This page was not yet optimized for use on mobile devices.

Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.

	PIX 525 and PIX 535	PIX 525 and PIX 535
cert_id	872	758
dgst	b543b2a3edcc48cc	f15223dcc0da9020
heuristics/algorithms	HMAC#15, RSA#107, SHS#285, AES#209, HMAC#283, RSA#242, AES#536, RNG#309, Triple-DES#298, Triple-DES#538, SHS#606	HMAC#15, RSA#107, SHS#285, HMAC#124, SHS#393, Triple-DES#384, AES#209, RNG#143, DSA#150, Triple-DES#298, DSA#152, RSA#105, AES#320
heuristics/cpe_matches	cpe:2.3:h:cisco:pix-535:-:::::::, cpe:2.3:h:cisco:pix-525:-:::::::	cpe:2.3:h:cisco:pix-535:-:::::::, cpe:2.3:h:cisco:pix-525:-:::::::
heuristics/direct_transitive_cves	{}	{}
heuristics/extracted_versions	7.2.2.18	7.0.4
heuristics/indirect_transitive_cves	{}	{}
heuristics/module_processed_references/directly_referenced_by	{}	{}
heuristics/module_processed_references/directly_referencing	{}	{}
heuristics/module_processed_references/indirectly_referenced_by	{}	{}
heuristics/module_processed_references/indirectly_referencing	{}	{}
heuristics/module_prunned_references	{}	{}
heuristics/policy_processed_references/directly_referenced_by	{}	1627
heuristics/policy_processed_references/directly_referencing	{}	{}
heuristics/policy_processed_references/indirectly_referenced_by	{}	1627
heuristics/policy_processed_references/indirectly_referencing	{}	{}
heuristics/policy_prunned_references	{}	{}
heuristics/related_cves	{}	{}
heuristics/verified_cpe_matches	{}	{}
pdf_data/keywords/fips_cert_id
pdf_data/keywords/fips_security_level	Level: Level 1: 4	Level: Level 1: 4
pdf_data/keywords/fips_certlike	Certlike: AES 536: 1 HMAC SHA-1: 2 HMAC SHA-1 283: 1 HMAC SHA-1 KAT 12: 1 HMAC-SHA-1: 8 HMAC-SHA1: 6 RSA 13: 1 RSA 242: 1 SHA-1: 8 SHA-1 283: 1 SHA-1 606: 1 SHA-1 KAT 12: 1	Certlike: AES 320: 1 DES 384 298: 1 DSA 13: 1 DSA 150: 1 HMAC SHA-1: 1 HMAC SHA-1 124: 1 HMAC SHA-1 KAT 12: 1 HMAC-SHA1: 2 RSA 105: 1 SHA-1: 7 SHA-1 124: 1 SHA-1 393: 1 SHA-1 KAT 12: 1
pdf_data/keywords/vendor	Broadcom: Broadcom: 2 Cisco: Cisco: 126 Cisco Systems: 12 Cisco Systems, Inc: 11	Broadcom: Broadcom: 2 Cisco: Cisco: 118 Cisco Systems: 9 Cisco Systems, Inc: 8
pdf_data/keywords/eval_facility
pdf_data/keywords/symmetric_crypto	AES_competition: AES: AES: 10 RC: RC4: 1 DES: 3DES: TDES: 11 DES: DES: 6 constructions: MAC: HMAC: 5	AES_competition: AES: AES: 10 RC: RC4: 1 DES: 3DES: Triple-DES: 1 DES: DES: 15 constructions: MAC: HMAC: 5
pdf_data/keywords/asymmetric_crypto	ECC: ECDH: ECDH: 9 FF: DH: DH: 8 Diffie-Hellman: 7	FF: DH: DH: 5 Diffie-Hellman: 2 DSA: DSA: 9
pdf_data/keywords/pq_crypto
pdf_data/keywords/hash_function	MD: MD5: MD5: 2 SHA: SHA1: SHA-1: 11	MD: MD5: MD5: 2 SHA: SHA1: SHA-1: 10
pdf_data/keywords/crypto_scheme	KA: Key agreement: 2 KEX: Key Exchange: 1	KA: Key agreement: 1 KEX: Key Exchange: 1
pdf_data/keywords/crypto_protocol	IKE: IKE: 12 PGP: PGP: 4 SSH: SSH: 9 TLS: SSL: SSL: 2 TLS: TLS: 9 VPN: VPN: 8	IKE: IKE: 11 PGP: PGP: 4 SSH: SSH: 9 TLS: SSL: SSL: 2 TLS: TLS: 8 VPN: VPN: 7
pdf_data/keywords/randomness	PRNG: PRNG: 3 RNG: RNG: 2	PRNG: PRNG: 3 RNG: RNG: 2
pdf_data/keywords/cipher_mode
pdf_data/keywords/ecc_curve	NIST: K-163: 1
pdf_data/keywords/crypto_engine
pdf_data/keywords/tls_cipher_suite
pdf_data/keywords/crypto_library
pdf_data/keywords/vulnerability
pdf_data/keywords/side_channel_analysis
pdf_data/keywords/device_model
pdf_data/keywords/tee_name
pdf_data/keywords/os_name
pdf_data/keywords/cplc_data
pdf_data/keywords/ic_data_group
pdf_data/keywords/standard_id	FIPS: FIPS 140-2: 44 FIPS 74: 1 FIPS 81: 1 FIPS PUB 140-2: 1 X509: X.509: 1	FIPS: FIPS 140-2: 41 FIPS 74: 1 FIPS 81: 1
pdf_data/keywords/javacard_version
pdf_data/keywords/javacard_api_const
pdf_data/keywords/javacard_packages
pdf_data/keywords/certification_process
