This page was not yet optimized for use on mobile devices.
Juniper Networks SRX345, SRX345-DUAL-AC, SRX380 and SRX1500 Services Gateway
Certificate #4625
Webpage information ?
Document information ?
Security policy
Symmetric Algorithms
AES, CAST, DES, Triple-DES, TDES, TDEA, Blowfish, HMAC, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512Asymmetric Algorithms
RSA 4096, RSA 2048, RSA 3072, ECDH, ECDSA, ECC, DH, Diffie-Hellman, DSAHash functions
SHA-1, SHA-256, SHA-384, SHA-512, MD5Schemes
Key Exchange, Key Agreement, AEADProtocols
SSH, IKE, IKEv2, IKEv1, IPsec, VPNRandomness
DRBG, RNGLibraries
OpenSSLElliptic Curves
P-256, P-384, P-521, P-512Block cipher modes
CBC, CTR, GCMSecurity level
Level 1, level 2, Level 2Standards
FIPS 140-2, FIPS140-2, FIPS PUB 140-2, SP 800-90A, SP 800-56A, RFC 2409, RFC7296, RFC5282, RFC4106, RFC 4253, X.509File metadata
| Title: | Microsoft Word - Junos 20.2R1 SRX380_SRX345_SRX1500 .docx |
|---|---|
| Author: | huntzh |
| Creation date: | D:20230907164929-04'00' |
| Modification date: | D:20230907164929-04'00' |
| Pages: | 35 |
| Producer: | Microsoft: Print To PDF |
References
Heuristics ?
References ?
No references are available for this certificate.
Updates ?
-
06.11.2023 The certificate data changed.
Certificate changed
The web extraction data was updated.
- The certificate_pdf_url property was set to
https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/October 2023_011123_0711.pdf.
- The certificate_pdf_url property was set to
-
01.11.2023 The certificate was first processed.
New certificate
A new FIPS 140 certificate with the product name was processed.
Raw data
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4625,
"dgst": "d65112fe4b7673c7",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"HMAC#C2028",
"SHS#C2037",
"RSA#C2094",
"DRBG#C2037",
"Triple-DES#C2028",
"DRBG#C2039",
"SHS#C2030",
"HMAC#C2034",
"SHS#C2031",
"RSA#C2032",
"KTS#C2039",
"DRBG#C2094",
"Triple-DES#C2031",
"SHS#C2038",
"ECDSA#C2032",
"AES#C2028",
"SHS#C2094",
"ECDSA#C2039",
"RSA#C2039",
"HMAC#C2038",
"AES#C2036",
"CVL#C2040",
"SHS#C2028",
"HMAC#C2037",
"CVL#C2028",
"KTS#C2094",
"CVL#C2033",
"HMAC#C2036",
"HMAC#C2029",
"HMAC#C2030",
"HMAC#C2094",
"Triple-DES#C2039",
"SHS#C2029",
"AES#C2094",
"Triple-DES#C2034",
"DRBG#C2028",
"SHS#C2034",
"HMAC#C2039",
"AES#C2035",
"DRBG#C2031",
"Triple-DES#C2094",
"AES#C2034",
"KTS#C2031",
"RSA#C2031",
"SHS#C2039",
"KTS#C2028",
"AES#C2031",
"AES#C2039",
"DRBG#C2029",
"Triple-DES#C2036",
"HMAC#C2031",
"ECDSA#C2094",
"ECDSA#C2031",
"CVL#C2094",
"SHS#C2036"
]
},
"cpe_matches": {
"_type": "Set",
"elements": [
"cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
"cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
"cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*"
]
},
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"20.2"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 4
},
"ECDH": {
"ECDH": 10
},
"ECDSA": {
"ECDSA": 25
}
},
"FF": {
"DH": {
"DH": 15,
"Diffie-Hellman": 9
},
"DSA": {
"DSA": 3
}
},
"RSA": {
"RSA 2048": 16,
"RSA 3072": 2,
"RSA 4096": 10
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 9
},
"CTR": {
"CTR": 2
},
"GCM": {
"GCM": 11
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"OpenSSL": {
"OpenSSL": 3
}
},
"crypto_protocol": {
"IKE": {
"IKE": 30,
"IKEv1": 6,
"IKEv2": 9
},
"IPsec": {
"IPsec": 27
},
"SSH": {
"SSH": 34
},
"VPN": {
"VPN": 1
}
},
"crypto_scheme": {
"AEAD": {
"AEAD": 3
},
"KA": {
"Key Agreement": 4
},
"KEX": {
"Key Exchange": 2
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-256": 50,
"P-384": 26,
"P-512": 2,
"P-521": 4
}
},
"eval_facility": {},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"AES CBC 128/192/256": 5,
