This page was not yet optimized for use on mobile devices.
Ruckus FastIron ICXTM 7550/7650/7850 Series Switch/Router
Certificate details
| Certificate ID | #5076 |
|---|---|
| Status | active |
| Validation dates | 03.10.2025 |
| Sunset date | 02-10-2030 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Hardware |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | When installed, initialized and configured as specified in Section Life-Cycle Assurance of the Security Policy |
| Exceptions |
|
| Description | The ICX® family of fixed form-factor switches works together to deliver a complete, scalable, and high-performance network solution that supports today's demanding video, Unified Communications (UC), VDI, and mobile applications. They leverage the innovative Campus Fabric technology, which provides simplified network deployment and management, scale-out networking, and investment protection with the industry's lowest total cost of ownership. |
| Vendor | Ruckus Wireless LLC http://www.commscope.com |
| Lab | Gossamer Security Solutions |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-, AES-128, CAST, HMAC, CMACAsymmetric Algorithms
RSA 2048, ECDH, ECDSA, ECC, Diffie-Hellman, DHHash functions
SHA-1, SHA2Schemes
MAC, Key AgreementProtocols
SSH, SSHv2, SSL, TLS v1.2, TLSv1.2, TLSRandomness
DRBG, RBGElliptic Curves
P-256, P-384Block cipher modes
CTR, GCMTrusted Execution Environments
PSPSecurity level
Level 1Standards
FIPS 140-3, FIPS186-5, FIPS 186-5, FIPS 198-1, FIPS 180-4, SP 800-38A, SP 800-38B, SP 800-38D, SP 800-38F, SP 800-90A, SP 800-56A, SP 800-135, SP 800-108, SP 800-52, RFC7627, RFC 5288Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5076,
"dgst": "71181f5d23343d7d",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"HMAC-SHA-1A5076",
"SHA-1A5076",
"HMAC-SHA2-384A5076",
"SHA2-384A5076",
"KDF SNMPA5076",
"KDF SSHA5076",
"ECDSA SigVer (FIPS186-5)A5076",
"AES-KWA5076",
"ECDSA SigGen (FIPS186-5)A5076",
"KAS-FFC-SSC Sp800-56Ar3A5076",
"AES-ECBAES 4550",
"AES-CBCA5076",
"SHA2-512A5076",
"HMAC-SHA2-256A5076",
"RSA SigGen (FIPS186-5)A5076",
"Safe Primes Key GenerationA5076",
"AES-CTRA5076",
"AES-CFB128A5076",
"ECDSA KeyGen (FIPS186-5)A5076",
"KDF SP800-108A5076",
"HMAC-SHA2-512A5076",
"RSA KeyGen (FIPS186-5)A5076",
"AES-KWPA5076",
"TLS v1.2 KDF RFC7627A5076",
"AES-CMACA5076",
"KAS-ECC-SSC Sp800-56Ar3A5076",
"SHA2-256A5076",
"Counter DRBGA5076",
"RSA SigVer (FIPS186-5)A5076",
"AES-GCMAES 4550",
"#A5076"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"7650",
"7850",
"7550"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A5076",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A5076",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A5076",
"properties": "-",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A5076",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A5076",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A5076",
"properties": "-",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A5076",
"properties": "-",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A5076",
"properties": "-",
"reference": "SP 800-38F"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A5076",
"properties": "-",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-5)",
"cavpCertName": "A5076",
"properties": "-",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A5076",
"properties": "-",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A5076",
"properties": "-",
"reference": "FIPS 186-5"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A5076",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A5076",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A5076",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A5076",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A5076",
"properties": "-",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-FFC-SSC Sp800-56Ar3",
"cavpCertName": "A5076",
"properties": "-",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDF SNMP (CVL)",
"cavpCertName": "A5076",
"properties": "-",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF SP800-108",
"cavpCertName": "A5076",
"properties": "-",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A5076",
"properties": "-",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "RSA KeyGen (FIPS186-5)",
"cavpCertName": "A5076",
"properties": "-",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigGen (FIPS186-5)",
"cavpCertName": "A5076",
"properties": "-",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186-5)",
"cavpCertName": "A5076",
"properties": "-",
"reference": "FIPS 186-5"
},
{
"algorithm": "Safe Primes Key Generation",
"cavpCertName": "A5076",
"properties": "-",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A5076",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A5076",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A5076",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A5076",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A5076",
