Junos® OS Evolved Kernel Cryptographic Module

Certificate details

Certificate ID #5399
Status active
Validation dates 14.08.2026
Sunset date 02-09-2029
Standard FIPS 140-3
Security level 1
Type Software
Embodiment MultiChipStand
Caveat When operated in approved mode with module Junos® OS Evolved OpenSSL Cryptographic Module version 3.0.8 validated to FIPS 140-3 under Cert. #5400 operating in approved mode. The module generates random strings whose strengths are modified by available entropy. No assurance of minimum security of SSPs (e.g. keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description The Juniper Kernel Cryptographic Module is a software module running as part of the operating system kernel that provides general purpose cryptographic services.
Vendor Juniper Networks, Inc. http://www.juniper.net
Lab atsec information security corporation
Algorithms
  • AES-CBCA3602
  • AES-CMACA3602
  • AES-CTRA3602
  • AES-ECBA3602
  • AES-XTS Testing Revision 2.0A3602
  • Counter DRBGA3602
  • Hash DRBGA3605
  • HMAC DRBGA3605
  • HMAC-SHA-1A3605
  • HMAC-SHA2-224A3605
  • HMAC-SHA2-256A4246
  • HMAC-SHA2-384A3605
  • HMAC-SHA2-512A3605
  • SHA-1A3605
  • SHA2-224A3605
  • SHA2-256A3605
  • SHA2-384A3605
  • SHA2-512A3605
References

This certificate's webpage directly references 1 certificates, transitively this expands into 2 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-128, AES-192, AES-256, AES-, CAST, HMAC, CMAC
Hash functions
SHA-1
Schemes
MAC
Randomness
DRBG, RNG, RBG
Libraries
OpenSSL
Block cipher modes
ECB, CBC, CTR, GCM, XTS

Security level
Level 1, level 1

Cross-references

Outgoing
  • 5400 - active - Junos® OS Evolved OpenSSL Cryptographic Module
Incoming
  • 5400 - active - Junos® OS Evolved OpenSSL Cryptographic Module
  • 5490 - active - Junos® OS Evolved MACsec Cryptographic Library
  • 5489 - active - Juniper Express 4 MACsec Cryptographic Module
Creation date D:20260814102525-04'00'
Modification date D:20260814102525-04'00'
Pages 46
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5399,
  "dgst": "5b7fb45e8435b428",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "SHA-1A3605",
        "Hash DRBGA3605",
        "#A3601",
        "HMAC-SHA2-384A3605",
        "AES-CTRA3602",
        "SHA2-256A3605",
        "#A4246",
        "#A3602",
        "Counter DRBGA3602",
        "HMAC-SHA2-256A4246",
        "#A3605",
        "#A3599",
        "SHA2-224A3605",
        "HMAC-SHA2-224A3605",
        "HMAC-SHA-1A3605",
        "SHA2-384A3605",
        "#A3604",
        "HMAC-SHA2-512A3605",
        "AES-ECBA3602",
        "#A3603",
        "HMAC DRBGA3605",
        "AES-CMACA3602",
        "SHA2-512A3605",
        "AES-CBCA3602",
        "#A3600",
        "AES-XTS Testing Revision 2.0A3602"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": {
        "_type": "Set",
        "elements": [
          "5490",
          "5400",
          "5489"
        ]
      },
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "5400"
        ]
      },
      "indirectly_referenced_by": {
        "_type": "Set",
        "elements": [
          "5399",
          "5490",
          "5400",
          "5489"
        ]
      },
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "5399",
          "5400"
        ]
      }
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": [
        "5400"
      ]
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": {
        "_type": "Set",
        "elements": [
          "5490",
          "5400",
          "5489"
        ]
      },
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "5400"
        ]
      },
      "indirectly_referenced_by": {
        "_type": "Set",
        "elements": [
          "5399",
          "5490",
          "5400",
          "5489"
        ]
      },
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "5399",
          "5400"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "5400"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 1,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A3599, A3600, A3601, A3602",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CMAC",
            "cavpCertName": "A3599, A3601, A3602",
            "properties": "Direction - Generation, Verification Key Length - 128, 192, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8-524288 Increment 8",
            "reference": "SP 800-38B"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A3599, A3600, A3601, A3602",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8-128 Increment 8 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A3599, A3600, A3601, A3602",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-XTS Testing Revision 2.0",
            "cavpCertName": "A3599, A3600, A3601, A3602",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128-65536 Increment 128 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "Counter DRBG",
            "cavpCertName": "A3599, A3600, A3601, A3602",
            "properties": "Prediction Resistance - No, Yes Supports Reseed - Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 0 Entropy Input - Entropy Input: 128, Entropy Input: 192, Entropy Input: 256 Nonce - Nonce: 128, Nonce: 64 Personalization String Length - Personalization String Length: 0 Returned Bits - 1024, 4096, 512",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "Hash DRBG",
            "cavpCertName": "A3599, A3600, A3601, A3603, A3604, A3605",
