Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Junos OS 20.2R1-S1 for QFX5120-48T, QFX5120-48Y, QFX5120-32C, QFX5210-64C, EX4650-48Y and QFX5200-48Y
Certificate Number: 2021/135
Connected eSE 5.3.4 Platform v1.1 (Revision 1.0) (ANSSI-CC-2024/33)
ANSSI-CC-2024/33
name Junos OS 20.2R1-S1 for QFX5120-48T, QFX5120-48Y, QFX5120-32C, QFX5210-64C, EX4650-48Y and QFX5200-48Y Connected eSE 5.3.4 Platform v1.1 (Revision 1.0) (ANSSI-CC-2024/33)
category Network and Network-Related Devices and Systems ICs, Smart Cards and Smart Card-Related Devices and Systems
scheme AU FR
not_valid_after 15.02.2026 06.12.2029
not_valid_before 15.02.2021 06.12.2024
cert_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/EFT-T017%20Cert%202021_135%20OS.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/Certificat-CC-2024_33fr.pdf
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/T0017-Certification_Report_V1.0.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ANSSI-CC-2024_33fr.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/Juniper%20QFX5120,%20QFX5200,%20QFX5210,%20EX4650%20Junos%2020.2R1%20ST%20v1.3.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ANSSI-cible-CC-2024_33en.pdf
manufacturer Juniper Networks, Inc. Thales
manufacturer_web https://www.juniper.net/
security_level {} EAL4+, ALC_FLR.1, ALC_DVS.2, AVA_VAN.5
dgst 07bffc2fb1a2fbc4 4d52b7d551235f92
heuristics/cert_id Certificate Number: 2021/135 ANSSI-CC-2024/33
heuristics/extracted_sars ASE_TSS.1, ADV_FSP.1, ALC_CMC.1, ASE_INT.1, ASE_SPD.1, ASE_OBJ.1, AVA_VAN.1, ATE_IND.1, ALC_CMS.1, AGD_OPE.1, ASE_REQ.1, ASE_CCL.1, ASE_ECD.1, AGD_PRE.1 ASE_INT.1, ALC_DVS.2, ALC_CMC.4, ASE_ECD.1, ADV_IMP.1, ATE_COV.2, ALC_FLR.1, ALC_TAT.1, ASE_TSS.1, ASE_SPD.1, AVA_VAN.5, ALC_DEL.1, ALC_LCD.1, AGD_OPE.1, AGD_PRE.1, ALC_CMS.4, ATE_FUN.1, ADV_ARC.1, ASE_OBJ.2, ADV_TDS.3, ATE_DPT.1, ASE_REQ.2, ADV_FSP.4, ASE_CCL.1
heuristics/extracted_versions 20.2 5.3.4, 1.1, 1.0
heuristics/report_references/directly_referencing {} NSCIB-CC-2300182-01-CR
heuristics/report_references/indirectly_referencing {} NSCIB-CC-2300182-01-CR
heuristics/st_references/directly_referencing {} NSCIB-CC-2300182-01-CR
heuristics/st_references/indirectly_referencing {} NSCIB-CC-2300182-01-CR
heuristics/protection_profiles {} 3ebd6b9f8d81e522
protection_profile_links https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/CPP_ND_V2.1.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/CCN-CC-PP-5-2021.pdf
pdf_data/cert_filename EFT-T017 Cert 2021_135 OS.pdf Certificat-CC-2024_33fr.pdf
pdf_data/cert_keywords/cc_cert_id
  • ES:
    • 2020-37-INF-3429- v1: 1
  • FR:
    • ANSSI-CC-2024/33: 2
pdf_data/cert_keywords/cc_security_level
  • EAL:
    • EAL2: 1
    • EAL4: 1
pdf_data/cert_keywords/cc_sar
  • ALC:
    • ALC_DVS.2: 1
    • ALC_FLR.1: 1
  • AVA:
    • AVA_VAN.5: 1
pdf_data/cert_keywords/vendor
  • Thales:
    • Thales: 2
pdf_data/cert_keywords/eval_facility
  • Serma:
    • Serma Safety & Security: 2
pdf_data/cert_metadata
  • /CreationDate: D:20210217171814+10'00'
  • /Creator: ACA75941.dpe.protected.mil.au
  • /ModDate: D:20210217171814+10'00'
  • /Producer: KONICA MINOLTA bizhub C308
  • /Title: SACA75941.d21021717171
  • pdf_file_size_bytes: 108210
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
  • /CreationDate: D:20241210105125+01'00'
  • /Creator: Acrobat PDFMaker 23 pour Word
  • /Keywords:
  • /ModDate: D:20241210105204+01'00'
  • /Producer: Adobe PDF Library 23.1.175
  • pdf_file_size_bytes: 169655
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 2
