This page was not yet optimized for use on mobile devices.

SR-OS Cryptographic Module

Certificate details

Certificate ID	#4673
Status	historical
Historical reason	Moved to historical list due to sunsetting
Validation dates	18.01.2024
Standard	FIPS 140-2
Security level	1
Type	Firmware
Embodiment	Multi-Chip Stand Alone
Caveat	When operated in FIPS mode and when installed, initialized and configured as specified in Sections 9.1 and 9.2 of the Security Policy.
Exceptions	Mitigation of Other Attacks: N/A
Description	The SR-OS Cryptographic Module (SRCM) provides the cryptographic algorithm functions needed to allow SR-OS to implement cryptography for those services and protocols that require it.
Version (Firmware)	20.10R12
Tested configurations	SR-OS 20.10R12 running on 7750 SR-1 with Cavium OCTEON III CN7360 SR-OS 20.10R12 running on 7750 SR-14s with Cavium OCTEON II CN6645 SR-OS 20.10R12 running on 7750 SR-1s with Cavium OCTEON III CN7360 SR-OS 20.10R12 running on 7750 SR-2e with Cavium OCTEON II CN6645 SR-OS 20.10R12 running on 7750 SR-2s with Cavium OCTEON III CN7360 SR-OS 20.10R12 running on 7750 SR-7 with Cavium OCTEON II CN6645 SR-OS 20.10R12 running on 7750 SR-7s with Cavium OCTEON II CN6645 (single-user mode) SR-OS 20.10R12 running on 7750 SR-a4 with Cavium OCTEON II CN6635 SR-OS 20.10R12 running on 7950 XRS-16c with Cavium OCTEON II CN6645 SR-OS 20.10R12 running on 7950 XRS-20 with Cavium OCTEON II CN6645
Vendor	Nokia Corporation http://www.nokia.com
Lab	Acumen Security
Algorithms	AES#C2074 AES#C2075 AES#C2084 CVL#C2074 CVL#C2075 CVL#C2084 DRBG#C2074 DRBG#C2075 DRBG#C2084 DSA#C2074 DSA#C2075 DSA#C2084 ECDSA#C2074 ECDSA#C2075 ECDSA#C2084 HMAC#C2074 HMAC#C2075 HMAC#C2084 KAS#A3041 KAS#C2074 KAS#C2075 KAS#C2084 KAS-SSC#A3041 KTS#C2074 KTS#C2075 KTS#C2084 RSA#C2074 RSA#C2075 RSA#C2084 SHS#C2074 SHS#C2075 SHS#C2084 Triple-DES#C2074 Triple-DES#C2075 Triple-DES#C2084
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy

Security policy PDF TXT

Extracted keywords

Symmetric Algorithms

AES-128, AES-256, AES, AES-192, AES-, Rijndael, CAST-128, RC4, DES, Triple-DES, TDES, Blowfish, HMAC, HMAC-SHA-256, HMAC-RIPEMD-160, CMAC

Asymmetric Algorithms

ECDSA, DH, Diffie-Hellman, DSA

Hash functions

SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, MD5

Schemes

Key agreement

Protocols

SSH, SSHv2, SSHv1, TLS, TLSv1.2, IPsec

Randomness

DRBG, RNG

Elliptic Curves

P-256, P-384, P-521

Block cipher modes

ECB, CBC, CTR, CFB, GCM, CCM, XTS

Trusted Execution Environments

SSC

Security level

Level 1, level 1

Standards

FIPS 140-2, FIPS 1402, FIPS PUB 140-2, SP 800-52, RFC 5246, RFC 4253

Subject	Firewall Security
Author	Carl Rajsic
Creation date	D:20231209090050+05'30'
Modification date	D:20231209090050+05'30'
Pages	26
Creator	Microsoft® Word for Microsoft 365
Producer	Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

24.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The br1_deviations property was set to 44.
23.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'is_br1_format': False, 'br1_deviations': 0, 'br1_tables': None}.
21.09.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The status property was set to historical.

The historical_reason property was set to Moved to historical list due to sunsetting.

The date_sunset property was set to None.

The PDF extraction data was updated.

The following values were inserted: {'module_algorithms': {'_type': 'Set', 'elements': ['RSA#C2074', 'SHS#C2074', 'CVL#C2075', 'RSA#C2084', 'KTS#C2075', 'DRBG#C2075', 'CVL#C2084', 'DSA#C2084', 'KAS#C2075', 'KTS#C2084', 'HMAC#C2074', 'KAS#A3041', 'DSA#C2074', 'DRBG#C2084', 'ECDSA#C2074', 'KTS#C2074', 'SHS#C2075', 'ECDSA#C2075', 'SHS#C2084', 'KAS-SSC#A3041', 'DRBG#C2074', 'HMAC#C2084', 'Triple-DES#C2084', 'HMAC#C2075', 'AES#C2074', 'KAS#C2084', 'CVL#C2074', 'RSA#C2075', 'AES#C2084', 'AES#C2075', 'Triple-DES#C2075', 'DSA#C2075', 'Triple-DES#C2074', 'ECDSA#C2084', 'KAS#C2074']}, 'policy_algorithms': {'_type': 'Set', 'elements': ['#C2084', '#A3041', '#C2074', '#C2075']}}.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__update__': {'Level 1': 1}}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__update__': {'AES': 13}}}}}}, 'randomness': {'__update__': {'PRNG': {'__update__': {'DRBG': 32}}}}, 'standard_id': {'__update__': {'FIPS': {'__insert__': {'FIPS 1402': 1}}}}} data.

