Module Name
Ruckus Networks SmartZone 104 (SZ-104), SmartZone 124 (SZ-124) and SmartZone 300 (SZ-300) WLAN Controllers
Validation Dates
07/13/2020;12/01/2020
Caveat
When operated in FIPS mode and installed, initialized and configured as specified in Sections 2 and 8 of the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy
Security Level Exceptions
- Roles, Services, and Authentication: Level 2
- Design Assurance: Level 2
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
SmartZone network controllers simplify network set-up and management, enhance security, minimize troubleshooting and ease upgrades for networks built on Ruckus access points and switches. It doesn't stop there. Whether you're building complex multi-geo networks or delivering multi-tier managed networking services, SmartZone network controllers deliver the scale, flexibility and openness to support the most sophisticated deployment scenarios.
FIPS Algorithms
AES |
Certs. #5097 and #C707 |
CKG |
vendor affirmed |
CVL |
Certs. #1647, #1778 and #C706 |
DRBG |
Cert. #1903 |
DSA |
Cert. #C846 |
ECDSA |
Cert. #1322 |
HMAC |
Certs. #3399 and #C707 |
KTS |
AES Cert. #5097 and HMAC Cert. #3399; key establishment methodology provides between 128 and 256 bits of encryption strength |
KTS |
AES Cert. #5097; key establishment methodology provides 128 or 256 bits of encryption strength |
RSA |
Cert. #2759 |
SHS |
Certs. #4145 and #C707 |
Allowed Algorithms
Diffie-Hellman (CVL Cert. #C1647, key agreement; key establishment methodology provides between 112 and 128 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #C706 with CVL Cert. #C706, key agreement; key establishment methodology provides 192 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #C706 with CVL Cert. #1647, key agreement; key establishment methodology provides 192 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #C706 with CVL Cert. #1647, key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); NDRNG
Hardware Versions
PF1-S104-US00, RevA; PF1-S124-US00, RevA; PF1-S300-WW00, RevA; PF1-S300-WW10, RevA
Firmware Versions
5.1.1.3