pdf_data/report_filename T0017-Certification_Report_V1.0.pdf ANSSI-CC-2024_33fr.pdf
pdf_data/report_frontpage
  • FR:
  • FR:
pdf_data/report_keywords/cc_cert_id
  • ES:
    • 2020-37-INF-3429- v1: 2
  • FR:
    • ANSSI-CC-2024/33: 2
  • NL:
    • NSCIB-CC-2300182-01-CR: 1
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL2: 2
    • EAL4: 1
    • EAL7: 1
  • ITSEC:
    • ITSEC E6 Elevé: 1
pdf_data/report_keywords/cc_sar
  • ALC:
    • ALC_DVS.2: 1
    • ALC_FLR: 1
    • ALC_FLR.1: 2
  • AVA:
    • AVA_VAN: 1
    • AVA_VAN.5: 1
pdf_data/report_keywords/vendor
  • Thales:
    • Thales: 7
pdf_data/report_keywords/eval_facility
  • Teron:
    • Teron Labs: 4
  • CESTI:
    • CESTI: 1
  • Serma:
    • SERMA: 1
pdf_data/report_keywords/symmetric_crypto
  • DES:
    • DES:
      • DES: 1
pdf_data/report_keywords/crypto_protocol
  • SSH:
    • SSH: 3
    • SSHv2: 2
pdf_data/report_keywords/randomness
  • RNG:
    • RBG: 1
pdf_data/report_keywords/standard_id
  • BSI:
    • AIS20: 2
  • CC:
    • CCMB-2017-04-001: 1
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
pdf_data/report_metadata
pdf_data/st_filename Juniper QFX5120, QFX5200, QFX5210, EX4650 Junos 20.2R1 ST v1.3.pdf ANSSI-cible-CC-2024_33en.pdf
pdf_data/st_keywords/cc_cert_id
  • NL:
    • CC-1: 2
    • CC-2: 3
    • CC-3: 3
    • NSCIB-CC-2300182-01: 1
pdf_data/st_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP-0084-2014: 1
    • BSI-CC-PP-0099-V2-2020: 1
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL4: 4
    • EAL4 augmented: 2
    • EAL4+: 2
    • EAL6+: 1
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_FSP.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.1: 1
    • ALC_CMS.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.1: 1
    • ASE_REQ.1: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_IND.1: 1
  • AVA:
    • AVA_VAN: 1
    • AVA_VAN.1: 1
  • ADV:
    • ADV_ARC: 1
    • ADV_ARC.1: 5
    • ADV_FSP.1: 3
    • ADV_FSP.2: 2
    • ADV_FSP.4: 9
    • ADV_IMP.1: 4
    • ADV_TDS.1: 2
    • ADV_TDS.2: 1
    • ADV_TDS.3: 4
  • AGD:
    • AGD_OPE.1: 9
    • AGD_PRE.1: 3
  • ALC:
    • ALC_CMC.4: 1
    • ALC_CMS.1: 1
    • ALC_CMS.4: 1
    • ALC_DEL.1: 1
    • ALC_DVS.1: 1
    • ALC_DVS.2: 4
    • ALC_FLR.1: 4
    • ALC_FLR.2: 1
    • ALC_LCD.1: 3
    • ALC_TAT.1: 3
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 4
    • ASE_INT.1: 4
    • ASE_OBJ.2: 2
    • ASE_REQ.1: 2
    • ASE_REQ.2: 1
    • ASE_SPD.1: 3
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 2
    • ATE_COV.2: 3
    • ATE_DPT.1: 2
    • ATE_FUN.1: 5
  • AVA:
    • AVA_VAN.5: 4
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN: 2
    • FAU_GEN.1: 10
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_GEN.2: 5
    • FAU_GEN.2.1: 1
    • FAU_STG: 1
    • FAU_STG.1: 4
    • FAU_STG.1.1: 1
    • FAU_STG.1.2: 1
    • FAU_STG_EXT: 2
    • FAU_STG_EXT.1: 5
    • FAU_STG_EXT.1.1: 1
    • FAU_STG_EXT.1.2: 1
    • FAU_STG_EXT.1.3: 1
  • FCS:
    • FCS_CKM: 2
    • FCS_CKM.1: 17
    • FCS_CKM.1.1: 1
    • FCS_CKM.2: 10
    • FCS_CKM.2.1: 1
    • FCS_CKM.4: 11
    • FCS_CKM.4.1: 1
    • FCS_COP: 28
    • FCS_COP.1: 6
    • FCS_NTP_EXT.1.4: 1
    • FCS_RBG_EXT: 2
    • FCS_RBG_EXT.1: 7
    • FCS_RBG_EXT.1.1: 2
    • FCS_RBG_EXT.1.2: 1
    • FCS_SSHC_EXT.1.5: 1
    • FCS_SSHS_EXT: 1
    • FCS_SSHS_EXT.1: 6
    • FCS_SSHS_EXT.1.1: 1
    • FCS_SSHS_EXT.1.2: 1
    • FCS_SSHS_EXT.1.3: 1
    • FCS_SSHS_EXT.1.4: 1
    • FCS_SSHS_EXT.1.5: 2
    • FCS_SSHS_EXT.1.6: 1
    • FCS_SSHS_EXT.1.7: 1
    • FCS_SSHS_EXT.1.8: 1
    • FCS_TLSC_EXT.1.1: 2
  • FIA:
    • FIA_AFL: 2
    • FIA_AFL.1: 9
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_PMG_EXT: 2
    • FIA_PMG_EXT.1: 5
    • FIA_PMG_EXT.1.1: 1
    • FIA_UAU: 2
    • FIA_UAU.7: 5
    • FIA_UAU.7.1: 1
    • FIA_UAU_EXT: 2
    • FIA_UAU_EXT.2: 5
    • FIA_UAU_EXT.2.1: 1
    • FIA_UIA_EXT: 2
    • FIA_UIA_EXT.1: 11
    • FIA_UIA_EXT.1.1: 1
    • FIA_UIA_EXT.1.2: 1
    • FIA_UID.1: 3
  • FMT:
    • FMT_MOF: 19
    • FMT_MOF.1: 3
    • FMT_MTD: 14
    • FMT_MTD.1: 2
    • FMT_SMF: 2
    • FMT_SMF.1: 13
    • FMT_SMF.1.1: 1
    • FMT_SMR: 2
    • FMT_SMR.1: 5
    • FMT_SMR.2: 12
    • FMT_SMR.2.1: 1
    • FMT_SMR.2.2: 1
    • FMT_SMR.2.3: 1
  • FPT:
    • FPT_APW_EXT: 2
    • FPT_APW_EXT.1: 6
    • FPT_APW_EXT.1.1: 1
    • FPT_APW_EXT.1.2: 1
    • FPT_SKP_EXT: 2
    • FPT_SKP_EXT.1: 5
    • FPT_SKP_EXT.1.1: 1
    • FPT_STM: 3
    • FPT_STM.1: 3
    • FPT_STM_EXT: 2
    • FPT_STM_EXT.1: 2
    • FPT_STM_EXT.1.1: 1
    • FPT_STM_EXT.1.2: 1
    • FPT_TST_EXT: 2
    • FPT_TST_EXT.1: 6
    • FPT_TST_EXT.1.1: 1
    • FPT_TUD_EXT: 2
    • FPT_TUD_EXT.1: 7
    • FPT_TUD_EXT.1.1: 1
    • FPT_TUD_EXT.1.2: 1
    • FPT_TUD_EXT.1.3: 1
  • FTA:
    • FTA_SSL: 2
    • FTA_SSL.3: 8
    • FTA_SSL.4: 6
    • FTA_SSL_EXT: 2
    • FTA_SSL_EXT.1: 7
    • FTA_SSL_EXT.1.1: 1
    • FTA_TAB: 2
    • FTA_TAB.1: 9
  • FTP:
    • FTP_ITC: 2
    • FTP_ITC.1: 22
    • FTP_ITC.1.1: 1
    • FTP_ITC.1.2: 1
    • FTP_ITC.1.3: 1
    • FTP_ITC.2: 6
    • FTP_TRP: 8
    • FTP_TRP.1: 3
    • FTP_TUD.1: 1
  • FAU:
    • FAU_ARP.1: 15
    • FAU_ARP.1.1: 2
    • FAU_GEN: 1
    • FAU_SAA.1: 3
    • FAU_SAR: 2
    • FAU_SAS: 1
    • FAU_SAS.1: 1
  • FCO:
    • FCO_NRO: 28
    • FCO_NRO.2: 9
    • FCO_NRR: 5
    • FCO_NRR.1: 3
  • FCS:
    • FCS_CKM: 71
    • FCS_CKM.1: 31
    • FCS_CKM.2: 9
    • FCS_CKM.4: 65
    • FCS_CKM.4.1: 1
    • FCS_CKM.5: 7
    • FCS_CKM.5.1: 1
    • FCS_COP: 161
    • FCS_COP.1: 31
    • FCS_RNG: 1
    • FCS_RNG.1: 11
    • FCS_RNG.1.1: 2
    • FCS_RNG.1.2: 2
  • FDP:
    • FDP_ACC: 66
    • FDP_ACC.1: 27
    • FDP_ACC.2: 5
    • FDP_ACF: 58
    • FDP_ACF.1: 38
    • FDP_IFC: 67
    • FDP_IFC.1: 23
    • FDP_IFC.2: 6
    • FDP_IFF: 53
    • FDP_IFF.1: 27
    • FDP_ITC: 32
    • FDP_ITC.1: 23
    • FDP_ITC.2: 33
    • FDP_ITT.1: 1
    • FDP_RIP: 127
    • FDP_RIP.1: 9
    • FDP_ROL: 32
    • FDP_ROL.1: 11
    • FDP_SDC.1: 1
    • FDP_SDI: 25
    • FDP_SDI.2: 10
    • FDP_SDI.2.2: 1
    • FDP_UCT: 6
    • FDP_UCT.1: 1
    • FDP_UIT: 9
    • FDP_UIT.1: 2
  • FIA:
    • FIA_AFL: 11
    • FIA_AFL.1: 8
    • FIA_API.1: 1
    • FIA_ATD: 13
    • FIA_ATD.1: 3
    • FIA_UAU: 27
    • FIA_UAU.1: 4
    • FIA_UAU.4: 1
    • FIA_UID: 34
    • FIA_UID.1: 14
    • FIA_UID.2: 1
    • FIA_USB: 7
    • FIA_USB.1: 3
  • FMT:
    • FMT_LIM: 6
    • FMT_MSA: 189
    • FMT_MSA.1: 19
    • FMT_MSA.2: 2
    • FMT_MSA.3: 30
    • FMT_MTD: 38
    • FMT_MTD.1: 5
    • FMT_MTD.3: 2
    • FMT_SMF: 78
    • FMT_SMF.1: 28
    • FMT_SMF.1.1: 1
    • FMT_SMR: 82
    • FMT_SMR.1: 43
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
  • FPR:
    • FPR_UNO: 12
    • FPR_UNO.1: 14
    • FPR_UNO.1.1: 1
  • FPT:
    • FPT_FLS: 58
    • FPT_FLS.1: 7
    • FPT_ITT.1: 1
    • FPT_PHP.3: 1
    • FPT_RCV: 24
    • FPT_RCV.3: 10
    • FPT_RCV.4: 1
    • FPT_STM: 3
    • FPT_STM.1: 5
    • FPT_TDC: 9
    • FPT_TDC.1: 9
    • FPT_TDC.1.1: 1
    • FPT_TDC.1.2: 1
  • FRU:
    • FRU_FLT.2: 1
  • FTP:
    • FTP_ITC: 34
    • FTP_ITC.1: 13
    • FTP_TRP: 10
    • FTP_TRP.1: 11
pdf_data/st_keywords/cc_claims
  • A:
    • A.ADMIN_CREDENTIALS_SECURE: 1
