{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "0ff6f4bbfaf422d4", "cert_id": 5402, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Arista Crypto Module v3.0 [Software, Software IPsec]", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-07-13", "validation_type": "Initial", "lab": "DEKRA Cybersecurity Certification Laboratory"}], "vendor_url": "http://www.arista.com", "vendor": "Arista Networks, Inc.", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2026_040826_0807.pdf", "module_type": "Software", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys). No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Roles, services, and authentication: Level 2", "Physical security: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "Arista crypto library is a comprehensive suite of FIPS Approved algorithms. Many key sizes and modes have been implemented to allow flexibility and efficiency. The certificate applies to the cryptographic library used by the CloudEOS router.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2029-09-05", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 3}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 10, "HMAC SHA-1": 7, "HMAC-SHA- 1": 2, "SHA2-224": 10, "SHA2-256": 21, "SHA2-384": 13, "SHA2-512": 13, "SHA-1": 22, "SHA2- 384": 2, "SHA2- 512": 4, "SHA256": 3, "SHA512": 1, "SHA-512": 2, "SHA2- 256": 1, "SHA-256": 2, "PKCS 1": 8, "PKCS#1": 4, "AES-128": 2, "AES-192": 2, "AES-256": 3, "DRBG 384": 1, "DRBG 256": 3}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-128": 2, "AES-192": 2, "AES-256": 3, "AES": 26}, "CAST": {"CAST5": 3, "CAST": 60}, "RC": {"RC2": 3, "RC5": 1}}, "DES": {"DES": {"DES": 3}, "3DES": {"Triple-DES": 5}}, "miscellaneous": {"IDEA": {"IDEA": 3}, "Blowfish": {"Blowfish": 3}, "Camellia": {"Camellia": 3}, "SEED": {"SEED": 3}}, "constructions": {"MAC": {"HMAC": 42, "CMAC": 1}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDHE": 16, "ECDH": 17}, "ECDSA": {"ECDSA": 52}}, "FF": {"DH": {"Diffie-Hellman": 7, "DHE": 8, "DH": 17}, "DSA": {"DSA": 3}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 22}, "SHA2": {"SHA256": 3, "SHA512": 1, "SHA-512": 2, "SHA-256": 2}}, "MD": {"MD4": {"MD4": 2}, "MD5": {"MD5": 3}}, "RIPEMD": {"RIPEMD-160": 2}}, "crypto_scheme": {"MAC": {"MAC": 15}, "KEX": {"Key Exchange": 3}, "KA": {"Key Agreement": 2, "Key agreement": 1}}, "crypto_protocol": {"SSH": {"SSH": 24, "SSHv2": 8}, "TLS": {"TLS": {"TLS": 47, "TLS v1.2": 6, "TLS 1.2": 3, "TLS v1.0": 24}, "DTLS": {"DTLS": 1}}, "IKE": {"IKEv1": 5, "IKEv2": 5, "IKE": 21}, "IPsec": {"IPsec": 3}}, "randomness": {"PRNG": {"DRBG": 94}, "RNG": {"RBG": 2}}, "cipher_mode": {"GCM": {"GCM": 18}}, "ecc_curve": {"NIST": {"P-256": 20, "P-384": 12, "P-521": 8, "Curve P-384": 2, "P-224": 2, "secp256r1": 1, "secp384r1": 1, "secp521r1": 1}}, "crypto_engine": {}, "tls_cipher_suite": {"TLS": {"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_CCM": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_CCM": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 1, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256": 1, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA256": 1, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 1, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 1, "TLS_DHE_RSA_WITH_AES_256_CCM_8": 1, "TLS_DHE_RSA_WITH_AES_256_CCM": 1, "TLS_DHE_RSA_WITH_AES_128_CCM_8": 1, "TLS_DHE_RSA_WITH_AES_128_CCM": 1, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256": 1, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256": 1, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 1, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 1}}, "crypto_library": {"OpenSSL": {"OpenSSL": 7}}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 5}, "IBM": {"SSC": 20}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 6, "FIPS PUB 140-3": 1, "FIPS186-4": 29, "FIPS 186-4": 7, "FIPS 198-1": 5, "FIPS 180-4": 5}, "NIST": {"SP 800-38A": 6, "SP 800-38C": 1, "SP 800-38B": 1, "SP 800-38D": 1, "SP 800-38E": 1, "SP 800-90A": 6, "SP 800-56A": 3, "SP 800-135": 5, "SP 800-108": 1, "SP 800-56B": 1, "SP 800-133": 1, "SP 800-90B": 1, "SP 800-140B": 1, "SP 800-38F": 1, "SP 800-140E": 1}, "PKCS": {"PKCS 1": 4, "PKCS#1": 2}, "RFC": {"RFC7627": 4, "RFC 5288": 1, "RFC 4106": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 778259, "pdf_is_encrypted": false, "pdf_number_of_pages": 54, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260709105547-04'00'", "/ModDate": "D:20260709105547-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": []}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["ECDSA SigGen (FIPS186-4)A3592", "AES-CTRA3592", "TLS v1.2 KDF RFC7627A3592", "RSA SigGen (FIPS186-4)A3592", "KAS-FFC-SSC Sp800-56Ar3A3592", "ECDSA KeyGen (FIPS186-4)A3592", "AES-CFB1A3592", "KTS-IFCA3592", "HMAC-SHA2-224A3592", "HMAC-SHA2-384A3592", "KAS-ECC-SSC Sp800-56Ar3A3592", "KDF TLSA3592", "HMAC-SHA-1A3592", "AES-CFB8A3592", "SHA2-384A3592", "AES-GCMA3592", "AES-CCMA3592", "SHA-1A3592", "RSA KeyGen (FIPS186-4)A3592", "HMAC-SHA2-512A3592", "SHA2-256A3592", "ECDSA SigVer (FIPS186-4)A3592", "KDF SP800-108A3592", "Hash DRBGA3592", "SHA2-512A3592", "AES-CMACA3592", "RSA SigVer (FIPS186-4)A3592", "HMAC DRBGA3592", "AES-ECBA3592", "AES-CFB128A3592", "ECDSA KeyVer (FIPS186-4)A3592", "HMAC-SHA2-256A3592", "AES-CBCA3592", "KDF IKEv1A3592", "KDF IKEv2A3592", "AES-XTS Testing Revision 2.0A3592", "Counter DRBGA3592", "KDF SSHA3592", "SHA2-224A3592"]}, "extracted_versions": {"_type": "Set", "elements": ["3.0"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "85d23974df2d442631514a94f0c327451650f55a84d9c950dbabb242a16ce15a", "txt_hash": "7c13e24a910e51c79393adb016f3fbb9f48fb6f326aee6559a6525a01685a257", "json_hash": null}}}