"properties": "-",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "AES 4550",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "AES 4550",
"properties": "-",
"reference": "SP 800-38D"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Provide Module\u0027s current status (return codes and/or syslog",
"indicator": "Global Indicator or syslog message",
"inputs": "Command used to show Module\u0027s Status",
"name": "Show Status",
"outputs": "Module\u0027s Operationa l Status",
"rolesSspAccess": "Crypto Officer Port Config Admin User",
"secFunImpl": "None"
},
{
"description": "Provide Module\u0027s name and version information",
"indicator": "Console message",
"inputs": "Command to show version",
"name": "Show Version",
"outputs": "Module\u0027s ID and versioning information",
"rolesSspAccess": "Crypto Officer Port Config Admin User",
"secFunImpl": "None"
},
{
"description": "Perform Self-Tests (Pre- operational self-test and Conditional Self-Tests)",
"indicator": "Perform self-test completio n message",
"inputs": "Command to trigger Self-Test",
"name": "Perform Self-Tests",
"outputs": "Status of the self- tests results",
"rolesSspAccess": "Crypto Officer User Port Config Admin Unauthentic ated",
"secFunImpl": "None"
},
{
"description": "Perform Zeroization",
"indicator": "Syslog message",
"inputs": "Command to zeroize the module",
"name": "Perform Zeroization",
"outputs": "Status of the SSPs zeroization",
"rolesSspAccess": "Crypto Officer - DRBG Entropy Input: Z - DRBG Seed: Z - DRBG Internal State V value: Z - DRBG Key: Z - User Password: Z - Crypto Officer Password: Z - Port Config Admin Password: Z - Firmware Load Test Key: Z - SSH DH",
"secFunImpl": "None"
},
{
"description": "Descriptio n",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Outputs",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Function"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Private Key: Z - SSH DH Public Key: Z - SSH Peer DH Public Key: Z - SSH DH Shared Secret: Z - SSH ECDH Private Key: Z - SSH ECDH Public Key: Z - SSH Peer ECDH Public Key: Z - SSH ECDH Shared Secret: Z - SSH ECDSA Private Key: Z - SSH ECDSA Public Key: Z - SSH RSA Private Key: Z - SSH RSA Public Key: Z - SSH Session Encryption Key: Z - SSH Session Authenticatio n Key: Z - TLS DH Private Key: Z",
"secFunImpl": "s"
},
{
"description": "Descriptio n",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Outputs",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Function"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- TLS DH Public Key: Z - TLS Peer DH Public Key: Z - TLS DH Shared Secret: Z - TLS ECDH Private Key: Z - TLS ECDH Public Key: Z - TLS Peer ECDH Public Key: Z - TLS ECDH Shared Secret: Z - TLS ECDSA Private Key: Z - TLS ECDSA Public Key: Z - TLS RSA Private Key: Z - TLS RSA Public Key: Z - TLS Master Secret: Z - TLS Session Encryption Key: Z - SNMPv3 Authenticatio n Secret: Z - SNMPv3 Encryption Key: Z - SNMPv3",
"secFunImpl": "s"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Integrity Key: Z - MACSec CAK: Z - MACSec ICK: Z - MACSec SAK: Z - MACSec KEK: Z",
"secFunImpl": ""
},
{
"description": "CO Role Authenticat ion",
"indicator": "N/A",
"inputs": "CO Authenticat ion Request",
"name": "Crypto Officer Authenticat ion",
"outputs": "Status of the CO authenticat ion",
"rolesSspAccess": "Crypto Officer - Crypto Officer Password: W,Z",
"secFunImpl": "None"
},
{
"description": "User Role Authenticat ion",
"indicator": "N/A",
"inputs": "User role authenticat ion request",
"name": "User Authenticat ion",
"outputs": "Status of the User role authenticat ion",
"rolesSspAccess": "User - User Password: W,Z",
"secFunImpl": "None"
},
{
"description": "Port Config Admin Role Authenticat ion",
"indicator": "N/A",
"inputs": "Port Config Admin role authenticat ion request",
"name": "Port Config Admin Authenticat ion",
"outputs": "Status of the Port Config Admin role authenticat ion",
"rolesSspAccess": "Port Config Admin - Port Config Admin Password: W,Z",
"secFunImpl": "None"
},
{
"description": "Perform Port Configurati on",
"indicator": "N/A",
"inputs": "Commands to configure the port parameters of switch/rout er",
"name": "Port Configurati on Mangemen t",
"outputs": "Port configurati on completion status information",
"rolesSspAccess": "Crypto Officer Port Config Admin",
"secFunImpl": "None"
},
{
"description": "Account Creation",
"indicator": "N/A",
"inputs": "Commands to create a new user account",
"name": "Account Mangemen t",
"outputs": "Status of the new user accounts",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Configure SSHv2 Function",
"indicator": "Global Indicator and SSHv2 configurati on success",
"inputs": "Commands to configure SSHv2",
"name": "Configure SSHv2 Function",
"outputs": "Status of the completion of the SSHv2 configurati on",
"rolesSspAccess": "Crypto Officer - SSH RSA Private Key: G,W - SSH RSA Public Key: G,W",
"secFunImpl": "SSH RSA KeyGen SSH ECDSA KeyGen DRBG Function"