    • A.LIMITED_FUNCTIONALITY: 1
    • A.NO_THRU_TRAFFIC_PROTECTION: 1
    • A.PHYSICAL_PROTECTION: 1
    • A.REGULAR_UPDATES: 1
    • A.RESIDUAL_INFORMATION: 1
    • A.TRUSTED_ADMINSTRATOR: 1
  • OE:
    • OE.ADMIN_CREDENTIALS_SECURE: 1
    • OE.NO_GENERAL_PURPOSE: 1
    • OE.NO_THRU_TRAFFIC_PROTECTION: 1
    • OE.PHYSICAL: 1
    • OE.RESIDUAL_INFORMATION: 1
    • OE.TRUSTED_ADMIN: 1
    • OE.UPDATES: 1
  • T:
    • T.PASSWORD_CRACKING: 1
    • T.SECURITY_FUNCTIONALITY_COMPROMISE: 1
    • T.SECURITY_FUNCTIONALITY_FAILURE: 1
    • T.UNAUTHORIZED_ADMINISTRATOR_ACCESS: 1
    • T.UNDETECTED_ACTIVITY: 1
    • T.UNTRUSTED_COMMUNICATION_CHANNELS: 1
    • T.UPDATE_COMPROMISE: 1
    • T.WEAK_AUTHENTICATION_ENDPOINTS: 1
    • T.WEAK_CRYPTOGRAPHY: 1
  • A:
    • A.ADMIN: 3
    • A.APPS-PROVIDER: 3
    • A.CAP_FILE: 4
    • A.CONTROLLING-: 1
    • A.CONTROLLING-AUTHORITY: 2
    • A.ISSUER: 3
    • A.KEY-ESCROW: 3
    • A.KEYS-PROT: 3
    • A.OS-UPDATE-: 1
    • A.OS-UPDATE-EVIDENCE: 2
    • A.PERSONALISER: 3
    • A.PRODUCTION: 4
    • A.SCP-SUPP: 3
    • A.SECURE_ACODE_: 1
    • A.SECURE_ACODE_MANAGEMENT: 2
    • A.VERIFICA: 1
    • A.VERIFICATION: 2
    • A.VERIFICATION-: 1
    • A.VERIFICATION-AUTHORITY: 2
  • D:
    • D.API_DATA: 3
    • D.APP_CODE: 7
    • D.APP_C_DATA: 5
    • D.APP_I_DATA: 9
    • D.APP_KEYS: 9
    • D.APSD_DAP_KEYS: 1
    • D.APSD_KEYS: 3
    • D.CASD_DAP_KEYS: 1
    • D.CASD_KEYS: 1
    • D.CCCM_KEYS: 1
    • D.CLFDB-DK: 1
    • D.CONFIRMATION-: 1
    • D.CONFIRMATION-DATA: 1
    • D.CRYPTO: 4
    • D.CTL_PRO: 5
    • D.CTL_REGISTRY: 5
    • D.CVM_MGMT_STATE: 3
    • D.CVM_PIN: 3
    • D.DAP_BLOCK: 1
    • D.ELF_AID: 3
    • D.ELF_APP_INS: 3
    • D.ELF_RG_DATA: 1
    • D.ELF_SESSION_ST: 2
    • D.GP_CODE: 1
    • D.GP_REGISTRY: 6
    • D.GS-PARAMETERS: 1
    • D.ISD_KEYS: 3
    • D.JCS_CODE: 6
    • D.JCS_DATA: 10
    • D.NEW_ELF: 3
    • D.OLD_ELF: 3
    • D.OS: 1
    • D.OS-: 3
    • D.OS-UPDATE-CODE-: 1
    • D.OS-UPDATE-CODE-ID: 1
    • D.OS-UPDATE_ADDITIONALCODE: 3
    • D.OS-UPDATE_DEC-: 1
    • D.OS-UPDATE_DEC-KEY: 1
    • D.OS-UPDATE_SGNVER-KEY: 1
    • D.PIN: 6
    • D.RECEIPT-: 1
    • D.RECEIPT-GENERATION-KEY: 1
    • D.SEC_DATA: 8
    • D.TOE_IDENTIFIER: 1
    • D.TOKEN-: 1
    • D.TOKEN-VERIFICATION-KEY: 1
  • O:
    • O.ALARM: 16
    • O.APPLET: 16
    • O.APPLI-AUTH: 5
    • O.ARRAY_VIEWS_: 1
    • O.ARRAY_VIEWS_CONFID: 4
    • O.ARRAY_VIEWS_I: 1
    • O.ARRAY_VIEWS_INTEG: 4
    • O.CARD-: 11
    • O.CARD-MANAGEMENT: 22
    • O.CCCM: 9
    • O.CIPHER: 9
    • O.CLFDB-DECIPHER: 5
    • O.CODE_: 1
    • O.CODE_CAP_FILE: 12
    • O.CODE_PKG: 1
    • O.COMM-: 1
    • O.COMM-AUTH: 10
    • O.COMM-CONFIDENTIALITY: 7
    • O.COMM-INTEGRITY: 10
    • O.CONFID-OS-: 1
    • O.CONFID-OS-UPDATE: 6
    • O.CRS_COUNTERS: 5
    • O.CRS_PRIVILEGES: 5
    • O.CRT-MNGT: 5
    • O.CTL_REGISTRY: 5
    • O.CTL_SC: 5
    • O.CVM-BLOCK: 9
    • O.CVM-MGMT: 9
    • O.DELETION: 5
    • O.DOMAIN-RIGHTS: 9
    • O.ELF_APP_DATA: 7
    • O.ELF_AUTHORISED: 5
    • O.ELF_DATA_PRO: 5
    • O.ELF_DELE_IRR: 5
    • O.ELF_INTEGRITY: 5
    • O.ELF_SESSION: 7
    • O.FIREWALL: 19
    • O.GLOBAL-CVM: 5
    • O.GLOBAL_ARRAY: 2
    • O.GLOBAL_ARRAYS_CONFID: 6
    • O.GLOBAL_ARRAYS_INTEG: 6
    • O.INSTALL: 11
    • O.JAVAO: 1
    • O.JAVAOB: 4
    • O.JAVAOBJE: 1
    • O.JAVAOBJECT: 42
    • O.KEY-MNGT: 9
    • O.LC-MANAGEMENT: 6
    • O.LOAD: 11
    • O.MTC-CTR-: 1
    • O.MTC-CTR-MNGT: 4
    • O.NATIVE: 11
    • O.NO-KEY-REUSE: 5
    • O.OBJ-DELETION: 5
    • O.OPERATE: 23
    • O.PIN-: 1
    • O.PIN-MNGT: 7
