446": 3, "RFC 4252": 1, "RFC 4253": 1, "RFC 5647": 1}, "ISO": {"ISO/IEC 19790:2012": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 1476581, "pdf_is_encrypted": false, "pdf_number_of_pages": 52, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260706094250-04'00'", "/ModDate": "D:20260706094250-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["http://www.lightshipsec.com/"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["SHA-1A7344", "Safe Primes Key GenerationA7344", "ECDSA SigGen (FIPS186-5)A7344", "ECDSA KeyGen (FIPS186-5)A7344", "SHA2-512A7344", "KDF SSHA7344", "RSA KeyGen (FIPS186-5)A7344", "AES-CFB128A7344", "KDF SNMPA7344", "ECDSA KeyVer (FIPS186-5)A7344", "KAS-FFC-SSC Sp800-56Ar3A7344", "TLS v1.3 KDFA7344", "KDA OneStep SP800-56Cr2A7344", "KAS-ECC-SSC Sp800-56Ar3A7344", "TLS v1.2 KDF RFC7627A7344", "Counter DRBGA7344", "HMAC-SHA2-384A7344", "ECDSA SigVer (FIPS186-5)A7344", "SHA2-256A7344", "Safe Primes Key VerificationA7344", "AES-ECBA7344", "HMAC-SHA2-512A7344", "AES-GCMA7344", "HMAC-SHA2-256A7344", "SHA2-384A7344", "AES-GMACC221", "AES-CTRA7536"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "6026c85c739ead306a5b468f24b55bf58bf6d4178a86748057edc864bea2db18", "txt_hash": "e27784294b17e450a411ec748d86d81b1c47af5be2733159dbf1a6c4ebd4cb8d", "json_hash": null}}}