SBC 5400 Session Border Controller

Certificate #5043

Webpage information

Status active
Validation dates 22.07.2025
Sunset date 21-07-2030
Standard FIPS 140-3
Security level 2
Type Hardware
Embodiment Multi-Chip Stand Alone
Caveat When installed, initialized and configured as specified in Section 11.1 of the Security Policy
Exceptions
  • Roles, services, and authentication: Level 3
  • Operational environment: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description The SBC 5400 Session Border Controller is a high-performance air-cooled, 2U, IP encryption appliance that provides secure SIP-based communications with robust security, reduced latency, real-time encryption (VOIP signaling and media traffic), media transcoding, flexible SIP session routing, and policy management.
Vendor Ribbon Communications, Inc.
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Security policy

Symmetric Algorithms
AES-128, AES, CAST, DES, HMAC
Asymmetric Algorithms
ECDH, ECDSA, ECC, Diffie-Hellman, DH, DSA
Hash functions
SHA-1, SHA3-256, PBKDF, PBKDF2
Schemes
MAC, Key Exchange, Key exchange, Key Agreement
Protocols
SSH, TLS, TLS v1.2, IKEv1, IKE, IKEv2, IPsec
Randomness
DRBG, RNG
Elliptic Curves
P-256, P-384, P-521, P-224, B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, B-163, K-163
Block cipher modes
ECB, CBC, CTR, GCM

Trusted Execution Environments
PSP

Security level
Level 1, Level 2, level 2
Side-channel analysis
malfunction

Standards
FIPS 140-3, FIPS186-4, FIPS 186-4, FIPS186-5, FIPS 186-5, FIPS 198-1, FIPS 180-4, FIPS 202, SP 800-38A, SP 800-38D, SP 800-90A, SP 800-56A, SP 800-135, SP 800-56B, SP 800-132, SP 800-133, NIST SP 800-38D, NIST SP 800-132, PKCS 1, PKCS #12, PKCS #1, PKCS#12, RFC7627, RFC 5288, RFC 7714, ISO/IEC 19790:2012

File metadata

Title FIPS 140-3 Non-Proprietary Security Policy
Author Corsec Security, Inc.
Creation date D:20250725095717-04'00'
Modification date D:20250725095918-04'00'
Pages 69
Creator Acrobat PDFMaker 25 for Word
Producer Adobe PDF Library 25.1.51

