Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Fortinet Fortiweb 5.6
383-4-425 		STARCOS 3.7 ID eAT BAC C1, STARCOS 3.7 ID ePass BAC C1
BSI-DSZ-CC-1076-2020
name Fortinet Fortiweb 5.6 STARCOS 3.7 ID eAT BAC C1, STARCOS 3.7 ID ePass BAC C1
category Network and Network-Related Devices and Systems ICs, Smart Cards and Smart Card-Related Devices and Systems
scheme CA DE
status archived active
not_valid_after 05.12.2022 18.08.2025
not_valid_before 05.12.2017 18.08.2020
cert_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/383-4-425%20CT%20v1.0e.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1076c_pdf.pdf
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/383-4-425%20CR%20v1.0e.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1076a_pdf.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/383-4-425%20ST%20v1.10.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1076b_pdf.pdf
manufacturer Fortinet, Inc. G+D Mobile Security GmbH
manufacturer_web https://www.fortinet.com/ https://www.gi-de.com/de/de/mobile-security/
security_level {} EAL4+, ALC_DVS.2
dgst 2f43218020fc327c bf65789ff15eff6f
heuristics/cert_id 383-4-425 BSI-DSZ-CC-1076-2020
heuristics/cert_lab [] BSI
heuristics/cpe_matches cpe:2.3:a:fortinet:fortiweb:5.6.1:*:*:*:*:*:*:*, cpe:2.3:a:fortinet:fortiweb:5.6.0:*:*:*:*:*:*:*, cpe:2.3:a:fortinet:fortiweb:5.6.2:*:*:*:*:*:*:* {}
heuristics/related_cves CVE-2017-7736, CVE-2019-16157, CVE-2021-22122, CVE-2017-3129, CVE-2017-7737, CVE-2020-29019, CVE-2023-25602, CVE-2019-5590, CVE-2021-36182, CVE-2021-42756, CVE-2020-29015, CVE-2021-36193, CVE-2021-42757, CVE-2020-29016, CVE-2021-42761, CVE-2021-36179, CVE-2020-6646, CVE-2017-14191 {}
heuristics/extracted_sars ASE_TSS.1, ADV_FSP.1, ALC_CMC.1, ASE_INT.1, ASE_SPD.1, ASE_OBJ.1, AVA_VAN.1, ATE_IND.1, ALC_CMS.1, AGD_OPE.1, ASE_REQ.1, ASE_CCL.1, ASE_ECD.1, AGD_PRE.1 ALC_FLR.1, ALC_TAT.1, ALC_CMS.4, ALC_DEL.1, ALC_LCD.1, ALC_DVS.2, ADV_ARC.1, ALC_CMC.4
heuristics/extracted_versions 5.6 3.7
heuristics/report_references/directly_referencing {} BSI-DSZ-CC-1110-V3-2020
heuristics/report_references/indirectly_referencing {} BSI-DSZ-CC-0891-2015, BSI-DSZ-CC-0782-2012, BSI-DSZ-CC-0945-V3-2018, BSI-DSZ-CC-1110-2019, BSI-DSZ-CC-1110-V3-2020, BSI-DSZ-CC-0945-2017, BSI-DSZ-CC-1110-V2-2019, BSI-DSZ-CC-0945-V2-2018, BSI-DSZ-CC-0891-V2-2016
heuristics/scheme_data
  • category: eHealth
  • cert_id: BSI-DSZ-CC-0916-2015
  • certification_date: 07.08.2015
  • enhanced:
    • applicant: Giesecke & Devrient GmbH seit 1. Juli 2017 Giesecke+Devrient Mobile Security GmbH Prinzregentenstr. 159 81677 München
    • assurance_level: EAL4+,ALC_DVS.2,ATE_DPT.2,AVA_VAN.5
    • certification_date: 07.08.2015
    • description: The Target of Evaluation (TOE) is the product STARCOS 3.6 COS C1 developed by Giesecke & Devrient GmbH. The TOE is a smart card product according to the G2 Card Operating System specification from gematik. The TOE is intended to be used as a card operating system platform for different card types and applications of the card generation G2 in the framework of the German health care system. The TOE implements from the PP-0082-V2 the base part and the packages Crypto Box, Logical Channel and Contactless.
