Arista EOS Crypto Module

Certificate details

Certificate ID #4019
Status historical
Historical reason Moved to historical list due to sunsetting
Validation dates 30.08.2021 , 01.11.2021 , 17.01.2023
Standard FIPS 140-2
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode
Exceptions
  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A
Description Arista’s crypto library is a comprehensive suite of FIPS Approved algorithms. Many key sizes and modes have been implemented to allow flexibility and efficiency.
Tested configurations
  • EOSv4 on Arista CCS-720XP-24Y6 with AMD G-Series GX-224 (Crowned Eagle)
  • EOSv4 on Arista CCS-720XP-24ZY4 with AMD G-Series GX-224 (Crowned Eagle)
  • EOSv4 on Arista CCS-720XP-48Y6 with AMD G-Series GX-224 (Crowned Eagle)
  • EOSv4 on Arista CCS-720XP-48ZC2 with AMD G-Series GX-224 (Crowned Eagle)
  • EOSv4 on Arista CCS-720XP-96ZC2 with AMD R-Series RX-216 (Merlin Falcon)
  • EOSv4 on Arista CCS-750-Sup25 with Intel Xeon D-1527 (Broadwell) (single-user mode)
Vendor Arista Networks, Inc. http://www.arista.com
Lab CYGNACOM SOLUTIONS INC, DEKRA Cybersecurity Certification Laboratory
Algorithms
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-128, AES-192, AES-256, CAST5, RC4, RC5, RC2, DES, TDEA, TDES, Triple-DES, TripleDES, IDEA, Blowfish, Camellia, SEED, HMAC, CMAC
Asymmetric Algorithms
ECDSA, Diffie-Hellman, DSA
Post-quantum Algorithms
Falcon
Hash functions
SHA-1, SHA-256, SHA-384, SHA-512, SHA-224, SHA512, SHA-2, MD4, MD5, RIPEMD-160
Schemes
Key Agreement
Protocols
SSH, SSHv2, TLS, TLS 1.2
Randomness
DRBG, RNG
Libraries
OpenSSL
Elliptic Curves
P-256, P-384, P-521, P-224, K-233
Block cipher modes
ECB, CBC, CTR, OFB, GCM, CCM, XTS

