Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Juniper Linux Kernel Cryptographic Module Overview

Junos OS Evolved Linux Kernel Cryptographic API Module provides cryptographic services to kernel applications through C language Application Program Interface (API) and to applications that run in a user space through an AF_ALG socket type interface. The module utilizes instructions from processor to optimize and increase the performance of cryptographic algorithms.

Cryptographic Boundary

The Cryptographic Logical Boundary for kernel consists of all kernel objects and integrity check files used to perform integrity tests.

Supported Cryptographic Algorithms

You must use FIPS approved cryptographic algorithms in FIPS mode to run the TOE in the CC evaluated configuration. Table 1 lists all the approved security functions of the module, including specific key strengths employed for approved services.

Table 1: Cryptographic Algorithms Implemented by the Junos OS Evolved Kernel Cryptographic Module

Cryptographic Service

Algorithm

Key Sizes

Standard

Purpose

FCS_COP.1/Hash

Cryptographic Operation (Hash Algorithm)

 SHA2-256 NA FIPS180-4

Protect passwords.

Verify TOE integrity through the Linux Integrity Mechanism Architecture (IMA).
SHA2-512 Protect passwords.

FCS_RBG_EXT.1

Random Bit Generation

DRBG

(HMAC_DRBG with SHA2-512)

 256 bits SP800-90ARev1

Asymmetric Key Generation.

Client and server random secrets in the SSHv2 protocol.