This page was not yet optimized for use on mobile devices.
Acme Packet 4600 and Acme Packet 6350
Certificate details
| Certificate ID | #5344 |
|---|---|
| Status | active |
| Validation dates | 18.06.2026 |
| Sunset date | 17-06-2031 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Hardware |
| Embodiment | MultiChipStand |
| Caveat | When installed, initialized and configured as specified in Section 11 of the Security Policy |
| Exceptions |
|
| Description | The Oracle Acme Packet 4600 and 6350 are a family of fixed, hardware appliances which provide secure and reliable IP communications as Session Border Controllers. These modules can be deployed in either service provider or enterprise environments. Both modules utilize hardware assist to perform services including encrypted signaling and media via TLS and SRTP. The two modules utilize the exact same software but vary only by performance and capacity. |
| Vendor | Oracle Communications https://www.oracle.com |
| Lab | Lightship Security, Inc. |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES-256, AES-128, AES-192, AES, CAST, HMACAsymmetric Algorithms
ECDH, ECDSA, DHE, Diffie-Hellman, DHHash functions
SHA-1Schemes
MACProtocols
SSH, SSHv2, TLS v1.2, TLS v1.3, TLSRandomness
DRBG, RNG, RBGElliptic Curves
P-256, P-384Block cipher modes
CTR, GCMTLS cipher suites
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256Trusted Execution Environments
PSPSecurity level
Level 1Certification process
out of scope, Section 11.1 below are not followed, the module will be operating in a non-compliant state that is out of scope of the validationAutomated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5344,
"dgst": "312999abd157c643",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"#A6579",
"HMAC-SHA2-256A6582",
"KAS-FFC-SSC Sp800-56Ar3A6582",
"HMAC-SHA2-512A6582",
"AES-GCMA6582",
"ECDSA KeyGen (FIPS186-5)A6582",
"KDF SSHA6582",
"RSA SigGen (FIPS186-5)A6582",
"AES-CFB128A6582",
"RSA KeyGen (FIPS186-5)A6582",
"HMAC-SHA2-384A6582",
"KDF SNMPA6582",
"Safe Primes Key VerificationA6582",
"AES-CCMA6582",
"#A6582",
"TLS v1.2 KDF RFC7627A6582",
"Counter DRBGA6582",
"#A6577",
"KAS-ECC-SSC Sp800-56Ar3A6582",
"ECDSA SigVer (FIPS186-5)A6582",
"KDF SRTPA6579",
"RSA SigVer (FIPS186-5)A6582",
"SHA-1A6582",
"SHA2-512A6582",
"AES-ECBA6582",
"Safe Primes Key GenerationA6582",
"#A6578",
"HMAC-SHA-1A6582",
"SHA2-384A6582",
"SHA2-256A6582",
"ECDSA SigGen (FIPS186-5)A6582",
"TLS v1.3 KDFA6582",
"AES-CTRA6582"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"6350",
"4600"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CCM",
"cavpCertName": "A6582",
"properties": "Key Length - 128",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A6582",
"properties": "Direction - Decrypt, Encrypt Key Length - 128",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A6582",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A6582",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A6582",
"properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A6582",
"properties": "Prediction Resistance - No Mode - AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-5)",
"cavpCertName": "A6582",
"properties": "Curve - P-256, P-384 Secret Generation Mode - testing candidates",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A6582",
"properties": "Curve - P-256, P-384 Hash Algorithm - SHA2-256, SHA2-384",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A6582",
"properties": "Curve - P-256, P-384 Hash Algorithm - SHA2-256, SHA2-384",
"reference": "FIPS 186-5"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A6582",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A6582",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A6582",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A6582",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800- 56Ar3",
"cavpCertName": "A6582",
"properties": "Domain Parameter Generation Methods - P-256, P-384 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-FFC-SSC Sp800- 56Ar3",
"cavpCertName": "A6582",
"properties": "Domain Parameter Generation Methods - ffdhe2048, MODP-2048, MODP-4096, MODP-8192 Scheme - dhEphem - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDF SNMP (CVL)",
"cavpCertName": "A6582",
"properties": "Password Length - Password Length: 64-128 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A6582",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-256",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "RSA KeyGen (FIPS186- 5)",
"cavpCertName": "A6582",
"properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-5"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Primality Tests - 2pow100 Private Key Format - standard",
