{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "16676c1285da37e8", "cert_id": 5509, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "HPE Juniper Networking QFX5120-48YM", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-09-01", "validation_type": "Initial", "lab": "Acumen Security"}], "vendor_url": "http://www.juniper.net", "vendor": "HPE Juniper Networking", "certificate_pdf_url": null, "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Roles, services, and authentication: Level 3", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "The HPE Juniper Networking QFX5120 Switch delivers high scale, high availability, and high performance for data center and campus deployments. The QFX5120 Switch is a versatile routing and switching platform addressing higher server access speed and campus distribution use cases while offering high-density 1GbE/10GbE/25GbE and 100GbE uplinks for collapsed spine data center or campus distribution deployments. The QFX5120-48YM is a 10GbE/25GbE/100GbE data center leaf and campus distribution switch.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-08-31", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {"Cert": {"#4": 1, "#2": 1, "#13": 1, "#8": 1, "#1": 1}}, "fips_security_level": {"Level": {"Level 1": 5, "Level 3": 1, "level 1": 5}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 6, "HMAC- SHA-1": 2, "SHA2-256": 26, "SHA2-384": 3, "SHA2-512": 14, "SHA-1": 10, "SHA2- 384": 1, "SHA2- 256": 2, "SHA2- 512": 2, "SHA-2- 512": 1, "RSA 2048": 1, "RSA2": 1, "PKCS #1": 2, "AES 4545": 9, "AES256": 1, "AES-128": 1, "AES-192": 1, "AES-256": 1, "AES CBC 128, 192": 1, "AES CTR 128": 1, "AES- 128": 1, "AES- 192": 1, "AES- 256": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 19, "AES256": 1, "AES-128": 1, "AES-192": 1, "AES-256": 1, "AES-": 19}, "CAST": {"CAST": 67}}, "DES": {"3DES": {"TDES": 3}}, "miscellaneous": {"Blowfish": {"Blowfish": 3}}, "constructions": {"MAC": {"HMAC": 24, "CMAC": 9}}}, "asymmetric_crypto": {"RSA": {"RSA 2048": 1}, "ECC": {"ECDH": {"ECDH": 44}, "ECDSA": {"ECDSA": 77}}, "FF": {"DH": {"Diffie-Hellman": 8, "DH": 44}, "DSA": {"DSA": 3}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 10}}, "RIPEMD": {"RIPEMD160": 2}}, "crypto_scheme": {"MAC": {"MAC": 11}, "KA": {"Key Agreement": 6}}, "crypto_protocol": {"SSH": {"SSH": 195, "SSHv2": 9}, "TLS": {"TLS": {"TLS 1.3": 1}}}, "randomness": {"PRNG": {"DRBG": 27}, "RNG": {"RBG": 2}}, "cipher_mode": {"CBC": {"CBC": 8}, "CTR": {"CTR": 2}, "GCM": {"GCM": 5}}, "ecc_curve": {"NIST": {"P-256": 50, "P-384": 24, "P-521": 24, "prime256v1": 2}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 9}, "IBM": {"SSC": 20}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 18, "FIPS186-5": 14, "FIPS 186-5": 12, "FIPS 198-1": 4, "FIPS 180-4": 6, "FIPS18": 5}, "NIST": {"SP 800-38A": 3, "SP 800-38B": 1, "SP 800-38D": 5, "SP 800-38F": 1, "SP 800-90A": 2, "SP 800-56A": 4, "SP 800-108": 5, "SP 800-135": 2, "NIST SP 800-108": 3, "SP 800-56C": 1, "NIST SP 800-90B": 2}, "PKCS": {"PKCS #1": 1}, "X509": {"X.509": 2}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 826863, "pdf_is_encrypted": false, "pdf_number_of_pages": 70, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260817092520-04'00'", "/ModDate": "D:20260817092520-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["http://www.juniper.net/support/downloads/junos.html", "https://csrc.nist.gov/projects/cryptographic-module-validation-program", "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/entropy/E215_PublicUse.pdf"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["ECDSA SigGen (FIPS186-4)A7286", "AES-GCMAES 4545", "HMAC-SHA2-256A7286", "RSA KeyGen (FIPS186-5)A7286", "RSA SigGen (FIPS186-5)A7286", "KAS-ECC-SSC Sp800-56Ar3A7286", "AES-CTRA7286", "KDF SSHA7286", "ECDSA KeyGen (FIPS186-4)A7286", "AES-CMACA6551", "HMAC-SHA-1A7286", "AES-KWA6551", "KDF SP800-108A6551", "Safe Primes Key VerificationA7286", "HMAC DRBGA6620", "SHA2-512A7286", "SHA-1A7286", "ECDSA KeyVer (FIPS186-4)A7286", "RSA SigVer (FIPS186-5)A7286", "AES-XPNAES 4545", "ECDSA SigVer (FIPS186-4)A7286", "KAS-FFC-SSC Sp800-56Ar3A7286", "AES-CBCA7286", "Safe Primes Key GenerationA7286", "HMAC-SHA2-512A7286", "SHA2-256A7286"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "42ba49fd5579dc510ee10f6259fd37b51f7dd99076e48cf57eed6c66c7be3042", "txt_hash": "1e6a28161c3d8cbd3bf878a82b9a2551da06f41fea8f445f140b637e7408064c", "json_hash": null}}}