VPN Router 600, 1700, 1750, 2700 and 5000

Certificate #623

Webpage information

Status historical
Historical reason RNG SP800-131A Revision 1 Transition
Validation dates 24.01.2006 , 16.05.2006 , 26.04.2007 , 21.06.2007
Standard FIPS 140-2
Security level 2
Type Hardware
Embodiment Multi-Chip Stand Alone
Caveat None
Description The FIPS 140-2 Level 2 compliant VPN Routers are the ideal solution for enterprises requiring secure, low-cost connectivity across the Internet or managed IP networks. The VPN Routers provide, IP routing, Virtual Private Networking (VPN), stateful firewall, encryption, authentication, directory and policy services, Quality of Service (QoS), and bandwidth management services in a single integrated platform. These devices provide a solution for small, medium, and large sites requiring Internet connectivity for both secure VPN communications and for basic IP/Internet access.
Version (Hardware) 600, 1700, 1750, 2700 and 5000
Version (Firmware) 5.05_150
Vendor Nortel Networks
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms
AES, DES, Triple-DES, HMAC
Asymmetric Algorithms
ECDH, Diffie-Hellman, DH
Hash functions
SHA-1, MD5
Schemes
MAC, Key Exchange
Protocols
SSL, TLS, IKE, VPN
Randomness
PRNG, RNG
Block cipher modes
CBC

Vendor
Microsoft

Security level
Level 2, Level 1, Level 8, level 2

Standards
FIPS 140-2, FIPS 197, FIPS 46-3, FIPS 186-2, FIPS 180-2, FIPS 198, FIPS 182-2, PKCS#1, PKCS #1, X.509

File metadata

Title Security Policy
Creation date D:20070612184348
Modification date D:20070612184348
Pages 23
Creator PDFCreator Version 0.8.0
Producer AFPL Ghostscript 8.14

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data 

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 623,
  "dgst": "fc71f2d6d38dbfc7",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "Triple-DES#367",
        "RSA#83",
        "AES#292",
        "HMAC#103",
        "SHS#366",
        "RNG#116"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "5.05"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDH": {
            "ECDH": 1
          }
        },
        "FF": {
          "DH": {
            "DH": 1,
            "Diffie-Hellman": 6
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 6
        },
        "TLS": {
          "SSL": {
            "SSL": 1
          },
          "TLS": {
            "TLS": 14
          }
        },
        "VPN": {
          "VPN": 84
        }
      },
      "crypto_scheme": {
        "KEX": {
          "Key Exchange": 2
        },
        "MAC": {
          "MAC": 4
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 4
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES (128": 2,
          "AES-CBC (128": 2,
          "DES (56 and 40": 1,
          "DES-CBC (168": 3,
          "DES-CBC (56": 2,
          "HMAC-SHA-1": 16,
          "HMAC-SHA1": 6,
          "PKCS #1": 6,
          "PKCS#1": 1,
          "PKSC#5": 1,
          "RSA PKCS #1": 2,
          "SHA-1": 8,
          "\u2013 PKCS#1": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "Level 2": 3,
          "Level 8": 1,
          "level 2": 2
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 4
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 8
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "PRNG": 10
        },
        "RNG": {
          "RNG": 3
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 19,
          "FIPS 180-2": 3,
          "FIPS 182-2": 1,
          "FIPS 186-2": 8,
          "FIPS 197": 2,
          "FIPS 198": 3,
          "FIPS 46-3": 3
        },
        "PKCS": {
          "PKCS #1": 4,
          "PKCS#1": 1
        },
        "X509": {
          "X.509": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 7
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 8
          },
          "DES": {
            "DES": 4
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 2
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 1
        }
      },
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "",
      "/CreationDate": "D:20070612184348",
      "/Creator": "PDFCreator Version 0.8.0",
      "/Keywords": "",
      "/ModDate": "D:20070612184348",
      "/Producer": "AFPL Ghostscript 8.14",
      "/Subject": "",
      "/Title": "Security Policy",
      "pdf_file_size_bytes": 782372,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 23
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "20f64fff42dd10386fcc9de28b9a3512f5b7177d615f0902c551cd078d22a504",
    "policy_txt_hash": "de95b8de9b879c4c6d04f5197686fbbfc6a6a732cf8c9235b8d6e87faf312079"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "None",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/140crt623.pdf",
    "date_sunset": null,
    "description": "The FIPS 140-2 Level 2 compliant VPN Routers are the ideal solution for enterprises requiring secure, low-cost connectivity across the Internet or managed IP networks. The VPN Routers provide, IP routing, Virtual Private Networking (VPN), stateful firewall, encryption, authentication, directory and policy services, Quality of Service (QoS), and bandwidth management services in a single integrated platform. These devices provide a solution for small, medium, and large sites requiring Internet connectivity for both secure VPN communications and for basic IP/Internet access.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": null,
    "fw_versions": "5.05_150",
    "historical_reason": "RNG SP800-131A Revision 1 Transition",
    "hw_versions": "600, 1700, 1750, 2700 and 5000",
    "level": 2,
    "mentioned_certs": {},
    "module_name": "VPN Router 600, 1700, 1750, 2700 and 5000",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2006-01-24",
        "lab": "SAIC-VA",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2006-05-16",
        "lab": "",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2007-04-26",
        "lab": "",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2007-06-21",
        "lab": "",
        "validation_type": "Update"
      }
    ],
    "vendor": "Nortel Networks",
    "vendor_url": "http://www.nortel.com"
  }
}