Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Employee Express (EmplX) Security Module v1.0 (Build SVR 2.0)
ISCB-5-RPT-C019-CR-v1a 		DIGITTRADE High Security HS256 S3, Version 1.0
BSI-DSZ-CC-0825-2017
name Employee Express (EmplX) Security Module v1.0 (Build SVR 2.0) DIGITTRADE High Security HS256 S3, Version 1.0
scheme MY DE
not_valid_after 04.11.2016 06.10.2022
not_valid_before 04.11.2011 06.10.2017
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ISCB-5-RPT-C019-CR-v1a.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0825a_pdf.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/MYWave%20EAL2%20Security%20Target%20(EmplX%20Security%20Module)%20v1.0.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0825b_pdf.pdf
manufacturer MYwave Sdn Bhd DIGITTRADE GmbH
manufacturer_web https://www.mywave.biz https://www.digittrade.de
dgst 111e346581566c73 c6776bce1df97cdd
heuristics/cert_id ISCB-5-RPT-C019-CR-v1a BSI-DSZ-CC-0825-2017
heuristics/cert_lab [] BSI
heuristics/extracted_sars ASE_CCL.1, ATE_FUN.1, ASE_OBJ.2, ALC_CMS.2, ASE_INT.1, ASE_REQ.2, AGD_PRE.1, ATE_IND.2, ASE_ECD.1, AVA_VAN.2, ADV_TDS.1, ASE_SPD.1, ALC_CMC.2, ADV_FSP.2, ATE_COV.1, AGD_OPE.1, ALC_DEL.1, ASE_TSS.1, ADV_ARC.1 ALC_FLR.3, ASE_CCL.1, ASE_OBJ.2, ALC_CMC.5, AVA_VAN.5, ASE_INT.1, APE_ECD.1, ASE_REQ.2, ATE_DPT.4, ADV_FSP.6, ADV_TDS.6, ATE_FUN.2, ADV_IMP.2, AGD_PRE.1, ATE_IND.3, ASE_ECD.1, APE_OBJ.2, ALC_TAT.3, ALC_DVS.2, ASE_SPD.1, APE_INT.1, ATE_COV.3, ADV_INT.3, ALC_LCD.2, ASE_TSS.2, ALC_CMS.5, APE_CCL.1, AGD_OPE.1, APE_SPD.1, ALC_DEL.1, ADV_ARC.1, ADV_SPM.1, APE_REQ.2
heuristics/extracted_versions 1.0, 2.0 1.0
heuristics/report_references/directly_referencing {} NSCIB-CC-13-37761-CR2
heuristics/report_references/indirectly_referencing {} NSCIB-CC-13-37762-CR, NSCIB-CC-13-37761-CR2, BSI-DSZ-CC-0857-2013, BSI-DSZ-CC-0707-2012, BSI-DSZ-CC-0633-V2-2014, BSI-DSZ-CC-0555-2009
heuristics/scheme_data
  • cert_no: 2011-018-C019
  • certification_date: 04.11.2011
  • developer: MYwave Sdn Bhd
  • enhanced:
    • assurance_level: EAL2
    • category: Other Devices and Systems
    • cert_id: C019
    • certification_date: 04.11.2011
    • developer: Yip Hon Choong 1-3-21, Krystal Point Corporate Park,Jalan Tun Dr Awang,11900 Bayan Lepas, Pulau Pinang MALAYSIA URL: http://www.mywave.bizEmail: [email protected]:+ 604 6403 117
    • expiration_date: 04.11.2016
    • mutual_recognition: CCRA
    • product: Employee Express (EmplX) Security Module
    • report_link: https://iscb.cybersecurity.my/resources/document/mycc/mycpr/C019/ISCB-5-RPT-C019-CR-v1a.pdf
    • scope: The Target of Evaluation (TOE), Employee Express (EmplX) Security Module v1.0 (Build SVR 2.0) is a PHP module of EmplX Human Resource Management Systems (HRMS) web application hosted on a web server. It is designed to be used as a core security controlling module for a web-based application environment. The TOE provides core security functionality such as authentication, access control, secure communications and application security management. All http requests to the web server will be meditated by the TOE before allowing access to the rest of the EmplX HRMS. The security functionality that is within the scope of the evaluation includes: Access control – EmplX Security Module manages access control based on user IDs, user roles and access control lists. It maintains access control lists (ACLs) for each object within an organisation. Each ACL maps users and roles to the operations that they are permitted to perform on the object. Organisation Management – EmplX Security Module provides strict controls on organisation management. Only Super Administrators can manage the creation, modification and destruction of an organisation. Users and Supervisors can only operate within their organisation. Identification and Authentication – each user is required to successfully identified using user ID and authenticated using password before any interaction with protected resources within EmplX HRMS is permitted. Security Management - EmplX Security Module provides functions that allow management of the TOE and its security functions. It restricts access to the management functions based on the role of the user. Secure Communications - EmplX Security Module is able to protect the user data from disclosure and modification when it is sent from users' browser to the EmplX HRMS using the secure SSL channel.