},
{
"description": "",
"indicator": "status message",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- SSH ECDSA Private Key: G,W - SSH ECDSA Public Key: G,W - DRBG Entropy Input: G,W,E - DRBG Seed: G,W,E - DRBG Internal State V value: G,W,E - DRBG Key: G,W,E",
"secFunImpl": ""
},
{
"description": "Execute SSHv2 Function",
"indicator": "Global Indicator and successfu l SSHv2 log message",
"inputs": "Initiate SSHv2 tunnel establishm ent",
"name": "Run SSHv2 Function",
"outputs": "Status of SSHv2 tunnel establishm ent",
"rolesSspAccess": "Crypto Officer - SSH DH Private Key: G,W,E,Z - SSH DH Public Key: G,R,W,E,Z - SSH Peer DH Public Key: W,E,Z - SSH DH Shared Secret: G,W,E,Z - SSH ECDH Private Key: G,W,E,Z - SSH ECDH Public Key: G,R,W,E,Z - SSH Peer ECDH Public Key: W,E,Z - SSH ECDH Shared Secret: G,W,E,Z",
"secFunImpl": "KAS-ECC (SSHv2) KAS-FFC (SSHv2) SSH-KTS (AES and HMAC) SSH RSA SigGen SSH RSA SigVer SSH ECDSA SigGen SSH ECDSA SigVer Block ciphers (SSHv2) MAC (SSHv2) DRBG Function"
},
{
"description": "Descriptio n",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Outputs",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Function"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- SSH RSA Private Key: E - SSH RSA Public Key: R,E - SSH ECDSA Private Key: E - SSH ECDSA Public Key: R,E - SSH Session Encryption Key: G,W,E,Z - SSH Session Authenticatio n Key: G,W,E,Z - DRBG Entropy Input: G,W,E - DRBG Seed: G,W,E - DRBG Internal State V value: G,W,E - DRBG Key: G,W,E - RADIUS Secret: W,E Port Config Admin - SSH DH Private Key: R,E - SSH DH Public Key: R,E - SSH Peer DH Public",
"secFunImpl": "s"
},
{
"description": "Descriptio n",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Outputs",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Function"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Key: R,E - SSH DH Shared Secret: R,E - SSH ECDH Private Key: R,E - SSH ECDH Public Key: R,E - SSH Peer ECDH Public Key: R,E - SSH ECDH Shared Secret: R,E - SSH RSA Private Key: R,E - SSH RSA Public Key: R,E - SSH ECDSA Private Key: R,E - SSH ECDSA Public Key: R,E - SSH Session Encryption Key: R,E - SSH Session Authenticatio n Key: R,E - DRBG Entropy Input: R,E - DRBG Seed: R,E - DRBG Internal State V value: R,E - DRBG Key:",
"secFunImpl": "s"
},
{
"description": "Descriptio n",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Outputs",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Function"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "R,E - RADIUS Secret: W,E User - SSH DH Private Key: R,E - SSH DH Public Key: R,E - SSH Peer DH Public Key: R,E - SSH DH Shared Secret: R,E - SSH ECDH Private Key: R,E - SSH ECDH Public Key: R,E - SSH Peer ECDH Public Key: R,E - SSH ECDH Shared Secret: R,E - SSH RSA Private Key: R,E - SSH RSA Public Key: R,E - SSH ECDSA Private Key: R,E - SSH ECDSA Public Key: R,E - SSH Session Encryption Key: R,E - SSH Session",
"secFunImpl": "s"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Authenticatio n Key: R,E - DRBG Entropy Input: R,E - DRBG Seed: R,E - DRBG Internal State V value: R,E - DRBG Key: R,E - RADIUS Secret: W,E",
"secFunImpl": ""
},
{
"description": "Configure SSL over TLSv1.2 Function",
"indicator": "Global Indicator and TLS v1.2 configurati on success status message",
"inputs": "Commands to configure TLSv1.2",
"name": "Configure SSL over TLSv1.2 Function",
"outputs": "Status of the completion of TLSv1.2 configurati on",
"rolesSspAccess": "Crypto Officer - TLS RSA Private Key: G,W - TLS RSA Public Key: G,W - TLS ECDSA Private Key: G,W - TLS ECDSA Public Key: G,W - DRBG Entropy Input: G,W,E - DRBG Seed: G,W,E - DRBG Internal State V value: G,W,E - DRBG Key: G,W,E",
"secFunImpl": "TLS RSA KeyGen TLS ECDSA KeyGen DRBG Function"
},
{
"description": "Execute SSL over TLSv1.2 Function",
"indicator": "Global Indicator and successfu l TLS v1.2",
"inputs": "Commands to initiate TLSv1.2",
"name": "Run SSL over TLSv1.2 Function",
"outputs": "Status of the completion of TLSv1.2",
"rolesSspAccess": "Crypto Officer - TLS DH Private Key: G,W,E,Z",
"secFunImpl": "KAS-ECC (TLSv1.2) KAS-FFC (TLSv1.2) TLS-KTS"
},
{
"description": "",
"indicator": "log message",
"inputs": "",
"name": "",
"outputs": "establishm ent",
"rolesSspAccess": "- TLS DH Public Key: G,R,W,E,Z - TLS Peer DH Public Key: W,E,Z - TLS DH Shared Secret: G,W,E,Z - TLS ECDH Private Key: G,W,E,Z - TLS ECDH Public Key: G,R,W,E,Z - TLS Peer ECDH Public Key: W,E,Z - TLS ECDH Shared Secret: G,W,E,Z - TLS RSA Private Key: E - TLS RSA Public Key: R,E - TLS Master Secret: G,W,E,Z - TLS Session Encryption Key: G,W,E,Z - TLS Session Authenticatio n Key: G,W,E,Z - DRBG Entropy Input: G,W,E - DRBG Seed: G,W,E - DRBG",
"secFunImpl": "(AES and HMAC) TLS-KTS (AES- GCM) TLS RSA KeyGen TLS RSA SigGen TLS RSA SigVer TLS ECDSA KeyGen TLS ECDSA SigGen TLS ECDSA SigVer Block ciphers (TLSv1.2) MAC (TLSv1.2) DRBG Function TLS Keying Materials Developm ent"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Internal State V value: G,W,E - DRBG Key: G,W,E - TLS ECDSA Private Key: E - TLS ECDSA Public Key: R,E",
