### EUCC-3087-2026-0013(*)

Administration ID BSI-DSZ-CC-1156-V5-2026 Smartcard Controller

IFX_CCI_00004Fh, IFX_CCI_000050h - IFX_CCI_000058h, IFX_CCI_00005Ch design step S11 with firmware 80.310.03.0 & 80.310.03.1, optional NRG™ SW 05.03.4097, opt. HSL v3.52.9708, UMSLC lib v01.30.0564, opt.SCL v2.15.000 and v2.11.003, opt. ACL v3.33.003, and v3.35.001 and v3.02.000, opt. RCL v1.10.007, opt. HCL v1.13.002

Holder of the Certificate:

Evaluation Facility:

Assurance Level:

Assurance Package:

Augmentation:

PP Conformance:

valid until:

Infineon Technologies AG Am Campeon 1-15 85579 Neubiberg https://www.infineon.com/productinformation/cybersecurity-information

TÜV Informationstechnik GmbH Unternehmensgruppe TÜV NORD Am TUV 1 45307 Essen

EUCC High with component AVA_VAN.5

EAL

6+

ALC_FLR.3

Security IC Platform Protection Profile with Augmentation Packages Version 1.0, 13 January 2014, BSI-CC-PP-0084-2014 23 July 2031

The ICT Product identified in this certificate and its attached certification report has been evaluated at the above mentioned notified evaluation facility using the Common Methodology for IT Security Evaluation (CEM) in application of relevant state-of-the-art documents for the AVA_VAN components 4 and 5 as well as application notes and interpretations on advice by the Certification Body in the versions published at the time the conformity assessment was carried out. The CC and CEM used for the evaluation of the above mentioned ICT product are published as ISO/IEC 15408 and ISO/IEC 18045 or as CC:2022 and CEM:2022.

(*) This certificate applies only to the specific version and release of the ICT product in its evaluated configuration and in conjunction with the complete Certification Report and Notification. For details see Certification Report part A chapter 5.

The evaluation has been conducted in accordance with the provisions of Commission Implementing Regulation (EU) 2024/482 of 31 January 2024 laying down rules for the application of Regulation (EU) 2019/881 of the European Parliament and of the Council as regards the adoption of the European Common Criteria-based cybersecurity certification scheme (EUCC) and the conclusions of the evaluation facility in the evaluation technical report are consistent with the evidence adduced.

Bonn, 17 2026

For the Federal Office for Information

August Security

Godesberger Allee 87 - D-53175 Bonn - Postfach 20 03 63 - D-53133 Bonn

Phone +49 (0)228 99 9582-0 - Fax +49 (0)228 9582-5477 - Infoline +49 (0)228 99 9582-111

|

Common Criteria Recognition Arrangement recognition for components up to EAL 2 and ALC_FLR only This certificate is not an endorsement of the IT Product by the Federal Office for information Security or any other organisation that recognises or gives effect to this certificate, and no warranty of the IT Product by the Federal Office for Information Security or any other organisation that recognises or gives effect to this certificate, is either expressed or implied.

erheit in der Informationstechnik

This certificate and its holder are both subject to obligations and monitoring activities as specified in Commission Implementing Regulation (EU) 2024/482. This certificate, its holder and its issuer are furthermore subject to compliance rules and supervision by the National Cybersecurity Certification Authority as established at Federal Office for Information Security, Division S 14, Freital, Email: ncca@bsi.bund.de.

EUCC-Zert-304_V5.5