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates Feed

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5043,
  "dgst": "ea65024247a2ed0e",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": []
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "5400"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          },
          "ECDH": {
            "ECDH": 47
          },
          "ECDSA": {
            "ECDSA": 58
          }
        },
        "FF": {
          "DH": {
            "DH": 48,
            "Diffie-Hellman": 6
          },
          "DSA": {
            "DSA": 7
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 4
        },
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 14
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 71,
          "IKEv1": 9,
          "IKEv2": 3
        },
        "IPsec": {
          "IPsec": 64
        },
        "SSH": {
          "SSH": 97
        },
        "TLS": {
          "TLS": {
            "TLS": 71,
            "TLS v1.2": 37
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 11
        },
        "KEX": {
          "Key Exchange": 1,
          "Key exchange": 4
        },
        "MAC": {
          "MAC": 5
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "B-163": 2,
          "B-233": 6,
          "B-283": 6,
          "B-409": 6,
          "B-571": 6,
          "K-163": 2,
          "K-233": 6,
          "K-283": 6,
          "K-409": 4,
          "K-571": 6,
          "P-224": 16,
          "P-256": 24,
          "P-384": 22,
          "P-521": 20
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 2,
          "#12": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "- PKCS 1": 2,
          "AES-128": 2,
          "AES-GCM IV27": 1,
          "HMAC-SHA-1": 12,
          "PKCS #1": 4,
          "PKCS #12": 2,
          "PKCS 1": 2,
          "PKCS#12": 4,
          "SHA-1": 8,
          "SHA2- 512": 2,
          "SHA2-224": 7,
          "SHA2-256": 15,
          "SHA2-384": 11,
          "SHA2-512": 12,
          "SHA3-256": 5
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "Level 2": 2,
          "level 2": 1
        }
      },
      "hash_function": {
        "PBKDF": {
          "PBKDF": 8,
          "PBKDF2": 3
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 8
          },
          "SHA3": {
            "SHA3-256": 5
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 34
        },
        "RNG": {
          "RNG": 3
        }
      },
      "side_channel_analysis": {
        "FI": {
          "malfunction": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 10,
          "FIPS 180-4": 6,
          "FIPS 186-4": 8,
          "FIPS 186-5": 7,
          "FIPS 198-1": 6,
          "FIPS 202": 1,
          "FIPS186-4": 25,
          "FIPS186-5": 30
        },
        "ISO": {
          "ISO/IEC 19790:2012": 2
        },
        "NIST": {
          "NIST SP 800-132": 3,
          "NIST SP 800-38D": 1,
          "SP 800-132": 1,
          "SP 800-133": 1,
          "SP 800-135": 6,
          "SP 800-38A": 6,
          "SP 800-38D": 2,
          "SP 800-56A": 3,
          "SP 800-56B": 1,
          "SP 800-90A": 1
        },
        "PKCS": {
          "PKCS #1": 2,
          "PKCS #12": 1,
          "PKCS 1": 2,
          "PKCS#12": 2
        },
        "RFC": {
          "RFC 5288": 1,
          "RFC 7714": 1,
          "RFC7627": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 20,
            "AES-128": 2
          },
          "CAST": {
            "CAST": 56
          }
        },
        "DES": {
          "DES": {
            "DES": 1
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 7
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 12
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Corsec Security, Inc.",
      "/Comments": "",
      "/Company": "Corsec Security, Inc.",
      "/ContentTypeId": "0x010100F0033FC9EC5FDD48A2BABA694750568F",
      "/CreationDate": "D:20250725095717-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 25 for Word",
      "/Keywords": "",
      "/MediaServiceImageTags": "",
      "/ModDate": "D:20250725095918-04\u002700\u0027",
      "/Producer": "Adobe PDF Library 25.1.51",
      "/SourceModified": "",
      "/Subject": "",
      "/Title": "FIPS 140-3 Non-Proprietary Security Policy",
      "/_Copyright": "2025",
      "/_Document Date": "July 18, 2025",
      "/_Document Version": "0.6",
      "/_FIPS Security Level": "2",
      "/_Module Embodiment": "MultiChipStand",
      "/_Module Name (long)": "SBC 5400 Session Border Controller",
      "/_Module Name (short)": "SBC 5400",
      "/_Module Type": "hardware",
      "/_Module Version Number": "10.01.06",
      "/_Vendor Name (long)": "Ribbon Communications, Inc.",
      "/_Vendor Name (short)": "Ribbon",
      "pdf_file_size_bytes": 2047907,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=16617",
          "https://support.sonus.net/display/SBXDOC101/EMA+User+Guide",
          "http://www.corsec.com/",
          "https://support.sonus.net/display/SBXDOC101/SBC+Core+10.1.x+Documentation",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=17667",
          "https://doc.rbbn.com/spaces/SBXDOC101/pages/291945402/Upgrading+SBC+Core+Software",
          "https://doc.rbbn.com/display/SBXDOC101/Setting+Up+Physical+Connection+between+High+Availability+Nodes",
          "https://support.sonus.net/display/SBXDOC101/CLI+Reference+Guide",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=17668",
          "http://www.ribboncommunciations.com/",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=17665",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=17669",
          "https://support.sonus.net/display/SBXDOC101/Installing+SBC+5400+Hardware",
          "mailto:[email protected]",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=17666"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 69
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "5e8c74a34d9d1f2523eebb1092bcf3bcef8e9c7cceb6bcf08f22de6681fd9ae3",
    "policy_txt_hash": "2389fc3cdc49d6ddb1ef05efed49c5fe1cbca681c7d074122aeeb92458bd379e"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When installed, initialized and configured as specified in Section 11.1 of the Security Policy",
    "certificate_pdf_url": null,
    "date_sunset": "2030-07-21",
    "description": "The SBC 5400 Session Border Controller is a high-performance air-cooled, 2U, IP encryption appliance that provides secure SIP-based communications with robust security, reduced latency, real-time encryption (VOIP signaling and media traffic), media transcoding, flexible SIP session routing, and policy management.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Roles, services, and authentication: Level 3",
      "Operational environment: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 2,
    "mentioned_certs": {},
    "module_name": "SBC 5400 Session Border Controller",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-07-22",
        "lab": "Lightship Security, Inc.",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Ribbon Communications, Inc.",
    "vendor_url": "http://www.ribboncommunications.com"
  }
}