    • entries: [frozendict({'id': 'BSI-DSZ-CC-0916-2015-MA-02', 'description': 'The changes are related to an update and reevaluation of the product life-cycle caused by changes in the development and porduction sites. The certified product itself did not change.'}), frozendict({'id': 'BSI-DSZ-CC-0916-2015-MA-01', 'description': 'Maintenance Report'}), frozendict({'id': 'BSI-DSZ-CC-0916-2015', 'description': 'Security Target'})]
    • evaluation_facility: SRC Security Research & Consulting GmbH
    • expiration_date: 06.08.2020
    • product: STARCOS 3.6 COS C1
    • protection_profile: Card Operating System Generation 2 (PP COS G2), Version 1.9, 18 November 2014, BSI-CC-PP-0082-V2-2014
    • report_link: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte09/0916a_pdf.pdf?__blob=publicationFile&v=1
    • target_link: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte09/0916b_pdf.pdf?__blob=publicationFile&v=1
  • product: STARCOS 3.6 COS C1
  • subcategory: Smartcards
  • url: https://www.bsi.bund.de/SharedDocs/Zertifikate_CC/CC/Gesundheitswesen_SmartCards/0916.html
  • vendor: Giesecke & Devrient GmbH seit 1. Juli 2017 Giesecke+Devrient Mobile Security GmbH
heuristics/st_references/directly_referencing {} BSI-DSZ-CC-1110-V3-2020
heuristics/st_references/indirectly_referencing {} BSI-DSZ-CC-1110-V3-2020
heuristics/protection_profiles c7cf611c6bb1e4b0 60455fc9564e2545
protection_profile_links https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/CPP_ND_V1.0.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0055b.pdf
pdf_data/cert_filename 383-4-425 CT v1.0e.pdf 1076c_pdf.pdf
pdf_data/cert_keywords/cc_cert_id
  • CA:
    • 383-4-425: 1
  • DE:
    • BSI-DSZ-CC-1076-2020: 1
pdf_data/cert_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP- 0055-2009: 1
pdf_data/cert_keywords/cc_security_level
  • EAL:
    • EAL 2: 1
    • EAL 4: 1
    • EAL 4 augmented: 1
    • EAL 5: 1
pdf_data/cert_keywords/cc_sar
  • ALC:
    • ALC_DVS.2: 1
pdf_data/cert_keywords/vendor
  • GD:
    • Giesecke+Devrient: 1
pdf_data/cert_keywords/eval_facility
  • EWA:
    • EWA-Canada: 1
pdf_data/cert_keywords/os_name
  • STARCOS:
    • STARCOS 3: 2
pdf_data/cert_keywords/standard_id
  • ICAO:
    • ICAO: 1
  • ISO:
    • ISO/IEC 15408: 2
    • ISO/IEC 18045: 2
pdf_data/cert_metadata
  • /Author: Clark, Cory P.
  • /Company: CSEC
  • /CreationDate: D:20171214084924-05'00'
  • /Creator: Acrobat PDFMaker 11 for Word
  • /ModDate: D:20171214084926-05'00'
  • /Producer: Adobe PDF Library 11.0
  • /SourceModified: D:20171206151714
  • pdf_file_size_bytes: 203992
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
  • /Author: Bundesamt für Sicherheit in der Informationstechnik
  • /CreationDate: D:20200821064941+02'00'
  • /Creator: Writer
  • /Keywords: Common Criteria, Certification, Zertifizierung, STARCOS 3.7, BAC, MRTD
  • /ModDate: D:20200821065058+02'00'
  • /Producer: LibreOffice 6.2
  • /Subject: STARCOS 3.7 ID eAT BAC C1, STARCOS 3.7 ID ePass BAC C1
