{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "313cd30d56319151", "cert_id": 5328, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Palo Alto Networks SD-WAN ION Core Crypto Module", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-06-11", "validation_type": "Initial", "lab": "Gossamer Security Solutions"}], "vendor_url": "http://www.paloaltonetworks.com", "vendor": "Palo Alto Networks, Inc.", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf", "module_type": "Software", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When installed, initialized and configured as specified in Section 11.1 of the Security Policy", "exceptions": ["Physical security: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "The Palo Alto Networks SD-WAN ION Core Crypto Module is utilized in hardware and software ION form factors. These enable the integration of a diverse set of wide area network (WAN) connection types, improve application performance and visibility, enhance security and compliance, and reduce the overall cost and complexity of a WAN.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-06-10", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {"Cert": {"#1": 1}}, "fips_security_level": {"Level": {"Level 1": 3}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 8, "SHA2-256": 17, "SHA2-384": 9, "SHA2- 512": 3, "SHA-1": 7, "SHA2-512": 5, "SHA2": 1, "SHA2- 256": 3, "AES-128": 2, "AES-192": 2, "AES-256": 9, "DRBG 256": 2}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-128": 2, "AES-192": 2, "AES-256": 9, "AES": 13, "AES-": 7}, "CAST": {"CAST": 83}}, "constructions": {"MAC": {"HMAC": 12, "CBC-MAC": 2}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDH": 1, "ECDHE": 65}, "ECDSA": {"ECDSA": 35}, "ECC": {"ECC": 3}}, "FF": {"DH": {"Diffie-Hellman": 1}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 7}, "SHA2": {"SHA2": 1}}}, "crypto_scheme": {"MAC": {"MAC": 7}, "KA": {"Key Agreement": 3}}, "crypto_protocol": {"SSH": {"SSH": 69, "SSHv2": 33}, "TLS": {"TLS": {"TLS v1.2": 9, "TLSv1.2": 61, "TLS": 94}}, "IKE": {"IKEv2": 5, "IKE": 1}}, "randomness": {"PRNG": {"DRBG": 115}, "RNG": {"RBG": 2}}, "cipher_mode": {"CTR": {"CTR": 1}, "GCM": {"GCM": 9}}, "ecc_curve": {"NIST": {"P-256": 43, "P-384": 40, "P-521": 30, "P-224": 8, "Curve P-256": 5}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 9}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 8, "FIPS186-5": 29, "FIPS 186-5": 8, "FIPS 198-1": 12, "FIPS 180-4": 12}, "NIST": {"SP 800-38A": 6, "SP 800-38D": 2, "SP 800-90A": 2, "SP 800-56A": 2, "SP 800-135": 5, "SP 800-90B": 1}, "RFC": {"RFC7627": 6, "RFC 5288": 1, "RFC 7296": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 567934, "pdf_is_encrypted": false, "pdf_number_of_pages": 47, "/Author": "JustinBettencourt", "/ClassificationContentMarkingHeaderFontProps": "#008000,10,Aptos", "/ClassificationContentMarkingHeaderShapeIds": "594bdd13,6ea59480,6b399dcc", "/ClassificationContentMarkingHeaderText": "UNCLASSIFIED / NON CLASSIFI\u00c9//TLP:AMBER+STRICT", "/Comments": "", "/Company": "", "/CreationDate": "D:20260610124031-04'00'", "/Creator": "Acrobat PDFMaker 26 for Word", "/Keywords": "", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ActionId": "1a5647df-a5da-4476-a1b9-773548a91233", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ContentBits": "1", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Enabled": "true", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Method": "Privileged", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Name": "TLP-Amber_Strict", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SetDate": "2026-06-10T16:34:04Z", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Tag": "10, 0, 1, 1", "/ModDate": "D:20260610124252-04'00'", "/Producer": "Adobe PDF Library 26.1.59", "/SourceModified": "", "/Subject": "", "/Title": "", "pdf_hyperlinks": {"_type": "Set", "elements": ["http://www.paloaltonetworks.com/", "https://docs.paloaltonetworks.com/", "about:blank"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["KDF IKEv2A6268", "KDF SNMPA6268", "HMAC-SHA2-512A6271", "RSA SigVer (FIPS186-5)A6269", "ECDSA SigVer (FIPS186-5)A6268", "AES-CBCA6271", "SHA2-256A6271", "KAS-ECC-SSC Sp800-56Ar3A6269", "AES-GCMA6269", "HMAC-SHA-1A6268", "KDF SSHA6268", "Counter DRBGA6269", "AES-CFB128A6268", "HMAC-SHA2-256A6271", "SHA2-384A6271", "HMAC-SHA2-384A6271", "RSA KeyGen (FIPS186-5)A6268", "SHA-1A6268", "AES-CTRA6268", "ECDSA SigGen (FIPS186-5)A6268", "SHA2-512A6271", "RSA SigGen (FIPS186-5)A6268", "TLS v1.2 KDF RFC7627A6269", "ECDSA KeyGen (FIPS186-5)A6268"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "1e73b01a895f04ea63abb3ddb9aba015c3b905eaf708cf478f54b1b607438705", "txt_hash": "ad25ee65c73656f0204d32cedb2500f8fce006ca02baf36d24fb02f7e04fb8a2", "json_hash": null}}}