Nokia 1830 Photonic Service Switch (PSS) R23.3 Nokia 1830 Photonic Service Interconnect – Modular (PSI-M) R23.3

Certificate details

Certificate ID #4751
Status active
Validation dates 05.08.2024
Sunset date 31-08-2029
Standard FIPS 140-3
Security level 2
Type Hardware
Embodiment Multi-Chip Stand Alone
Caveat Interim Validation.The tamper evident seals installed as indicated in the Security Policy
Exceptions
  • Roles, services, and authentication: Level 3
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description 1830 Photonic Service Switch (PSS): Scalable optimized end-to-end optical transport solutions for metro, regional and long-haul networks. 1830 Photonic Service Switch - x( PSS -x): Scalable and efficient P-OTN switching for multi-protocol wholesale services. 1830 photonic service interconnect (PSI): Scalable disaggregated compact modular platforms for scalable DCI and optical transport applications.
Version (Hardware) Hardware Version: PSS-8 Chassis (WOMPU00CRA / 3KC48901AA ) [1], PSS-16II Chassis (WOMR300BRA / 3KC48960AC) [2], PSS-32 Chassis (WOM4V10GRA / 8DG59319AB) [3], PSS-24x Chassis (WOMP410CRB / 3KC50378AA) [4] and PSI-M Chassis (3KC81791AA) [5]; 8EC2 Card (3KC48820AA) [1], 32EC2 Card (8DG63979AA) [2, 3], CEC2 Card (3KC50335AA) [4] and MEC2 Card (3KC81775AA) [5]; 11QPEN4 (8DG60996AA) [1-3], S13X100E (8DG63988AA) [1-3], 2UC400E (3KC60522AA) [4], DFC12E (3KC82081AA) [5] and 8P20 (3KC49240AA) [1-3]; MFC24X Multi-Function Card (3KC50330AA) [4]; Filler Card (8DG59418AA) [1-3], Filler Card (3KC59819AC) [4] and Filler Card (3KC81780AA) [5]; Security Label Kit (8DG-6509-AAAA) [1-5];
Version (Firmware) 1830PSS ECN R23.3, 1830PSI-M ECN R23.3
Vendor Nokia of America Corporation (Nokia) https://www.nokia.com/
Lab EWA - Canada
Algorithms
  • AES-CBCA3369
  • AES-CFB128A2502
  • AES-CTRAES 3844
  • AES-ECBAES 3844
  • AES-GCMA3369
  • AES-GMACAES 3844
  • Counter DRBGA3369
  • ECDSA KeyGen (FIPS186-4)A3369
  • ECDSA KeyVer (FIPS186-4)A3369
  • ECDSA SigGen (FIPS186-4)A3369
  • ECDSA SigVer (FIPS186-4)A3369
  • HMAC-SHA-1A2502
  • HMAC-SHA2-256A3369
  • HMAC-SHA2-384A3369
  • HMAC-SHA2-512A3369
  • KAS-ECC-SSC Sp800-56Ar3A3369
  • KAS-FFC-SSC Sp800-56Ar3A3369
  • KDF SNMPA2502
  • KDF SSHA3369
  • KDF TLSA3369
  • RSA KeyGen (FIPS186-4)A3369
  • RSA SigGen (FIPS186-4)A3369
  • RSA SigVer (FIPS186-4)A3369
  • Safe Primes Key GenerationA3369
  • Safe Primes Key VerificationA3369
  • SHA-1A3369
  • SHA2-256A3369
  • SHA2-384A3369
  • SHA2-512A3369
  • SHA3-256A3310
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-256, AES-, AES256, AES-128, Rijndael, E2, HMAC
Asymmetric Algorithms
RSA 4096, RSA-PSS, ECDH, ECDSA, ECC, DH
Hash functions
SHA-1, SHA-256, SHA-512, SHA-384, SHA256, SHA3-256, MD5
Protocols
SSH, SSHv2, SSL, TLS v1.2, TLS, TLS 1.2, TLSv1.2
Randomness
DRBG, RBG
Libraries
OpenSSL
Elliptic Curves
P-256, P-384, P-521, curve P-256
Block cipher modes
ECB, CBC, CTR, GCM