    • status: Archive
    • target_link: https://iscb.cybersecurity.my/resources/document/mycc/mycpr/C019/MYWave%20EAL2%20Security%20Target%20(EmplX%20Security%20Module)%20v1.0.pdf
    • type: Specialist software module designed to be used as a core security controlling module for a web-based application environment
  • expiration_date: 04.11.2016
  • level: EAL2
  • product: Employee Express (EmplX) Security Module
  • recognition: CCRA
  • url: https://iscb.cybersecurity.my/index.php/certification/product-certification/mycc/archived-certified-products-and-systems/submission-view/153
heuristics/st_references/directly_referencing {} NSCIB-CC-13-37761-CR2
heuristics/st_references/indirectly_referencing {} NSCIB-CC-13-37761-CR2, BSI-DSZ-CC-0857-2013
heuristics/protection_profiles {} 3caa75d31b99cd9a
protection_profile_links {} https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0081b_pdf.pdf
pdf_data/report_filename ISCB-5-RPT-C019-CR-v1a.pdf 0825a_pdf.pdf
pdf_data/report_frontpage
  • DE:
  • DE:
    • cc_security_level: Common Criteria Part 3 conformant EAL 2
    • cc_version: PP conformant Common Criteria Part 2 extended
    • cert_id: BSI-DSZ-CC-0825-2017
    • cert_item: DIGITTRADE High Security HS256 S3, Version 1.0
    • cert_lab: BSI
    • developer: DIGITTRADE GmbH
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
    • ref_protection_profiles: Protection Profile for Portable Storage Media (PSMPP), Version 1.0, 31 July 2012, BSI-CC-PP- 0081-2012
pdf_data/report_keywords/cc_cert_id
  • MY:
    • ISCB-5-RPT-C019-CR-v1a: 30
  • DE:
    • BSI-DSZ-CC-0825-2017: 17
  • NL:
    • CC-13-37761-CR2: 2
    • NSCIB-CC-13-37761-CR2: 2
pdf_data/report_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP- 0081-2012: 1
    • BSI-CC-PP-0081-2012: 2
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 2: 1
    • EAL2: 10
  • EAL:
    • EAL 1: 7
    • EAL 2: 8
    • EAL 3: 4
    • EAL 4: 6
    • EAL 5: 6
    • EAL 6: 3
    • EAL 7: 4
  • ITSEC:
    • ITSEC Evaluation: 1
pdf_data/report_keywords/cc_sar
  • ADV:
    • ADV_ARC: 1
    • ADV_ARC.1: 1
    • ADV_FSP: 1
    • ADV_FSP.1: 1
    • ADV_FSP.2: 1
    • ADV_FSP.3: 1
    • ADV_FSP.4: 1
    • ADV_FSP.5: 1
    • ADV_FSP.6: 1
    • ADV_IMP: 1
    • ADV_IMP.1: 1
    • ADV_IMP.2: 1
    • ADV_INT: 1
    • ADV_INT.1: 1
    • ADV_INT.2: 1
    • ADV_INT.3: 1
    • ADV_SPM: 1
    • ADV_SPM.1: 1
    • ADV_TDS: 1
    • ADV_TDS.1: 1
    • ADV_TDS.2: 1
    • ADV_TDS.3: 1
    • ADV_TDS.4: 1
    • ADV_TDS.5: 1
    • ADV_TDS.6: 1
  • AGD:
    • AGD_OPE: 1
    • AGD_OPE.1: 1
    • AGD_PRE: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC: 1
    • ALC_CMC.1: 1
    • ALC_CMC.2: 1
    • ALC_CMC.3: 1
    • ALC_CMC.4: 1
    • ALC_CMC.5: 1
    • ALC_CMS: 1