Security level
Level 1

Author Kwok Wong
Creation date D:20221219211118-05'00'
Modification date D:20221219211118-05'00'
Pages 27
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4019,
  "dgst": "5193cb34662513f0",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC#C1859",
        "AES#C1859",
        "Triple-DES#C1859",
        "DRBG#C1859",
        "RSA#C1859",
        "DSA#C1859",
        "#C1859",
        "SHS#C1859",
        "ECDSA#C1859",
        "CVL#C1859"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 41,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDSA": {
            "ECDSA": 14
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 1
          },
          "DSA": {
            "DSA": 20
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 1
        },
        "CCM": {
          "CCM": 4
        },
        "CTR": {
          "CTR": 2
        },
        "ECB": {
          "ECB": 3
        },
        "GCM": {
          "GCM": 8
        },
        "OFB": {
          "OFB": 1
        },
        "XTS": {
          "XTS": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 2
        }
      },
      "crypto_protocol": {
        "SSH": {
          "SSH": 4,
          "SSHv2": 1
        },
        "TLS": {
          "TLS": {
            "TLS": 9,
            "TLS 1.2": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 1
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "K-233": 1,
          "P-224": 2,
          "P-256": 12,
          "P-384": 14,
          "P-521": 10
        }
      },
      "eval_facility": {},
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES 128/192/256": 1,
          "AES-128 128": 1,
          "AES-192 192": 1,
          "AES-256": 1,
          "AES-256 256": 1,
          "CVL 2048": 1,
          "CVL 5": 1,
          "CVL 6": 1,
          "DES 9": 2,
          "DRBG 3": 3,
          "DSA (2048": 1,
          "HMAC-SHA-1": 2,
          "PKCS 1": 6,
          "PKCS#1": 2,
          "SHA- 224": 1,
          "SHA-1": 12,
          "SHA-1 128": 1,
          "SHA-2": 1,
          "SHA-224": 15,
          "SHA-256": 20,
          "SHA-384": 17,
          "SHA-512": 11,
          "SHA-512 1024": 3,
          "SHA-512 112": 1,
          "SHA-512 2048": 1,
          "SHA-512 256": 1,
          "SHA512": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD4": {
            "MD4": 1
          },
          "MD5": {
            "MD5": 2
          }
        },
        "RIPEMD": {
          "RIPEMD-160": 1
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 13
          },
          "SHA2": {
            "SHA-2": 1,
            "SHA-224": 15,
            "SHA-256": 20,
            "SHA-384": 17,
            "SHA-512": 17,
            "SHA512": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {
        "Falcon": {
          "Falcon": 64
        }
      },
      "randomness": {
        "PRNG": {
          "DRBG": 18
        },
        "RNG": {
          "RNG": 3
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 34,
          "FIPS 180-4": 2,
          "FIPS 186": 1,
          "FIPS 186-2": 3,
          "FIPS 186-4": 12,
          "FIPS 197": 3,
          "FIPS 198-1": 2
        },
        "NIST": {
          "SP 800-131A": 2,
          "SP 800-133": 1,
          "SP 800-135": 3,
          "SP 800-38A": 4,
          "SP 800-38B": 3,
          "SP 800-38C": 2,
          "SP 800-38D": 2,
          "SP 800-38E": 2,
          "SP 800-52": 1,
          "SP 800-56B": 1,
          "SP 800-67": 2,
          "SP 800-90A": 5
        },
        "PKCS": {
          "PKCS 1": 3,
          "PKCS#1": 1
        },
        "RFC": {
          "RFC 2313": 1,
          "RFC 5246": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 25,
            "AES-128": 1,
            "AES-192": 1,
            "AES-256": 2
          },
          "CAST": {
            "CAST5": 1
          },
          "RC": {
            "RC2": 1,
            "RC4": 1,
            "RC5": 1
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 1,
            "TDES": 4,
            "Triple-DES": 4,
            "TripleDES": 2
          },
          "DES": {
            "DES": 3
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 14,
            "HMAC": 7
          }
        },
        "miscellaneous": {
          "Blowfish": {
            "Blowfish": 1
          },
          "Camellia": {
            "Camellia": 1
          },
          "IDEA": {
            "IDEA": 1
          },
          "SEED": {
            "SEED": 1
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC#C1859",
        "AES#C1859",
        "Triple-DES#C1859",
        "DRBG#C1859",
        "RSA#C1859",
        "DSA#C1859",
        "SHS#C1859",
        "ECDSA#C1859",
        "CVL#C1859"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#C1859"
      ]
    },
    "policy_metadata": {
      "/Author": "Kwok Wong",
      "/CreationDate": "D:20221219211118-05\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20221219211118-05\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 644215,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 27
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "5f313813818026456bda49236df3b2f4a228dcab9834a6e25c7f0bdf66544e9a",
      "source_hash": "dc5915f0e3aad5df96fbfff417b95e10fb9d1f2af1a4e73fd32f34a367b346f7",
      "txt_hash": "301644059d5f452ad049907a9b4522878a42a4a1ae6dc16a6810cd27e257b484"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/August 2021_010921_0733.pdf",
    "date_sunset": null,
    "description": "Arista\u2019s crypto library is a comprehensive suite of FIPS Approved algorithms. Many key sizes and modes have been implemented to allow flexibility and efficiency.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical Security: N/A",
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Arista EOS Crypto Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "v2.0",
    "tested_conf": [
      "EOSv4 on Arista CCS-720XP-24Y6 with AMD G-Series GX-224 (Crowned Eagle)",
      "EOSv4 on Arista CCS-720XP-24ZY4 with AMD G-Series GX-224 (Crowned Eagle)",
      "EOSv4 on Arista CCS-720XP-48Y6 with AMD G-Series GX-224 (Crowned Eagle)",
      "EOSv4 on Arista CCS-720XP-48ZC2 with AMD G-Series GX-224 (Crowned Eagle)",
      "EOSv4 on Arista CCS-720XP-96ZC2 with AMD R-Series RX-216 (Merlin Falcon)",
      "EOSv4 on Arista CCS-750-Sup25 with Intel Xeon D-1527 (Broadwell) (single-user mode)"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2021-08-30",
        "lab": "CYGNACOM SOLUTIONS INC",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2021-11-01",
        "lab": "CYGNACOM SOLUTIONS INC",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2023-01-17",
        "lab": "DEKRA Cybersecurity Certification Laboratory",
        "validation_type": "Update"
      }
    ],
    "vendor": "Arista Networks, Inc.",
    "vendor_url": "http://www.arista.com"
  }
}