The computed heuristics were updated.

The algorithms property was updated, with the {'_type': 'Set', 'elements': ['#C2084', '#A3041', '#C2074', '#C2075']} values added.

The state was updated.

The policy property was updated, with the {'txt_hash': '85fd0abfca19a07efbeda158872795532eec5a3ba00064c7c862b79e840ae18a', 'json_hash': '364056c2d6d828b4783a6b1c2675212751065dccd54fbfc11ec47c14ae8283ac'} data.
15.12.2025

The certificate data changed.
Certificate changed

The state was updated.

The following values were inserted: {'policy_json_hash': None}.

The following properties were deleted: ['policy_convert_garbage'].
08.09.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated.
04.04.2025

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'crypto_protocol': {'__update__': {'SSH': {'__insert__': {'SSHv2': 19, 'SSHv1': 1}}}}} data.
26.02.2024

The certificate data changed.
Certificate changed

The web extraction data was updated.

The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/January 2024_010224_0801.pdf.
12.02.2024

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4673,
  "dgst": "a32a2b5b8ff5119a",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "DRBG#C2075",
        "HMAC#C2075",
        "KAS#C2074",
        "KTS#C2075",
        "SHS#C2084",
        "KAS#C2084",
        "SHS#C2075",
        "KAS-SSC#A3041",
        "#C2074",
        "ECDSA#C2084",
        "DSA#C2075",
        "#C2084",
        "KAS#C2075",
        "HMAC#C2074",
        "Triple-DES#C2075",
        "DRBG#C2084",
        "AES#C2075",
        "KTS#C2084",
        "CVL#C2084",
        "AES#C2084",
        "AES#C2074",
        "KAS#A3041",
        "ECDSA#C2074",
        "HMAC#C2084",
        "ECDSA#C2075",
        "Triple-DES#C2074",
        "CVL#C2074",
        "#A3041",
        "SHS#C2074",
        "DRBG#C2074",
        "#C2075",
        "CVL#C2075",
        "DSA#C2074",
        "Triple-DES#C2084",
        "RSA#C2075",
        "RSA#C2074",
        "DSA#C2084",
        "KTS#C2074",
        "RSA#C2084"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "20.10"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 44,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDSA": {
            "ECDSA": 9
          }
        },
        "FF": {
          "DH": {
            "DH": 1,
            "Diffie-Hellman": 3
          },
          "DSA": {
            "DSA": 9
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 7
        },
        "CCM": {
          "CCM": 1
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 4
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 2
        },
        "XTS": {
          "XTS": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IPsec": {
          "IPsec": 1
        },
        "SSH": {
          "SSH": 8,
          "SSHv1": 1,
          "SSHv2": 19
        },
        "TLS": {
          "TLS": {
            "TLS": 26,
            "TLSv1.2": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key agreement": 1
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 2,
          "P-384": 2,
          "P-521": 2
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 1,
          "#20": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES-128": 3,
          "AES-192": 1,
          "AES-256": 4,
          "HMAC SHA-1": 1,
          "HMAC SHA-224": 1,
          "HMAC SHA-384": 1,
          "HMAC SHA-512": 1,
          "HMAC- SHA-1": 1,
          "HMAC- SHA-256": 1,
          "HMAC- SHA-512": 1,
          "HMAC-SHA-1": 2,
          "HMAC-SHA-1-96": 12,
          "HMAC-SHA-256": 4,
          "SHA- 1, 224": 1,
          "SHA-1": 5,
          "SHA-1, 224": 14,
          "SHA-224": 2,
          "SHA-256": 6,
          "SHA-384": 2,
          "SHA-512": 4,
          "SHA2-256": 2,
          "SHA2-512": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "level 1": 2
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 9
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 19
          },
          "SHA2": {
            "SHA-224": 2,
            "SHA-256": 6,
            "SHA-384": 2,
            "SHA-512": 4
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 32
        },
        "RNG": {
          "RNG": 5
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 10,
          "FIPS 1402": 1,
          "FIPS PUB 140-2": 3
        },
        "NIST": {
          "SP 800-52": 1
        },
        "RFC": {
          "RFC 4253": 1,
          "RFC 5246": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 13,
            "AES-": 1,
            "AES-128": 3,
            "AES-192": 1,
            "AES-256": 4
          },
          "CAST": {
            "CAST-128": 1
          },
          "RC": {
            "RC4": 1
          },
          "Rijndael": {
            "Rijndael": 1
          }
        },
        "DES": {
          "3DES": {
            "TDES": 1,
            "Triple-DES": 9
          },
          "DES": {
            "DES": 1
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 5,
            "HMAC": 8,
            "HMAC-RIPEMD-160": 1,