    • ALC_CMS.1: 1
    • ALC_CMS.2: 2
    • ALC_CMS.3: 1
    • ALC_CMS.4: 1
    • ALC_CMS.5: 1
    • ALC_DEL: 1
    • ALC_DEL.1: 1
    • ALC_DVS: 1
    • ALC_DVS.1: 1
    • ALC_DVS.2: 1
    • ALC_FLR: 3
    • ALC_FLR.1: 1
    • ALC_FLR.2: 1
    • ALC_FLR.3: 1
    • ALC_LCD.1: 1
    • ALC_LCD.2: 1
    • ALC_TAT: 1
    • ALC_TAT.1: 1
    • ALC_TAT.2: 1
    • ALC_TAT.3: 1
  • APE:
    • APE_CCL.1: 1
    • APE_ECD.1: 1
    • APE_INT.1: 1
    • APE_OBJ.1: 1
    • APE_OBJ.2: 1
    • APE_REQ.1: 1
    • APE_REQ.2: 1
    • APE_SPD.1: 1
  • ASE:
    • ASE_CCL: 1
    • ASE_CCL.1: 1
    • ASE_ECD: 1
    • ASE_ECD.1: 1
    • ASE_INT: 1
    • ASE_INT.1: 1
    • ASE_OBJ: 1
    • ASE_OBJ.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ: 1
    • ASE_REQ.1: 1
    • ASE_REQ.2: 1
    • ASE_SPD: 1
    • ASE_SPD.1: 1
    • ASE_TSS: 1
    • ASE_TSS.1: 1
    • ASE_TSS.2: 1
  • ATE:
    • ATE_COV: 1
    • ATE_COV.1: 1
    • ATE_COV.2: 1
    • ATE_COV.3: 1
    • ATE_DPT: 1
    • ATE_DPT.1: 1
    • ATE_DPT.2: 1
    • ATE_DPT.3: 1
    • ATE_DPT.4: 1
    • ATE_FUN: 1
    • ATE_FUN.1: 1
    • ATE_FUN.2: 1
    • ATE_IND: 1
    • ATE_IND.1: 1
    • ATE_IND.2: 1
    • ATE_IND.3: 1
  • AVA:
    • AVA_VAN: 2
    • AVA_VAN.1: 1
    • AVA_VAN.2: 1
    • AVA_VAN.3: 1
    • AVA_VAN.4: 1
    • AVA_VAN.5: 1
pdf_data/report_keywords/cc_sfr
  • FCS:
    • FCS_COP.1: 1
  • FDP:
    • FDP_ACC.1: 1
    • FDP_ACF.1.1: 1
    • FDP_ACF.1.3: 1
  • FIA:
    • FIA_UAU.2: 1
    • FIA_UID.2: 1
  • FMT:
    • FMT_MSA.1: 1
    • FMT_MSA.3: 1
    • FMT_MTD: 4
    • FMT_SMF.1: 1
    • FMT_SMR.1: 1
  • FTP:
    • FTP_TRP.1.1: 1
    • FTP_TRP.1.3: 1
  • FCS:
    • FCS_CKM.1: 1
    • FCS_COP.1: 1
pdf_data/report_keywords/vendor
  • NXP:
    • NXP: 6
  • Samsung:
    • Samsung: 1
pdf_data/report_keywords/eval_facility
  • DFKI:
    • DFKI: 3
pdf_data/report_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 5
      • AES-256: 1
pdf_data/report_keywords/hash_function
  • SHA:
    • SHA2:
      • SHA-2: 2
      • SHA-224: 1
      • SHA-256: 2
      • SHA-384: 1
      • SHA-512: 1
  • SHA:
    • SHA2:
      • SHA-256: 1
      • SHA-512: 2
pdf_data/report_keywords/crypto_protocol
  • TLS:
    • SSL:
      • SSL: 4
    • TLS:
      • TLS: 1
pdf_data/report_keywords/cipher_mode
  • XTS:
    • XTS: 2
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7148: 1
    • BSI TR-02102: 1
pdf_data/report_keywords/os_name
  • JCOP:
    • JCOP 2: 1
pdf_data/report_keywords/standard_id
  • FIPS:
    • FIPS 180-2: 2
  • ISO:
    • ISO/IEC 18045: 2
    • ISO/IEC15408: 2
  • BSI:
    • AIS 32: 1
  • FIPS:
    • FIPS PUB 197: 1
  • ISO:
    • ISO/IEC 15408: 4
    • ISO/IEC 17065: 2
    • ISO/IEC 18045: 4
  • NIST:
    • NIST SP 800-38E: 1
    • SP 800-38E: 1