"reference": ""
},
{
"algorithm": "RSA SigGen (FIPS186- 5)",
"cavpCertName": "A6582",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186-5)",
"cavpCertName": "A6582",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "Safe Primes Key Generation",
"cavpCertName": "A6582",
"properties": "Safe Prime Groups - ffdhe2048, MODP-2048, MODP-4096, MODP- 8192",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "Safe Primes Key Verification",
"cavpCertName": "A6582",
"properties": "Safe Prime Groups - ffdhe2048, MODP-2048, MODP-4096, MODP- 8192",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A6582",
"properties": "Message Length - Message Length: 8-51200 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A6582",
"properties": "Message Length - Message Length: 8-51200 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A6582",
"properties": "Message Length - Message Length: 8-65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A6582",
"properties": "Message Length - Message Length: 8-65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A6582",
"properties": "Hash Algorithm - SHA2-256, SHA2-384",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "TLS v1.3 KDF (CVL)",
"cavpCertName": "A6582",
"properties": "HMAC Algorithm - SHA2-256, SHA2-384 KDF Running Modes - DHE",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A6578",
"properties": "Direction - Decrypt, Encrypt Key Length - 128",
"reference": "SP 800-38A"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A6578",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KDF SRTP (CVL)",
"cavpCertName": "A6578",
"properties": "AES Key Length - 128",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A6578",
"properties": "Message Length - Message Length: 8-51200 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A6579",
"properties": "Direction - Decrypt, Encrypt Key Length - 128",
"reference": "SP 800-38A"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A6579",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KDF SRTP (CVL)",
"cavpCertName": "A6579",
"properties": "AES Key Length - 128",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A6579",
"properties": "Message Length - Message Length: 8-51200 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "RSA SigGen (FIPS186-5)",
"cavpCertName": "A6577",
"properties": "Modulo - 2048, 4096 Signature Type - pkcs1v1.5",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186-5)",
"cavpCertName": "A6577",
"properties": "Modulo - 2048, 4096 Signature Type - pkcs1v1.5",
"reference": "FIPS 186-5"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Initializes the module for Approved Mode of Operation.",
"indicator": "N/A",
"inputs": "Command and parameters",
"name": "Initialization",
"outputs": "Command response/ Status output",
"rolesSspAccess": "Crypto-Officer",
"secFunImpl": ""
},
{
"description": "Configure approved system parameters and operational settings",
"indicator": "N/A",
"inputs": "Command and parameters",
"name": "Configure System Settings",
"outputs": "Command response/Status output",
"rolesSspAccess": "Crypto-Officer",
"secFunImpl": ""
},
{
"description": "Outputs the module name/identifier and the versioning information that can be correlated with the validation record.",
"indicator": "N/A",
"inputs": "Command",
"name": "Show Module\u0027s Versioning Information",
"outputs": "Module Versioning information",
"rolesSspAccess": "Crypto-Officer User",
"secFunImpl": ""
},
{
"description": "View system alarms",
"indicator": "N/A",
"inputs": "Command",
"name": "View Alarms",
"outputs": "Alarm information",
"rolesSspAccess": "Crypto-Officer User",
"secFunImpl": ""
},
{
"description": "View system performance metrics",
"indicator": "N/A",
"inputs": "Command",
"name": "View Performance",
"outputs": "Performance information",
"rolesSspAccess": "Crypto-Officer User",
"secFunImpl": ""
},
{
"description": "Create, edit, or delete user accounts",
"indicator": "N/A",
"inputs": "Command and parameters",
"name": "Manage Users",
"outputs": "Command response/Status output",
"rolesSspAccess": "Crypto-Officer",
"secFunImpl": ""
},
{
"description": "Change authentication credentials",
"indicator": "Global and successful completion of service",
"inputs": "Command and parameters",
"name": "Change Password",
"outputs": "Command response/Status output",
"rolesSspAccess": "Crypto-Officer - Operator Passwords: W - Operator RSA public key: W",
"secFunImpl": "Password Hash/Verify"
},
{
"description": "Authenticates users",
"indicator": "Global and successful completion of service",
