{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "f6e2d4fb073bdf38", "cert_id": 5342, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "NetScaler MPX", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-06-18", "validation_type": "Initial", "lab": "Lightship Security, Inc."}, {"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-06-23", "validation_type": "Update", "lab": "Lightship Security, Inc."}], "vendor_url": "http://www.cloud.com", "vendor": "Cloud Software Group", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf", "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 2, "caveat": "When installed, initialized and configured as specified in Section 11 of the Security Policy. The tamper-evident seals are installed/applied as indicated in the Security Policy.", "exceptions": ["Roles, services, and authentication: Level 3", "Operational environment: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": null, "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-06-17", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {"Cert": {"#3": 2}}, "fips_security_level": {"Level": {"Level 2": 3, "Level 1": 1, "Level 5": 1, "level 2": 2}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 18, "HMAC SHA-1": 7, "SHA2-224": 19, "SHA2-256": 38, "SHA2-384": 21, "SHA2-512": 27, "SHA-1": 36, "SHA2- 512": 2, "SHA3-256": 6, "RSA 2048": 1, "- PKCS 1": 6, "AES-256": 2, "AES-128": 1, "AES-192": 1, "AES-GCM 96": 1, "PKCS 1": 6}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-256": 2, "AES-128": 1, "AES-192": 1, "AES": 79}, "CAST": {"CAST": 127}}, "constructions": {"MAC": {"HMAC": 49, "CBC-MAC": 1}}}, "asymmetric_crypto": {"RSA": {"RSA 2048": 1}, "ECC": {"ECDH": {"ECDH": 75}, "ECDSA": {"ECDSA": 105}, "ECC": {"ECC": 1}}, "FF": {"DH": {"DHE": 1, "Diffie-Hellman": 5, "DH": 79}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 36}, "SHA3": {"SHA3-256": 6}}, "MD": {"MD5": {"MD5": 2}}, "PBKDF": {"PBKDF": 10, "PBKDF2": 2}}, "crypto_scheme": {"MAC": {"MAC": 25}, "KEX": {"Key Exchange": 1}, "KA": {"Key Agreement": 58, "Key agreement": 4}}, "crypto_protocol": {"SSH": {"SSH": 144}, "TLS": {"SSL": {"SSL": 8}, "TLS": {"TLS": 352, "TLS v1.2": 28, "TLS v1.3": 10, "TLS 1.2": 7, "TLS 1.3": 4}}, "IKE": {"IKEv1": 78, "IKEv2": 40, "IKE": 26}, "IPsec": {"IPsec": 28}}, "randomness": {"PRNG": {"DRBG": 150}, "RNG": {"RNG": 3}}, "cipher_mode": {"ECB": {"ECB": 1}, "CBC": {"CBC": 1}, "CTR": {"CTR": 65}, "GCM": {"GCM": 7}, "CCM": {"CCM": 1}}, "ecc_curve": {"NIST": {"P-224": 52, "P-256": 70, "P-384": 54, "P-521": 50}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 16}, "IBM": {"SSC": 1}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 17, "FIPS186-4": 29, "FIPS 186-4": 16, "FIPS186-5": 70, "FIPS 186-5": 24, "FIPS 198-1": 14, "FIPS186-2": 2, "FIPS 180-4": 14, "FIPS 202": 1, "FIPS PUB 186-4": 3, "FIPS PUB 186-5": 5, "FIPS 2": 3, "FIPS 3": 2, "FIPS 6": 1, "FIPS PUB 186-2": 1}, "NIST": {"SP 800-38A": 5, "SP 800-38D": 6, "SP 800-90A": 2, "SP 800-56A": 6, "SP 800-135": 10, "SP 800-56B": 4, "SP 800-132": 1, "SP 800-133": 3, "SP 800-56": 1, "SP 800-107": 2, "NIST SP 800-107": 7, "NIST SP 800-38D": 3, "NIST SP 800-132": 2, "NIST SP 800-140D": 1, "NIST SP 800-133": 1, "NIST SP 800-56A": 1, "NIST SP 800-131A": 1, "NIST SP 800-52": 2}, "PKCS": {"PKCS 1": 6}, "RFC": {"RFC7627": 20, "RFC 7627": 4, "RFC 8446": 2, "RFC 4252": 1, "RFC 4253": 1, "RFC 5647": 1, "RFC 5288": 1, "RFC 5246": 1}, "ISO": {"ISO/IEC 19790": 8, "ISO/IEC 19790:2012": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 1659790, "pdf_is_encrypted": false, "pdf_number_of_pages": 103, "/Author": "Corsec Security, Inc.", "/Comments": "", "/Company": "Corsec Security, Inc.", "/ContentTypeId": "0x01010044788752DEE24048B316A411A5F1F9B2", "/CreationDate": "D:20260623112807-04'00'", "/Creator": "Acrobat PDFMaker 26 for Word", "/Keywords": "", "/MediaServiceImageTags": "", "/ModDate": "D:20260623113355-04'00'", "/Producer": "Adobe