IBM Enterprise PKCS#11 Firmware FW IDs 'dada00eb' ((4767) and 'e41c1444' (4765)

Certificate details

Status archived
Valid from 26.03.2018
Valid until 26.03.2023
Scheme 🇩🇪 DE
Manufacturer IBM Corporation
Category Other Devices and Systems
Security level EAL4

Certificate

Extracted keywords

Security level
EAL 4, EAL 2
Certificates
BSI-DSZ-CC-1002-2018

Title Certification Report BSI-DSZ-CC-1002-2018
Subject Zertifikat, Certificate, Urkunde
Keywords "Common Criteria, Certification, Zertifizierung, IBM, PKCS#11 FW IDs 'dada00eb' (4767) and 'e41c1444' (4765)"
Author Bundesamt für Sicherheit in der Informationstechnik
Creation date D:20180423082623+02'00'
Modification date D:20180423142404+02'00'
Pages 1
Creator Writer
Producer LibreOffice 5.2

Certification report

Extracted keywords

Symmetric Algorithms
AES, TDES
Asymmetric Algorithms
ECDH, ECDSA, DSA
Hash functions
SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA256, SHA-2
Schemes
MAC
Randomness
TRNG, DRBG, RNG
Block cipher modes
ECB, CBC

Security level
EAL 4, EAL 2, EAL 1
Security Assurance Requirements (SAR)
ALC_FLR
Certificates
BSI-DSZ-CC-1002-2018
Evaluation facilities
atsec

Certification process
being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification, Report, Version 5, 2018-03-12, Final Evaluation Technical Report, atsec information security GmbH (confidential document, Configuration list of static content measured by SHA256 hashes, Version 1.0, 201612-12, IBM (confidential document, EP11 configuration list BOE, Version 1, 2017-07-14, IBM (confidential document, EP11 configuration list (BOE) for documentation files, Version 1, 2017-07-14, IBM (confidential document, Hardware configuration list for IBM 4765 and 4767 EP11 HSMs, Version 1.0, 201708-31, IBM (confidential document

Frontpage

Certificate ID BSI-DSZ-CC-1002-2018
Certified item IBM Enterprise PKCS#11 Firmware FW IDs 'dada00eb' (4767) and 'e41c1444' (4765) ##
Certification lab BSI
Developer IBM Research & Development Germany BSI -

Cross-references

Incoming
  • BSI-DSZ-CC-1094-2019 - archived - IBM Enterprise PKCS#11 (EP11) Firmware identifier '2b638e8e' (4768)
Title Certification Report BSI-DSZ-CC-1002-2018
Subject Certification Report, Zertifizierungsreport
Keywords "Common Criteria, Certification, Zertifizierung, IBM, PKCS#11 FW IDs 'dada00eb' (4767) and 'e41c1444' (4765)"
Author Bundesamt für Sicherheit in der Informationstechnik
Creation date D:20180423082645+02'00'
Modification date D:20180423142111+02'00'
Pages 28
Creator Writer
Producer LibreOffice 5.2

Security target

Extracted keywords

Symmetric Algorithms
AES, TDES, TDEA, SEED, HMAC, CMAC
Asymmetric Algorithms
RSA 2048, ECDH, ECDSA, ECIES, ECC, DH, Diffie-Hellman, DSA
Hash functions
SHA-1, SHA-224, SHA-256, SHA-384, SHA-512
Schemes
MAC, Key Exchange, Key Agreement, Key agreement
Protocols
SSL
Randomness
TRNG, DRBG, RNG
Libraries
OpenSSL
Elliptic Curves
P-192, P-224, P-256, P-384, P-521
Block cipher modes
ECB, CBC

Vendor
STM

Security level
EAL 4, EAL4
Protection profiles
BSI-CC-PP-0045-2009

Side-channel analysis
side-channel, Malfunction, malfunction

Title IBM Enterprise PKCS11(on 4767) Security Target (EAL 4 )
Subject Security Policy [rev. 273]
Keywords IBM 4767 (hw. 00LV498 (2)); PCIeCC; XCP, Enterprise PKCS11 (EP11)
Author Visegrady, Tamas <tvi (at) zurich.ibm.com>
Creation date D:20170830165958+02'00'
Modification date D:20170830165958+02'00'
Pages 52
Creator IBM Research --- Zurich and IBM Boeblingen/Poughkeepsie
Producer pdfTeX