  • /Title: Certificate BSI-DSZ-CC-1076-2020
  • pdf_file_size_bytes: 298425
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
pdf_data/report_filename 383-4-425 CR v1.0e.pdf 1076a_pdf.pdf
pdf_data/report_frontpage
  • DE:
  • CA:
  • DE:
    • cc_security_level: Common Criteria Part 3 conformant EAL 4 augmented by ALC_DVS.2
    • cc_version: PP conformant Common Criteria Part 2 extended
    • cert_id: BSI-DSZ-CC-1076-2020
    • cert_item: STARCOS 3.7 ID eAT BAC C1, STARCOS 3.7 ID ePass BAC C1
    • cert_lab: BSI
    • developer: Giesecke+Devrient Mobile Security GmbH
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
    • ref_protection_profiles: Common Criteria Protection Profile Machine Readable Travel Document with "ICAO Application" Basic Access Control, Version 1.10, 25 March 2009, BSI-CC-PP- 0055-2009
  • CA:
pdf_data/report_keywords/cc_cert_id
  • CA:
    • 383-4-425: 1
  • DE:
    • BSI-DSZ-CC-1076-2020: 22
    • BSI-DSZ-CC-1077: 5
    • BSI-DSZ-CC-1110-V3-: 3
    • BSI-DSZ-CC-1110-V3-2020: 5
    • BSI-DSZ-CC-S-0132-2019: 1
    • BSI-DSZ-CC-S-0143-2019: 2
    • BSI-DSZ-CC-S-0150-2020: 2
    • BSI-DSZ-CC-S-0152-2020: 1
pdf_data/report_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP- 0055-2009: 1
    • BSI-PP-0055-: 1
    • BSI-PP-0055-2009: 1
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 1: 1
    • EAL 2: 2
    • EAL 2+: 1
    • EAL 4: 5
    • EAL 4 augmented: 3
    • EAL 5: 4
    • EAL 5+: 1
    • EAL 6: 1
    • EAL5+: 1
    • EAL6: 1
pdf_data/report_keywords/cc_sar
  • ADV:
    • ADV_ARC: 1
  • ALC:
    • ALC_CMC.4: 1
    • ALC_CMS.4: 1
    • ALC_DEL.1: 1
    • ALC_DVS.2: 5
    • ALC_FLR: 2
    • ALC_LCD.1: 1
    • ALC_TAT.1: 1
pdf_data/report_keywords/cc_sfr
  • FCS:
    • FCS_CKM.1: 1
    • FCS_COP: 8
    • FCS_RND.1: 1
  • FDP:
    • FDP_UIT.1: 1
  • FIA:
    • FIA_AFL.1: 1
    • FIA_UAU.4: 1
pdf_data/report_keywords/cc_claims
  • A:
    • A.U: 2
pdf_data/report_keywords/vendor
  • GD:
    • Giesecke+Devrient: 24
  • Infineon:
    • Infineon: 9
    • Infineon Technologies AG: 7
pdf_data/report_keywords/eval_facility
  • EWA:
    • EWA-Canada: 1
  • SRC:
    • SRC Security Research & Consulting: 3
  • TUV:
    • TÜV Informationstechnik: 1
pdf_data/report_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 1
  • constructions:
    • MAC:
      • HMAC: 1
  • AES_competition:
    • AES:
      • AES: 5
  • DES:
    • 3DES:
      • 3DES: 4
      • TDES: 2
    • DES:
      • DES: 4
  • constructions:
    • MAC:
      • CMAC: 1
pdf_data/report_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 1
    • ECDH:
      • ECDH: 1
    • ECIES:
      • ECIES: 2
  • FF:
    • DH:
      • Diffie-Hellman: 1
pdf_data/report_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 3
pdf_data/report_keywords/crypto_scheme
  • KA:
    • Key Agreement: 1
  • KA:
    • Key Agreement: 1
  • MAC:
    • MAC: 2
pdf_data/report_keywords/crypto_protocol
  • SSH:
    • SSH: 1