"secFunImpl": ""
},
{
"description": "Configure MACSec Function",
"indicator": "Global Indicator and MACSec configurati on on success status message",
"inputs": "Commands to configure MACSec service",
"name": "Configure MACSec Function",
"outputs": "Status of the completion of MACSec configurati on",
"rolesSspAccess": "Crypto Officer - MACSec CAK: W,E - MACSec ICK: G,W,E,Z - MACSec SAK: G,W,E,Z - MACSec KEK: G,W,E,Z",
"secFunImpl": "MACSec- KTS (AES-KW) MACSec- KTS (AES- KWP) Block ciphers (MACSec) MACSec- SAK- Integrity"
},
{
"description": "Execute MACSec Function",
"indicator": "Global Indicator and successfu l MACSec log message",
"inputs": "Commands to initiate MACSec service",
"name": "Run MACSec Function",
"outputs": "Status of the completion of MACSec establishm ent",
"rolesSspAccess": "Crypto Officer - MACSec CAK: W,E - MACSec ICK: G,W,E,Z - MACSec SAK: G,W,E,Z - MACSec KEK: G,W,E,Z",
"secFunImpl": "MACSec- KTS (AES-KW) MACSec- KTS (AES- KWP) Block ciphers (MACSec) MACSec- SAK- Integrity MACsec Keying Materials Developm ent"
},
{
"description": "Configure SNMPv3 Function",
"indicator": "Global Indicator and SNMPv3 configurati on success status message",
"inputs": "Commands to configure SNMPv3 service",
"name": "Configure SNMPv3 Function",
"outputs": "Status of the completion of SNMPv3 configurati on",
"rolesSspAccess": "Crypto Officer - SNMPv3 Authenticatio n Secret: W,E - SNMPv3 Encryption Key: G,W,E,Z - SNMPv3 Integrity Key: G,W,E,Z",
"secFunImpl": "Block ciphers (SNMPv3) MAC (SNMPv3)"
},
{
"description": "Execute SNMPv3 Function",
"indicator": "Global Indicator and successfu l SNMPv3 log message",
"inputs": "Commands to initiate SNMPv3 service",
"name": "Run SNMPv3 Function",
"outputs": "Status of the completion of SNMPv3 establishm ent",
"rolesSspAccess": "Crypto Officer - SNMPv3 Authenticatio n Secret: W,E - SNMPv3 Encryption Key: G,W,E,Z - SNMPv3 Integrity Key: G,W,E,Z",
"secFunImpl": "Block ciphers (SNMPv3) MAC (SNMPv3) SNMPv3 Keying Materials Developm ent"
},
{
"description": "Execute the Firmware Load Test",
"indicator": "Global indicator and successfu l Firmware Loading status message",
"inputs": "Commands to load new firmware image",
"name": "Firmware Load Test",
"outputs": "Outcome of the Firmware Load Test",
"rolesSspAccess": "Crypto Officer - Firmware Load Test Key: E",
"secFunImpl": "Firmware Load Test"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [
{
"description": "The minimum length is eight (8) characters (94 possible characters). The probability that a random attempt will succeed or a false acceptance will occur is 1/(94^8) which is less than 1/1,000,000. As the module supports at most ten failed attempts to authenticate in a one- minute period, the probability of successfully",
"mechanism": "Password Based",
"name": "Password- Based",
"perMinute": "The probability of successfully authenticating to the module within one minute is 10/(94^8), which is less than 1/100,000. Please refer to Description section in this table for more details.",
"strength": "The probability that a random attempt will succeed or a false acceptance will occur is 1/(94^8) which is less than 1/1,000,000. Please refer to Description section in this table for more details."
},
{
"description": "authenticating to the module within one minute is 10/(94^8), which is less than 1/100,000. This calculation is based on the assumption that the typical standard American QWERTY computer keyboard has 10 Integer digits, 52 alphabetic characters, and 32 special characters providing 94 characters to choose",
"mechanism": "",
"name": "",
"perMinute": "",
"strength": ""
},
{
"description": "from in total. The modules supports RSA public-key based authentication mechanism using a minimum of RSA 2048 bits, which provides 112 bits of security strength. The probability that a random attempt will succeed is 1/(2^112) which is less than 1/1,000,000. For multiple attacks during a one-minute period, as the module at its highest can support at most 17,000 new sessions per second to authenticate in a one- minute period, the probability of successfully authenticating to the module within a one minute period is 17,000 * 60 = 1,020,000/(2^112), which is less than 1/100,000.",
"mechanism": "RSA SigVer (FIPS186-5) (A5076)",
"name": "RSA- Based Certificate",
"perMinute": "For multiple attacks during a one- minute period, to exceed a one in 100,000 probability of a successful random key guess in one minute, an attacker would have to be capable of approximately 8.65x10^31 (2^112 /60 = 8.65 x 10^31) attempts per second. Please refer to Description section in this table for more details.",
"strength": "With a minimum modulus size of 2048, the probability that a random attempt will succeed is 1/(2^112) which is less than 1/1,000,000. Please refer to Description section in this table for more details."