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

Certificate ID

BSI-DSZ-CC-1002-2018

Cross-references

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.cc.CCCertificate",
  "category": "Other Devices and Systems",
  "cert_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1002c_pdf.pdf",
  "dgst": "4db9ed66ccab7fd5",
  "heuristics": {
    "_type": "sec_certs.sample.cc_eucc_common.Heuristics",
    "annotated_references": null,
    "cert_id": "BSI-DSZ-CC-1002-2018",
    "cert_lab": [
      "BSI"
    ],
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "eal": "EAL4",
    "extracted_sars": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "4765",
        "11",
        "4767"
      ]
    },
    "indirect_transitive_cves": null,
    "next_certificates": null,
    "prev_certificates": null,
    "protection_profiles": null,
    "related_cves": null,
    "report_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": {
        "_type": "Set",
        "elements": [
          "BSI-DSZ-CC-1094-2019"
        ]
      },
      "directly_referencing": null,
      "indirectly_referenced_by": {
        "_type": "Set",
        "elements": [
          "BSI-DSZ-CC-1094-2019"
        ]
      },
      "indirectly_referencing": null
    },
    "scheme_data": null,
    "st_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "verified_cpe_matches": null
  },
  "maintenance_updates": {
    "_type": "Set",
    "elements": []
  },
  "manufacturer": "IBM Corporation",
  "manufacturer_web": "https://www.ibm.com",
  "name": "IBM Enterprise PKCS#11 Firmware FW IDs \u0027dada00eb\u0027 ((4767) and \u0027e41c1444\u0027 (4765)",
  "not_valid_after": "2023-03-26",
  "not_valid_before": "2018-03-26",
  "pdf_data": {
    "_type": "sec_certs.sample.cc_eucc_common.PdfData",
    "cert_filename": "1002c_pdf.pdf",
    "cert_frontpage": null,
    "cert_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {
        "DE": {
          "BSI-DSZ-CC-1002-2018": 1
        }
      },
      "cc_claims": {},
      "cc_protection_profile_id": {},
      "cc_sar": {},
      "cc_security_level": {
        "EAL": {
          "EAL 2": 1,
          "EAL 4": 1
        }
      },
      "cc_sfr": {},
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "ISO": {
          "ISO/IEC 15408": 2,
          "ISO/IEC 18045": 2
        },
        "PKCS": {
          "PKCS#11": 1
        }
      },
      "symmetric_crypto": {},
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "cert_metadata": {
      "/Author": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "/CreationDate": "D:20180423082623+02\u002700\u0027",
      "/Creator": "Writer",
      "/Keywords": "\"Common Criteria, Certification, Zertifizierung, IBM, PKCS#11 FW IDs \u0027dada00eb\u0027 (4767) and \u0027e41c1444\u0027 (4765)\"",
      "/ModDate": "D:20180423142404+02\u002700\u0027",
      "/Producer": "LibreOffice 5.2",
      "/Subject": "Zertifikat, Certificate, Urkunde",
      "/Title": "Certification Report BSI-DSZ-CC-1002-2018",
      "pdf_file_size_bytes": 922473,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 1
    },
    "report_filename": "1002a_pdf.pdf",
    "report_frontpage": {
      "DE": {
        "cc_security_level": "Product specific Security Target Common Criteria Part 2 extended Common Criteria Part 3 conformant EAL 4",
        "cc_version": "",
        "cert_id": "BSI-DSZ-CC-1002-2018",
        "cert_item": "IBM Enterprise PKCS#11 Firmware FW IDs \u0027dada00eb\u0027 (4767) and \u0027e41c1444\u0027 (4765) ##",
        "cert_lab": "BSI",
        "developer": "IBM Research \u0026amp; Development Germany BSI -",
        "match_rules": [
          "(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)"
        ],
        "ref_protection_profiles": "None"
      }
    },
    "report_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDH": {
            "ECDH": 5
          },
          "ECDSA": {
            "ECDSA": 7
          }
        },
        "FF": {
          "DSA": {
            "DSA": 4
          }
        }
      },
      "cc_cert_id": {
        "DE": {
          "BSI-DSZ-CC-1002-2018": 28
        }
      },
      "cc_claims": {},
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ALC": {
          "ALC_FLR": 1
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 1": 1,
          "EAL 2": 3,