"inputs": "Authentication data",
"name": "Authenticate",
"outputs": "Status output",
"rolesSspAccess": "Crypto-Officer - Operator Passwords: W - Operator RSA public key: W User - Operator Passwords: W - Operator RSA public key: W",
"secFunImpl": "Password Hash/Verify"
},
{
"description": "Outputs current status of the module.",
"indicator": "N/A",
"inputs": "Command",
"name": "Show Status",
"outputs": "Command response/Status output",
"rolesSspAccess": "Crypto-Officer User",
"secFunImpl": ""
},
{
"description": "Management and viewing of X.509 certificates",
"indicator": "Global and successful completion of service",
"inputs": "Command and parameters",
"name": "Certificates",
"outputs": "Command response/Status output",
"rolesSspAccess": "Crypto-Officer - Web UI Certificate: R User - Web UI Certificate: R",
"secFunImpl": ""
},
{
"description": "Configure bypass using TCP or UDP and viewing bypass service status",
"indicator": "Global and successful completion of service",
"inputs": "Command and parameters",
"name": "Bypass",
"outputs": "Command response/Status output",
"rolesSspAccess": "Crypto-Officer - Bypass Key: G,E",
"secFunImpl": "Bypass Integrity Check"
},
{
"description": "Establish secure session",
"indicator": "Global and successful completion of service",
"inputs": "Command",
"name": "SSH",
"outputs": "Session establishment",
"rolesSspAccess": "Crypto-Officer - Diffie-Hellman Public Key: G,R,W,E - Diffie-Hellman Private Key: G,E - Diffie-Hellman Shared Secret: G,E - SSH Authentication Public Key: G,R,E - SSH Authentication Private Key: G,E - SSH Session Keys: G,E - SSH Integrity Keys: G,E User - Diffie-Hellman Public Key: G,R,W,E - Diffie-Hellman Private Key: G,E - Diffie-Hellman Shared Secret: G,E - SSH Authentication Public Key: G,R,E - SSH Authentication Private Key: G,E - SSH Session Keys: G,E - SSH Integrity Keys: G,E",
"secFunImpl": "SSH Encrypt/Decrypt SSH Message Authentication SSH Key Transport 1 SSH Key Transport 2 SSH KAS SSH KDF SSH Key Pair Generation SSH Signature Generation SSH Signature Verification KAS SafePrimes KeyGen"
},
{
"description": "Establish secure session",
"indicator": "Global and successful",
"inputs": "Command",
"name": "TLS",
"outputs": "Session establishment",
"rolesSspAccess": "Crypto-Officer - Diffie-Hellman Public Key:",
"secFunImpl": "TLS Encrypt/Decrypt TLS Message"
},
{
"description": "",
"indicator": "completion of service",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "G,R,W,E - Diffie-Hellman Private Key: G,E - Diffie-Hellman Shared Secret: G,E - ECDH Public Key: G,R,W,E - ECDH Private Key: G,E - ECDH Shared Secret: G,E - TLS Authentication Public Key: G,R,E - TLS Authentication Private Key: G,E - TLS Premaster Secret: G,E - TLS Master Secret: G,E - TLS Session Keys: G,E - TLS Integrity Keys: G,E User - Diffie-Hellman Public Key: G,R,W,E - Diffie-Hellman Private Key: G,E - Diffie-Hellman Shared Secret: G,E - ECDH Public Key: G,R,W,E - ECDH Private Key: G,E - ECDH Shared Secret: G,E - TLS Authentication Public Key: G,R,E - TLS Authentication Private Key: G,E - TLS Premaster Secret: G,E - TLS Master Secret: G,E - TLS Session Keys: G,E",
"secFunImpl": "Authentication TLS Key Transport TLS Key Pair Generation TLS Digital Signature Generation TLS Digital Signature Verification TLS KAS 1 TLS KAS 2 TLS KDF KAS ECDSA KeyGen KAS SafePrimes KeyGen"
},
{
"description": "Establish secure session",
"indicator": "Global and successful completion of service",
"inputs": "Command and parameters",
"name": "SRTP",
"outputs": "Session establishment",
"rolesSspAccess": "Keys: G,E Crypto-Officer - SRTP Master Key: G,W,E - SRTP Session Key: G,E - SRTP Authentication Key: G,E User - SRTP Master Key: G,W,E - SRTP Session Key: G,E - SRTP Authentication Key: G,E",
"secFunImpl": "SRTP Encrypt/Decrypt 1 SRTP Encrypt/Decrypt 2 SRTP Message Authentication 1 SRTP Message Authentication 2 SRTP KDF 1 SRTP KDF 2 Generate Symmetric Key"
},
{
"description": "Secure network management",
"indicator": "Global and successful completion of service",
"inputs": "Command and parameters",
"name": "SNMP",
"outputs": "Session establishment",
"rolesSspAccess": "Crypto-Officer - SNMPv3 Passwords (Privacy and Auth): W,E - SNMP Privacy Key: G,E - SNMP Authentication Key: G,E User - SNMPv3 Passwords (Privacy and Auth): W,E - SNMP Privacy Key: G,E - SNMP Authentication Key: G,E",
"secFunImpl": "SNMP Encrypt/Decrypt SNMP Message Authentication SNMP KDF"
},
{
"description": "Initiates and runs the pre-operational self-tests.",
"indicator": "N/A",
"inputs": "Command",
"name": "On-Demand Self-tests",
"outputs": "Command response/ Status output",
