{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "8f4e3ac8887eca56", "cert_id": 5162, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Arista Crypto Module Lvl2 [Software, Software IPsec]", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-02-17", "validation_type": "Initial", "lab": "DEKRA Cybersecurity Certification Laboratory"}], "vendor_url": "http://www.arista.com", "vendor": "Arista Networks, Inc.", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/February 2026_180326_0748-Signed.pdf", "module_type": "Software", "standard": "FIPS 140-3", "status": "active", "level": 2, "caveat": "When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys). No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Physical security: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "Arista's crypto library is a comprehensive suite of FIPS Approved algorithms. Many key sizes and modes have been implemented to allow flexibility and efficiency.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-02-16", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 2": 2, "Level 1": 1}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 22, "SHA-1": 7, "SHA2-256": 13, "SHA2-512": 10, "SHA2-384": 3, "SHA2-224": 5, "SHA2- 384": 2, "SHA2- 256": 1, "PKCS 1": 8, "PKCS#1": 2, "RSA PKCS1": 1, "AES-128": 2, "AES-192": 2, "AES-256": 3, "PKCS1": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-128": 2, "AES-192": 2, "AES-256": 3, "AES": 12}, "CAST": {"CAST5": 3, "CAST": 60}, "RC": {"RC2": 3, "RC5": 1}}, "DES": {"DES": {"DES": 3}, "3DES": {"Triple-DES": 8, "TDEA": 1}}, "miscellaneous": {"IDEA": {"IDEA": 3}, "Blowfish": {"Blowfish": 3}, "Camellia": {"Camellia": 3}, "SEED": {"SEED": 3}}, "constructions": {"MAC": {"HMAC": 31, "CMAC": 2}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDHE": 16, "ECDH": 17}, "ECDSA": {"ECDSA": 42}}, "FF": {"DH": {"Diffie-Hellman": 7, "DHE": 8, "DH": 18}, "DSA": {"DSA": 5}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 7}}, "MD": {"MD4": {"MD4": 2}, "MD5": {"MD5": 3}}, "RIPEMD": {"RIPEMD-160": 2}}, "crypto_scheme": {"MAC": {"MAC": 7}, "KEX": {"Key Exchange": 1}, "KA": {"Key Agreement": 2}}, "crypto_protocol": {"SSH": {"SSH": 24, "SSHv2": 7}, "TLS": {"TLS": {"TLS": 46, "TLS v1.2": 4, "TLS 1.2": 3, "TLS v1.0": 24}, "DTLS": {"DTLS": 1}}, "IKE": {"IKEv1": 3, "IKEv2": 3, "IKE": 23}, "IPsec": {"IPsec": 3}}, "randomness": {"PRNG": {"DRBG": 97}, "RNG": {"RBG": 3}}, "cipher_mode": {"GCM": {"GCM": 4}, "CCM": {"CCM": 1}}, "ecc_curve": {"NIST": {"P-256": 20, "P-384": 10, "P-521": 20, "Curve P-256": 2, "P-224": 2, "secp256r1": 1, "secp384r1": 1, "secp521r1": 1}}, "crypto_engine": {}, "tls_cipher_suite": {"TLS": {"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_CCM": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_CCM": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 1, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256": 1, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA256": 1, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 1, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 1, "TLS_DHE_RSA_WITH_AES_256_CCM_8": 1, "TLS_DHE_RSA_WITH_AES_256_CCM": 1, "TLS_DHE_RSA_WITH_AES_128_CCM_8": 1, "TLS_DHE_RSA_WITH_AES_128_CCM": 1, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256": 1, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256": 1, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 1, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 1}}, "crypto_library": {"OpenSSL": {"OpenSSL": 7}}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 2}, "IBM": {"SSC": 14}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 6, "FIPS PUB 140-3": 1, "FIPS186-4": 29, "FIPS 186-4": 8, "FIPS 198-1": 5, "FIPS 180-4": 5}, "NIST": {"SP 800-38A": 6, "SP 800-38C": 1, "SP 800-38B": 1, "SP 800-38D": 1, "SP 800-38E": 1, "SP 800-90A": 6, "SP 800-56A": 2, "SP 800-135": 5, "SP 800-108": 1, "SP 800-56B": 1, "SP 800-140B": 2, "SP 800-133": 1, "SP 800-90B": 1, "SP 800-38F": 1, "SP 800-140E": 1, "SP 800-56a": 1}, "PKCS": {"PKCS 1": 4, "PKCS#1": 1, "PKCS1": 1}, "RFC": {"RFC7627": 3, "RFC 5288": 1, "RFC 4106": 1, "RFC 4581": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 719955, "pdf_is_encrypted": false, "pdf_number_of_pages": 50, "/Comments": "", "/Company": "", "/CreationDate": "D:20260128072605-05'00'", "/Creator": "Acrobat PDFMaker 25 for Word", "/Keywords": "", "/ModDate": "D:20260128072844-05'00'", "/Producer": "Adobe PDF Library 25.1.5", "/SourceModified": "", "/Subject": "", "/Title": "", "pdf_hyperlinks": {"_type": "Set", "elements": []}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["AES-CFB128A4984", "AES-CFB8A4984", "ECDSA KeyVer (FIPS186-4)A4984", "AES-CCMA4984", "ECDSA KeyGen (FIPS186-4)A4984", "SHA-1A4984", "RSA SigVer (FIPS186-4)A4984", "RSA SigGen (FIPS186-4)A4984", "KAS-FFC-SSC Sp800-56Ar3A4984", "ECDSA SigVer (FIPS186-4)A4984", "HMAC-SHA-1A4984", "AES-ECBA4984", "KDF TLSA4984", "SHA2-512A4984", "KAS-ECC-SSC Sp800-56Ar3A4984", "RSA KeyGen (FIPS186-4)A4984", "TLS v1.2 KDF RFC7627A4984", "HMAC-SHA2-512A4984", "KDF SP800-108A4984", "AES-CMACA4984", "HMAC-SHA2-224A4984", "HMAC DRBGA4984", "KDF IKEv2A4984", "AES-CFB1A4984", "Counter DRBGA4984", "HMAC-SHA2-256A4984", "KDF SSHA4984", "ECDSA SigGen (FIPS186-4)A4984", "SHA2-384A4984", "AES-CBCA4984", "AES-XTS Testing Revision 2.0A4984", "Hash DRBGA4984", "AES-GCMA4984", "HMAC-SHA2-384A4984", "KDF IKEv1A4984", "KTS-IFCA4984", "SHA2-256A4984", "SHA2-224A4984", "AES-CTRA4984"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "7f6b7cd1fd58c989f9786307b8b196d40a9539f2d3458827cab5bea94ea76b55", "txt_hash": "9b8b520b8711c117a0121cc878045de53211a9c2ded1da58d20437674ac6983c", "json_hash": null}}}