"AES [197": 1,
"DRBG 2": 1,
"HMAC SHA-1": 1,
"HMAC SHA-256": 5,
"HMAC [198": 5,
"HMAC-SHA-1": 4,
"HMAC-SHA-1-96": 2,
"HMAC-SHA-256": 12,
"HMAC-SHA-384": 2,
"HMAC-SHA-512": 2,
"HMAC-SHA1-96": 1,
"RSA 2048": 16,
"RSA 3072": 2,
"RSA 4096": 10,
"SHA 1, 256": 1,
"SHA 256": 14,
"SHA 384": 4,
"SHA 512": 1,
"SHA-1": 9,
"SHA-256": 17,
"SHA-384": 3,
"SHA-512": 3,
"SHS [180": 5
}
},
"fips_security_level": {
"Level": {
"Level 1": 1,
"Level 2": 1,
"level 2": 1
}
},
"hash_function": {
"MD": {
"MD5": {
"MD5": 1
}
},
"SHA": {
"SHA1": {
"SHA-1": 9
},
"SHA2": {
"SHA-256": 21,
"SHA-384": 2,
"SHA-512": 3
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 15
},
"RNG": {
"RNG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-2": 7,
"FIPS PUB 140-2": 1,
"FIPS140-2": 1
},
"NIST": {
"SP 800-56A": 1,
"SP 800-90A": 4
},
"RFC": {
"RFC 2409": 1,
"RFC 4253": 1,
"RFC4106": 2,
"RFC5282": 1,
"RFC7296": 1
},
"X509": {
"X.509": 2
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 27
},
"CAST": {
"CAST": 1
}
},
"DES": {
"3DES": {
"TDEA": 1,
"TDES": 3,
"Triple-DES": 32
},
"DES": {
"DES": 1
}
},
"constructions": {
"MAC": {
"HMAC": 26,
"HMAC-SHA-256": 6,
"HMAC-SHA-384": 1,
"HMAC-SHA-512": 1
}
},
"miscellaneous": {
"Blowfish": {
"Blowfish": 1
}
}
},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"policy_metadata": {
"/Author": "huntzh",
"/CreationDate": "D:20230907164929-04\u002700\u0027",
"/ModDate": "D:20230907164929-04\u002700\u0027",
"/Producer": "Microsoft: Print To PDF",
"/Title": "Microsoft Word - Junos 20.2R1 SRX380_SRX345_SRX1500 .docx",
"pdf_file_size_bytes": 3517489,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 35
}
},
"state": {
"_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
"module_download_ok": true,
"module_extract_ok": true,
"policy_convert_garbage": false,
"policy_convert_ok": true,
"policy_download_ok": true,
"policy_extract_ok": true,
"policy_pdf_hash": "3ef769fd8e843c8d124162a4945a0085e54c7f3d0a9bb1c45c4ca96c782461cd",
"policy_txt_hash": "c0b0881aaa2fe52d9e9380f932624b4cdab8b3d30df032aed42beb64dc7a12c0"
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in FIPS mode, installed, initialized and configured as specified in Sections 1.2 and 5 of the Security Policy. The JNPR-FIPS-TAMPER-LBLS tamper evident seals installed as indicated in Section 5 of the Security Policy",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/October 2023_011123_0711.pdf",
"date_sunset": "2026-09-21",
"description": "The Juniper Networks SRX Series Services Gateways are a series of secure routers that provide essential capabilities to connect, secure, and manage work force locations sized from handfuls to hundreds of users. By consolidating fast, highly available switching, routing, security, and applications capabilities in a single device, enterprises can economically deliver new services, safe connectivity, and a satisfying end user experience.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Roles, Services, and Authentication: Level 3",
"Design Assurance: Level 3",
"Mitigation of Other Attacks: N/A"
],
"fw_versions": "Junos OS 20.2R1",
"historical_reason": null,
"hw_versions": "SRX345, SRX345-DUAL-AC, SRX380, SRX1500 SYS-JB-AC and SRX1500 SYS-JB-DC with JNPR-FIPS-TAMPER-LBLS",
"level": 2,
"mentioned_certs": {},
"module_name": "Juniper Networks SRX345, SRX345-DUAL-AC, SRX380 and SRX1500 Services Gateway",
"module_type": "Hardware",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-2",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2023-10-04",
"lab": "LEIDOS CSTL",
"validation_type": "Initial"
}
],
"vendor": "Juniper Networks, Inc",
"vendor_url": "http://www.juniper.net"
}
}