},
{
"description": "The modules support ECDSA public-key based authentication mechanism using a",
"mechanism": "ECDSA SigVer (FIPS186-5) (A5076)",
"name": "ECDSA- Based Certificate",
"perMinute": "For multiple attacks during a one- minute period, to exceed a one in",
"strength": "With a minimum curve of P-256, the probability that a random"
},
{
"description": "minimum of curve P- 256, which provides 128 bits of security strength. The probability that a random attempt will succeed is 1/(2^128) which is less than 1/1,000,000. For multiple attacks during a one-minute period, as the module at its highest can support at most 17,000 new sessions per second to authenticate in a one- minute period, the probability of successfully authenticating to the module within a one minute period is 17,000 * 60 = 1,020,000/(2^128), which is less than 1/100,000.",
"mechanism": "",
"name": "",
"perMinute": "100,000 probability of a successful random key guess in one minute, an attacker would have to be capable of approximately 5.67x10^36 (2^128 /60 = 5.67 x 10^36) attempts per second. Please refer to Description section in this table for more details.",
"strength": "attempt will succeed is 1/(2^128) which is less than 1/1,000,000. Please refer to Description section in this table for more details."
}
],
"found": true,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-CBC Encrypt KAT (A5076)",
"condition": "Power Up",
"details": "Encrypt",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "128 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC Decrypt KAT (A5076)",
"condition": "Power Up",
"details": "Decrypt",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "128 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM Authenticated Encrypt KAT (A5076)",
"condition": "Power Up",
"details": "Encrypt",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "128 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM Authenticated Decrypt KAT (A5076)",
"condition": "Power Up",
"details": "Decrypt",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "128 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC Encrypt KAT (A5076)",
"condition": "Power Up",
"details": "Encrypt",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "128 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC Decrypt KAT (5076)",
"condition": "Power Up",
"details": "Decrypt",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "128 bits",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG Instantiate/Generate/Res eed KAT (A5076)",
"condition": "Power Up",
"details": "Instantiate, Generate, and Reseed KATs",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "AES-128",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA-1 KAT (A5076)",
"condition": "Power Up",
"details": "HMAC- SHA-1",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-256 KAT (A5076)",
"condition": "Power Up",
"details": "HMAC- SHA2-256",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-384 KAT (A5076)",
"condition": "Power Up",
"details": "HMAC- SHA2-384",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "SHA2- 384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-512 KAT (A5076)",
"condition": "Power Up",
"details": "HMAC- SHA2-512",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "SHA2- 512",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800- 56Ar3 KAT (A5076)",
"condition": "Power Up",
"details": "Primitive Z KAT",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "P-256 Curve",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-FFC-SSC Sp800- 56Ar3 KAT (A5076)",
"condition": "Power Up",
"details": "Primitive Z KAT",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "MODP- 2048",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) KAT (A5076)",
"condition": "Power Up",
"details": "N/A",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "Curve P- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) KAT (A5076)",
"condition": "Power Up",
"details": "N/A",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "Curve P- 256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186- 5) KAT (A5076)",
"condition": "Power Up",
"details": "RSA SigGen KAT",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "2048 bit modulus with SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) KAT (A5076)",
"condition": "Power Up",
"details": "RSA SigVer KAT",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "2048 bit modulus with SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SNMP KAT (A5076)",
"condition": "Power Up",
"details": "N/A",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH KAT (A5076)",
"condition": "Power Up",
"details": "N/A",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 KAT (A5076)",
"condition": "Power Up",
"details": "N/A",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 KAT (A5076)",
"condition": "Power Up",
"details": "N/A",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 KAT (A5076)",
"condition": "Power Up",
"details": "N/A",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 KAT (A5076)",
"condition": "Power Up",
"details": "N/A",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 KAT (A5076)",
"condition": "Power Up",
"details": "N/A",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) PCT (A5076)",
"condition": "Performs all required pair-wise consisten cy tests on the newly generated keypairs before the first operation al use.",
"details": "N/A",
"indicator": "Module is in normal state",