          "EAL 4": 5
        }
      },
      "cc_sfr": {},
      "certification_process": {
        "ConfidentialDocument": {
          "Configuration list of static content measured by SHA256 hashes, Version 1.0, 201612-12, IBM (confidential document": 1,
          "EP11 configuration list (BOE) for documentation files, Version 1, 2017-07-14, IBM (confidential document": 1,
          "EP11 configuration list BOE, Version 1, 2017-07-14, IBM (confidential document": 1,
          "Hardware configuration list for IBM 4765 and 4767 EP11 HSMs, Version 1.0, 201708-31, IBM (confidential document": 1,
          "Report, Version 5, 2018-03-12, Final Evaluation Technical Report, atsec information security GmbH (confidential document": 1,
          "being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification": 1
        }
      },
      "cipher_mode": {
        "CBC": {
          "CBC": 4
        },
        "ECB": {
          "ECB": 3
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "MAC": {
          "MAC": 1
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "atsec": {
          "atsec": 3
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 2
          },
          "SHA2": {
            "SHA-2": 1,
            "SHA-224": 1,
            "SHA-256": 6,
            "SHA-384": 1,
            "SHA-512": 1,
            "SHA256": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 1
        },
        "RNG": {
          "RNG": 1
        },
        "TRNG": {
          "TRNG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "BSI": {
          "AIS 20": 2,
          "AIS 23": 1,
          "AIS 32": 1
        },
        "FIPS": {
          "FIPS 180-4": 1,
          "FIPS 186-3": 1,
          "FIPS 186-4": 10,
          "FIPS 197": 2,
          "FIPS 46-3": 1
        },
        "ISO": {
          "ISO/IEC 15408": 4,
          "ISO/IEC 17065": 2,
          "ISO/IEC 18045": 4
        },
        "NIST": {
          "NIST SP 800-38A": 3,
          "NIST SP 800-90A": 1
        },
        "PKCS": {
          "PKCS#1": 1,
          "PKCS#11": 15
        },
        "RFC": {
          "RFC 3447": 1,
          "RFC 5639": 5
        },
        "X509": {
          "X.509": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 4
          }
        },
        "DES": {
          "3DES": {
            "TDES": 3
          }
        }
      },
      "technical_report_id": {
        "BSI": {
          "BSI 7148": 1,
          "BSI TR-02102": 1
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "report_metadata": {
      "/Author": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "/CreationDate": "D:20180423082645+02\u002700\u0027",
      "/Creator": "Writer",
      "/Keywords": "\"Common Criteria, Certification, Zertifizierung, IBM, PKCS#11 FW IDs \u0027dada00eb\u0027 (4767) and \u0027e41c1444\u0027 (4765)\"",
      "/ModDate": "D:20180423142111+02\u002700\u0027",
      "/Producer": "LibreOffice 5.2",
      "/Subject": "Certification Report, Zertifizierungsreport",
      "/Title": "Certification Report BSI-DSZ-CC-1002-2018",
      "pdf_file_size_bytes": 1388431,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://www.bsi.bund.de/",
          "http://www.commoncriteriaportal.org/",
          "http://www.sogisportal.eu/",
          "https://www.bsi.bund.de/zertifizierung",
          "https://www.bsi.bund.de/AIS",
          "https://www.bsi.bund.de/zertifizierungsreporte",
          "http://www.commoncriteriaportal.org/cc/"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 28
    },
    "st_filename": "1002b_pdf.pdf",
    "st_frontpage": null,
    "st_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          },
          "ECDH": {
            "ECDH": 5
          },
          "ECDSA": {
            "ECDSA": 7
          },
          "ECIES": {
            "ECIES": 1
          }
        },
        "FF": {
          "DH": {
            "DH": 4,
            "Diffie-Hellman": 2
          },
          "DSA": {
            "DSA": 12
          }
        },
        "RSA": {
          "RSA 2048": 1
        }
      },
      "cc_cert_id": {},
      "cc_claims": {},
      "cc_protection_profile_id": {
        "BSI": {
          "BSI-CC-PP-0045-2009": 1
        }
      },
      "cc_sar": {},
      "cc_security_level": {
        "EAL": {
          "EAL 4": 1,
          "EAL4": 3
