{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "c363831cbfee684f", "cert_id": 5489, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Juniper Express 4 MACsec Cryptographic Module", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-08-17", "validation_type": "Initial", "lab": "atsec information security corporation"}], "vendor_url": "http://www.juniper.net", "vendor": "Juniper Networks, Inc.", "certificate_pdf_url": null, "module_type": "Software-Hybrid", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated with module Junos\u00ae OS Evolved OpenSSL Cryptographic Module version 3.0.8 validated to FIPS 140-3 under Cert. #5400 operating in approved mode, and module Junos\u00ae OS Evolved Kernel Cryptographic Module version 2.0 validated to FIPS 140-3 under Cert. #5399, operating in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs", "exceptions": ["Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "Juniper Express 4 MACsec Cryptographic Module is composed by the MACsec blocks that are part of the Juniper Networks\u00ae Express 4 processor in hardware, which provides the AES GCM and XPN algorithm implementations for encrypting and decrypting MACsec traffic, and a device driver in software, which provides the functionality to comply with FIPS 140-3 requirements (i.e. integrity test, self-tests), as well as the API to configure the hardware component.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {"5400": 1, "5399": 1}, "historical_reason": null, "date_sunset": "2029-11-12", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {"Cert": {"#5399": 1, "#5400": 1}}, "fips_security_level": {"Level": {"Level 1": 3, "level 1": 1}}, "fips_certlike": {"Certlike": {"SHA2-256": 4, "AES-GCM Encrypt 128": 1, "AES-GCM Decrypt 128": 1}}, "vendor": {}, "eval_facility": {"atsec": {"atsec": 3}}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 18}, "CAST": {"CAST": 14}}, "constructions": {"MAC": {"HMAC": 8}}}, "asymmetric_crypto": {}, "pq_crypto": {}, "hash_function": {}, "crypto_scheme": {"MAC": {"MAC": 5}}, "crypto_protocol": {}, "randomness": {"RNG": {"RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 1}, "CBC": {"CBC": 1}, "GCM": {"GCM": 8}}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {"OpenSSL": {"OpenSSL": 5}}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 37, "FIPS PUB 140-3": 2, "FIPS 198-1": 1}, "NIST": {"SP 800-140B": 1, "SP 800-38D": 3}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 703504, "pdf_is_encrypted": false, "pdf_number_of_pages": 27, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260817081112-04'00'", "/ModDate": "D:20260817081112-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements", "http://www.atsec.com/", "http://www.juniper.net/", "https://1.ieee802.org/security/802-1ae/", "https://doi.org/10.6028/NIST.SP.800-38D", "https://doi.org/10.6028/NIST.FIPS.140-3"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["AES-XPNA4089", "AES-GCMA4089", "HMAC-SHA2-256A4246"]}, "extracted_versions": {"_type": "Set", "elements": ["4"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": ["5399", "5400"]}, "module_prunned_references": {"_type": "Set", "elements": ["5399", "5400"]}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": {"_type": "Set", "elements": ["5399", "5400"]}, "indirectly_referencing": {"_type": "Set", "elements": ["5399", "5400"]}}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": {"_type": "Set", "elements": ["5399", "5400"]}, "indirectly_referencing": {"_type": "Set", "elements": ["5399", "5400"]}}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "84cfcd3e06193eea49e136338f09abed2e6234c21daf1c5039e4899cd48613c0", "txt_hash": "992bcc938d18a63eb881ae46828ef42a43263bfd18b1805e99e0f9d0976c7f74", "json_hash": null}}}