Trusted Execution Environments
SSC

Security level
level 2

Author Raak, Dietmar (Nokia - DE/Nuremberg)
Creation date D:20240731142118-04'00'
Modification date D:20240731142118-04'00'
Pages 77
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4751,
  "dgst": "bca06ec2f99bc26e",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "SHA3-256A3310",
        "AES-CTRAES 3844",
        "#A2591",
        "ECDSA SigGen (FIPS186-4)A3369",
        "KDF SNMPA2502",
        "SHA2-256A3369",
        "ECDSA KeyGen (FIPS186-4)A3369",
        "Safe Primes Key GenerationA3369",
        "#A2538",
        "KDF TLSA3369",
        "RSA SigVer (FIPS186-4)A3369",
        "HMAC-SHA2-512A3369",
        "RSA KeyGen (FIPS186-4)A3369",
        "#A2415",
        "AES-ECBAES 3844",
        "SHA2-512A3369",
        "HMAC-SHA2-384A3369",
        "AES-CFB128A2502",
        "KAS-FFC-SSC Sp800-56Ar3A3369",
        "HMAC-SHA2-256A3369",
        "ECDSA KeyVer (FIPS186-4)A3369",
        "#A2537",
        "AES-GCMA3369",
        "#A2502",
        "#A24156",
        "AES-GMACAES 3844",
        "Safe Primes Key VerificationA3369",
        "HMAC-SHA-1A2502",
        "SHA-1A3369",
        "#A2539",
        "#A3369",
        "KAS-ECC-SSC Sp800-56Ar3A3369",
        "RSA SigGen (FIPS186-4)A3369",
        "#A2599",
        "Counter DRBGA3369",
        "#A3310",
        "AES-CBCA3369",
        "SHA2-384A3369",
        "#A2416",
        "KDF SSHA3369",
        "ECDSA SigVer (FIPS186-4)A3369"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "23.3"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 31,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 3
          },
          "ECDH": {
            "ECDH": 10
          },
          "ECDSA": {
            "ECDSA": 14
          }
        },
        "FF": {
          "DH": {
            "DH": 11
          }
        },
        "RSA": {
          "RSA 4096": 1,
          "RSA-PSS": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 4
        },
        "CTR": {
          "CTR": 8
        },
        "ECB": {
          "ECB": 7
        },
        "GCM": {
          "GCM": 17
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 3
        }
      },
      "crypto_protocol": {
        "SSH": {
          "SSH": 45,
          "SSHv2": 4
        },
        "TLS": {
          "SSL": {
            "SSL": 2
          },
          "TLS": {
            "TLS": 45,
            "TLS 1.2": 2,
            "TLS v1.2": 1,
            "TLSv1.2": 2
          }
        }
      },
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 13,
          "P-384": 10,
          "P-521": 12,
          "curve P-256": 1
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 5,
          "#10": 1,
          "#11": 2,
          "#12": 2,
          "#13": 1,
          "#14": 1,
          "#15": 1,
          "#2": 6,
          "#26": 1,
          "#3": 5,
          "#4": 4,
          "#5": 1,
          "#6": 3,
          "#7": 2,
          "#8": 2,
          "#9": 2
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 3844": 9,
          "AES- 128": 1,
          "AES-128": 7,
          "AES-256": 15,
          "AES256": 1,
          "HMAC- SHA256": 2,
          "HMAC-SHA-1": 4,
          "HMAC-SHA-1-96": 2,
          "HMAC-SHA1": 2,
          "HMAC-SHA256": 6,
          "PKCS#1": 4,
          "RSA 4096": 1,
          "SHA- 256": 1,
          "SHA- 384": 1,
          "SHA- 512": 1,
          "SHA-1": 8,
          "SHA-256": 4,
          "SHA-384": 1,
          "SHA-512": 2,
          "SHA2- 256": 1,
          "SHA2-256": 12,
          "SHA2-384": 5,
          "SHA2-512": 5,
          "SHA256": 2,
          "SHA3-256": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "level 2": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 1
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 8
          },
          "SHA2": {
            "SHA-256": 4,
            "SHA-384": 1,
            "SHA-512": 2,
            "SHA256": 2
          },
          "SHA3": {
            "SHA3-256": 2
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 22
        },
        "RNG": {
          "RBG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 92,
          "FIPS 180-4": 6,
          "FIPS 186-4": 9,
          "FIPS 197": 13,
          "FIPS 198-1": 7,
          "FIPS 202": 1,
          "FIPS PUB 140-3": 3
        },
        "ISO": {
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "NIST SP 800-38D": 1,
          "SP 800-133": 3,
          "SP 800-135": 2,
          "SP 800-38A": 9,
          "SP 800-38D": 2,
          "SP 800-38F": 5
        },
        "PKCS": {
          "PKCS#1": 2
        },
        "RFC": {
          "RFC 5246": 1,
          "RFC 5288": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 50,
            "AES-": 7,
            "AES-128": 7,
            "AES-256": 15,
            "AES256": 1
          },