"rolesSspAccess": "Crypto-Officer - Firmware Integrity Key: E",
"secFunImpl": "Verify Firmware Integrity"
},
{
"description": "Zeroises unprotected SSPs and key components.",
"indicator": "Status",
"inputs": "Command",
"name": "Zeroisation",
"outputs": "Command response/ Status output",
"rolesSspAccess": "Crypto-Officer - Operator Passwords: Z - Operator RSA public key: Z - Firmware Integrity Key: Z - DRBG Entropy Input String and Nonce: Z - DRBG Seed: Z - DRBG Internal State (V, Key): Z - Diffie-Hellman Public Key: Z",
"secFunImpl": ""
},
{
"description": "Description",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Outputs",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- Diffie-Hellman Private Key: Z - Diffie-Hellman Shared Secret: Z - ECDH Public Key: Z - ECDH Private Key: Z - ECDH Shared Secret: Z - SNMPv3 Passwords (Privacy and Auth): Z - SNMP Privacy Key: Z - SNMP Authentication Key: Z - SRTP Master Key: Z - SRTP Session Key: Z - SRTP Authentication Key: Z - SSH Authentication Public Key: Z - SSH Authentication Private Key: Z - SSH Session Keys: Z - SSH Integrity Keys: Z - TLS Authentication Public Key: Z - TLS Authentication Private Key: Z - TLS Premaster Secret: Z - TLS Master Secret: Z - TLS Session Keys: Z - TLS Integrity Keys: Z - Web UI Certificate: Z - Bypass Key: Z",
"secFunImpl": "Functions"
},
{
"description": "Random Number Generation",
"indicator": "Global and successful",
"inputs": "Command",
"name": "Random Number Generation",
"outputs": "Command response/ Status output",
"rolesSspAccess": "Crypto-Officer - DRBG Entropy Input String and",
"secFunImpl": "DRBG Entropy Source"
},
{
"description": "",
"indicator": "completion of service",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Nonce: G,E - DRBG Seed: G,E - DRBG Internal State (V, Key): G,E User - DRBG Entropy Input String and Nonce: G,E - DRBG Seed: G,E - DRBG Internal State (V, Key): G,E",
"secFunImpl": ""
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [
{
"description": "",
"mechanism": "Username and Password",
"name": "Console Auth",
"perMinute": "Passwords must be a minimum of 8 characters. The password can consist of alphanumeric values, [a-z, A-Z, 0-9, and special characters], yielding 94 choices per character. Assuming 10 attempts per second via a scripted or automatic attack, the probability of a success with multiple attempts in a one-minute period is 600/94^8, which is less than 1/100,000.",
"strength": "Passwords must be a minimum of 8 characters. The password can consist of alphanumeric values, [a-z, A-Z, 0- 9, and special characters], yielding 94 choices per character. The probability of a successful random attempt is 1/94^8, which is less than 1/1,000,000."
},
{
"description": "",
"mechanism": "Username and Password",
"name": "SSH Auth 1",
"perMinute": "Passwords must be a minimum of 8 characters. The password can consist of alphanumeric values, [a-z, A-Z, 0-9, and special characters], yielding 94 choices per character. Assuming 10 attempts per second via a scripted or automatic attack, the probability of a success with multiple attempts in a one-minute period is 600/94^8, which is less than 1/100,000.",
"strength": "Passwords must be a minimum of 8 characters. The password can consist of alphanumeric values, [a-z, A-Z, 0- 9, and special characters], yielding 94 choices per character. The probability of a successful random attempt is 1/94^8, which is less than 1/1,000,000."
},
{
"description": "",
"mechanism": "RSA SigVer (FIPS186-5) (A6582)",
"name": "SSH Auth 2",
"perMinute": "Assuming the module can support 60 authentication attempts in one minute, the probability of a success with multiple consecutive attempts in a one-minute period is 60/2^112, which is less than 1/100,000.",
"strength": "A 2048-bit RSA has at least 112-bits of equivalent strength. The probability of a successful random attempt is 1 /2^112, which is less than 1/1,000,000."
},
{
"description": "",
"mechanism": "Username and Password",
"name": "WebGUI Auth",
"perMinute": "Passwords must be a minimum of 8 characters. The password can consist of alphanumeric values, [a-z, A-Z, 0-9, and special characters], yielding 94 choices per character. Assuming 10 attempts per second via a scripted or automatic attack, the probability of a success with multiple attempts in a one-minute period is 600/94^8, which is less than 1/100,000.",
"strength": "Passwords must be a minimum of 8 characters. The password can consist of alphanumeric values, [a-z, A-Z, 0- 9, and special characters], yielding 94 choices per character. The probability of a successful random attempt is 1/94^8, which is less than 1/1,000,000."
