Module Name
OmniSwitch AOS 8.3.1.R01 Cryptographic Module
Validation Dates
08/18/2017
Caveat
When installed, initialized and configured as specified in the Security Policy Section 3.1. When operated in FIPS mode
Security Level Exceptions
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
The AOS Cryptographic Module version 8.3.1.R01 provides cryptographic functionality to Alcatel-Lucent software applications present on the Alcatel-Lucent OmniSwitch series of routers.
Tested Configuration(s)
- Alcatel-Lucent Operating System (AOS) 8.3.1.R01 running on an OmniSwitch 6860-24
- Alcatel-Lucent Operating System (AOS) 8.3.1.R01 running on an OmniSwitch 6860-48
- Alcatel-Lucent Operating System (AOS) 8.3.1.R01 running on an OmniSwitch 6860E-24
- Alcatel-Lucent Operating System (AOS) 8.3.1.R01 running on an OmniSwitch 6860E-48
- Alcatel-Lucent Operating System (AOS) 8.3.1.R01 running on an OmniSwitch 6860E-P24
- Alcatel-Lucent Operating System (AOS) 8.3.1.R01 running on an OmniSwitch 6860E-P48
- Alcatel-Lucent Operating System (AOS) 8.3.1.R01 running on an OmniSwitch 6860E-U28
- Alcatel-Lucent Operating System (AOS) 8.3.1.R01 running on an OmniSwitch 6860-P24
- Alcatel-Lucent Operating System (AOS) 8.3.1.R01 running on an OmniSwitch 6860-P48
- Alcatel-Lucent Operating System (AOS) 8.3.1.R01 running on an OmniSwitch 6865-P16X
- Alcatel-Lucent Operating System (AOS) 8.3.1.R01 running on an OmniSwitch 6900-Q32
- Alcatel-Lucent Operating System (AOS) 8.3.1.R01 running on an OmniSwitch 6900-T20
- Alcatel-Lucent Operating System (AOS) 8.3.1.R01 running on an OmniSwitch 6900-T40
- Alcatel-Lucent Operating System (AOS) 8.3.1.R01 running on an OmniSwitch 6900-X20
- Alcatel-Lucent Operating System (AOS) 8.3.1.R01 running on an OmniSwitch 6900-X40
- Alcatel-Lucent Operating System (AOS) 8.3.1.R01 running on an OmniSwitch 6900-X72
- Alcatel-Lucent Operating System (AOS) 8.3.1.R01 running on an OmniSwitch 9900
FIPS Algorithms
AES |
Certs. #4285, #4286, #4287 , #4288, #4440, #4441, #4443 and #4444 |
CVL |
Certs. #1184, #1185, #1186 and #1187 |
DRBG |
Certs. #1345, #1346, #1347 and #1348 |
ECDSA |
Certs. #1078, #1079, #1081 and #1082 |
HMAC |
Certs. #2821, #2822, #2823 and #2824 |
RSA |
Certs. #2306, #2307, #2308 and #2309 |
SHS |
Certs. #3523, #3524, #3525 and #3526 |
Triple-DES |
Certs. #2386, #2387, #2388 and #2389 |
Allowed Algorithms
Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength);
Software Versions
AOS 8.3.1.R01