        }
      },
      "cc_sfr": {},
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 6
        },
        "ECB": {
          "ECB": 4
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 1
        }
      },
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2,
          "Key agreement": 1
        },
        "KEX": {
          "Key Exchange": 1
        },
        "MAC": {
          "MAC": 13
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-192": 8,
          "P-224": 8,
          "P-256": 8,
          "P-384": 8,
          "P-521": 8
        }
      },
      "eval_facility": {},
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 6
          },
          "SHA2": {
            "SHA-224": 5,
            "SHA-256": 14,
            "SHA-384": 4,
            "SHA-512": 4
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 2
        },
        "RNG": {
          "RNG": 20
        },
        "TRNG": {
          "TRNG": 3
        }
      },
      "side_channel_analysis": {
        "FI": {
          "Malfunction": 4,
          "malfunction": 2
        },
        "SCA": {
          "side-channel": 1
        }
      },
      "standard_id": {
        "BSI": {
          "AIS 31": 1
        },
        "FIPS": {
          "FIPS 140-2": 4,
          "FIPS 180-4": 3,
          "FIPS 186-4": 9,
          "FIPS 197": 4,
          "FIPS 46-3": 1
        },
        "ISO": {
          "ISO/IEC 18031:2011": 1
        },
        "PKCS": {
          "PKCS 11": 1,
          "PKCS#11": 159,
          "PKCS1": 6,
          "PKCS11": 1,
          "PKCS12": 1
        },
        "RFC": {
          "RFC 3394": 1,
          "RFC 3447": 11,
          "RFC 5649": 1
        },
        "X509": {
          "X.509": 6
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 13
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 1,
            "TDES": 8
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 2,
            "HMAC": 7
          }
        },
        "miscellaneous": {
          "SEED": {
            "SEED": 1
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "STMicroelectronics": {
          "STM": 4
        }
      },
      "vulnerability": {}
    },
    "st_metadata": {
      "/Author": "Visegrady, Tamas \u003ctvi (at) zurich.ibm.com\u003e",
      "/CreationDate": "D:20170830165958+02\u002700\u0027",
      "/Creator": "IBM Research --- Zurich and IBM Boeblingen/Poughkeepsie",
      "/Keywords": "IBM 4767 (hw. 00LV498 (2)); PCIeCC; XCP, Enterprise PKCS11 (EP11)",
      "/ModDate": "D:20170830165958+02\u002700\u0027",
      "/PTEX.Fullbanner": "This is pdfTeX, Version 3.14159265-2.6-1.40.18 (TeX Live 2017/TeX Live for SUSE Linux) kpathsea version 6.2.3",
      "/Producer": "pdfTeX",
      "/Subject": "Security Policy [rev. 273]",
      "/Title": "IBM Enterprise PKCS11(on 4767) Security Target (EAL 4 )",
      "/Trapped": "/False",
      "pdf_file_size_bytes": 840064,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 52
    }
  },
  "protection_profile_links": {
    "_type": "Set",
    "elements": []
  },
  "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1002a_pdf.pdf",
  "scheme": "DE",
  "security_level": {
    "_type": "Set",
    "elements": [
      "EAL4"
    ]
  },
  "st_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1002b_pdf.pdf",
  "state": {
    "_type": "sec_certs.sample.cc_eucc_common.InternalState",
    "cert": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "e317170078cd5b94a88622b2f8eb94968f090079e560afc80ffe05648e9db2da",
      "source_hash": "ba7feebc1a92f281b06a6336c3031dfba6fc444ececc5babb12254a035e44627",
      "txt_hash": "f75f4a152b21d4d003760889ce97ec6c573db5a577214770836924ddeb896d72"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "4723ec3fdb87b02a0d5b34eb3bdc27b8c8d1574771fbbf28188717039640aeec",
      "source_hash": "6939aa2523c5284619299234a1f982265546d781913644c2cd3d9792a97d7a2d",
      "txt_hash": "b1019dddb574bfd37162a920980aa4e22f0159c0331df4897ef3d2c3fd2110ec"
    },
    "st": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "63c9d380a6c1a760cdca6eb72a6d9c7788bdc22749e4f68fa7a1fc880193006c",
      "source_hash": "7810b4fe6cdf9d40a395d87760f02464fe810e70afd8838cbf60ce682a391f8f",
      "txt_hash": "0605b0a088f1767f6a06985130624d05b557c9f27b8e4c8f1a5e0e7a2fe71922"
    }
  },
  "status": "archived"
}