            "properties": "Prediction Resistance - No, Yes Supports Reseed - Yes Mode - SHA-1, SHA2-256, SHA2-512 Entropy Input - Entropy Input: 160, Entropy Input: 256 Nonce - Nonce: 160, Nonce: 256 Personalization String Length - Personalization String Length: 0, 160, Personalization String Length: 0, 256 Additional Input - Additional Input: 0, 160, Additional Input: 0, 256 Returned Bits - 1024, 2048, 320",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC DRBG",
            "cavpCertName": "A3599, A3600, A3601, A3603, A3604, A3605",
            "properties": "Prediction Resistance - No, Yes Supports Reseed - Yes Mode - SHA-1, SHA2-256, SHA2-512 Entropy Input - Entropy Input: 160, Entropy Input: 256 Nonce - Nonce: 160, Nonce: 256 Personalization String Length - Personalization String Length: 0, 160, Personalization String Length: 0, 256 Additional Input - Additional Input: 0, 160, Additional Input: 0, 256",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC-SHA-1",
            "cavpCertName": "A3599, A3603, A3604, A3605",
            "properties": "MAC - MAC: 160 Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 224",
            "cavpCertName": "A3599, A3603, A3604, A3605",
            "properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 256",
            "cavpCertName": "A3599, A3603, A3604, A3605",
            "properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 384",
            "cavpCertName": "A3599, A3603, A3604, A3605",
            "properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 512",
            "cavpCertName": "A3599, A3603, A3604, A3605",
            "properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "SHA-1",
            "cavpCertName": "A3599, A3603, A3604, A3605",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-224",
            "cavpCertName": "A3599, A3603, A3604, A3605",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A3599, A3603, A3604, A3605",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A3599, A3603, A3604, A3605",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512",
            "cavpCertName": "A3599, A3603, A3604, A3605",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A4246",
            "properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Perform AES Encryption",
            "indicator": "crypto_skcipher_set key returns 0",
            "inputs": "Plaintext, AES key, IV",
            "name": "Symmetric Encryption",
            "outputs": "Ciphertex t",
            "rolesSspAccess": "Crypto Officer - AES key: W,E",
            "secFunImpl": "Symmetric encryption"
          },
          {
            "description": "Perform AES Decryption",
            "indicator": "crypto_skcipher_set key returns 0",
            "inputs": "Ciphertex t, AES key, IV",
            "name": "Symmetric Decryption",
            "outputs": "Plaintext",
            "rolesSspAccess": "Crypto Officer - AES key: W,E",
            "secFunImpl": "Symmetric decryption"
          },
          {
            "description": "Generate random numbers",
            "indicator": "crypto_rng_get_byte s returns 0",
            "inputs": "Output length",
            "name": "Random Number Generation",
            "outputs": "Random bytes",
            "rolesSspAccess": "Crypto Officer - DRBG entropy input string: G,W,E - Hash_DRBG seed: G,E - HMAC_DRB G seed: G,E - CTR_DRBG seed: G,E - HMAC_DRB",
            "secFunImpl": "Random number generation"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "G internal state (V, Key): G,W,E - CTR_DRBG internal state (V, Key): G,W,E - Hash_DRBG internal state (V, C): G,W,E",
            "secFunImpl": ""
          },
          {
            "description": "Compute SHA hashes",
            "indicator": "crypto_shash_init returns 0",
            "inputs": "Message",
            "name": "Message Digest",
            "outputs": "Digest",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "Message digest"
          },
          {
            "description": "Compute HMAC or CMAC",
            "indicator": "crypto_shash_init returns 0",
            "inputs": "Message, HMAC or AES key",
            "name": "Message Authenticati on",
            "outputs": "MAC tag",
            "rolesSspAccess": "Crypto Officer - AES key: W,E - HMAC key: W,E",
            "secFunImpl": "Message authenticati on"
          },
          {
            "description": "Encrypt plaintext with AES (CBC or CTR) and use HMAC to create tag",
            "indicator": "crypto_shash_init returns 0",
            "inputs": "Plaintext, AES key, HMAC key, IV",
            "name": "Encrypt then MAC",
            "outputs": "Ciphertex t, MAC tag",
            "rolesSspAccess": "Crypto Officer - AES key: W,E - HMAC key: W,E",
            "secFunImpl": "Symmetric encryption Message authenticati on"
          },
          {
            "description": "Decrypt a ciphertext using AES (CBC or CTR) and use HMAC to verify tag",
            "indicator": "crypto_shash_init returns 0",
            "inputs": "Ciphertex t, AES key, HMAC key, IV, MAC tag",
            "name": "Decrypt then Verify",
            "outputs": "Plaintext or failure",
            "rolesSspAccess": "Crypto Officer - AES key: W,E - HMAC key: W,E",
            "secFunImpl": "Symmetric decryption Message authenticati on"
          },
          {
            "description": "Compute an EDC (crc32c, crct10dif)",
            "indicator": "None",
            "inputs": "Data",
            "name": "Error Detection Code",
            "outputs": "EDC",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "None"