"testMethod": "PCT",
"testProps": "Curve P- 256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186- 5) PCT (A5076)",
"condition": "Performs all required pair-wise consisten cy tests on the newly generated",
"details": "RSA",
"indicator": "Module is in normal state",
"testMethod": "PCT",
"testProps": "2048 bit Modulus",
"type": "PCT"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800- 56Ar3 PCT (A5076)",
"condition": "operation al use. Performs all required pair-wise consisten cy tests on the newly generated key pairs before the first operation al use.",
"details": "N/A",
"indicator": "Module is in normal state",
"testMethod": "PCT",
"testProps": "Curve P- 256 with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "KAS-FFC-SSC Sp800- 56Ar3 PCT (A5076)",
"condition": "Performs all required pair-wise consisten cy tests on the newly generated key pairs before the first operation al use.",
"details": "N/A",
"indicator": "Module is in normal state",
"testMethod": "PCT",
"testProps": "MODP- 2048",
"type": "PCT"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) Firmware Load Test",
"condition": "When firmware has been uploaded to the module",
"details": "N/A",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "2048 bits with SHA2- 256",
"type": "SW/F W Load"
},
{
"algorithmOrTest": "KDF-SP800-108 KAT (A5076)",
"condition": "Power Up",
"details": "N/A",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM Authenticated Encrypt KAT (AES 4550)",
"condition": "Power Up",
"details": "Encrypt",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "128 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM Authenticated Decrypt KAT (AES 4550)",
"condition": "Power Up",
"details": "Decrypt",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "128 bits",
"type": "CAST"
},
{
"algorithmOrTest": "Entropy 90B Start-up Repetition Count Test (RCT)",
"condition": "Power Up",
"details": "Designed to quickly detect catastrophic failures that cause the noise source to become \"stuck\" on a single output value for a long period of time",
"indicator": "Module is in normal state",
"testMethod": "RCT",
"testProps": "Repetitio n Count Test",
"type": "CAST"
},
{
"algorithmOrTest": "Entropy 90B Start-up Adaptive Proportion Test (APT)",
"condition": "Power Up",
"details": "Designed to detect a large loss of entropy that might occur as a result of some physical failure or environment al change affecting the noise source",
"indicator": "Module is in normal state",
"testMethod": "APT",
"testProps": "Adaptive Proportio n Test",
"type": "CAST"
},
{
"algorithmOrTest": "Entropy 90B Continuous Repetition Count Test (RCT)",
"condition": "Entropy data is generated from the Entropy Source - Continuou s",
"details": "Designed to quickly detect catastrophic failures that cause the noise source to become \"stuck\" on a single output value for a long",
"indicator": "Module is in normal state",
"testMethod": "RCT",
"testProps": "Repetitio n Count Test",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "period of time",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "Entropy 90B Continuous Adaptive Proportion Test (APT)",
"condition": "Entropy data is generated from the Entropy Source - Continuou s",
"details": "Designed to detect a large loss of entropy that might occur as a result of some physical failure or environment al change affecting the noise source",
"indicator": "Module is in normal state",
"testMethod": "APT",
"testProps": "Adaptive Proportio n Test",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Self-test failure",
"description": "If self-test tests fail, the module is put into an error state",
"indicator": "System Halt",
"name": "Error State",
"recoveryMethod": "Reboot the module"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "The module is always in the approved mode of operation after initial operations are performed.",
"name": "Approved Mode of Operation",
"statusIndicator": "Global indicator after module initialization. Please refer to Security Policy, section Life-Cycle Assurance for more information",
"type": "Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [],
"found": false,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "Data input into the module for all the services defined in Approved Services Table, including TLSv1.2, SSHv2, SNMPv3 and MACSec service data.",
"logicalInterface": "Data Input",
"physicalPort": "Console port, Mgmt Port, PoE+ ports, Ethernet Ports, SPF/SFP+, QSFP+, and QSFP28 ports"
},
{
"data": "Data output from the module for all the services defined in Approved Services Table, including TLSv1.2, SSHv2, SNMPv3 and MACSec service data.",
"logicalInterface": "Data Output",
"physicalPort": "Console port, Mgmt Port, PoE+ ports, Ethernet Ports, SPF/SFP+, QSFP+, and QSFP28 ports"
},
{
"data": "Control Data input into the module for all the services defined in Approved Services Table, including TLSv1.2, SSHv2, SNMPv3 and MACSec service data.",
"logicalInterface": "Control Input",
"physicalPort": "Console port, Mgmt Port, PoE+ ports, Ethernet Ports, SPF/SFP+, QSFP+, and QSFP28 ports"
},
{
"data": "Status Information output from the module.",
"logicalInterface": "Status Output",
"physicalPort": "Console port, Mgmt Port, PoE+ ports, Ethernet Ports, SPF/SFP+, QSFP+, and QSFP28 ports and LEDs"
},
{
"data": "N/A",
"logicalInterface": "Control Output",
"physicalPort": "N/A"
},
{
"data": "Provide the Power Supply to the module.",
"logicalInterface": "Power",
