kbrain

Juniper Express 4 MACsec Cryptographic Module

Juniper Networks, Inc. - FIPS 140 #5489

activeLevel 1

Juniper Express 4 MACsec Cryptographic Module is composed by the MACsec blocks that are part of the Juniper Networks® Express 4 processor in hardware, which provides the AES GCM and XPN algorithm implementations for encrypting and decrypting MACsec traffic, and a device driver in software, which provides the functionality to comply with FIPS 140-3 requirements (i.e. integrity test, self-tests), as well as the API to configure the hardware component.

Key facts

Scheme
FIPS 140
Certificate
5489
Standard
FIPS 140-3
Security level
Level 1
Status
active
Vendor
Juniper Networks, Inc.
Module type
Software-Hybrid
Embodiment
MultiChipStand
Lab
atsec information security corporation
First validated
August 17, 2026
Sunset date
November 12, 2029
Caveat
When operated with module Junos® OS Evolved OpenSSL Cryptographic Module version 3.0.8 validated to FIPS 140-3 under Cert. #5400 operating in approved mode, and module Junos® OS Evolved Kernel Cryptographic Module version 2.0 validated to FIPS 140-3 under Cert. #5399, operating in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs

Algorithms

  • AES-GCM
  • AES-XPN
  • HMAC-SHA2-256

Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.

CVEs that may affect this product

sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.

Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.

Certificates it builds on

  • 5399
  • 5400

Certificate ids found in this certificate's documents (automated extraction).

Documents and sources

Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026

Check certifications from your AI assistant

The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.

Add the certifications brain