pdf_data/report_keywords/certification_process
  • ConfidentialDocument:
    • 9] Configuration list for the TOE, Version 1.4, 2017-04-03, CM scope (ALC_CMS.2), (confidential document) [10] Guidance documentation for the TOE, Version 1.07, 2017-04-03, Benutzerhandbuch / User Manual: 1
    • Technical Report, Version 1.1, 2017-09-19, Evaluation DIGITTRADE HS256 S3 V1.0, DFKI GmbH, (confidential document) [8] Protection Profile for Portable Storage Media (PSMPP), Version 1.0, 31 July 2012: 1
    • being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification: 1
pdf_data/report_metadata
  • /Author: Zie
  • /CreationDate: D:20111109153418+08'00'
  • /Creator: PScript5.dll Version 5.2
  • /ModDate: D:20111109153418+08'00'
  • /Producer: Acrobat Distiller 8.3.1 (Windows)
  • /Title: Microsoft Word - ISCB-5-RPT-C019-CR-v1a _web_
  • pdf_file_size_bytes: 330254
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: True
  • pdf_number_of_pages: 30
pdf_data/st_filename MYWave EAL2 Security Target (EmplX Security Module) v1.0.pdf 0825b_pdf.pdf
pdf_data/st_keywords/cc_cert_id
  • NL:
    • NSCIB-CC-13-37761-CR2: 4
pdf_data/st_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP- 0081-2012: 1
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL2: 9
  • EAL:
    • EAL2: 5
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_CMS.2: 1
    • ALC_DEL.1: 1
  • ASE:
    • ASE_CCL.1: 4
    • ASE_ECD.1: 1
    • ASE_INT.1: 4
    • ASE_OBJ.2: 4
    • ASE_REQ.2: 4
    • ASE_SPD.1: 4
    • ASE_TSS.1: 4
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.2: 1
pdf_data/st_keywords/cc_sfr
  • FCS:
    • FCS_CKM.1: 3
    • FCS_CKM.4: 3
    • FCS_COP: 1
    • FCS_COP.1: 4
    • FCS_COP.1.1: 1
  • FDP:
    • FDP_ACC: 2
    • FDP_ACC.1: 11
    • FDP_ACC.1.1: 1
    • FDP_ACF: 2
    • FDP_ACF.1: 6
    • FDP_ACF.1.1: 1
    • FDP_ACF.1.2: 1
    • FDP_ACF.1.3: 1
    • FDP_ACF.1.4: 1
    • FDP_IFC.1: 2
    • FDP_IFF: 2
    • FDP_ITC.1: 2
    • FDP_ITC.2: 2
  • FIA:
    • FIA_UAU: 2
    • FIA_UAU.1: 1
    • FIA_UAU.2: 4
    • FIA_UAU.2.1: 1
    • FIA_UID: 2
    • FIA_UID.1: 4
    • FIA_UID.2: 5
    • FIA_UID.2.1: 1
  • FMT:
    • FMT_MSA: 2
    • FMT_MSA.1: 6
    • FMT_MSA.1.1: 1
    • FMT_MSA.3: 7
    • FMT_MSA.3.1: 1
    • FMT_MSA.3.2: 1
    • FMT_MTD: 25
    • FMT_SMF: 1
    • FMT_SMF.1: 19
    • FMT_SMF.1.1: 1
    • FMT_SMR: 2
    • FMT_SMR.1: 17
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
  • FTP:
    • FTP_TRP.1: 5
    • FTP_TRP.1.1: 1
    • FTP_TRP.1.2: 1
    • FTP_TRP.1.3: 1
  • FAU:
    • FAU_GEN: 1
  • FCS:
    • FCS_CKM.1: 15
    • FCS_CKM.1.1: 1
    • FCS_CKM.2: 2
    • FCS_CKM.4: 13
    • FCS_CKM.4.1: 1
    • FCS_COP.1: 9
    • FCS_COP.1.1: 1
  • FDP:
    • FDP_ITC.1: 4
    • FDP_ITC.2: 4
    • FDP_RIP.1: 11