},
{
"description": "",
"mechanism": "Username and Password",
"name": "SNMP Auth",
"perMinute": "Passwords must be a minimum of 8 characters. The password can consist of alphanumeric values, [a-z, A-Z, 0-9, and special characters], yielding 94 choices per character. Assuming 10 attempts per second via a scripted or automatic attack, the probability of a success with multiple attempts in a one-minute period is 600/94^8, which is less than 1/100,000.",
"strength": "Passwords must be a minimum of 8 characters. The password can consist of alphanumeric values, [a-z, A-Z, 0- 9, and special characters], yielding 94 choices per character. The probability of a successful random attempt is 1/94^8, which is less than 1/1,000,000."
}
],
"found": true,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6577)",
"condition": "Power Up",
"details": "Sign",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "pkcs Modulus: 2048 Hash: SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6577)",
"condition": "Power Up",
"details": "Verify",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "pkcs Modulus: 2048 Hash: SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A6578)",
"condition": "Power Up",
"details": "Separate Encrypt and Decrypt",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "128-bit",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA-1 (A6578)",
"condition": "Power Up",
"details": "MAC",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SRTP (A6578)",
"condition": "Power Up",
"details": "SP 800-135 Key Derivation",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "-",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A6578)",
"condition": "Power Up",
"details": "Message Digest",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A6579)",
"condition": "Power Up",
"details": "Separate Encrypt and Decrypt",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "128-bit",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA-1 (A6579)",
"condition": "Power Up",
"details": "MAC",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SRTP (A6579)",
"condition": "Power Up",
"details": "SP 800-135 Key Derivation",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "-",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A6579)",
"condition": "Power Up",
"details": "Message Digest",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A6582)",
"condition": "Power Up",
"details": "Separate Encrypt and Decrypt",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "128-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6582)",
"condition": "Power Up",
"details": "Separate Encrypt and Decrypt",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "128-bit",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A6582)",
"condition": "Power Up",
"details": "SP 800-90Arev1 Section 11.3",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "AES-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6582)",
"condition": "Key Pair Generation",
"details": "Sign, Verify",
"indicator": "Status",
"testMethod": "PCT",
"testProps": "P-256, P-384 SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6582)",
"condition": "Power Up",
"details": "Sign",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "P-256 SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6582)",
"condition": "Power Up",
"details": "Verify",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "P-256 SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA-1 (A6582)",
"condition": "Power Up",
"details": "MAC",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A6582)",
"condition": "Power Up",
"details": "MAC",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A6582)",
"condition": "Power Up",
"details": "MAC",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A6582)",
"condition": "Power Up",
"details": "Ephemeral Unified Shared Secret (Z) Computation",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-FFC-SSC Sp800-56Ar3 (A6582)",
"condition": "Power Up",
"details": "dhEphem Shared Secret (Z) Computation",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "FFDHE2048",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SNMP (A6582)",
"condition": "Power Up",
"details": "SP 800-135 Key Derivation",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A6582)",
"condition": "Power Up",
"details": "SP 800-135 Key Derivation",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "Key Length: 256- bit, Hash: SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6582)",
"condition": "Key Pair Generation",
"details": "Sign, Verify",
"indicator": "Status",
"testMethod": "PCT",
"testProps": "Modulus: 2048, 3072, 4096 Hash: SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6582)",
"condition": "Power Up",
"details": "Sign",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "pkcs Modulus: 2048 Hash: SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6582)",
"condition": "Power Up",
"details": "Verify",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "pkcs Modulus: 2048 Hash: SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "Safe Primes Key Generation (A6582)",
"condition": "Key Pair Generation",
"details": "SP 800-56A Rev3 Section 5.6.2.1.4",
"indicator": "Status",
"testMethod": "PCT",
"testProps": "FFDHE2048, MODP-2048, MODP-4096, MODP8192",
"type": "PCT"
},
{
"algorithmOrTest": "SHA-1 (A6582)",
"condition": "Power Up",
"details": "Message Digest",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A6582)",
"condition": "Power Up",
"details": "Message Digest",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A6582)",
"condition": "Power Up",
"details": "Message Digest",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A6582)",
"condition": "Power Up",
"details": "SP 800-135 Key Derivation",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.3 KDF (A6582)",
"condition": "Power Up",
"details": "SP 800-135 Key Derivation",
"indicator": "Status",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RCT",
"condition": "Power Up, On Demand and Continuously",
"details": "SP 800-90B Section 4",
"indicator": "Status",
"testMethod": "FD",
"testProps": "-",
"type": "CAST"
},
{
"algorithmOrTest": "APT",
"condition": "Power Up, On Demand and Continuously",
"details": "SP 800-90B Section 4",
"indicator": "Status",
"testMethod": "FD",
"testProps": "-",
"type": "CAST"
},
{
"algorithmOrTest": "Bypass Test",
"condition": "Bypass modification",
"details": "Ensures the correct operation of the services providing cryptographic processing when the mechanism",
"indicator": "Status",
"testMethod": "-",
"testProps": "HMAC-SHA2-256",
"type": "Bypass"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Failed pre-operational self-test or CAST.",
"description": "The module halts operation, where all data output is inhibited.",
"indicator": "Error Status and module halts operation",
"name": "Hard Error",
"recoveryMethod": "Attempt reboot, if reboot does not clear error, return to manufacturer."