  • PACE:
    • PACE: 3
pdf_data/report_keywords/randomness
  • PRNG:
    • DRBG: 1
  • RNG:
    • RNG: 2
pdf_data/report_keywords/cipher_mode
  • CBC:
    • CBC: 5
pdf_data/report_keywords/side_channel_analysis
  • FI:
    • fault injection: 1
    • malfunction: 1
    • physical tampering: 1
  • SCA:
    • side channel: 1
  • other:
    • JIL: 5
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7148: 1
    • BSI TR-02102-1: 1
    • BSI TR-03110: 1
    • BSI TR-03116: 4
    • BSI TR-03116-2: 2
pdf_data/report_keywords/os_name
  • STARCOS:
    • STARCOS 3: 56
pdf_data/report_keywords/standard_id
  • FIPS:
    • FIPS 180-3: 1
    • FIPS 186-4: 1
    • FIPS 197: 1
    • FIPS 198: 1
  • ISO:
    • ISO/IEC 17025:2005: 1
  • NIST:
    • SP 800-56A: 2
    • SP 800-90A: 1
  • BSI:
    • AIS 1: 1
    • AIS 14: 1
    • AIS 19: 1
    • AIS 20: 3
    • AIS 23: 1
    • AIS 25: 4
    • AIS 26: 4
    • AIS 31: 3
    • AIS 32: 1
    • AIS 34: 4
    • AIS 35: 2
    • AIS 36: 3
    • AIS 37: 2
    • AIS 38: 1
    • AIS 46: 2
    • AIS20: 2
    • AIS31: 2
  • FIPS:
    • FIPS PUB 180-4: 1
    • FIPS PUB 197: 1
    • FIPS PUB 46-3: 1
    • FIPS180: 3
    • FIPS197: 2
    • FIPS46-3: 4
  • ICAO:
    • ICAO: 19
  • ISO:
    • ISO/IEC 15408: 4
    • ISO/IEC 17065: 2
    • ISO/IEC 18031:2005: 1
    • ISO/IEC 18045: 4
pdf_data/report_keywords/certification_process
  • ConfidentialDocument:
    • 3.7 ID ePass BAC C1, Version 0.2, 12 August 2020, Giesecke+Devrient Mobile Security GmbH (confidential document) [11] Guidance Documentation STARCOS 3.7 ID C1 – Main Document, Version 1.01, 21 July 2020: 1
    • H13, Revision 3.3, 22 April 2020, Infineon Technologies AG, BSI-DSZ-CC-1110-V3- 2020 (confidential document) Security Target Lite of the underlying hardware platform, Common Criteria Public Security Target: 1
    • STARCOS 3.7 ID ePass BAC C1, Version 1.2, 13 August 2020, SRC Security Research & Consulting GmbH (confidential document) [10] Configuration List BSI-DSZ-CC-1076-2020, Configuration List STARCOS 3.7 ID eAT BAC C1: 1
    • STARCOS 3.7 ID ePass BAC C1, Version 1.5, 12 August 2020, Giesecke+Devrient Mobile Security GmbH (confidential document) [7] Security Target Lite BSI-DSZ-CC-1076-2020, Security Target Lite STARCOS 3.7 ID eAT BAC C1: 1
    • being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification: 1
    • procedure BSI-DSZ-CC-1110-V3-2020, Version 1, 23 April 2020, TÜV Informationstechnik GmbH (confidential document) [19] Technical Guideline BSI TR-03110: Advanced Security Mechanisms for Machine Readable Travel: 1
pdf_data/report_metadata
  • /Author: Clark, Cory P.
  • /Comments: V1.0
  • /Company: CSEC
  • /CreationDate: D:20171214084859-05'00'
  • /Creator: Acrobat PDFMaker 11 for Word
  • /ModDate: D:20171214084903-05'00'
  • /Producer: Adobe PDF Library 11.0
  • /SourceModified: D:20171214134846
  • /Title: 383-4-XXX CR v0.1
  • pdf_file_size_bytes: 250668
  • pdf_hyperlinks: mailto:[email protected]