          "E2": {
            "E2": 4
          },
          "Rijndael": {
            "Rijndael": 1
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 6
          }
        }
      },
      "tee_name": {
        "IBM": {
          "SSC": 2
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "SHA3-256A3310",
        "AES-CTRAES 3844",
        "KDF SNMPA2502",
        "ECDSA SigGen (FIPS186-4)A3369",
        "SHA2-256A3369",
        "ECDSA KeyGen (FIPS186-4)A3369",
        "Safe Primes Key GenerationA3369",
        "KDF TLSA3369",
        "RSA SigVer (FIPS186-4)A3369",
        "HMAC-SHA2-512A3369",
        "RSA KeyGen (FIPS186-4)A3369",
        "AES-ECBAES 3844",
        "SHA2-512A3369",
        "HMAC-SHA2-384A3369",
        "AES-CFB128A2502",
        "KAS-FFC-SSC Sp800-56Ar3A3369",
        "ECDSA KeyVer (FIPS186-4)A3369",
        "HMAC-SHA2-256A3369",
        "AES-GCMA3369",
        "AES-GMACAES 3844",
        "Safe Primes Key VerificationA3369",
        "HMAC-SHA-1A2502",
        "SHA-1A3369",
        "KAS-ECC-SSC Sp800-56Ar3A3369",
        "RSA SigGen (FIPS186-4)A3369",
        "Counter DRBGA3369",
        "AES-CBCA3369",
        "SHA2-384A3369",
        "KDF SSHA3369",
        "ECDSA SigVer (FIPS186-4)A3369"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A2537",
        "#A3369",
        "#A2415",
        "#A2591",
        "#A2502",
        "#A2599",
        "#A3310",
        "#A24156",
        "#A2416",
        "#A2538",
        "#A2539"
      ]
    },
    "policy_metadata": {
      "/Author": "Raak, Dietmar (Nokia - DE/Nuremberg)",
      "/CreationDate": "D:20240731142118-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20240731142118-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 3100758,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://documentation.nokia.com/aces/htdocs/3KC-71311-PBAA-SJZZA/3KC-71311-PBAA-SJZZA/index.html",
          "https://documentation.nokia.com/aces/htdocs/3KC-82427-AAAA/index.html",
          "https://documentation.nokia.com/aces/htdocs/3KC-71311-PBAA-SMZZA/3KC-71311-PBAA-SMZZA/index.html",
          "https://documentation.nokia.com/aces/cgi-bin/dbaccessfilename.cgi/3KC71311PBAATHZZA_V1_1830%20Photonic%20Service%20Switch%20(PSS)%20Release%2022.12%20Command%20Line%20Interface%20Guide.pdf",
          "https://documentation.nokia.com/aces/htdocs/3KC-71311-PBAA-TJZZA/3KC-71311-PBAA-TJZZA/index.html",
          "https://documentation.nokia.com/aces/htdocs/3KC-71311-PBAA-SLZZA/3KC-71311-PBAA-SLZZA/index.html"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 77
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "1e629e5dd3bc29ee611a822ae8ca6b34966636f0ad18ddb6e993ef8ecb604d85",
      "source_hash": "4d982a9c04979cb3a1aa8e72a87ee6a8984ab306e8f7dd750e210adfff60f27b",
      "txt_hash": "259059eab012089182b38f45291291f7bb642ff77ae02a4797dc240fcffb6db1"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim Validation.The tamper evident seals installed as indicated in the Security Policy",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/August 2024_010924_0336.pdf",
    "date_sunset": "2029-08-31",
    "description": "1830 Photonic Service Switch (PSS): Scalable optimized end-to-end optical transport solutions for metro, regional and long-haul networks. 1830 Photonic Service Switch - x( PSS -x): Scalable and efficient P-OTN switching for multi-protocol wholesale services. 1830 photonic service interconnect (PSI): Scalable disaggregated compact modular platforms for scalable DCI and optical transport applications.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Roles, services, and authentication: Level 3",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": "1830PSS ECN R23.3, 1830PSI-M ECN R23.3",
    "historical_reason": null,
    "hw_versions": "Hardware Version: PSS-8 Chassis (WOMPU00CRA / 3KC48901AA ) [1], PSS-16II Chassis (WOMR300BRA / 3KC48960AC) [2], PSS-32 Chassis (WOM4V10GRA / 8DG59319AB) [3], PSS-24x Chassis (WOMP410CRB / 3KC50378AA) [4] and PSI-M Chassis (3KC81791AA) [5]; 8EC2 Card (3KC48820AA) [1], 32EC2 Card (8DG63979AA) [2, 3], CEC2 Card (3KC50335AA) [4] and MEC2 Card (3KC81775AA) [5]; 11QPEN4 (8DG60996AA) [1-3], S13X100E (8DG63988AA) [1-3], 2UC400E (3KC60522AA) [4], DFC12E (3KC82081AA) [5] and 8P20 (3KC49240AA) [1-3]; MFC24X Multi-Function Card (3KC50330AA) [4]; Filler Card (8DG59418AA) [1-3], Filler Card (3KC59819AC) [4] and Filler Card (3KC81780AA) [5]; Security Label Kit (8DG-6509-AAAA) [1-5];",
    "level": 2,
    "mentioned_certs": {},
    "module_name": "Nokia 1830 Photonic Service Switch (PSS) R23.3 Nokia 1830 Photonic Service Interconnect \u2013 Modular (PSI-M) R23.3",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-08-05",
        "lab": "EWA - Canada",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Nokia of America Corporation (Nokia)",
    "vendor_url": "https://www.nokia.com/"
  }
}