VPN Router 1750, 2700, 2750 and 5000 with Hardware Accelerator

Certificate #1068

Webpage information

Status historical
Historical reason RNG SP800-131A Revision 1 Transition
Validation dates 15.12.2008
Standard FIPS 140-2
Security level 2
Type Hardware
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode
Description The FIPS 140-2 Level 2 compliant VPN Routers are the ideal solution for enterprises requiring secure, low-cost connectivity across the Internet or managed IP networks. The VPN Routers provide, IP routing, Virtual Private Networking (VPN), stateful firewall, encryption, authentication, directory and policy services, Quality of Service (QoS), and bandwidth management services in a single integrated platform. These devices provide a solution for small, medium, and large sites requiring Internet connectivity for both secure VPN communications and for basic IP/Internet access
Version (Hardware) 1750, 2700, 2750 and 5000 with DM0011052
Version (Firmware) 07_05.100
Vendor Nortel Networks
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms
AES, DES, Triple-DES, HMAC
Asymmetric Algorithms
Diffie-Hellman, DSA
Hash functions
SHA-1, MD5
Schemes
MAC, Key Exchange
Protocols
SSH, TLS, IKE, IPsec, VPN
Randomness
PRNG, RNG
Block cipher modes
CBC

Security level
Level 2, Level 1, Level 8, level 2

Standards
FIPS 140-2, FIPS 186-2, FIPS 197, FIPS 46-3, FIPS 180-2, FIPS 198, FIPS 182-2, PKCS5, PKCS #1, X.509

File metadata

Title (1B - Nortel VPN Router 600 1750 2700 2750 5000 FIPS 140-2 –)
Author dsaraswat
Creation date D:20081114154141Z
Modification date D:20081211163227-05'00'
Pages 25
Creator PDFCreator Version 0.8.0
Producer AFPL Ghostscript 8.14

References

Outgoing
  • 48 - historical - FORTEZZA Crypto Card
  • 82 - revoked - ASTRO Subscriber Encryption Module
  • 158 - historical - VSU-100/VSU-100R and VSU-2000
  • 143 - historical - PrivateWire Client
  • 102 - historical - DiamondNIC and DiamondLINK

Heuristics

No heuristics are available for this certificate.

References

Updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data 

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 1068,
  "dgst": "0f0b82fae280ae9f",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "Triple-DES#641",
        "HMAC#101",
        "RSA#338",
        "Triple-DES#642",
        "RNG#420",
        "SHS#51",
        "RNG#419",
        "Triple-DES#29",
        "DSA#272",
        "HMAC#387",
        "SHS#739",
        "AES#718",
        "AES#719",
        "SHS#738",
        "RSA#339",
        "HMAC#388"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "05.100"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "48",
          "158",
          "102",
          "143",
          "82"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "48",
          "158",
          "102",
          "143",
          "82"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "48",
        "158",
        "82",
        "143",
        "102"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "FF": {
          "DH": {
            "Diffie-Hellman": 12
          },
          "DSA": {
            "DSA": 9
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 7
        },
        "IPsec": {
          "IPsec": 15
        },
        "SSH": {
          "SSH": 22
        },
        "TLS": {
          "TLS": {
            "TLS": 19
          }
        },
        "VPN": {
          "VPN": 80
        }
      },
      "crypto_scheme": {
        "KEX": {
          "Key Exchange": 2
        },
        "MAC": {
          "MAC": 3
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "# 739": 1,
          "#1": 7,
          "#101": 1,
          "#102": 1,
          "#143": 1,
          "#158": 1,
          "#272": 1,
          "#29": 1,
          "#338": 1,
          "#339": 1,
          "#387": 1,
          "#388": 1,
          "#419": 1,
          "#420": 1,
          "#48": 1,
          "#51": 1,
          "#641": 1,
          "#642": 1,
          "#718": 1,
          "#719": 1,
          "#738": 1,
          "#82": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES (128": 2,
          "AES-CBC (128": 1,
          "AES1": 1,
          "DES (56 and 40": 1,
          "DES-CBC (168": 2,
          "DES-CBC (56": 2,
          "DES3": 1,
          "DSA6": 1,
          "HMAC-SHA-1": 20,
          "HMAC9": 2,
          "PKCS #1": 10,
          "PKCS5": 1,
          "PKSC#5": 2,
          "RSA PKCS #1": 2,
          "RSA4": 1,
          "SHA-1": 7,
          "SHA8": 1,
          "\u2013 PKCS5": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "Level 2": 3,
          "Level 8": 1,
          "level 2": 2
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 6
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 7
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "PRNG": 23
        },
        "RNG": {
          "RNG": 4
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 19,
          "FIPS 180-2": 3,
          "FIPS 182-2": 1,
          "FIPS 186-2": 11,
          "FIPS 197": 2,
          "FIPS 198": 3,
          "FIPS 46-3": 3
        },
        "PKCS": {
          "PKCS #1": 6,
          "PKCS5": 1
        },
        "X509": {
          "X.509": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 8
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 8
          },
          "DES": {
            "DES": 6
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 4
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "dsaraswat",
      "/CreationDate": "D:20081114154141Z",
      "/Creator": "PDFCreator Version 0.8.0",
      "/Keywords": "",
      "/ModDate": "D:20081211163227-05\u002700\u0027",
      "/Producer": "AFPL Ghostscript 8.14",
      "/Subject": "",
      "/Title": "(1B - Nortel VPN Router 600 1750 2700 2750 5000 FIPS 140-2 \u2013)",
      "pdf_file_size_bytes": 1199759,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 25
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "129d733fbd1fc7da2cb454d18d91b09dfcf3e5c32ceda36904f820ae2c35d15e",
      "txt_hash": "de127e7a131ea3c11697fbd7cb0cefc6e1b122e42b88c8e5ebd67f3c0ea097e5"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/140crt1068.pdf",
    "date_sunset": null,
    "description": "The FIPS 140-2 Level 2 compliant VPN Routers are the ideal solution for enterprises requiring secure, low-cost connectivity across the Internet or managed IP networks. The VPN Routers provide, IP routing, Virtual Private Networking (VPN), stateful firewall, encryption, authentication, directory and policy services, Quality of Service (QoS), and bandwidth management services in a single integrated platform. These devices provide a solution for small, medium, and large sites requiring Internet connectivity for both secure VPN communications and for basic IP/Internet access",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": null,
    "fw_versions": "07_05.100",
    "historical_reason": "RNG SP800-131A Revision 1 Transition",
    "hw_versions": "1750, 2700, 2750 and 5000 with DM0011052",
    "level": 2,
    "mentioned_certs": {},
    "module_name": "VPN Router 1750, 2700, 2750 and 5000 with Hardware Accelerator",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2008-12-15",
        "lab": "SAIC-VA",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Nortel Networks",
    "vendor_url": "http://www.nortel.com"
  }
}