    • O.PRIVILEGES-: 1
    • O.PRIVILEGES-MANAGEMENT: 4
    • O.REALLOCATION: 7
    • O.RECEIPT: 5
    • O.RESOURCES: 7
    • O.RND: 1
    • O.RNG: 8
    • O.SCP: 45
    • O.SECURE_AC_ACTIV: 1
    • O.SECURE_AC_ACTIVATION: 6
    • O.SECURE_LOAD_AC: 1
    • O.SECURE_LOAD_ACODE: 10
    • O.SECURITY-: 2
    • O.SECURITY-DOMAINS: 3
    • O.SENSITIVE_ARR: 1
    • O.SENSITIVE_ARRAYS_INTEG: 4
    • O.SENSITIVE_RES: 1
    • O.SENSITIVE_RESULTS_INTEG: 4
    • O.SID: 15
    • O.TOE-: 1
    • O.TOE_IDENTIFICATI: 1
    • O.TOE_IDENTIFICATION: 6
    • O.TOKEN: 5
    • O.TRANSACTION: 7
  • OE:
    • OE.ADMIN: 3
    • OE.AID-MANAGEMENT: 3
    • OE.AP-KEYS: 3
    • OE.APPLICATIONS: 3
    • OE.APPS-PROVIDER: 3
    • OE.CA-KEYS: 3
    • OE.CAP_FILE: 6
    • OE.CLFDB-ENC-PR: 3
    • OE.CODE-: 5
    • OE.CODE-EVIDENCE: 12
    • OE.CONTROLLING-: 1
    • OE.CONTROLLING-AUTHORITY: 2
    • OE.DAP_BLOCK_GEN: 3
    • OE.ISD-KEYS: 3
    • OE.ISSUER: 3
    • OE.KEY-CHANGE: 3
    • OE.KEY-ESCROW: 3
    • OE.KEY-GENERATION: 3
    • OE.KEYS-PROT: 3
    • OE.LOADING: 3
    • OE.OS-UPDATE-: 1
    • OE.OS-UPDATE-ENCRYPTION: 4
    • OE.OS-UPDATE-EVIDENCE: 3
    • OE.PERSONALISER: 3
    • OE.PRODUCTION: 4
    • OE.RECEIPT-VER: 3
    • OE.SCP: 3
    • OE.SCP-SUPP: 3
    • OE.SECURE_ACODE_MANA: 1
    • OE.SECURE_ACODE_MANAGEMENT: 2
    • OE.SERVERS: 3
    • OE.TOKEN-GEN: 3
    • OE.VERIFICATION: 35
    • OE.VERIFICATION-: 1
    • OE.VERIFICATION-AUTHORITY: 2
  • OP:
    • OP.ARRAY_AASTORE: 3
    • OP.ARRAY_ACCESS: 4
    • OP.ARRAY_LENGTH: 4
    • OP.ARRAY_T_ALOAD: 3
    • OP.ARRAY_T_ASTORE: 3
    • OP.CREATE: 7
    • OP.DELETE_APPLET: 4
    • OP.DELETE_CAP_FILE: 3
    • OP.DELETE_CAP_FILE_APPLET: 3
    • OP.INSTANCE_FIELD: 3
    • OP.INVK_INTERFACE: 7
    • OP.INVK_VIRTUAL: 6
    • OP.JAVA: 5
    • OP.PUT: 5
    • OP.PUTFIELD: 1
    • OP.PUTSTATIC: 1
    • OP.THROW: 5
    • OP.TYPE_ACCESS: 5
  • OSP:
    • OSP.ADDITIONAL_CODE_EN: 1
    • OSP.ADDITIONAL_CODE_ENCRYPTION: 2
    • OSP.ADDITIONAL_CODE_SIG: 1
    • OSP.ADDITIONAL_CODE_SIGNING: 2
    • OSP.AID-MANAGEMENT: 3
    • OSP.APPLICATIONS: 3
    • OSP.APSD-KEYS: 3
    • OSP.ATOMIC_ACTIVATION: 3
    • OSP.CASD-KEYS: 3
    • OSP.CCCM: 3
    • OSP.CLFDB-ENC-PR: 3
    • OSP.DAP_BLOCK_GEN: 3
    • OSP.ELF_DELE_OP: 3
    • OSP.ISD-KEYS: 3
    • OSP.KEY-CHANGE: 3
    • OSP.KEY-GENERATION: 3
    • OSP.LOADING: 3
    • OSP.RECEIPT-VER: 3
    • OSP.SECURITY-DOMAINS: 3
    • OSP.SERVERS: 3
    • OSP.TOE_IDENTIFICATION: 3
    • OSP.TOKEN-GEN: 3
    • OSP.VERIFICATION: 3
  • R:
    • R.JAVA: 12
  • T:
    • T.BRUTE-FORCE-CVM: 3
    • T.BRUTE-FORCE-SCP: 3
    • T.CLFDB-DISC: 3
    • T.COM-EXPLOIT: 4
    • T.CONFID-APPLI-: 1
    • T.CONFID-APPLI-DATA: 3
    • T.CONFID-JCS-: 2
    • T.CONFID-JCS-CODE: 2
    • T.CONFID-JCS-DATA: 2
    • T.CONFID-OS-UPDATE-: 1
    • T.CONFID-OS-UPDATE-LOAD: 2
    • T.COUNTERS-FREEZE: 3
    • T.CRS-BYPASS: 3
    • T.CTL-AUTH-FORGE: 3
    • T.CTL-REGISTRY-: 1
    • T.CTL-REGISTRY-OVERWRITE: 2
    • T.CVM-IMPERSONATE: 3
    • T.CVM-UPDATE: 3
    • T.DELETION: 4
    • T.ELF-DATA-ACCESS: 3
    • T.ELF-DATA-INTEGRITY: 3
    • T.ELF-ILL-COMMAND: 3
    • T.ELF-RES-DATA: 3
    • T.ELF-SESSION: 3
    • T.ELF-UNAUTHORISED: 3
    • T.ELF-VERSION: 3
    • T.EXE-CODE: 7
    • T.FAKE-SGNVER-KEY: 3
    • T.INSTALL: 4
    • T.INTEG-APPLI-: 4
    • T.INTEG-APPLI-CODE: 4
    • T.INTEG-APPLI-DATA: 5
    • T.INTEG-JCS-: 1
    • T.INTEG-JCS-CODE: 2
    • T.INTEG-JCS-DATA: 3
    • T.INTEG-OS-UPDATE-: 1
    • T.INTEG-OS-UPDATE-LOAD: 2
    • T.LIFE-CYCLE: 4
    • T.NATIVE: 3