},
{
"conditions": "Failed PCT",
"description": "The module continues operation and repeats test.",
"indicator": "Error Status returned",
"name": "Soft Error",
"recoveryMethod": "Module returns to operational state once error is logged."
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "When installed, initialized and configured as specified in Section 11 of the Security Policy, the module only runs in the approved mode of operation.",
"name": "Approved Mode",
"statusIndicator": "Global",
"type": "Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [],
"found": false,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "The USB port is reserved for recovery only by Oracle, for a non-bootable system.",
"logicalInterface": "Control Input",
"physicalPort": "Acme Packet 4600 USB Port"
},
{
"data": "Provides console access to the module. The module supports only one active serial console connection at a time",
"logicalInterface": "Data Input Control Input Status Output",
"physicalPort": "Acme Packet 4600 Console Port"
},
{
"data": "Used for EMS control, CDR accounting, CLI management, and other management functions. High Availability (HA), use ports 1 and 2",
"logicalInterface": "Data Input Data Output Control Input Status Output",
"physicalPort": "Acme Packet 4600 Ethernet MGT (Mgmt0, Mgmt1, Mgmt2) Ports"
},
{
"data": "Provide network connectivity for signaling and media traffic. These ports are also used for incoming and outgoing data (voice) connections",
"logicalInterface": "Data Input Data Output",
"physicalPort": "Acme Packet 4600 Signaling and Media (P0, P1, P2, P3) Ports"
},
{
"data": "Provide network connectivity for signaling and media traffic. These ports are also used for incoming and outgoing data (voice) connections",
"logicalInterface": "Data Input Data Output",
"physicalPort": "Acme Packet 4600 Signaling and Media (P4, P5) Port"
},
{
"data": "Status information output from the module",
"logicalInterface": "Status Output",
"physicalPort": "Acme Packet 4600 LEDs"
},
{
"data": "Provides status output",
"logicalInterface": "Status Output",
"physicalPort": "Acme Packet 4600 Alarm Port"
},
{
"data": "Provides status output",
"logicalInterface": "Status Output",
"physicalPort": "Acme Packet 4600 LCD"
},
{
"data": "Powers on the platform",
"logicalInterface": "Control Input",
"physicalPort": "Acme Packet 4600 Power Switch"
},
{
"data": "Provides reset functionality",
"logicalInterface": "Control Input",
"physicalPort": "Acme Packet 4600 Reset Button"
},
{
"data": "Provides the power supply to the module",
"logicalInterface": "Power",
"physicalPort": "Acme Packet 4600 Power Port"
},
{
"data": "The USB port is reserved for recovery only by Oracle, for a non-bootable system.",
"logicalInterface": "Control Input",
"physicalPort": "Acme Packet 6350 USB Port"
},
{
"data": "Provides console access to the module. The module supports only one active serial console connection at a time",
"logicalInterface": "Data Input Control Input Status Output",
"physicalPort": "Acme Packet 6350 Console Port"
},
{
"data": "Used for EMS control, CDR accounting, CLI management, and other management functions. High Availability (HA), use ports 1 and 2",
"logicalInterface": "Data Input Data Output Control Input Status Output",
"physicalPort": "Acme Packet 6350 Ethernet MGT (Mgmt0, Mgmt1, Mgmt2) Ports"
},
{
"data": "Provide network connectivity for signaling and media traffic. These ports are also used for incoming and outgoing data (voice) connections",
"logicalInterface": "Data Input Data Output",
"physicalPort": "Acme Packet 6350 Signaling and Media (P0, P1, P2, P3) Ports"
},
{
"data": "Status information output from the module",
"logicalInterface": "Status Output",
"physicalPort": "Acme Packet 6350 LEDs"
},
{
"data": "Provides status output",
"logicalInterface": "Status Output",
"physicalPort": "Acme Packet 6350 Alarm Port"
},
{
"data": "Provides status output",
"logicalInterface": "Status Output",
"physicalPort": "Acme Packet 6350 LCD"
},
{
"data": "Powers on the platform",
"logicalInterface": "Control Input",
"physicalPort": "Acme Packet 6350 Power Switch"
},
{
"data": "Provides reset functionality",
"logicalInterface": "Control Input",
"physicalPort": "Acme Packet 6350 Reset Button"
},
{
"data": "Provides the power supply to the module",