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 17
pdf_data/st_filename 383-4-425 ST v1.10.pdf 1076b_pdf.pdf
pdf_data/st_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-1110-V3-2020: 1
pdf_data/st_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP-0056-2009: 1
    • BSI-PP- 0035-2007: 1
    • BSI-PP-0002-2001: 1
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL 4: 2
    • EAL 6: 2
    • EAL4: 8
    • EAL4 augmented: 2
    • EAL6: 1
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_FSP.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.1: 1
    • ALC_CMS.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.1: 1
    • ASE_REQ.1: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 5
  • ATE:
    • ATE_IND.1: 1
  • AVA:
    • AVA_VAN.1: 1
  • ADV:
    • ADV_ARC.1: 2
  • ALC:
    • ALC_DVS: 1
    • ALC_DVS.2: 6
    • ALC_FLR.1: 1
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN: 13
    • FAU_GEN.1: 6
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_GEN.2: 5
    • FAU_GEN.2.1: 1
    • FAU_STG.1: 4
    • FAU_STG.1.1: 1
    • FAU_STG.1.2: 1
    • FAU_STG_EXT: 3
    • FAU_STG_EXT.1: 9
    • FAU_STG_EXT.1.1: 2
    • FAU_STG_EXT.1.2: 2
    • FAU_STG_EXT.1.3: 2
    • FAU_STG_EXT.2: 2
    • FAU_STG_EXT.3: 6
    • FAU_STG_EXT.3.1: 2
  • FCS:
    • FCS_CKM.1: 15
    • FCS_CKM.1.1: 1
    • FCS_CKM.2: 5
    • FCS_CKM.2.1: 1
    • FCS_CKM.4: 8
    • FCS_CKM.4.1: 1
    • FCS_COP.1: 38
    • FCS_COP.1.1: 4
    • FCS_COP.3: 1
    • FCS_RBG_EXT: 3
    • FCS_RBG_EXT.1: 11
    • FCS_RBG_EXT.1.1: 2
    • FCS_RBG_EXT.1.2: 2
    • FCS_TLSC_EXT: 3
    • FCS_TLSC_EXT.1: 4
    • FCS_TLSC_EXT.2: 10
    • FCS_TLSC_EXT.2.1: 2
    • FCS_TLSC_EXT.2.2: 2
    • FCS_TLSC_EXT.2.3: 2
    • FCS_TLSC_EXT.2.4: 2
    • FCS_TLSC_EXT.2.5: 2
    • FCS_TLSS_EXT: 2
    • FCS_TLSS_EXT.1: 10
    • FCS_TLSS_EXT.1.1: 2
    • FCS_TLSS_EXT.1.2: 2
    • FCS_TLSS_EXT.1.3: 2
    • FCS_TLSS_EXT.2: 4
    • FCS_TLS_EXT.1: 1
  • FDP:
    • FDP_ITC.1: 6
    • FDP_ITC.2: 6
    • FDP_RIP.2: 1
  • FIA:
    • FIA_PMG_EXT: 3
    • FIA_PMG_EXT.1: 9
    • FIA_PMG_EXT.1.1: 2
    • FIA_UAU.1: 2
    • FIA_UAU.7: 5
    • FIA_UAU.7.1: 1
    • FIA_UAU_EXT: 3
    • FIA_UAU_EXT.1: 1
    • FIA_UAU_EXT.2: 11
    • FIA_UAU_EXT.2.1: 2
    • FIA_UIA_EXT: 3
    • FIA_UIA_EXT.1: 9
    • FIA_UIA_EXT.1.1: 2
    • FIA_UIA_EXT.1.2: 2
    • FIA_UID.1: 2
    • FIA_UID_EXT.1: 1
  • FMT:
    • FMT_MOF.1: 18
    • FMT_MOF.1.1: 4
    • FMT_MTD: 2
    • FMT_MTD.1: 6
    • FMT_MTD.1.1: 2
    • FMT_SMF.1: 7
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 3
    • FMT_SMR.2: 6
    • FMT_SMR.2.1: 1
    • FMT_SMR.2.2: 1
    • FMT_SMR.2.3: 1
  • FPT:
    • FPT_APW_EXT: 2
    • FPT_APW_EXT.1: 9
    • FPT_APW_EXT.1.1: 2
    • FPT_APW_EXT.1.2: 2
    • FPT_PTD: 1
    • FPT_SKP_EXT: 3
    • FPT_SKP_EXT.1: 9
    • FPT_SKP_EXT.1.1: 2
    • FPT_STM.1: 6
    • FPT_STM.1.1: 1
    • FPT_TST_EXT: 2
    • FPT_TST_EXT.1: 12
    • FPT_TST_EXT.1.1: 3
    • FPT_TST_EXT.2: 2
