This page was not yet optimized for use on mobile devices.

WaveLogic 5 Extreme Encryption Modem

Certificate #4913

Webpage information ?

Status	active
Validation dates	09.12.2024
Sunset date	08-12-2026
Standard	FIPS 140-3
Security level	2
Type	Hardware
Embodiment	Multi-Chip Embedded
Caveat	Interim validation. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Exceptions	Operational environment: N/A Non-invasive security: N/A Mitigation of other attacks: N/A Documentation requirements: N/A Cryptographic module security policy: N/A
Description	The Ciena WaveLogic 5e Encryption Modem with AES-256-GCM, wire-speed optical layer encryption with line rates up to 800G for up to 6.4T of encrypted line capacity.
Version (Hardware)	[012 (P/Ns 174-0506-841, 174-0506-842)], [014 (P/N 174-0506-843)], [007 (P/N 174-0506-844)] with components [Mech Kit 500-0506-020 Version 001]
Version (Firmware)	12.3
Vendor	Ciena Corporation
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Webpage

Security policy ?

Security target PDF TXT

Symmetric Algorithms

AES, AES-, AES-256, CAST, HMAC

Asymmetric Algorithms

ECDHE, ECDSA, DHE

Hash functions

SHA-1

Schemes

MAC, Key Agreement

Protocols

TLS v1.3, TLS 1.3, TLS

Randomness

TRNG, DRBG

Elliptic Curves

P-384, P-521, P-256

Block cipher modes

ECB, CBC, CTR, GCM

Trusted Execution Environments

PSP, SSC

Security level

Level 2, Level 1

Standards

FIPS 140-3, FIPS PUB 197, FIPS PUB 198-1, FIPS PUB 180-4, FIPS 186-4, NIST SP 800-38A, NIST SP 800-38D, NIST SP 800-38F, NIST SP 800-108, SP 800-90B, RFC8446, RFC 8446, ISO/IEC 24759, ISO/IEC 19790, X.509

File metadata

Author	Scott Ehrlich
Creation date	D:20241128145240+05'30'
Modification date	D:20241128145240+05'30'
Pages	37
Creator	Microsoft® Word for Microsoft 365
Producer	Microsoft® Word for Microsoft 365

Heuristics ?

No heuristics are available for this certificate.

References ?

No references are available for this certificate.

Updates ?

09.12.2024 The certificate was first processed.

New certificate

A new FIPS 140 certificate with the product name was processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4913,
  "dgst": "0a0abd5382ade9af",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "KAS-ECC Sp800-56Ar3A3379",
        "AES-KWPA3379",
        "AES-ECBA3379",
        "HMAC-SHA2-256A3379",
        "AES-GCMA3379",
        "HMAC-SHA2-512A3379",
        "KDA TwoStep Sp800-56Cr1A3379",
        "AES-CTRA3379",
        "SHA2-512A3379",
        "ECDSA SigVer (FIPS186-4)A3379",
        "TLS v1.3 KDFA3379",
        "SHA2-384A3379",
        "SHA2-256A3379",
        "HMAC-SHA2-384A3379",
        "AES-CBCA3379",
        "ECDSA SigGen (FIPS186-4)A3379",
        "AES-KWA3379",
        "Counter DRBGA3379",
        "ECDSA KeyGen (FIPS186-4)A3379",
        "ECDSA KeyVer (FIPS186-4)A3379",
        "KAS-ECC-SSC Sp800-56Ar3A3379",
        "KDF SP800-108A3379"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "12.3"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDH": {
            "ECDHE": 1
          },
          "ECDSA": {
            "ECDSA": 39
          }
        },
        "FF": {
          "DH": {
            "DHE": 2
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "CTR": {
          "CTR": 5
        },
        "ECB": {
          "ECB": 13
        },
        "GCM": {
          "GCM": 13
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "TLS": {
            "TLS": 14,
            "TLS 1.3": 65,
            "TLS v1.3": 6
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 5
        },
        "MAC": {
          "MAC": 1
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 2,
          "P-384": 28,
          "P-521": 52
        }
      },
      "eval_facility": {
        "Acumen": {
          "Acumen Security": 1
        }
      },
      "fips_cert_id": {
        "Cert": {
          "#1": 1,
          "#2": 1,
          "#5": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES-256": 1,
          "AES-CBC (256": 1,
          "DRBG 256": 1,
          "SHA- 2": 1,
          "SHA-1": 1,
          "SHA2- 384": 8,
          "SHA2- 512": 2,
          "SHA2-256": 12,
          "SHA2-384": 4,
          "SHA2-512": 12
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "Level 2": 3
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 20
        },
        "TRNG": {
          "TRNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 11,
          "FIPS 186-4": 2,
          "FIPS PUB 180-4": 1,
          "FIPS PUB 197": 4,
          "FIPS PUB 198-1": 1
        },
        "ISO": {
          "ISO/IEC 19790": 2,
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "NIST SP 800-108": 2,
          "NIST SP 800-38A": 2,
          "NIST SP 800-38D": 2,
          "NIST SP 800-38F": 1,
          "SP 800-90B": 2
        },
        "RFC": {
          "RFC 8446": 2,
          "RFC8446": 1
        },
        "X509": {
          "X.509": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 15,
            "AES-": 2,
            "AES-256": 1
          },
          "CAST": {
            "CAST": 2
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 11
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 5
        },
        "IBM": {
          "SSC": 5
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Scott Ehrlich",
      "/CreationDate": "D:20241128145240+05\u002730\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20241128145240+05\u002730\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 618234,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program",
          "http://www.acumensecurity.net/",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=15795",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35915",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35989"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 37
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_garbage": false,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_pdf_hash": "328c7d9d0fe894b9f4e478daa20b2f4cc1bf5ed56b9e3581aeb37e35e25d8dbd",
    "policy_txt_hash": "c66b4ef245f7f430ad2f4860b87c276e4e9f750845ffbd11bab601faa2397dd8"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim validation. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
    "certificate_pdf_url": null,
    "date_sunset": "2026-12-08",
    "description": "The Ciena WaveLogic 5e Encryption Modem with AES-256-GCM, wire-speed optical layer encryption with line rates up to 800G for up to 6.4T of encrypted line capacity.",
    "embodiment": "Multi-Chip Embedded",
    "exceptions": [
      "Operational environment: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A",
      "Documentation requirements: N/A",
      "Cryptographic module security policy: N/A"
    ],
    "fw_versions": "12.3",
    "historical_reason": null,
    "hw_versions": "[012 (P/Ns 174-0506-841, 174-0506-842)], [014 (P/N 174-0506-843)], [007 (P/N 174-0506-844)] with components [Mech Kit 500-0506-020 Version 001]",
    "level": 2,
    "mentioned_certs": {},
    "module_name": "WaveLogic 5 Extreme Encryption Modem",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-12-09",
        "lab": "ACUMEN SECURITY, LLC",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Ciena Corporation",
    "vendor_url": "http://ww.ciena.com"
  }
}