"logicalInterface": "Power",
"physicalPort": "Acme Packet 6350 Power Ports"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "Console Auth SSH Auth 1 SSH Auth 2 WebGUI Auth SNMP Auth",
"name": "Crypto-Officer",
"operatorType": "CO",
"type": "Role"
},
{
"authMethodList": "Console Auth SSH Auth 1 SSH Auth 2",
"name": "User",
"operatorType": "User",
"type": "Role"
},
{
"authMethodList": "WebGUI Auth SNMP Auth",
"name": "",
"operatorType": "",
"type": ""
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "2",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "1",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6582)",
"details": "Applied to all firmware components",
"indicator": "Status",
"testMethod": "Approved Integrity Technique",
"testProps": "pss Modulus: 2048 Hash: SHA2-256",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "Bypass Test",
"details": "Ensures the correct operation of the logic governing activation of the bypass capability.",
"indicator": "Status",
"testMethod": "-",
"testProps": "-",
"type": "Bypass"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Flash",
"distribution": "Automated",
"entry": "Electronic",
"format": "Encrypted",
"name": "SSP Input 1",
"sfiAlgo": "",
"source": "External via SSH or TLS management session"
},
{
"dest": "Flash",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "SSP Input 2",
"sfiAlgo": "",
"source": "External via console"
},
{
"dest": "VRAM",
"distribution": "Automated",
"entry": "Electronic",
"format": "Plaintext",
"name": "SSP Input 3 (Peer)",
"sfiAlgo": "",
"source": "External"
},
{
"dest": "External via HA",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "SSP Output 1",
"sfiAlgo": "",
"source": "Flash"
},
{
"dest": "External",
"distribution": "Automated",
"entry": "Electronic",
"format": "Plaintext",
"name": "SSP Output 2",
"sfiAlgo": "",
"source": "VRAM"
},
{
"dest": "External",
"distribution": "Automated",
"entry": "Electronic",
"format": "Plaintext",
"name": "SSP Output 3",
"sfiAlgo": "",
"source": "Flash"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Automatic zeroization upon session termination",
"method": "Session Termination",
"operatorId": "Operator closes protocol session",
"rationale": "Upon session termination, all respective SSPs stored in volatile memory are actively zeroized."
},
{
"description": "Automatic zeroization upon power cycle",
"method": "Power Cycle",
"operatorId": "Operator power cycles the module",
"rationale": "Upon power cycle, all SSPs stored in volatile memory are actively zeroized."
},
{
"description": "Automatic zeroization upon use",
"method": "After Use",
"operatorId": "",
"rationale": "Upon crypto operation, all respective SSPs stored in volatile memory are actively zeroized."
},
{
"description": "Restores the module to factory defaults",
"method": "Factory Reset",
"operatorId": "Operator enters Factory Reset command",
"rationale": "Upon factory reset command, all SSPs stored in memory are actively zeroised by overwriting the memory locations with zeros."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Non-volatile memory",
"name": "Flash",
"persistance": "Static"
},
{
"description": "Volatile memory",
"name": "VRAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [
{
"features": "",
"fwVersion": "S-Cz9.3",
"hwVersion": "4600",
"modelPartNum": "Acme Packet 4600",
"processors": "Intel Core i3-3120ME"
},
{
"features": "",
"fwVersion": "S-Cz9.3",
"hwVersion": "6350",
"modelPartNum": "Acme Packet 6350",
"processors": "Intel Xeon D-1548"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Symmetric and Asymmetric",
"implName": "N/A",
"name": "CKG",
"reference": "SP800-133rev2: Section 4, example 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDH": {
"ECDH": 22
},
"ECDSA": {
"ECDSA": 18
}
},
"FF": {
"DH": {
"DH": 3,
"DHE": 1,
"Diffie-Hellman": 28
}
}
},
"certification_process": {
"OutOfScope": {
"Section 11.1 below are not followed, the module will be operating in a non-compliant state that is out of scope of the validation": 1,
"out of scope": 1
}
},
"cipher_mode": {
"CTR": {
"CTR": 1
},
"GCM": {
"GCM": 5
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"SSH": {
"SSH": 80,
"SSHv2": 3
},
"TLS": {
"TLS": {
"TLS": 93,
"TLS v1.2": 8,
"TLS v1.3": 8
}
}
},
"crypto_scheme": {
"MAC": {
"MAC": 11