            "HMAC-SHA-256": 2
          }
        },
        "miscellaneous": {
          "Blowfish": {
            "Blowfish": 2
          }
        }
      },
      "tee_name": {
        "IBM": {
          "SSC": 1
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "DRBG#C2075",
        "HMAC#C2075",
        "KAS#C2074",
        "KTS#C2075",
        "SHS#C2084",
        "KAS#C2084",
        "SHS#C2075",
        "KAS-SSC#A3041",
        "ECDSA#C2084",
        "DSA#C2075",
        "KAS#C2075",
        "HMAC#C2074",
        "Triple-DES#C2075",
        "DRBG#C2084",
        "AES#C2075",
        "KTS#C2084",
        "CVL#C2084",
        "AES#C2084",
        "AES#C2074",
        "KAS#A3041",
        "ECDSA#C2074",
        "HMAC#C2084",
        "ECDSA#C2075",
        "Triple-DES#C2074",
        "CVL#C2074",
        "SHS#C2074",
        "DRBG#C2074",
        "CVL#C2075",
        "DSA#C2074",
        "Triple-DES#C2084",
        "RSA#C2075",
        "RSA#C2074",
        "DSA#C2084",
        "KTS#C2074",
        "RSA#C2084"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A3041",
        "#C2084",
        "#C2074",
        "#C2075"
      ]
    },
    "policy_metadata": {
      "/Author": "Carl Rajsic",
      "/CreationDate": "D:20231209090050+05\u002730\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20231209090050+05\u002730\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "/Subject": "Firewall Security",
      "pdf_file_size_bytes": 667498,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://csrc.nist.gov/projects/Cryptographic-Algorithm-Validation-Program/details?source=C\u0026number=2074",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/Details?validation=33144",
          "http://csrc.nist.gov/groups/STM/cmvp/documents/fips140-2/FIPS1402IG.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/Validation-Notes#AES-KW",
          "http://csrc.nist.gov/groups/STM/cmvp/documents/fips140-2/FIPS1402DTR.pdf",
          "https://csrc.nist.gov/projects/Cryptographic-Algorithm-Validation-Program/details?source=C\u0026number=2084",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/Validation-Notes#AES-KWP",
          "http://csrc.nist.gov/publications/fips/fips140-2/fips1402.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/Validation-Notes#AES-GCM",
          "https://csrc.nist.gov/projects/Cryptographic-Algorithm-Validation-Program/details?source=C\u0026number=2075",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/Validation-Notes#AES-GMAC"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 26
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "364056c2d6d828b4783a6b1c2675212751065dccd54fbfc11ec47c14ae8283ac",
      "source_hash": "6785116e80a76555ccf1ecbe8a53e7b5b474b5da17dbcfb87cc2613e92c7339a",
      "txt_hash": "85fd0abfca19a07efbeda158872795532eec5a3ba00064c7c862b79e840ae18a"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode and when installed, initialized and configured as specified in Sections 9.1 and 9.2 of the Security Policy.",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/January 2024_010224_0801.pdf",
    "date_sunset": null,
    "description": "The SR-OS Cryptographic Module (SRCM) provides the cryptographic algorithm functions needed to allow SR-OS to implement cryptography for those services and protocols that require it.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": "20.10R12",
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "SR-OS Cryptographic Module",
    "module_type": "Firmware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": [
      "SR-OS 20.10R12 running on 7750 SR-1 with Cavium OCTEON III CN7360",
      "SR-OS 20.10R12 running on 7750 SR-14s with Cavium OCTEON II CN6645",
      "SR-OS 20.10R12 running on 7750 SR-1s with Cavium OCTEON III CN7360",
      "SR-OS 20.10R12 running on 7750 SR-2e with Cavium OCTEON II CN6645",
      "SR-OS 20.10R12 running on 7750 SR-2s with Cavium OCTEON III CN7360",
      "SR-OS 20.10R12 running on 7750 SR-7 with Cavium OCTEON II CN6645",
      "SR-OS 20.10R12 running on 7750 SR-7s with Cavium OCTEON II CN6645 (single-user mode)",
      "SR-OS 20.10R12 running on 7750 SR-a4 with Cavium OCTEON II CN6635",
      "SR-OS 20.10R12 running on 7950 XRS-16c with Cavium OCTEON II CN6645",
      "SR-OS 20.10R12 running on 7950 XRS-20 with Cavium OCTEON II CN6645"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-01-18",
        "lab": "Acumen Security",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Nokia Corporation",
    "vendor_url": "http://www.nokia.com"
  }
}

Sections

SR-OS Cryptographic Module

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Elliptic Curves

Block cipher modes

Trusted Execution Environments

Security level

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

SR-OS Cryptographic Module

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Elliptic Curves

Block cipher modes

Device

Trusted Execution Environments

Security

Security level

Other

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data