PDF Library 26.1.158", "/SourceModified": "", "/Subject": "", "/Title": "FIPS 140-3 Non-Proprietary Security Policy", "/_8900": "NetScaler MPX 8900 FIPS", "/_9100": "NetScaler MPX 9100 FIPS", "/_9200": "NetScaler MPX 9200 FIPS", "/_CP Library Alg Cert": "A7126", "/_Copyright": "2026", "/_DP Library Alg Cert": "A3943", "/_Document Date": "June 11, 2026", "/_Document Version": "0.4", "/_FIPS Security Level": "2", "/_Firmware Version": "14.1.FIPS", "/_Hardware Models": "8900 FIPS, 9100 FIPS, 9200 FIPS", "/_Hardware Part Numbers": "8905 FIPS, 8910 FIPS, 8920 FIPS, 9120 FIPS, 9130 FIPS, 9140 FIPS, 9160 FIPS, 9180 FIPS, 9195 FIPS", "/_Intel Library Alg Cert": "A3944", "/_Jitter Library Alg Cert": "A3513", "/_Module Embodiment": "MultiChipStand", "/_Module Name (long)": "NetScaler MPX", "/_Module Name (short)": "MPX", "/_Module Type": "hardware", "/_Vendor Name (long)": "Cloud Software Group", "/_Vendor Name (short)": "CSG", "/_dlc_DocIdItemGuid": "a3f2e532-0e75-4b0a-88c6-2bc8e1438847", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://docs.netscaler.com/en-us/citrix-adc/current-release", "http://csrc.nist.gov/groups/STM/cmvp", "https://docs.netscaler.com/en-us/netscaler-hardware-platforms/mpx/mpx-hardware-software-compatibility-matrix.html", "https://docs.netscaler.com/en-us/citrix-adc/current-release/getting-started-with-citrix-adc", "https://docs.netscaler.com/en-us/netscaler-hardware-platforms/mpx/installing", "https://support.citrix.com/article/CTX122521", "https://docs.netscaler.com/en-us/citrix-adc/current-release/licensing", "mailto:info@corsec.com", "https://docs.netscaler.com/en-us/netscaler-hardware-platforms/mpx/netscaler-initial-configuration.html", "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36553", "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36123", "https://docs.netscaler.com/en-us/netscaler-hardware-platforms/mpx", "http://www.cloud.com/", "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36554", "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=39736", "http://www.corsec.com/", "https://docs.netscaler.com/en-us/netscaler-hardware-platforms/mpx/wiping-your-data-before-sending-your-adc-appliance-to-netscaler.html", "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/Validated-Modules/Search", "https://docs.netscaler.com/en-us/netscaler-hardware-platforms/mpx/preparing-for-installation", "https://docs.netscaler.com/en-us/citrix-adc/current-release/system/authentication-and-authorization-for-system-user/external-user-authentication.html"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["SHA2-512A7126", "ECDSA KeyVer (FIPS186-4)A3944", "ECDSA SigVer (FIPS186-4)A7126", "HMAC-SHA2-256A7126", "SHA3-256A3513", "KDF SSHA7126", "KDF SNMPA7126", "RSA SigVer (FIPS186-2)A3943", "Safe Primes Key VerificationA7126", "SHA2-384A7126", "KDF IKEv2A7126", "SHA-1A7126", "HMAC-SHA2-224A3944", "HMAC-SHA2-512A7126", "ECDSA KeyGen (FIPS186-5)A7126", "SHA2-224A3944", "RSA SigVer (FIPS186-4)A7126", "RSA SigVer (FIPS186-5)A7126", "RSA SigGen (FIPS186-5)A7126", "RSA KeyGen (FIPS186-5)A7126", "AES-CFB128A7126", "TLS v1.3 KDFA3943", "AES-CBCA7126", "HMAC-SHA-1A7126", "AES-GCMA7126", "HMAC-SHA2-384A7126", "KAS-ECC-SSC Sp800-56Ar3A7126", "KTS-IFCA7126", "Counter DRBGA7126", "ECDSA KeyVer (FIPS186-5)A7126", "PBKDFA7126", "ECDSA KeyGen (FIPS186-4)A3944", "RSA SigGen (FIPS186-4)A3944", "KDF IKEv1A7126", "ECDSA SigGen (FIPS186-5)A7126", "Hash DRBGA3943", "ECDSA SigVer (FIPS186-5)A7126", "KDF TLSA3944", "KAS-FFC-SSC Sp800-56Ar3A7126", "AES-CTRA7126", "ECDSA SigGen (FIPS186-4)A3944", "TLS v1.2 KDF RFC7627A7126", "Safe Primes Key GenerationA7126", "SHA2-256A7126"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "e99cda81f19a1d0b324c87951313abddf161883c5bf515d3536793a47a366bf9", "txt_hash": "b5c1054263b44435ddb962b3cfdef705966d011f96d5038964daf15739c6e6f8", "json_hash": null}}}