Fortress Mesh Points

Certificate #1904

Webpage information

Status historical
Historical reason 186-2 transition
Validation dates 20.03.2013 , 17.05.2013 , 14.06.2013 , 21.06.2016
Standard FIPS 140-2
Security level 2
Type Hardware
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode
Exceptions
  • Design Assurance: Level 3
Description The Fortress Mesh Point is an all-in-one network access device housed in a rugged compact chassis, with the most stringent security available today built in. It can serve as a wireless bridge, a WLAN access point, and an eight-port LAN switch, while performing all the functions of a Fortress controller device: encrypting wireless traffic and providing Multi-factor Authentication for devices on the network it protects.
Version (Hardware) ES210, ES2440, ES440, ES520v1, ES520v2 or ES820
Version (Firmware) 5.4.1, 5.4.3 or 5.4.4.1190
Vendor General Dynamics Mission Systems
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms
AES, Triple-DES, HMAC
Asymmetric Algorithms
ECDH, ECDSA, DH, Diffie-Hellman
Hash functions
SHA-1, SHA-384, SHA-256, SHA-512, SHA-224, SHA256, SHA384, MD5
Schemes
MAC, Key Exchange
Protocols
SSH, SSL, SSL 3.0, TLS, TLS 1.0, IKE, IPsec, VPN
Randomness
PRNG, DRBG, RNG
Elliptic Curves
P-384, P-284, secp256r1, secp384r1
Block cipher modes
ECB, CBC, OFB, CCM

Security level
Level 2

Standards
FIPS 140-2, FIPS186-2, SP 800-90A, RFC 2246, RFC 4253

File metadata

Creation date D:20160615092001-04'00'
Modification date D:20160615092021-04'00'
Pages 32
Creator Acrobat PDFMaker 11 for Word
Producer Adobe PDF Library 11.0

References

Outgoing
  • 406 - historical - IBM® SSLite for Java
  • 402 - historical - nCipher 800 PCI[1], nCipher 1600 PCI[2], nCipher 1600 PCI for NetHSM[3], nForce 800 PCI[4] and nForce 1600 PCI[5]

Heuristics

No heuristics are available for this certificate.

References

Updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data 

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 1904,
  "dgst": "90bbc9533a02213f",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC#371",
        "SHS#721",
        "SHS#717",
        "ECDSA#371",
        "KAS#10",
        "AES#694",
        "HMAC#367",
        "HMAC#889",
        "SHS#1357",
        "AES#1519",
        "DRBG#66",
        "RSA#439",
        "AES#688"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "5.4.4.1190",
        "5.4.3",
        "5.4.1"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "402",
          "406"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "402",
          "406"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "402",
        "406"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDH": {
            "ECDH": 1
          },
          "ECDSA": {
            "ECDSA": 8
          }
        },
        "FF": {
          "DH": {
            "DH": 12,
            "Diffie-Hellman": 4
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 6
        },
        "CCM": {
          "CCM": 2
        },
        "ECB": {
          "ECB": 4
        },
        "OFB": {
          "OFB": 2
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 6
        },
        "IPsec": {
          "IPsec": 21
        },
        "SSH": {
          "SSH": 24
        },
        "TLS": {
          "SSL": {
            "SSL": 27,
            "SSL 3.0": 1
          },
          "TLS": {
            "TLS": 13,
            "TLS 1.0": 2
          }
        },
        "VPN": {
          "VPN": 2
        }
      },
      "crypto_scheme": {
        "KEX": {
          "Key Exchange": 1
        },
        "MAC": {
          "MAC": 1
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-284": 2,
          "P-384": 6,
          "secp256r1": 2,
          "secp384r1": 2
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "# 1904": 1,
          "Cert 402": 1,
          "Cert 406": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 1519": 1,
          "AES 688": 1,
          "AES 694": 1,
          "DRBG 4": 1,
          "HMAC 367": 2,
          "HMAC 371": 2,
          "HMAC 889": 2,
          "HMAC SHA-1": 1,
          "HMAC-SHA1": 14,
          "HMAC-SHA224": 4,
          "HMAC-SHA256": 8,
          "HMAC-SHA384": 12,
          "HMAC-SHA512": 8,
          "RSA 439": 1,
          "SHA- 256": 1,
          "SHA-1": 11,
          "SHA-1 4": 1,
          "SHA-224": 2,
          "SHA-256": 5,
          "SHA-384": 7,
          "SHA-512": 6,
          "SHA256": 2,
          "SHA384": 1,
          "SHS 1357": 1,
          "SHS 717": 1,
          "SHS 721": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 2": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 1
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 12
          },
          "SHA2": {
            "SHA-224": 2,
            "SHA-256": 5,
            "SHA-384": 7,
            "SHA-512": 6,
            "SHA256": 2,
            "SHA384": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 24,
          "PRNG": 15
        },
        "RNG": {
          "RNG": 5
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 4,
          "FIPS186-2": 1
        },
        "NIST": {
          "SP 800-90A": 2
        },
        "RFC": {
          "RFC 2246": 1,
          "RFC 4253": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 11
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 1
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 20
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "",
      "/CreationDate": "D:20160615092001-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 11 for Word",
      "/ModDate": "D:20160615092021-04\u002700\u0027",
      "/Producer": "Adobe PDF Library 11.0",
      "/SourceModified": "D:20160615131803",
      "pdf_file_size_bytes": 737907,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 32
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "a17bf6ab432a99273a1023d40458f77be006ab2e4256ce4284cc74f27a5d2d17",
    "policy_txt_hash": "b41f52e55a1146367b87d12e0d6de81f5532fefc5516e402e47605ae3561a29f"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0027.pdf",
    "date_sunset": null,
    "description": "The Fortress Mesh Point is an all-in-one network access device housed in a rugged compact chassis, with the most stringent security available today built in. It can serve as a wireless bridge, a WLAN access point, and an eight-port LAN switch, while performing all the functions of a Fortress controller device: encrypting wireless traffic and providing Multi-factor Authentication for devices on the network it protects.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Design Assurance: Level 3"
    ],
    "fw_versions": "5.4.1, 5.4.3 or 5.4.4.1190",
    "historical_reason": "186-2 transition",
    "hw_versions": "ES210, ES2440, ES440, ES520v1, ES520v2 or ES820",
    "level": 2,
    "mentioned_certs": {},
    "module_name": "Fortress Mesh Points",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2013-03-20",
        "lab": "SAIC-VA",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2013-05-17",
        "lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2013-06-14",
        "lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2016-06-21",
        "lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
        "validation_type": "Update"
      }
    ],
    "vendor": "General Dynamics Mission Systems",
    "vendor_url": "http://gdmissionsystems.com"
  }
}