          },
          {
            "description": "Copy memory",
            "indicator": "None",
            "inputs": "Source location, destinatio n location",
            "name": "Memory Copy Operation",
            "outputs": "N/A",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "None"
          },
          {
            "description": "Use the kernel to",
            "indicator": "None",
            "inputs": "[various]",
            "name": "Generic System Call",
            "outputs": "[various]",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "None"
          },
          {
            "description": "perform various non- cryptograph ic operations",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "",
            "secFunImpl": ""
          },
          {
            "description": "Return the module status",
            "indicator": "None",
            "inputs": "N/A",
            "name": "Show Status",
            "outputs": "Module status",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "None"
          },
          {
            "description": "Perform the CASTs and the integrity test",
            "indicator": "None",
            "inputs": "None",
            "name": "Self-Test",
            "outputs": "Pass/fail results of tests",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "Symmetric encryption Symmetric decryption Message authenticati on Random number generation Message digest Message authenticati on for module integrity"
          },
          {
            "description": "Zeroize all SSPs",
            "indicator": "None",
            "inputs": "SSPs to be zeroized",
            "name": "Zeroization",
            "outputs": "None",
            "rolesSspAccess": "Crypto Officer - AES key: Z - HMAC key: Z - DRBG entropy input string: Z - Hash_DRBG internal state (V, C): Z - HMAC_DRB G internal state (V, Key): Z",
            "secFunImpl": "None"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "AES-ECB (A3599) - Encryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A3600) - Encryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A3601) - Encryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A3602) - Encryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC (A3599) - Encryption",
            "condition": "Test runs at power-on",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "",
            "condition": "before the integrity test",
            "details": "",
            "indicator": "",
            "testMethod": "",
            "testProps": "",
            "type": ""
          },
          {
            "algorithmOrTest": "AES-CBC (A3600) - Encryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC (A3601) - Encryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC (A3602) - Encryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CTR (A3599) - Encryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CTR (A3600) - Encryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CTR (A3601) - Encryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CTR (A3602) - Encryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A3599) - Decryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A3600) - Decryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A3601) - Decryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A3602) - Decryption",
            "condition": "Test runs at power-on",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "",
            "condition": "before the integrity test",
            "details": "",
            "indicator": "",
            "testMethod": "",
            "testProps": "",
            "type": ""
          },
          {
            "algorithmOrTest": "AES-CBC (A3599) - Decryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC (A3600) - Decryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC (A3601) - Decryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC (A3602) - Decryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CTR (A3599) - Decryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CTR (A3600) - Decryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CTR (A3601) - Decryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CTR (A3602) - Decryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CMAC (A3599) - Encryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 256-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CMAC (A3601) - Encryption",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 256-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CMAC (A3602) - Encryption",
            "condition": "Test runs at power-on",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 256-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "",
            "condition": "before the integrity test",
            "details": "",
            "indicator": "",
            "testMethod": "",
            "testProps": "",
            "type": ""
          },
          {
            "algorithmOrTest": "SHA-1 (A3599)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA-1 (A3603)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA-1 (A3604)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA-1 (A3605)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-224 (A3599)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-224 (A3603)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-224 (A3604)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-224 (A3605)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-256 (A3599)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-256 (A3603)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-256 (A3604)",
