{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "b06cbb3cbf7184f5", "cert_id": 5279, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Juniper Networks MX10003 3D Universal Edge Router", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-05-20", "validation_type": "Initial", "lab": "Acumen Security"}], "vendor_url": "http://www.juniper.net", "vendor": "Juniper Networks, Inc.", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/May 2026_030626_0716.pdf", "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Roles, services, and authentication: Level 3", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "The cryptographic module provides for an encrypted connection, using SSH, between the management station and the module. The cryptographic module also provides for an encrypted connection, using MACsec, between devices.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-05-19", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"level 1": 6, "Level 1": 4, "Level 3": 1}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 6, "HMAC- SHA-1": 2, "SHA2-256": 21, "SHA2-384": 3, "SHA2-512": 12, "SHA-1": 8, "SHA2- 256": 3, "SHA2- 512": 2, "SHA-2- 512": 1, "RSA 2048": 1, "RSA2": 1, "AES 4545": 9, "AES-128": 1, "AES-192": 1, "AES- 256": 2, "AES CBC 128, 192": 1, "AES CTR 128": 1, "AES- 128": 1, "AES- 192": 1, "DRBG2": 14, "DRBG 2": 3}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 19, "AES-128": 1, "AES-192": 1, "AES-": 20}, "CAST": {"CAST": 67}}, "miscellaneous": {"Blowfish": {"Blowfish": 3}}, "constructions": {"MAC": {"HMAC": 19, "CMAC": 8}}}, "asymmetric_crypto": {"RSA": {"RSA 2048": 1}, "ECC": {"ECDH": {"ECDH": 44}, "ECDSA": {"ECDSA": 76}}, "FF": {"DH": {"Diffie-Hellman": 8, "DH": 44}, "DSA": {"DSA": 3}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 8}}, "RIPEMD": {"RIPEMD160": 2}}, "crypto_scheme": {"MAC": {"MAC": 5}, "KA": {"Key Agreement": 6}}, "crypto_protocol": {"SSH": {"SSH": 190, "SSHv2": 8}}, "randomness": {"PRNG": {"DRBG": 23}, "RNG": {"RBG": 2}}, "cipher_mode": {"CBC": {"CBC": 8}, "CTR": {"CTR": 2}, "GCM": {"GCM": 5}}, "ecc_curve": {"NIST": {"P-256": 54, "P-384": 24, "P-521": 24, "prime256v1": 2}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 9}, "IBM": {"SSC": 20}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 14, "FIPS 186-5": 7, "FIPS186-5": 12, "FIPS 198-1": 4, "FIPS 180-4": 6, "FIPS18": 6}, "NIST": {"SP 800-38A": 3, "SP 800-38B": 1, "SP 800-38D": 4, "SP 800-38F": 1, "SP 800-90B": 1, "SP 800-90A": 1, "SP 800-56A": 4, "SP 800-108": 1, "SP 800-135": 1, "NIST SP 800-108": 2, "NIST SP 800-90B": 5}, "X509": {"X.509": 2}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 764709, "pdf_is_encrypted": false, "pdf_number_of_pages": 67, "/Author": "Omkar X. Salunkhe  Intertek", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260515121206-04'00'", "/ModDate": "D:20260515121206-04'00'", "/Producer": "Microsoft\u00ae Word for Microsoft 365", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/entropy/E87_PublicUse.pdf", "https://csrc.nist.gov/projects/cryptographic-module-validation-program"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["AES-GCMAES 4545", "Conditioning Component AES-CBC-MAC SP800-90BA2165", "AES-CMACA5481", "RSA KeyGen (FIPS186-5)A6776", "HMAC-SHA2-512A6776", "Safe Primes Key VerificationA6776", "SHA2-256A6776", "KDF SSHA6776", "ECDSA SigVer (FIPS186-5)A6776", "HMAC-SHA-1A6776", "KAS-FFC-SSC Sp800-56Ar3A6776", "RSA SigGen (FIPS186-5)A6776", "HMAC-SHA2-256A6776", "SHA2-512A6776", "ECDSA KeyGen (FIPS186-5)A6776", "AES-KWA5481", "AES-XPNAES 4545", "KAS-ECC-SSC Sp800-56Ar3A6776", "KDF SP800-108A5481", "SHA-1A6776", "AES-CTRA6776", "Safe Primes Key GenerationA6776", "ECDSA KeyVer (FIPS186-5)A6776", "HMAC DRBGA6775", "ECDSA SigGen (FIPS186-5)A6776", "RSA SigVer (FIPS186-5)A6776", "AES-CBCA6776"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": {"_type": "Set", "elements": ["cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*", "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*"]}, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "d9fac2a0155a09d08489bbe0f949faf24b14294d756c39eef19d624d859871af", "txt_hash": "8749c93d46db808a5957bfe1cd6aef1b6205131df5242189dea5c2c712b588e2", "json_hash": null}}}