Module Name

Motorola Network Router (MNR) S6000

Standard

FIPS 140-2

Status

Active

Sunset Date

3/7/2022

Validation Dates

03/08/2017;06/01/2018;06/08/2018

Overall Level

1

Caveat

When operated in FIPS mode

Security Level Exceptions

• EMI/EMC: Level 3
• Design Assurance: Level 3
• Mitigation of Other Attacks: N/A

Module Type

Hardware

Embodiment

Multi-Chip Stand Alone

Description

MNR S6000 routers are versatile, secure-capable devices that can ensure timely delivery of delay-sensitive traffic. Supporting secure integrated voice and data applications as well as high-speed site-to-site WAN connections, S6000 routers perform simultaneous functions - including compression and data prioritization - without compromising their ability to accomplish additional packet-handling functions as needed. In addition to the normal routing functions, the MNR S6000 supports data encryption and authentication over Ethernet and Frame Relay links using the IPSec and FRF.17 protocols.

Tested Configuration(s)

• N/A

FIPS Algorithms

AES	Certs. #173 and #3993
CVL	Certs. #816, #817, #818, and #819
DRBG	Cert. #1184
ECDSA	Cert. #887
HMAC	Certs. #39, #2606, and #2607
KAS	SP 800-56Arev2 with CVL Certs. #816 and #817; vendor affirmed
KAS	SP 800-56Arev2 with CVL Certs. #816 and #819; vendor affirmed
KTS	AES Cert. #3993 and HMAC Certs. #2606 and #2607
RSA	Cert. #2049
SHS	Certs. #258 and #3295
Triple-DES	Certs. #275 and #2192

Other Algorithms

Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength); NDRNG; DSA (non-compliant); HMAC-MD5; HMAC-SHA-1-96 (non-compliant); MD5

Hardware Versions

Base Unit P/N CLN1780L Rev FB with Encryption Module P/N CLN8261D Rev NA

Firmware Versions

GS-16.9.0.48