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-256": 26,
"P-384": 20
}
},
"eval_facility": {
"Lightship": {
"Lightship Security": 1
}
},
"fips_cert_id": {
"Cert": {
"#1": 3,
"#5": 1
}
},
"fips_certlike": {
"Certlike": {
"AES-128": 1,
"AES-192": 1,
"AES-256": 3,
"HMAC-SHA-1": 24,
"SHA-1": 14,
"SHA2- 256": 5,
"SHA2-256": 17,
"SHA2-384": 5,
"SHA2-512": 4
}
},
"fips_security_level": {
"Level": {
"Level 1": 2
}
},
"hash_function": {
"SHA": {
"SHA1": {
"SHA-1": 14
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 31
},
"RNG": {
"RBG": 2,
"RNG": 1
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 14,
"FIPS 180-4": 6,
"FIPS 186-5": 8,
"FIPS 198-1": 6,
"FIPS186-5": 30
},
"ISO": {
"ISO/IEC 19790:2012": 1,
"ISO/IEC 19790:2012 7": 1
},
"NIST": {
"NIST SP 800-140F": 1,
"SP 800-131A": 1,
"SP 800-135": 12,
"SP 800-38A": 5,
"SP 800-38C": 1,
"SP 800-38D": 1,
"SP 800-52": 2,
"SP 800-56A": 5,
"SP 800-90A": 1,
"SP 800-90B": 3
},
"RFC": {
"RFC 5246": 1,
"RFC 7714": 1,
"RFC 8446": 3,
"RFC7627": 3
},
"X509": {
"X.509": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 6,
"AES-128": 1,
"AES-192": 1,
"AES-256": 3
},
"CAST": {
"CAST": 63
}
},
"constructions": {
"MAC": {
"HMAC": 1
}
}
},
"tee_name": {
"AMD": {
"PSP": 4
}
},
"tls_cipher_suite": {
"TLS": {
"TLS_DHE_RSA_WITH_AES_128_GCM_SHA256": 1,
"TLS_DHE_RSA_WITH_AES_256_GCM_SHA384": 1,
"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1,
"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1,
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 1,
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1
}
},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"HMAC-SHA2-256A6582",
"KAS-FFC-SSC Sp800-56Ar3A6582",
"AES-GCMA6582",
"HMAC-SHA2-512A6582",
"ECDSA KeyGen (FIPS186-5)A6582",
"KDF SSHA6582",
"RSA SigGen (FIPS186-5)A6582",
"AES-CFB128A6582",
"RSA KeyGen (FIPS186-5)A6582",
"HMAC-SHA2-384A6582",
"KDF SNMPA6582",
"Safe Primes Key VerificationA6582",
"AES-CCMA6582",
"TLS v1.2 KDF RFC7627A6582",
"Counter DRBGA6582",
"KAS-ECC-SSC Sp800-56Ar3A6582",
"ECDSA SigVer (FIPS186-5)A6582",
"KDF SRTPA6579",
"RSA SigVer (FIPS186-5)A6582",
"SHA-1A6582",
"SHA2-512A6582",
"AES-ECBA6582",
"Safe Primes Key GenerationA6582",
"HMAC-SHA-1A6582",
"SHA2-384A6582",
"SHA2-256A6582",
"ECDSA SigGen (FIPS186-5)A6582",
"TLS v1.3 KDFA6582",
"AES-CTRA6582"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A6579",
"#A6578",
"#A6577",
"#A6582"
]
},
"policy_metadata": {
"/Author": "Scott Ehrlich",
"/CreationDate": "D:20260615072048-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260615072048-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 1011760,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"http://www.oracle.com/",
"https://docs.oracle.com/en/industries/communications/enterprise-session-border-controller/9.3.0/configuration/index.html",
"http://www.lightshipsec.com/"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 39
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "53c86f78738a66a945df112f16d9d7e945a16d88a068fd5f6425919271efc7d2",
"source_hash": "bb2201b0777fdc3d8cc24494a35184362ef2bd19c7740e75b64c7feb9871a765",
"txt_hash": "f870278895feb8edacf2579a267726e3e0f85970bcae9f1263730e542cfa3983"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When installed, initialized and configured as specified in Section 11 of the Security Policy",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf",
"date_sunset": "2031-06-17",
"description": "The Oracle Acme Packet 4600 and 6350 are a family of fixed, hardware appliances which provide secure and reliable IP communications as Session Border Controllers. These modules can be deployed in either service provider or enterprise environments. Both modules utilize hardware assist to perform services including encrypted signaling and media via TLS and SRTP. The two modules utilize the exact same software but vary only by performance and capacity.",
"embodiment": "MultiChipStand",
"exceptions": [
"Roles, services, and authentication: Level 2",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Acme Packet 4600 and Acme Packet 6350",
"module_type": "Hardware",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-06-18",
"lab": "Lightship Security, Inc.",
"validation_type": "Initial"
}
],
"vendor": "Oracle Communications",
"vendor_url": "https://www.oracle.com"
}
}