    • FPT_TUD_EXT: 3
    • FPT_TUD_EXT.1: 9
    • FPT_TUD_EXT.1.1: 2
    • FPT_TUD_EXT.1.2: 2
    • FPT_TUD_EXT.1.3: 2
    • FPT_TUD_EXT.2: 2
  • FTA:
    • FTA_SSL.3: 4
    • FTA_SSL.3.1: 1
    • FTA_SSL.4: 4
    • FTA_SSL.4.1: 1
    • FTA_SSL_EXT: 3
    • FTA_SSL_EXT.1: 9
    • FTA_SSL_EXT.1.1: 2
    • FTA_SSL_EXT.3: 1
    • FTA_SSL_EXT.4: 1
    • FTA_TAB.1: 9
    • FTA_TAB.1.1: 1
  • FTP:
    • FTP_ITC: 1
    • FTP_ITC.1: 7
    • FTP_ITC.1.1: 1
    • FTP_ITC.1.2: 1
    • FTP_ITC.1.3: 1
    • FTP_TRP.1: 4
    • FTP_TRP.1.1: 1
    • FTP_TRP.1.2: 1
    • FTP_TRP.1.3: 1
  • FAU:
    • FAU_GEN: 1
    • FAU_SAS: 5
    • FAU_SAS.1: 16
    • FAU_SAS.1.1: 2
    • FAU_UAU.4: 1
  • FCS:
    • FCS_CKM.1: 25
    • FCS_CKM.1.1: 1
    • FCS_CKM.2: 1
    • FCS_CKM.4: 21
    • FCS_CKM.4.1: 1
    • FCS_COP: 36
    • FCS_COP.1: 18
    • FCS_FLS.1: 1
    • FCS_RND: 5
    • FCS_RND.1: 16
    • FCS_RND.1.1: 2
    • FCS_RNG.1: 3
  • FDP:
    • FDP_ACC: 1
    • FDP_ACC.1: 19
    • FDP_ACC.1.1: 1
    • FDP_ACF: 2
    • FDP_ACF.1: 12
    • FDP_ACF.1.1: 1
    • FDP_ACF.1.2: 2
    • FDP_ACF.1.3: 1
    • FDP_ACF.1.4: 2
    • FDP_IFC.1: 5
    • FDP_ITC: 2
    • FDP_ITC.1: 10
    • FDP_ITC.2: 10
    • FDP_ITT.1: 1
    • FDP_SDI.1: 1
    • FDP_SDI.2: 1
    • FDP_UCT.1: 10
    • FDP_UCT.1.1: 1
    • FDP_UIT.1: 8
    • FDP_UIT.1.1: 1
    • FDP_UIT.1.2: 1
  • FIA:
    • FIA_AFL.1: 7
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_API.1: 1
    • FIA_SOS.2: 1
    • FIA_UAU.1: 9
    • FIA_UAU.1.1: 1
    • FIA_UAU.1.2: 1
    • FIA_UAU.4: 14
    • FIA_UAU.4.1: 1
    • FIA_UAU.5: 10
    • FIA_UAU.5.1: 1
    • FIA_UAU.5.2: 4
    • FIA_UAU.6: 10
    • FIA_UAU.6.1: 1
    • FIA_UID.1: 11
    • FIA_UID.1.1: 1
    • FIA_UID.1.2: 1
  • FMT:
    • FMT_LIM: 12
    • FMT_LIM.1: 26
    • FMT_LIM.1.1: 3
    • FMT_LIM.2: 22
    • FMT_LIM.2.1: 4
    • FMT_MSA.1: 2
    • FMT_MSA.3: 4
    • FMT_MTD: 22
    • FMT_MTD.1: 7
    • FMT_SMF.1: 22
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 21
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_FLS.1: 17
    • FPT_FLS.1.1: 1
    • FPT_ITT.1: 1
    • FPT_PHP.3: 15
    • FPT_PHP.3.1: 1
    • FPT_RVM.1: 1
    • FPT_SEP.1: 1
    • FPT_TST: 1
    • FPT_TST.1: 12
    • FPT_TST.1.1: 1
    • FPT_TST.1.2: 1
    • FPT_TST.1.3: 2
    • FPT_TST.2: 4
  • FRU:
    • FRU_FLT.2: 3
  • FTP:
    • FTP_ITC.1: 6
    • FTP_TRP.1: 5
pdf_data/st_keywords/cc_claims
  • A:
    • A.ADMIN: 1
    • A.LIMITED: 1
    • A.NO_THRU: 1
    • A.PHYSICAL: 1
    • A.REGULAR: 1
    • A.TRUSTED: 1
  • OE:
    • OE.ADMIN: 1
    • OE.NO: 1
    • OE.NO_THRU: 1
    • OE.PHYSICAL: 1
    • OE.TRUSTED: 1
    • OE.UPDATES: 1
  • T:
    • T.PASSWORD: 1
    • T.SECURITY: 2
    • T.UNAUTHORIZED: 1
    • T.UNDETECTED: 1
    • T.UNTRUSTED: 1
    • T.UPDATE_COMPROMISE: 1
    • T.WEAK: 2
  • O:
    • O.MEM_ACCESS: 1
    • O.RND: 3
  • T:
    • T.RND: 3
pdf_data/st_keywords/vendor
  • GD:
    • Giesecke+Devrient: 8
  • Infineon:
    • Infineon: 2