            "condition": "Test runs at power-on",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "",
            "condition": "before the integrity test",
            "details": "",
            "indicator": "",
            "testMethod": "",
            "testProps": "",
            "type": ""
          },
          {
            "algorithmOrTest": "SHA2-256 (A3605)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-384 (A3599)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-384 (A3603)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-384 (A3604)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-384 (A3605)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A3599)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A3603)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A3604)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A3605)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA-1 (A3599)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA-1 (A3603)",
            "condition": "Test runs at power-on",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "",
            "condition": "before the integrity test",
            "details": "",
            "indicator": "",
            "testMethod": "",
            "testProps": "",
            "type": ""
          },
          {
            "algorithmOrTest": "HMAC-SHA-1 (A3604)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA-1 (A3605)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 224 (A3599)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-224",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 224 (A3603)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-224",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 224 (A3604)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-224",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 224 (A3605)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-224",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A3599)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A3603)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A3604)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A3605)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 384 (A3599)",
            "condition": "Test runs at power-on",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-384",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "",
            "condition": "before the integrity test",
            "details": "",
            "indicator": "",
            "testMethod": "",
            "testProps": "",
            "type": ""
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 384 (A3603)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-384",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 384 (A3604)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-384",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 384 (A3605)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-384",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 512 (A3599)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 512 (A3603)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 512 (A3604)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 512 (A3605)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Counter DRBG (A3599)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90A Rev. 1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "AES-128, AES- 192, AES-256, with and without PR",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Counter DRBG (A3600)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90A Rev. 1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "AES-128, AES- 192, AES-256, with and without PR",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Counter DRBG (A3601)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90A Rev. 1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "AES-128, AES- 192, AES-256, with and without PR",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Counter DRBG (A3602)",
            "condition": "Test runs at power-on",
            "details": "Compliant with SP 800-90A Rev. 1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "AES-128, AES- 192, AES-256,",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "",
            "condition": "before the integrity test",
            "details": "",
            "indicator": "",
            "testMethod": "",
            "testProps": "with and without PR",
            "type": ""
          },
          {
