{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "d77ce11496e0fc93", "cert_id": 5540, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "WaveLogic 5 Extreme Encryption Modem", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-10-05", "validation_type": "Initial", "lab": "Acumen Security"}], "vendor_url": "http://www.ciena.com", "vendor": "Ciena Corporation", "certificate_pdf_url": null, "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 2, "caveat": "When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Operational environment: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipEmbed", "description": "The WaveLogic 5 Extreme Encryption Modem is an optical transponder daughter card installed within a Ciena optical transponder service module. It consists of a multiple chip-embedded application specific integrated circuit (ASIC) along with optical components and supporting circuitry.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-10-04", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {"Cert": {"#5": 1, "#2": 1, "#1": 1}}, "fips_security_level": {"Level": {"Level 2": 4, "Level 1": 1}}, "fips_certlike": {"Certlike": {"SHA2-256": 7, "SHA2-384": 4, "SHA2-512": 11, "SHA2- 256": 5, "SHA2- 384": 4, "SHA2- 512": 4, "AES-256": 1, "AES-CBC (256": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 1, "AES-": 12, "AES-256": 1}, "CAST": {"CAST": 48}}, "constructions": {"MAC": {"HMAC": 2}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDHE": 1}, "ECDSA": {"ECDSA": 66}, "ECC": {"ECC": 1}}, "FF": {"DH": {"DHE": 1}}}, "pq_crypto": {}, "hash_function": {}, "crypto_scheme": {"MAC": {"MAC": 12}, "KA": {"Key Agreement": 2}}, "crypto_protocol": {"TLS": {"TLS": {"TLS v1.3": 16, "TLS": 18, "TLS 1.3": 63}}}, "randomness": {"TRNG": {"TRNG": 1}, "PRNG": {"DRBG": 56}, "RNG": {"RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 2}, "CBC": {"CBC": 1}, "CTR": {"CTR": 2}, "GCM": {"GCM": 8}}, "ecc_curve": {"NIST": {"P-384": 30, "P-521": 78, "P-256": 6}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 5}, "IBM": {"SSC": 9}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 12, "FIPS18": 13, "FIPS 186-4": 3, "FIPS 198-1": 3, "FIPS 180-4": 1, "FIPS186-4": 28, "FIPS186": 4}, "NIST": {"SP 800-38F": 1, "NIST SP 800-90B": 7, "NIST SP 800-108": 1}, "RFC": {"RFC 8446": 2}, "ISO": {"ISO/IEC 19790": 2}, "X509": {"X.509": 2}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 636984, "pdf_is_encrypted": false, "pdf_number_of_pages": 53, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260903081443-04'00'", "/ModDate": "D:20260903081443-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://csrc.nist.gov/projects/cryptographic-module-validation-program"]}}, "module_algorithms": {"_type": "Set", "elements": ["ECDSA KeyGen (FIPS186-4)A3379", "HMAC-SHA2-384A3379", "ECDSA SigVer (FIPS186-4)A3379", "AES-GCMA3379", "SHA2-256A3379", "TLS v1.3 KDFA3379", "HMAC-SHA2-256A3379", "HMAC-SHA2-512A3379", "SHA2-384A3379", "AES-KWA3379", "AES-CBCA3379", "AES-CTRA3379", "SHA2-512A3379", "KAS-ECC-SSC Sp800-56Ar3A3379", "ECDSA SigGen (FIPS186-4)A3379", "KDA TwoStep Sp800-56Cr1A3379", "AES-KWPA3379", "AES-ECBA3379", "KAS-ECC Sp800-56Ar3A3379", "KDF SP800-108A3379", "Counter DRBGA3379", "ECDSA KeyVer (FIPS186-4)A3379"]}, "policy_algorithms": {"_type": "Set", "elements": []}, "is_br1_format": false, "br1_deviations": 0, "br1_tables": null}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["ECDSA KeyGen (FIPS186-4)A3379", "HMAC-SHA2-384A3379", "ECDSA SigVer (FIPS186-4)A3379", "AES-GCMA3379", "SHA2-256A3379", "TLS v1.3 KDFA3379", "HMAC-SHA2-256A3379", "HMAC-SHA2-512A3379", "SHA2-384A3379", "AES-KWA3379", "AES-CBCA3379", "AES-CTRA3379", "SHA2-512A3379", "KAS-ECC-SSC Sp800-56Ar3A3379", "ECDSA SigGen (FIPS186-4)A3379", "KDA TwoStep Sp800-56Cr1A3379", "AES-KWPA3379", "AES-ECBA3379", "KAS-ECC Sp800-56Ar3A3379", "KDF SP800-108A3379", "Counter DRBGA3379", "ECDSA KeyVer (FIPS186-4)A3379"]}, "extracted_versions": {"_type": "Set", "elements": ["5"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": false, "source_hash": "ed20055d1b21224eecbff591577c36bab4506683e1418a152a71476cef543ea0", "txt_hash": "ef586c90fa5a9e9ba8b0282ce1ed0eba1b5afd6c1a4a504b3ccf1908548d8f1a", "json_hash": null}}}