    • T.OBJ-DELETION: 3
    • T.PHYSICAL: 9
    • T.RECEIPT: 3
    • T.RESOURCES: 3
    • T.RND: 1
    • T.SID: 8
    • T.TOKEN: 3
    • T.UNAUTHORISED-: 1
    • T.UNAUTHORISED-CARD-MGMT: 4
    • T.UNAUTHORISED-TOE-: 1
    • T.UNAUTHORISED-TOE-CODE-: 1
    • T.UNAUTHORISED-TOE-CODE-UPDATE: 1
    • T.WRONG-UPDATE-: 1
    • T.WRONG-UPDATE-STATE: 2
pdf_data/st_keywords/vendor
  • STMicroelectronics:
    • STMicroelectronics: 20
  • Thales:
    • Thales: 206
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 9
  • constructions:
    • MAC:
      • HMAC: 1
      • HMAC-SHA-256: 3
      • HMAC-SHA-512: 2
  • AES_competition:
    • AES:
      • AES: 40
      • AES128: 2
  • DES:
    • 3DES:
      • 3DES: 11
      • TDES: 49
    • DES:
      • DES: 5
  • constructions:
    • MAC:
      • CBC-MAC: 2
      • CMAC: 4
      • HMAC: 15
      • KMAC: 3
pdf_data/st_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 5
    • ECDH:
      • ECDH: 4
    • ECDSA:
      • ECDSA: 8
  • FF:
    • DH:
      • DH: 2
      • Diffie-Hellman: 4
  • RSA:
    • RSA 2048: 1
  • ECC:
    • ECC:
      • ECC: 11
    • ECDH:
      • ECDH: 4
    • ECDSA:
      • ECDSA: 9
  • FF:
    • DH:
      • DH: 4
      • Diffie-Hellman: 4
  • RSA:
    • RSA 1024: 19
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 2
      • SHA1: 4
    • SHA2:
      • SHA-256: 3
      • SHA-384: 4
      • SHA-512: 2
  • SHA:
    • SHA1:
      • SHA-1: 4
      • SHA1: 7
    • SHA2:
      • SHA-224: 1
      • SHA-256: 5
      • SHA-384: 5
      • SHA-512: 4
      • SHA224: 3
      • SHA256: 4
      • SHA384: 4
      • SHA512: 4
    • SHA3:
      • SHA3-224: 1
      • SHA3-256: 1
      • SHA3-384: 1
      • SHA3-512: 1
pdf_data/st_keywords/crypto_scheme
  • KEX:
    • Key Exchange: 3
    • Key exchange: 1
  • MAC:
    • MAC: 2
  • KA:
    • Key Agreement: 8
    • Key agreement: 5
  • KEX:
    • Key Exchange: 1
  • MAC:
    • MAC: 18
pdf_data/st_keywords/crypto_protocol
  • SSH:
    • SSH: 97
    • SSHv2: 11
  • TLS:
    • SSL:
      • SSL: 2
    • TLS:
      • TLS: 7
      • TLS1.1: 1
      • TLS1.2: 1
  • PACE:
    • PACE: 1
  • PGP:
    • PGP: 1
  • TLS:
    • TLS:
      • TLS: 1
pdf_data/st_keywords/randomness
  • PRNG:
    • DRBG: 4
  • RNG:
    • RBG: 2
    • RNG: 1
  • RNG:
    • RND: 2
    • RNG: 10
pdf_data/st_keywords/cipher_mode
  • CBC:
    • CBC: 4
  • CTR:
    • CTR: 4
  • CBC:
    • CBC: 32
  • CCM:
    • CCM: 13
  • CTR:
    • CTR: 1
  • ECB:
    • ECB: 8
  • GCM:
    • GCM: 3
pdf_data/st_keywords/ecc_curve
  • NIST:
    • P-256: 8
    • P-384: 6
    • P-521: 6
pdf_data/st_keywords/tls_cipher_suite
  • TLS:
    • TLS_PSK_WITH_AES_128_CBC_S: 1
    • TLS_PSK_WITH_NULL_SHA: 1
    • TLS_PSK_WITH_NULL_SHA256: 1
pdf_data/st_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 3
pdf_data/st_keywords/side_channel_analysis
  • FI:
    • Malfunction: 5
    • malfunction: 4
    • physical tampering: 1
  • SCA:
    • DPA: 1
    • Leak-Inherent: 3
    • Physical Probing: 2
    • physical probing: 3
    • side channel: 1
  • other:
    • JIL: 8
pdf_data/st_keywords/tee_name
  • IBM:
    • SE: 16
pdf_data/st_keywords/standard_id
  • CC:
    • CCMB-2012-09-004: 1
    • CCMB-2017-04-001: 1
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
  • FIPS:
    • FIPS 180-4: 3
    • FIPS 186-4: 2
    • FIPS 197: 2
    • FIPS 198-1: 3
    • FIPS PUB 186-4: 6
  • ISO:
    • ISO/IEC 14888-3: 1
    • ISO/IEC 18031:2011: 2
    • ISO/IEC 9796-2: 1
  • PKCS:
    • PKCS #1: 1
    • PKCS#1: 1
  • RFC:
    • RFC 3526: 2
    • RFC 4251: 2
    • RFC 4252: 1
    • RFC 4253: 3