            "algorithmOrTest": "HMAC DRBG (A3599)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90A Rev. 1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "HMAC-SHA-1, HMAC-SHA2- 256, HMAC- SHA2-512, with and without PR",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC DRBG (A3600)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90A Rev. 1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "HMAC-SHA-1, HMAC-SHA2- 256, HMAC- SHA2-512, with and without PR",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC DRBG (A3601)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90A Rev. 1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "HMAC-SHA-1, HMAC-SHA2- 256, HMAC- SHA2-512, with and without PR",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC DRBG (A3603)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90A Rev. 1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "HMAC-SHA-1, HMAC-SHA2- 256, HMAC- SHA2-512, with and without PR",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC DRBG (A3604)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90A Rev. 1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "HMAC-SHA-1, HMAC-SHA2- 256, HMAC- SHA2-512, with and without PR",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC DRBG (A3605)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90A Rev. 1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "HMAC-SHA-1, HMAC-SHA2- 256, HMAC- SHA2-512, with and without PR",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash DRBG (A3599)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90A Rev. 1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1, SHA2- 256, SHA2-512, with and without PR",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash DRBG (A3600)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90A Rev. 1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1, SHA2- 256, SHA2-512, with and without PR",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash DRBG (A3601)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90A Rev. 1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1, SHA2- 256, SHA2-512, with and without PR",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash DRBG (A3603)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90A Rev. 1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1, SHA2- 256, SHA2-512, with and without PR",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash DRBG (A3604)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90A Rev. 1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1, SHA2- 256, SHA2-512, with and without PR",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash DRBG (A3605)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90A Rev. 1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1, SHA2- 256, SHA2-512, with and without PR",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Entropy Source Health Tests - Startup RCT",
            "condition": "Test runs at startup as defined in SP 800-90B",
            "details": "RCT performed on 1024 noise source samples",
            "indicator": "Module becomes operational",
            "testMethod": "RCT",
            "testProps": "Cutoff value = 31",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Entropy Source Health Tests - Startup APT",
            "condition": "Test runs at startup as defined in SP 800-90B",
            "details": "APT performed on 1024 noise source samples",
            "indicator": "Module becomes operational",
            "testMethod": "APT",
            "testProps": "Cutoff value = 325, window size = 512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Entropy Source Health Tests - Continuous RCT",
            "condition": "Test runs continuously as defined in SP 800-90B",
            "details": "RCT performed continuously",
            "indicator": "Module remains operational",
            "testMethod": "RCT",
            "testProps": "Cutoff value = 31",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Entropy Source Health Tests - Continuous APT",
            "condition": "Test runs continuously as defined in SP 800-90B",
            "details": "APT performed continuously",
            "indicator": "Module remains operational",
            "testMethod": "APT",
            "testProps": "Cutoff value = 325, window size = 512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A4246)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "[EVM]",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-256",
            "type": "CAST"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [],
        "found": false,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [],
        "found": false,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [
          {
            "description": "Automatically entered whenever an approved service is requested",
            "name": "Approved mode",
            "statusIndicator": "Mapped to approved service indicator in Section 4.3: respective approved service function returns indicator 0.",
            "type": "Approved"
          },
          {
            "description": "Automatically entered whenever a non-approved service is requested",
            "name": "Non- approved mode",
            "statusIndicator": "No service indicator required for non- approved services per IG 2.4.C",
            "type": "Non- Approved"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [
          {
            "name": "AES-GCM",
            "use": "Authenticated Encryption and Decryption (not tested by CAVP)"
          },
          {
            "name": "RSA Primitives",
            "use": "RSA Encryption and Decryption primitives (not compliant to SP 800-56Br2)"
          },
          {
            "name": "RSA SigVer",
            "use": "RSA Signature Verification (not tested by CAVP)"
          },
          {
            "name": "RSA with PKCS#1 v1.5",
            "use": "RSA Signature Generation and Signature Verification primitives with PKCS#1 v1.5 padding (not tested by CAVP)"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [
          {
            "alg_accessed": "AES-GCM",
            "description": "Authenticated Encryption and Decryption",
            "name": "AES-GCM",
            "role": "CO"
          },
