Module Name

Brocade® MLXe® Series Ethernet Routers

Standard

FIPS 140-2

Status

Active

Sunset Date

12/18/2022

Validation Dates

12/19/2017

Overall Level

2

Caveat

When operated in FIPS mode with the tamper evident labels installed and configured as specified in Section 11 of the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy

Security Level Exceptions

• Design Assurance: Level 3
• Mitigation of Other Attacks: N/A

Module Type

Hardware

Embodiment

Multi-Chip Stand Alone

Description

Brocade MLXe Series routers feature industry-leading Gigabit Ethernet ports with wire-speed density; advanced Layer 2 switching; rich IPv4, IPv6, Multi-VRF, MPLS, L2/L3 Virtual Private Networks (VPN), IKEv2/IPsec and PHY based MACsec capabilities without compromising performance.

Tested Configuration(s)

• N/A

FIPS Algorithms

AES	Certs. #1648, #2154, #2717, #2946, #3144 and #3478
CVL	Certs. #175, #393, #404, #712, #713 and #1029
DRBG	Certs. #454 and #684
ECDSA	Certs. #761 and #809
HMAC	Certs. #1696 and #2848
KBKDF	Cert. #35
KTS	AES Cert. #2946
KTS	AES Cert. #2717 and HMAC Cert. #1696; key establishment methodology provides 128 bits of encryption strength
RSA	Cert. #1413
SHS	Certs. #934 and #2282

Allowed Algorithms

Diffie-Hellman (CVL Cert. #712, key agreement; key establishment methodology provides 112 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #713, key agreement; key establishment methodology provides 128 or 192 bits of encryption strength); MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)

Hardware Versions

{[BR-MLXE-8-MR2-M-AC (80-1007225-01), BR-MLXE-8-MR2-M-DC (80-1007226-01), BR-MLXE-16-MR2-M-AC (80-1006827-02), BR-MLXE-16-MR2-M-DC (80-1006828-02), BR-MLXE-32-MR2-M-AC (80-1007253-04), BR-MLXE-32-MR2-M-DC (80-1007254-05), BR-MLXE-4-MR2-X-AC (80-1006874-03), BR-MLXE-4-MR2-X-DC (80-1006875-03), BR-MLXE-32-MR2-X-AC (80-1007255-04), BR-MLXE-32-MR2-X-DC (80-1007256-05)] with Component P/Ns 80-1005643-01, 80-1005644-03, 80-1005641-02, 80-1005642-03, 80-1007878-02, 80-1007911-02, 80-1008426-01, 80-1008427-02, 80-1007879-02, 80-1008425-01, 80-1008424-01, 80-1003891-02, 80-1002983-01, 80-1008686-01, 80-1003971-01, 80-1003969-02, 80-1003972-01, 80-1003970-03, 80-1004114-01, 80-1004113-01, 80-1004112-01, 80-1004469-01, 80-1004760-02, 80-1006511-02, 80-1004757-02, 80-1003009-01, 80-1003052-01, 80-1003053-01 (as described in Security Policy, Table 13)} with FIPS Kit XBR-000195

Firmware Versions

Multi-Service IronWare R06.0.00aa