    • RFC 4254: 1
    • RFC 5656: 1
    • RFC 6668: 1
    • RFC3526: 1
    • RFC5656: 1
  • X509:
    • X.509: 3
  • BSI:
    • AIS20: 2
    • AIS31: 6
  • CC:
    • CCMB-2017-04-001: 1
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
  • FIPS:
    • FIPS 180: 1
    • FIPS 180-4: 5
    • FIPS 197: 4
    • FIPS 197126: 1
    • FIPS 198: 2
    • FIPS 202: 4
    • FIPS PUB 180-4: 1
    • FIPS PUB 186-4: 2
    • FIPS PUB 186-4184: 1
    • FIPS PUB 197: 3
    • FIPS PUB 46-3: 2
    • FIPS PUB 81: 2
  • ICAO:
    • ICAO: 4
  • ISO:
    • ISO/IEC 10116: 4
    • ISO/IEC 14888-2: 2
    • ISO/IEC 18032: 2
    • ISO/IEC 18033-3: 2
    • ISO/IEC 3309206: 2
    • ISO/IEC 9796-2: 1
    • ISO/IEC 9797-1: 7
    • ISO/IEC 9797-2: 2
  • PKCS:
    • PKCS #1: 1
    • PKCS#1: 9
    • PKCS#5: 1
    • PKCS#5157: 1
    • PKCS#5161: 1
  • RFC:
    • RFC 5246: 2
    • RFC 5758: 2
    • RFC 5869: 2
    • RFC2104: 2
    • RFC2409: 1
    • RFC2409174: 1
    • RFC3610165: 1
  • SCP:
    • SCP02: 16
    • SCP03: 13
    • SCP10: 2
    • SCP11: 13
    • SCP22: 2
    • SCP80: 12
    • SCP81: 11
  • X509:
    • X.509: 4
pdf_data/st_keywords/javacard_version
  • GlobalPlatform:
    • Global Platform 2.3.1: 1
  • JavaCard:
    • Java Card 3.1.0: 4
pdf_data/st_keywords/javacard_api_const
  • ALG:
    • AES:
      • ALG_AES_BLOCK_128_CBC_NOPAD: 2
      • ALG_AES_BLOCK_128_ECB_NOPAD: 2
      • ALG_AES_CBC_ISO9797_M1: 2
      • ALG_AES_CBC_ISO9797_M2: 2
      • ALG_AES_CBC_PKCS5: 2
      • ALG_AES_CCM: 2
      • ALG_AES_CMAC_128: 4
      • ALG_AES_CTR: 2
      • ALG_AES_ECB_ISO9797_M1: 2
      • ALG_AES_ECB_ISO9797_M2: 2
      • ALG_AES_ECB_PKCS5: 2
      • ALG_AES_GCM: 2
      • ALG_AES_MAC_128_NOPAD: 2
      • ALG_AES_MAC_192_NOPAD: 1
      • ALG_AES_MAC_256_NOPAD: 1
    • DES:
      • ALG_DES_CBC_ISO9797_M1: 2
      • ALG_DES_CBC_ISO9797_M2: 2
      • ALG_DES_CBC_NOPAD: 2
      • ALG_DES_CBC_PKCS5: 2
      • ALG_DES_ECB_ISO9797_M1: 2
      • ALG_DES_ECB_ISO9797_M2: 2
      • ALG_DES_ECB_NOPAD: 2
      • ALG_DES_ECB_PKCS5: 2
      • ALG_DES_MAC4_ISO9797_1_M1_ALG3: 2
      • ALG_DES_MAC4_ISO9797_1_M2_ALG3: 2
      • ALG_DES_MAC4_ISO9797_M1: 2
      • ALG_DES_MAC4_ISO9797_M2: 2
      • ALG_DES_MAC4_NOPAD: 2
      • ALG_DES_MAC4_PKCS5: 2
      • ALG_DES_MAC8_ISO9797_1_M1_ALG3: 2
      • ALG_DES_MAC8_ISO9797_1_M2_ALG3: 2
      • ALG_DES_MAC8_ISO9797_M1: 2
      • ALG_DES_MAC8_ISO9797_M2: 2
      • ALG_DES_MAC8_NOPAD: 2
      • ALG_DES_MAC8_PKCS5: 2
    • EC:
      • ALG_EC_FP: 6
      • ALG_EC_SVDP_DHC_KDF: 1
      • ALG_EC_SVDP_DHC_PLAIN: 2
      • ALG_EC_SVDP_DH_KDF: 2
      • ALG_EC_SVDP_DH_PLAIN: 1
      • ALG_EC_SVDP_DH_PLAIN_XY: 2
    • ECDSA:
      • ALG_ECDSA_SHA: 2
      • ALG_ECDSA_SHA_224: 2
      • ALG_ECDSA_SHA_256: 2
      • ALG_ECDSA_SHA_384: 2
      • ALG_ECDSA_SHA_512: 2
    • HMAC:
      • ALG_HMAC_SHA1: 8
      • ALG_HMAC_SHA_256: 8
      • ALG_HMAC_SHA_384: 2
      • ALG_HMAC_SHA_512: 2
    • ISO3309:
      • ALG_ISO3309_CRC16: 2
      • ALG_ISO3309_CRC32: 2
    • RSA:
      • ALG_RSA_NOPAD: 2
      • ALG_RSA_PKCS1: 1
      • ALG_RSA_PKCS1_OAEP: 2
      • ALG_RSA_SHA_224_PKCS1: 2
      • ALG_RSA_SHA_224_PKCS1_PSS: 2
      • ALG_RSA_SHA_256_PKCS1: 2
      • ALG_RSA_SHA_256_PKCS1_PSS: 2
      • ALG_RSA_SHA_384_PKCS1: 2
      • ALG_RSA_SHA_384_PKCS1_PSS: 2
      • ALG_RSA_SHA_512_PKCS1: 2
      • ALG_RSA_SHA_512_PKCS1_PSS: 2
      • ALG_RSA_SHA_ISO9796: 2
      • ALG_RSA_SHA_ISO9796_MR: 2
      • ALG_RSA_SHA_PKCS1: 2
      • ALG_RSA_SHA_PKCS1_PSS: 2
      • ALG_RSA_SHA_RFC2409: 2
    • SHA:
      • ALG_SHA_224: 4