          {
            "alg_accessed": "RSA Primitives",
            "description": "RSA Encryption and Decryption primitives",
            "name": "RSA Encrypt/Decrypt",
            "role": "CO"
          },
          {
            "alg_accessed": "RSA SigVer",
            "description": "RSA Signature Verification",
            "name": "RSA SigVer",
            "role": "CO"
          },
          {
            "alg_accessed": "RSA with PKCS#1 v1.5",
            "description": "Signature Generation and Signature Verification primitives with PKCS#1 v1.5 padding",
            "name": "RSA PKCS#1 v1.5",
            "role": "CO"
          },
          {
            "alg_accessed": "Indicator",
            "description": "Description",
            "name": "Name",
            "role": "Inputs"
          },
          {
            "alg_accessed": "",
            "description": "",
            "name": "",
            "role": ""
          },
          {
            "alg_accessed": "None",
            "description": "Return module name and version information",
            "name": "Show Version",
            "role": "None"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "API Input parameters from kernel system calls, AF_ALG type socket.",
            "logicalInterface": "Data Input",
            "physicalPort": "N/A"
          },
          {
            "data": "API output parameters from kernel system calls, AF_ALG type socket.",
            "logicalInterface": "Data Output",
            "physicalPort": "N/A"
          },
          {
            "data": "API function calls, API input parameters for control from kernel system calls, AF_ALG type socket, kernel command line.",
            "logicalInterface": "Control Input",
            "physicalPort": "N/A"
          },
          {
            "data": "API return codes, AF_ALG type socket, kernel logs.",
            "logicalInterface": "Status Output",
            "physicalPort": "N/A"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "None",
            "name": "Crypto Officer",
            "operatorType": "Crypto Officer",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "1",
            "section": "1",
            "title": "General"
          },
          {
            "level": "1",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "1",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "1",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "1",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "1",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "N/A",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "1",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "1",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "1",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "N/A",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "1",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [
          {
            "algorithmOrTest": "HMAC-SHA2-256 (A4246) - kernel",
            "details": "[EVM] Integrity test for static kernel binary",
            "indicator": "Module becomes operational",
            "testMethod": "MAC tag verification",
            "testProps": "SHA2- 256",
            "type": "SW/FW Integrity"
          },
          {
            "algorithmOrTest": "HMAC-SHA2-256 (A4246) - fips_chk_hmac",
            "details": "[EVM] Integrity test for fips_chk_hmac binary",
            "indicator": "Module becomes operational",
            "testMethod": "MAC tag verification",
            "testProps": "SHA2- 256",
            "type": "SW/FW Integrity"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "Cryptographic module",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "API input parameters",
            "sfiAlgo": "",
            "source": "Operator calling application (TOEPP)"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "Zeroizes the SSPs contained within the cipher handle.",
            "method": "Wipe and Free memory block allocated",
            "operatorId": "By calling the cipher related zeroization API function: crypto_free_cipher(), crypto_free_skcipher(), crypto_free_aead() for AES keys; crypto_free_shash(), crypto_free_ahash() for HMAC keys; crypto_free_rng() for DRBG SSPs",
            "rationale": "Memory occupied by SSPs is overwritten with zeroes and then it is released, which renders the SSP values irretrievable. The completion of the zeroization routine indicates that the zeroization procedure succeeded."
          },
          {
            "description": "Automatically zeroized by the module when no longer needed",
            "method": "Automatic",
            "operatorId": "N/A",
            "rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable."
          },
          {
            "description": "De-allocates the volatile memory used to store SSPs",
            "method": "Module Reset",
            "operatorId": "By unloading and reloading the module",
            "rationale": "Volatile memory used by the module is overwritten"
          },
          {
            "description": "",
            "method": "",
            "operatorId": "",
            "rationale": "within nanoseconds when power is removed."
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "Temporary storage for SSPs used by the module as part of service execution.",
            "name": "RAM",
            "persistance": "Dynamic"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "Juniper Networks\u00ae Packet Transport Router Model PTX10001-36MR",