    • FDP_RIP.1.1: 1
  • FIA:
    • FIA_AFL.1: 9
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_SOS.1: 11
    • FIA_SOS.1.1: 1
    • FIA_UAU: 9
    • FIA_UAU.1: 2
    • FIA_UAU.2: 11
    • FIA_UAU.2.1: 1
    • FIA_UAU.5.1: 2
    • FIA_UAU.5.2: 1
    • FIA_UAU.6: 9
    • FIA_UAU.6.1: 1
    • FIA_UID.1: 1
  • FMT:
    • FMT_SMF.1: 9
    • FMT_SMF.1.1: 2
  • FPT:
    • FPT_FLS.1: 9
    • FPT_FLS.1.1: 1
    • FPT_SDC: 5
    • FPT_SDC.1: 20
    • FPT_SDC.1.1: 1
pdf_data/st_keywords/cc_claims
  • A:
    • A.ADMIN: 2
    • A.DATABASE: 2
    • A.ENVIRONMENT: 2
    • A.MANAGEMENT: 2
    • A.NETWORK: 2
    • A.PATCH: 1
    • A.PHYSICAL: 2
    • A.SSL_CONFIG: 2
  • O:
    • O.ACCESS: 4
    • O.COMM: 3
    • O.MANAGE: 3
    • O.ORGANISATION: 3
    • O.PASSWORD: 3
    • O.USER: 5
  • OE:
    • OE.ADMIN: 2
    • OE.DATABASE: 2
    • OE.ENVIRONMENT: 2
    • OE.MANAGEMENT: 2
    • OE.NETWORK: 2
    • OE.PATCH: 2
    • OE.PHYSICAL: 2
    • OE.SSL_CONFIG: 2
  • T:
    • T.ACCESS: 2
    • T.COMM: 1
    • T.MANAGEMENT: 2
    • T.ORGANISATION: 3
    • T.PASSWORD: 2
pdf_data/st_keywords/vendor
  • NXP:
    • NXP: 5
  • Samsung:
    • Samsung: 1
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 13
pdf_data/st_keywords/crypto_protocol
  • TLS:
    • SSL:
      • SSL: 8
    • TLS:
      • TLS: 1
pdf_data/st_keywords/randomness
  • RNG:
    • RNG: 6
pdf_data/st_keywords/cipher_mode
  • XTS:
    • XTS: 6
pdf_data/st_keywords/technical_report_id
  • BSI:
    • BSI TR-02102: 1
pdf_data/st_metadata
  • /Author: Zie
  • /CreationDate: D:20111109153646+08'00'
  • /Creator: PScript5.dll Version 5.2
  • /ModDate: D:20111109153646+08'00'
  • /Producer: Acrobat Distiller 8.3.1 (Windows)
  • /Title: Microsoft Word - MYWave EAL2 Security Target _EmplX Security Module_ v1.0
  • pdf_file_size_bytes: 307957
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: True
  • pdf_number_of_pages: 37
  • /Author: André Gimbut
  • /CreationDate: D:20170918133036+02'00'
  • /Creator: Microsoft® Word 2010
  • /Keywords: hardware encrypted hard drive; hdd; ssd; eal 2; common criteria; BSI; DIGITTRADE; 2 factor authentication; smart card; PIN; USB 3.0; USB 2.0; encryption; AES-XTS; 256 bit; full disk encryption
  • /ModDate: D:20170918133408+02'00'
  • /Producer: Microsoft® Word 2010
  • /Subject: hardware encrypted hard drive; hdd; ssd; eal 2; common criteria; BSI; DIGITTRADE; 2 factor authentication; smart card; PIN; USB 3.0; USB 2.0; encryption; AES-XTS; 256 bit; full disk encryption
  • /Title: DIGITTRADE High Security HS256 S3 (external encrypted HDD/SSD) v1.0, Security Target (ST) v1.10
  • pdf_file_size_bytes: 604887
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 43
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different