      • ALG_SHA_256: 6
      • ALG_SHA_384: 4
      • ALG_SHA_512: 4
    • SHA3:
      • ALG_SHA3_224: 4
      • ALG_SHA3_256: 4
      • ALG_SHA3_384: 4
      • ALG_SHA3_512: 4
  • curves:
    • BRAINPOOLP192R1: 1
    • BRAINPOOLP224R1: 1
    • BRAINPOOLP256R1: 2
    • BRAINPOOLP256T1: 1
    • BRAINPOOLP320R1: 2
    • BRAINPOOLP320T1: 1
    • BRAINPOOLP384R1: 2
    • BRAINPOOLP384T1: 1
    • BRAINPOOLP512R1: 2
    • BRAINPOOLP512T1: 1
    • SECP192R1: 1
    • SECP256R1: 2
    • SECP384R1: 1
    • SECP521R1: 2
  • misc:
    • CIPHER_AES_CCM: 2
    • CIPHER_AES_GCM: 2
    • LENGTH_AES_128: 2
    • LENGTH_EC_FP_160: 3
    • LENGTH_EC_FP_192: 2
    • LENGTH_EC_FP_224: 3
    • LENGTH_EC_FP_256: 2
    • LENGTH_EC_FP_384: 3
    • LENGTH_EC_FP_521: 2
    • LENGTH_HMAC_SHA_1_BLOCK_64: 1
    • LENGTH_HMAC_SHA_256_BLOCK_64: 1
    • LENGTH_HMAC_SHA_384_BLOCK_128: 1
    • LENGTH_HMAC_SHA_384_BLOCK_64: 1
    • LENGTH_HMAC_SHA_512_BLOCK_128: 1
    • LENGTH_HMAC_SHA_512_BLOCK_64: 1
    • LENGTH_RSA_1024: 1
    • LENGTH_RSA_1536: 1
    • LENGTH_RSA_1984: 1
    • LENGTH_RSA_3072: 1
    • LENGTH_SHA: 8
    • LENGTH_SHA3_224: 2
    • LENGTH_SHA3_384: 2
    • LENGTH_SHA_224: 2
    • LENGTH_SHA_384: 2
    • PAD_PKCS1_OAEP: 1
    • PAD_PKCS1_OAEP_SHA256: 1
    • PAD_PKCS1_OAEP_SHA3_256: 1
    • PAD_PKCS1_OAEP_SHA3_512: 1
    • PAD_PKCS1_OAEP_SHA512: 1
    • SIG_CIPHER_AES_CMAC128: 2
    • SIG_CIPHER_AES_MAC128: 2
    • SIG_CIPHER_DES_MAC4: 2
    • SIG_CIPHER_DES_MAC8: 2
    • SIG_CIPHER_ECDSA: 2
    • SIG_CIPHER_ECDSA_PLAIN: 2
    • SIG_CIPHER_HMAC: 2
    • SIG_CIPHER_RSA: 2
    • TYPE_ACCESS: 5
    • TYPE_EC_FP_PRIVATE: 6
    • TYPE_EC_FP_PRIVATE_TRANSIENT_RESET: 1
    • TYPE_HMAC: 6
    • TYPE_HMAC_TRANSIENT_RESET: 1
pdf_data/st_keywords/javacard_packages
  • javacard:
    • javacard.framework: 5
    • javacard.security: 8
  • javacardx:
    • javacardx.crypto: 1
    • javacardx.framework.time: 1
    • javacardx.security: 3
    • javacardx.security.cert: 1
    • javacardx.security.util: 2
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • It first provides a descriptive overview of the TOE and then summarises the items which are out of scope of the TOE. 1.5.1 Overview 5. The Target of Evaluation (TOE) is Juniper Networks, Inc. Junos OS 20: 1
    • out of scope: 1
  • OutOfScope:
    • 3.4 Platform Security Target Lite © Copyright Thales DIS France SAS - 2024 Page: 62 / 169 point is out of scope of this Protection Profile, though. Finally, the objectives O.SCP.RECOVERY and O.SCP.SUPPORT are: 1
    • GemActivate). The platform implements the following modes, but they are out of scope of the TOE: ▪ mEAC v1: 1
    • of software patches (GemActivate). The platform implements the following modes, but they are out of scope of the TOE: ▪ mEAC v1. ▪ Integrated mapping (DH and ECDH). ▪ Generic mapping (DH) ▪ PACE and mEAC: 1
    • out of scope: 3
    • protection of the confidentiality and integrity of user data, and for entity authentication. CSP is out of scope of the TOE. CSP provides service, including: Connected eSE 5.3.4 Platform Security Target Lite ©: 1
pdf_data/st_metadata
  • /CreationDate: D:20240801152433+02'00'
  • /Creator: Microsoft® Word for Microsoft 365
  • /ModDate: D:20240801152433+02'00'
  • /Producer: Microsoft® Word for Microsoft 365
  • pdf_file_size_bytes: 2283923
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 169
state/cert/convert_garbage True False
state/cert/pdf_hash Different Different
state/cert/txt_hash Different Different
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different