            "hypervisorHostOs": "N/A",
            "operatingSystem": "Junos OS Evolved version 22.4",
            "paa_pai": "Yes",
            "processors": "Intel\u00ae Xeon\u00ae D-2163IT",
            "version": "2.0"
          },
          {
            "hardwarePlatform": "Juniper Networks\u00ae Packet Transport Router Model PTX10001-36MR",
            "hypervisorHostOs": "N/A",
            "operatingSystem": "Junos OS Evolved version 22.4",
            "paa_pai": "No",
            "processors": "Intel\u00ae Xeon\u00ae D-2163IT",
            "version": "2.0"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {},
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 3
        },
        "CTR": {
          "CTR": 3
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 1
        },
        "XTS": {
          "XTS": 8
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 6
        }
      },
      "crypto_protocol": {},
      "crypto_scheme": {
        "MAC": {
          "MAC": 19
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "atsec": {
          "atsec": 2
        }
      },
      "fips_cert_id": {
        "Cert": {
          "#5400": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES key 128, 196": 1,
          "AES- 192": 4,
          "AES-128": 5,
          "AES-192": 1,
          "AES-256": 5,
          "HMAC-SHA-1": 30,
          "PKCS#1": 11,
          "RSA PKCS#1": 1,
          "SHA-1": 22,
          "SHA2- 256": 8,
          "SHA2-224": 13,
          "SHA2-256": 17,
          "SHA2-384": 13,
          "SHA2-512": 27
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2,
          "level 1": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 22
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 64
        },
        "RNG": {
          "RBG": 2,
          "RNG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 52,
          "FIPS 180-4": 6,
          "FIPS 198-1": 7,
          "FIPS PUB 140-3": 2
        },
        "NIST": {
          "SP 800-131A": 2,
          "SP 800-133": 2,
          "SP 800-38A": 4,
          "SP 800-38B": 2,
          "SP 800-38E": 3,
          "SP 800-90A": 21,
          "SP 800-90B": 6
        },
        "PKCS": {
          "PKCS#1": 6
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 28,
            "AES-": 4,
            "AES-128": 5,
            "AES-192": 1,
            "AES-256": 5
          },
          "CAST": {
            "CAST": 177
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 3,
            "HMAC": 38
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC-SHA2-256A4246",
        "AES-CMACA3602",
        "SHA-1A3605",
        "SHA2-512A3605",
        "Hash DRBGA3605",
        "HMAC-SHA2-512A3605",
        "SHA2-224A3605",
        "AES-CTRA3602",
        "AES-ECBA3602",
        "HMAC-SHA2-224A3605",
        "AES-CBCA3602",
        "HMAC-SHA-1A3605",
        "HMAC-SHA2-384A3605",
        "SHA2-256A3605",
        "HMAC DRBGA3605",
        "SHA2-384A3605",
        "Counter DRBGA3602",
        "AES-XTS Testing Revision 2.0A3602"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A3605",
        "#A3599",
        "#A3600",
        "#A4246",
        "#A3602",
        "#A3604",
        "#A3603",
        "#A3601"
      ]
    },
    "policy_metadata": {
      "/CreationDate": "D:20260814102525-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20260814102525-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 786074,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://doi.org/10.6028/NIST.SP.800-38B",
          "https://doi.org/10.6028/NIST.FIPS.140-3",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
          "https://www.ietf.org/rfc/rfc3447.txt",
          "https://doi.org/10.6028/NIST.SP.800-131Ar2",
          "http://www.atsec.com/",
          "https://doi.org/10.6028/NIST.SP.800-38A",
          "https://doi.org/10.6028/NIST.FIPS.180-4",
          "https://doi.org/10.6028/NIST.FIPS.198-1",
          "https://doi.org/10.6028/NIST.SP.800-90B",
          "https://doi.org/10.6028/NIST.SP.800-38E",
          "https://doi.org/10.6028/NIST.SP.800-90Ar1",
          "http://www.juniper.net/"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 46
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "82c8a368e905b8f012f995d82bdfb7080ac3c456f1cd1004b1d545073b5ad4ca",
      "source_hash": "38c42694c32ffc3bbd4cf84c398f120d0c3ab68dbf948512c15d8ae85a4ca041",
      "txt_hash": "d58246a1dd648dcb15f36a5b0b1a42748852ce1db544a414039e7f3a70ee2d75"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode with module Junos\u00ae OS Evolved OpenSSL Cryptographic Module version 3.0.8 validated to FIPS 140-3 under Cert. #5400 operating in approved mode. The module generates random strings whose strengths are modified by available entropy. No assurance of minimum security of SSPs (e.g. keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/August 2026_020926_0917.pdf",
    "date_sunset": "2029-09-02",
    "description": "The Juniper Kernel Cryptographic Module is a software module running as part of the operating system kernel that provides general purpose cryptographic services.",
    "embodiment": "MultiChipStand",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {
      "5400": 1
    },
    "module_name": "Junos\u00ae OS Evolved Kernel Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-08-14",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Juniper Networks, Inc.",
    "vendor_url": "http://www.juniper.net"
  }
}