"physicalPort": "Power"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "Password-Based RSA-Based Certificate ECDSA-Based Certificate",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
},
{
"authMethodList": "Password-Based RSA-Based Certificate ECDSA-Based Certificate",
"name": "User",
"operatorType": "User",
"type": "Role"
},
{
"authMethodList": "Password-Based RSA-Based Certificate ECDSA-Based Certificate",
"name": "Port Config Admin",
"operatorType": "Port Config Admin",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "2",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "1",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "CRC-32 (Bootloader)",
"details": "The module performs the Bootloader integrity test",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "N/A",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "",
"details": "by using CRC-32 at the power up",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "CRC-32 (Firmware)",
"details": "The module performs the Firmware integrity test by using CRC-32 at the power up",
"indicator": "Module is in normal state",
"testMethod": "KAT",
"testProps": "N/A",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Module",
"distribution": "Automated",
"entry": "Electroni c",
"format": "Plaintext",
"name": "Peer Public Key Input",
"sfiAlgo": "",
"source": "External (Outside of the Module\u0027s Boundary )"
},
{
"dest": "External (Outside of the Module\u0027s Boundary )",
"distribution": "Automated",
"entry": "Electroni c",
"format": "Plaintext",
"name": "Module Public Key Output",
"sfiAlgo": "",
"source": "Module"
},
{
"dest": "Module",
"distribution": "Automated",
"entry": "Electroni c",
"format": "Encrypte d",
"name": "Password/Secre t Input via SSHv2 encrypted by AES and HMAC",
"sfiAlgo": "SSH-KTS (AES and HMAC)",
"source": "External (Outside of the Module\u0027s Boundary )"
},
{
"dest": "Module",
"distribution": "Automated",
"entry": "Electroni c",
"format": "Encrypte d",
"name": "Password/Secre t Input via TLS v1.2 encrypted by AES and HMAC",
"sfiAlgo": "TLS-KTS (AES and HMAC)",
"source": "External (Outside of the Module\u0027s Boundary )"
},
{
"dest": "Module",
"distribution": "Automated",
"entry": "Electroni c",
"format": "Encrypte d",
"name": "Password/Secre t Input via TLS v1.2 encrypted by AES-GCM",
"sfiAlgo": "TLS-KTS (AES- GCM)",
"source": "External (Outside of the Module\u0027s Boundary )"
},
{
"dest": "External (Outside of the Module\u0027s Boundary )",
"distribution": "Automated",
"entry": "Electroni c",
"format": "Encrypte d",
"name": "MACSec SAK Output encrypted by MACSec KEK using AES-KW",
"sfiAlgo": "MACSec- KTS (AES-KW)",
"source": "Module"
},
{
"dest": "External (Outside of the Module\u0027s Boundary )",
"distribution": "Automated",
"entry": "Electroni c",
"format": "Encrypte d",
"name": "MACSec SAK Output encrypted by MACSec KEK using AES-KWP",
"sfiAlgo": "MACSec- KTS (AES- KWP)",
"source": "Module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "CO issues zeroization service",
"method": "Zeroization Command",
"operatorId": "\u0027fips zeroize all\u0027 Command",
"rationale": "the zeroization command will erase all SSPs stored in the DRAM or in the Flash of the module."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Volatile Memory",
"name": "DRAM",
"persistance": "Dynamic"
},
{
"description": "Non-Volatile Memory",
"name": "Flash",
"persistance": "Static"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [
{
"features": "",
"fwVersion": "IronWare OS 10.0.10",
"hwVersion": "ICX-7550-24",
"modelPartNum": "ICX-7550-24",
"processors": "ARM Cortex A72 (ARMv8)"
},
{
"features": "",
"fwVersion": "IronWare OS 10.0.10",
"hwVersion": "ICX-7550-24P",
"modelPartNum": "ICX-7550-24P",
"processors": "ARM Cortex A72 (ARMv8)"
},
{
"features": "",
"fwVersion": "IronWare OS 10.0.10",
"hwVersion": "ICX-7550- 24ZP",
"modelPartNum": "ICX-7550- 24ZP",
"processors": "ARM Cortex A72 (ARMv8)"
},
{
"features": "",
"fwVersion": "IronWare OS 10.0.10",
"hwVersion": "ICX-7550-24F",
"modelPartNum": "ICX-7550-24F",
"processors": "ARM Cortex A72 (ARMv8)"
},
{
"features": "",
"fwVersion": "IronWare OS 10.0.10",
"hwVersion": "ICX-7550-48",
"modelPartNum": "ICX-7550-48",
"processors": "ARM Cortex A72 (ARMv8)"
},
{
"features": "",
"fwVersion": "IronWare OS 10.0.10",
"hwVersion": "ICX-7550-48P",
"modelPartNum": "ICX-7550-48P",
"processors": "ARM Cortex A72 (ARMv8)"
},
{
"features": "",
"fwVersion": "IronWare OS 10.0.10",
"hwVersion": "ICX-7550- 48ZP",
"modelPartNum": "ICX-7550- 48ZP",
"processors": "ARM Cortex A72 (ARMv8)"
},
{
"features": "",
"fwVersion": "IronWare OS 10.0.10",
"hwVersion": "ICX-7550-48F",
"modelPartNum": "ICX-7550-48F",
"processors": "ARM Cortex A72 (ARMv8)"
},
{
"features": "",
"fwVersion": "IronWare OS 10.0.10",
"hwVersion": "ICX-7650-48P",
"modelPartNum": "ICX-7650-48P",
"processors": "ARM Cortex A57 (ARMv8)"
},
{
"features": "",
"fwVersion": "IronWare OS 10.0.10",
"hwVersion": "ICX-7650- 48ZP",
"modelPartNum": "ICX-7650- 48ZP",
"processors": "ARM Cortex A57 (ARMv8)"
},
{
"features": "",
"fwVersion": "IronWare OS 10.0.10",
"hwVersion": "ICX-7650-48F",
"modelPartNum": "ICX-7650-48F",
"processors": "ARM Cortex A57 (ARMv8)"
},
{
"features": "",
"fwVersion": "IronWare OS 10.0.10",
"hwVersion": "ICX-7850-32Q",
"modelPartNum": "ICX-7850-32Q",
"processors": "ARM Cortex A57 (ARMv8)"
},
{
"features": "",
"fwVersion": "IronWare OS 10.0.10",
"hwVersion": "ICX-7850- 48FS",
"modelPartNum": "ICX-7850- 48FS",
