{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "d12a4891fbf81cfb", "cert_id": 5448, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "HPE Juniper Networking vSRX Virtual Firewall", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-07-28", "validation_type": "Initial", "lab": "Teron Labs"}], "vendor_url": "http://www.juniper.net", "vendor": "HPE Juniper Networking", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2026_040826_0807.pdf", "module_type": "Software", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When installed, initialized and configured as specified in Section 11.1 of the Security Policy.", "exceptions": ["Physical security: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "The HPE Juniper Networking vSRX Virtual Firewall running Junos OS 24.4R1-S3.7 offers the functionality of Juniper's hardware SRX Series Services Gateways in a virtual machine (VM) format. It includes firewall, routing, VPN, Intrusion Detection and Prevention (IDP), and monitoring functionalities.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-07-27", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 3, "level 1": 2}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 6, "HMAC-SHA1-96": 2, "HMAC-SHA- 512": 2, "HMAC-SHA1- 96": 1, "HMAC- SHA1-96": 2, "HMAC-SHA- 1": 2, "SHA-256": 11, "SHA2-256": 11, "SHA2-384": 12, "SHA2-512": 9, "SHA-1": 5, "SHA- 256": 1, "SHA-384": 5, "SHA1-96": 2, "SHA-512": 1, "RSA 2048": 1, "RSA 3072": 1, "RSA 4096": 1, "AES-128": 1, "AES-192": 1, "AES-256": 1, "AES CBC 128/192/256": 2, "DRBG 256": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-128": 1, "AES-192": 1, "AES-256": 1, "AES-": 3, "AES": 6}, "CAST": {"CAST": 63}}, "constructions": {"MAC": {"HMAC": 54, "CBC-MAC": 1}}}, "asymmetric_crypto": {"RSA": {"RSA-2048": 3, "RSA-4096": 2, "RSA 2048": 1, "RSA 3072": 1, "RSA 4096": 1}, "ECC": {"ECDH": {"ECDH": 12}, "ECDSA": {"ECDSA": 62}, "ECC": {"ECC": 7}}, "FF": {"DH": {"Diffie-Hellman": 2, "DH": 15}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 5}, "SHA2": {"SHA-256": 11, "SHA-384": 5, "SHA-512": 1}}}, "crypto_scheme": {"MAC": {"MAC": 29}, "KEX": {"Key Exchange": 1}, "KA": {"Key agreement": 1}}, "crypto_protocol": {"SSH": {"SSH": 104, "SSHv2": 2}, "IKE": {"IKE": 93, "IKEv1": 5, "IKEv2": 5}, "IPsec": {"IPsec": 18}, "VPN": {"VPN": 1}}, "randomness": {"PRNG": {"DRBG": 62}, "RNG": {"RBG": 2}}, "cipher_mode": {"CBC": {"CBC": 2}, "CTR": {"CTR": 1}, "GCM": {"GCM": 6}}, "ecc_curve": {"NIST": {"P-256": 34, "P-384": 26, "P-521": 24}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {"OpenSSL": {"OpenSSL": 7}}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 11}, "IBM": {"SSC": 11}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 74, "FIPS186-5": 34, "FIPS 186-5": 8, "FIPS 198-1": 6, "FIPS 180-4": 7}, "NIST": {"SP 800-38A": 3, "SP 800-38D": 3, "SP 800-56A": 5, "SP 800-135": 3, "SP 800-90B": 1, "SP 800-90A": 2, "SP 800-133": 1, "SP 800-107": 1, "SP 800-56B": 1}, "ISO": {"ISO/IEC 19790:2012": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {"OutOfScope": {"out of scope": 1, "secure initialization instructions results in the module being in a non- Approved mode, which is out of scope of the validation. Mode Change Instructions and Status: Not applicable. Degraded Mode Description": 1}}}, "policy_metadata": {"pdf_file_size_bytes": 1134221, "pdf_is_encrypted": false, "pdf_number_of_pages": 65, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260724083917-04'00'", "/ModDate": "D:20260724083917-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf", "http://www.teronlabs.com/", "https://www.juniper.net/us/en/products/security/srx-series/vsrx-virtual-firewall-datasheet.html", "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=39932", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Br2.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf", "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=20055", "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=40283", "https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/305", "https://support.juniper.net/support/downloads/?p=vsrx", "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=20115", "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/entropy/E305_PublicUse.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf", "https://csrc.nist.gov/csrc/media/Projects/cryptographic-module-validation-program/documents/fips%20140-3/FIPS%20140-3%20IG.pdf", "https://www.juniper.net/documentation/product/us/en/vsrx/"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["KDF IKEv2A7673", "HMAC-SHA2-224A7322", "SHA2-384A7673", "ECDSA KeyGen (FIPS186-5)A7322", "HMAC DRBGA7179", "ECDSA SigGen (FIPS186-5)A7322", "SHA2-224A7322", "AES-CTRA7322", "DSA KeyGen (FIPS186-4)A7322", "SHA-1A7322", "HMAC-SHA2-256A7673", "Conditioning Component AES-CBC-MAC SP800-90BA2518", "AES-CBCA7673", "RSA SigVer (FIPS186-5)A7322", "HMAC-SHA-1A7322", "HMAC-SHA2-512A7673", "ECDSA SigVer (FIPS186-5)A7322", "HMAC-SHA2-384A7673", "SHA2-512A7673", "AES-GCMA7673", "KDF SSHA7322", "KAS-ECC-SSC Sp800-56Ar3A7322", "SHA2-256A7673", "Safe Primes Key GenerationA7322", "KAS-FFC-SSC Sp800-56Ar3A7322", "RSA SigGen (FIPS186-5)A7322", "ECDSA KeyVer (FIPS186-5)A7322", "Safe Primes Key VerificationA7322", "RSA KeyGen (FIPS186-5)A7322", "KDF IKEv1A7673"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "96654283f17f5494b2869d56f422fcced6d78c7ac08f79addc97f12971c1e4fc", "txt_hash": "076f7d4b9cecdf9277b61187e6809bfe45b1d403f52f1de3504cd3e0bc873408", "json_hash": null}}}