pdf_data/policy_metadata	/Author: Keith Symmers /CreationDate: D:20071108131731-05'00' /Creator: FrameMaker 5.5.6p145 /ModDate: D:20071127164408-05'00' /Producer: Acrobat Distiller 6.0 (Windows) /Title: PIX 525-535 Security Policy 7_2 v1_7.fm pdf_file_size_bytes: 361177 pdf_hyperlinks: http://www.cisco.com, http://www.cisco.com/en/US/products/index.html, mailto:[email protected], http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/tsd_products_support_series_home.html, http://www.cisco.com/go/psirt, http://www.cisco.com/ipj, http://www.cisco.com/en/US/learning/index.html, http://www.cisco.com/go/marketplace/, http://www.cisco.com/go/guide, http://www.cisco.com/techsupport/servicerequest, http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_data_sheet09186a00800b0d85.html, http://www.ciscopress.com, http://www.cisco.com/techsupport/contacts, http://www.cisco.com/discuss/networking, http://www.cisco.com/en/US/products/products_psirt_rss_feed.html, http://www.cisco.com/go/iqmagazine, mailto:[email protected], http://csrc.ncsl.nist.gov/cryptval/, http://ciscoiq.texterity.com/ciscoiq/sample/, http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html, http://www.cisco.com/public/countries_languages.shtml, http://www.cisco.com/en/US/products/sw/secursw/ps2120/tsd_products_support_series_home.html, http://www.cisco.com/techsupport, http://www.cisco.com/packet, http://csrc.nist.gov/cryptval/, mailto:[email protected], http://tools.cisco.com/RPF/register/register.do pdf_is_encrypted: False pdf_number_of_pages: 25	/Author: Keith Symmers /CreationDate: D:20070309104450-05'00' /Creator: PScript5.dll Version 5.2.2 /ModDate: D:20070309104450-05'00' /Producer: Acrobat Distiller 7.0.5 (Windows) /Title: PIX 525-535 Security Policy - Level 1 - Mar 07.fm pdf_file_size_bytes: 325013 pdf_hyperlinks: {} pdf_is_encrypted: False pdf_number_of_pages: 24
state/module_download_ok	True	True
state/module_extract_ok	True	True
state/policy_convert_garbage	False	False
state/policy_convert_ok	True	True
state/policy_download_ok	True	True
state/policy_extract_ok	True	True
state/policy_pdf_hash	Different	Different
state/policy_txt_hash	Different	Different
web_data/caveat	When operated in FIPS mode	When operated in FIPS mode
web_data/certificate_pdf_url	https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/140crt872.pdf	https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/140crt758.pdf
web_data/date_sunset
web_data/description	The market-leading Cisco PIX and ASA Security Appliance Series deliver robust user and application policy enforcement, multi-vector attack protection, and secure connectivity services in cost-effective, easy-to-deploy solutions. Cisco PIX Security Appliances and ASA 5500 Series Adaptive Security Appliances provide comprehensive security, performance, and reliability for network environments of all sizes.	The market-leading Cisco PIX and ASA Security Appliance Series deliver robust user and application policy enforcement, multi-vector attack protection, and secure connectivity services in cost-effective, easy-to-deploy solutions. Cisco PIX Security Appliances and ASA 5500 Series Adaptive Security Appliances provide comprehensive security, performance, and reliability for network environments of all sizes.
web_data/embodiment	Multi-Chip Stand Alone	Multi-Chip Stand Alone
web_data/exceptions	Roles, Services, and Authentication: Level 2, Design Assurance: Level 2	Roles, Services, and Authentication: Level 2, Design Assurance: Level 2
web_data/fw_versions	7, ., 2, ., 2, ., 1, 8	7, ., 0, ., 4, , ,
web_data/historical_reason	RNG SP800-131A Revision 1 Transition	RNG SP800-131A Revision 1 Transition
web_data/hw_versions	5, 2, 5, , a, n, d, , 5, 3, 5	5, 2, 5, , a, n, d, , 5, 3, 5
web_data/level	1	1
web_data/mentioned_certs
web_data/module_name	PIX 525 and PIX 535	PIX 525 and PIX 535
web_data/module_type	Hardware	Hardware
web_data/revoked_link	None	None
web_data/revoked_reason	None	None
web_data/standard	FIPS 140-2	FIPS 140-2
web_data/status	historical	historical
web_data/sw_versions	None	None
web_data/tested_conf	[]	[]
web_data/validation_history	date: 27.11.2007 lab: SAIC-VA validation_type: Initial date: 28.05.2010 lab: validation_type: Update date: 23.02.2012 lab: validation_type: Update	date: 11.04.2007 lab: SAIC-VA validation_type: Initial date: 28.05.2010 lab: validation_type: Update date: 23.02.2012 lab: validation_type: Update
web_data/vendor	Cisco Systems, Inc.	Cisco Systems, Inc.
web_data/vendor_url	http://www.cisco.com	http://www.cisco.com