"processors": "ARM Cortex A57 (ARMv8)"
},
{
"features": "",
"fwVersion": "IronWare OS 10.0.10",
"hwVersion": "ICX-7850-48F",
"modelPartNum": "ICX-7850-48F",
"processors": "ARM Cortex A57 (ARMv8)"
},
{
"features": "",
"fwVersion": "IronWare OS 10.0.10",
"hwVersion": "ICX-7850-48C",
"modelPartNum": "ICX-7850-48C",
"processors": "ARM Cortex A57 (ARMv8)"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Asymmetric",
"implName": "N/A",
"name": "CKG",
"reference": "The module performs Cryptographic Key Generation (CKG) for asymmetric keys as detailed by example 1 in section 4 and section 5 of SP800-133r2"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 2
},
"ECDH": {
"ECDH": 59
},
"ECDSA": {
"ECDSA": 71
}
},
"FF": {
"DH": {
"DH": 58,
"Diffie-Hellman": 2
}
},
"RSA": {
"RSA 2048": 2
}
},
"certification_process": {},
"cipher_mode": {
"CTR": {
"CTR": 1
},
"GCM": {
"GCM": 8
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"SSH": {
"SSH": 156,
"SSHv2": 57
},
"TLS": {
"SSL": {
"SSL": 4
},
"TLS": {
"TLS": 144,
"TLS v1.2": 18,
"TLSv1.2": 52
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 4
},
"MAC": {
"MAC": 14
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-256": 6,
"P-384": 2
}
},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#1": 1
}
},
"fips_certlike": {
"Certlike": {
"AES 4550": 8,
"AES-128": 1,
"AES-CMAC Decrypt KAT (5076": 2,
"DRBG 960": 1,
"HMAC- SHA-1": 1,
"HMAC-SHA-1": 6,
"RSA 2048": 2,
"SHA-1": 6,
"SHA2": 1,
"SHA2- 256": 5,
"SHA2- 384": 1,
"SHA2- 512": 1,
"SHA2-256": 5,
"SHA2-384": 4,
"SHA2-512": 4
}
},
"fips_security_level": {
"Level": {
"Level 1": 4
}
},
"hash_function": {
"SHA": {
"SHA1": {
"SHA-1": 6
},
"SHA2": {
"SHA2": 1
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 76
},
"RNG": {
"RBG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 15,
"FIPS 180-4": 4,
"FIPS 186-5": 7,
"FIPS 198-1": 4,
"FIPS186-5": 32
},
"NIST": {
"SP 800-108": 1,
"SP 800-135": 3,
"SP 800-38A": 5,
"SP 800-38B": 1,
"SP 800-38D": 3,
"SP 800-38F": 2,
"SP 800-52": 1,
"SP 800-56A": 3,
"SP 800-90A": 1
},
"RFC": {
"RFC 5288": 1,
"RFC7627": 3
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 30,
"AES-": 12,
"AES-128": 1
},
"CAST": {
"CAST": 62
}
},
"constructions": {
"MAC": {
"CMAC": 1,
"HMAC": 18
}
}
},
"tee_name": {
"AMD": {
"PSP": 12
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"HMAC-SHA-1A5076",
"SHA-1A5076",
"HMAC-SHA2-384A5076",
"SHA2-384A5076",
"KDF SNMPA5076",
"KDF SSHA5076",
"ECDSA SigVer (FIPS186-5)A5076",
"AES-KWA5076",
"ECDSA SigGen (FIPS186-5)A5076",
"KAS-FFC-SSC Sp800-56Ar3A5076",
"AES-ECBAES 4550",
"AES-CBCA5076",
"SHA2-512A5076",
"HMAC-SHA2-256A5076",
"RSA SigGen (FIPS186-5)A5076",
"Safe Primes Key GenerationA5076",
"AES-CFB128A5076",
"AES-CTRA5076",
"ECDSA KeyGen (FIPS186-5)A5076",
"KDF SP800-108A5076",
"HMAC-SHA2-512A5076",
"RSA KeyGen (FIPS186-5)A5076",
"AES-KWPA5076",
"TLS v1.2 KDF RFC7627A5076",
"AES-CMACA5076",
"KAS-ECC-SSC Sp800-56Ar3A5076",
"SHA2-256A5076",
"Counter DRBGA5076",
"RSA SigVer (FIPS186-5)A5076",
"AES-GCMAES 4550"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A5076"
]
},
"policy_metadata": {
"/Author": "Hawes, David J. (Fed)",
"/CreationDate": "D:20251002113134-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ActionId": "6c288630-2202-4773-a90b-7d117f222cd6",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ContentBits": "1",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Enabled": "true",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Method": "Privileged",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Name": "UNCLASSIFIED",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SetDate": "2025-10-02T15:29:36Z",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Tag": "10, 0, 1, 1",
"/ModDate": "D:20251002113134-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 2542733,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://csrc.nist.gov/projects/cryptographic-module-validation-program"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 63
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "b638a914c8cfe447469b3c0b1114b9b86ea8ee8a01ef7958dd5f5e8ac9e5a8bc",
"source_hash": "e5810087ddd82e44ef5af7cef3d1643701c4d41937e8652028ac6259d409b32d",
"txt_hash": "07962beb8d29dc9e472f9648050ade109badca96e81402a7de12f75ab3fd6422"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When installed, initialized and configured as specified in Section Life-Cycle Assurance of the Security Policy",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/November 2025_181225_1202.pdf",
"date_sunset": "2030-10-02",
"description": "The ICX\u00ae family of fixed form-factor switches works together to deliver a complete, scalable, and high-performance network solution that supports today\u0027s demanding video, Unified Communications (UC), VDI, and mobile applications. They leverage the innovative Campus Fabric technology, which provides simplified network deployment and management, scale-out networking, and investment protection with the industry\u0027s lowest total cost of ownership.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Roles, services, and authentication: Level 2",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Ruckus FastIron ICXTM 7550/7650/7850 Series Switch/Router",
"module_type": "Hardware",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2025-10-03",
"lab": "Gossamer Security Solutions",
"validation_type": "Initial"
}
],
"vendor": "Ruckus Wireless LLC",
"vendor_url": "http://www.commscope.com"
}
}