    • Infineon Technologies AG: 1
pdf_data/st_keywords/eval_facility
  • EWA:
    • EWA-Canada: 1
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 19
      • AES-128: 1
      • AES-256: 1
  • DES:
    • 3DES:
      • Triple-DES: 8
    • DES:
      • DES: 1
  • constructions:
    • MAC:
      • HMAC: 23
      • HMAC-SHA-256: 3
  • AES_competition:
    • AES:
      • AES: 8
  • DES:
    • 3DES:
      • Triple-DES: 10
    • DES:
      • DES: 5
  • constructions:
    • MAC:
      • KMAC: 1
pdf_data/st_keywords/asymmetric_crypto
  • FF:
    • DH:
      • DH: 3
      • Diffie-Hellman: 4
  • ECC:
    • ECDSA:
      • ECDSA: 1
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 19
    • SHA2:
      • SHA-256: 24
      • SHA256: 12
  • SHA:
    • SHA1:
      • SHA-1: 3
pdf_data/st_keywords/crypto_scheme
  • KA:
    • Key Agreement: 1
  • MAC:
    • MAC: 3
  • MAC:
    • MAC: 4
pdf_data/st_keywords/crypto_protocol
  • IPsec:
    • IPsec: 1
  • SSH:
    • SSH: 2
  • TLS:
    • SSL:
      • SSL: 1
      • SSL 1.0: 1
      • SSL 2.0: 2
      • SSL 3.0: 2
    • TLS:
      • TLS: 76
      • TLS 1.0: 2
      • TLS 1.1: 6
      • TLS 1.2: 7
pdf_data/st_keywords/randomness
  • PRNG:
    • DRBG: 10
  • RNG:
    • RBG: 3
  • TRNG:
    • TRNG: 1
  • RNG:
    • RND: 7
    • RNG: 8
pdf_data/st_keywords/cipher_mode
  • CBC:
    • CBC: 20
  • CBC:
    • CBC: 1
pdf_data/st_keywords/ecc_curve
  • NIST:
    • secp256r1: 1
    • secp384r1: 1
    • secp521r1: 1
pdf_data/st_keywords/tls_cipher_suite
  • TLS:
    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA: 5
    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: 1
    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA: 5
    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: 1
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: 2
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: 2
    • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: 2
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: 2
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384: 2
    • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: 2
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: 2
    • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: 2
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: 2
    • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: 2
    • TLS_RSA_WITH_AES_128_CBC_SHA: 5
    • TLS_RSA_WITH_AES_128_CBC_SHA256: 5
    • TLS_RSA_WITH_AES_256_CBC_SHA: 5
    • TLS_RSA_WITH_AES_256_CBC_SHA256: 1
pdf_data/st_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 1
pdf_data/st_keywords/side_channel_analysis
  • FI:
    • Malfunction: 13
    • Physical Tampering: 5
    • Physical tampering: 1
    • fault injection: 1
    • malfunction: 6
    • physical tampering: 6
  • SCA:
    • DPA: 2
    • Leak-Inherent: 6
    • SPA: 1
    • physical probing: 3
    • timing attacks: 1
  • other:
    • reverse engineering: 1
pdf_data/st_keywords/os_name
  • STARCOS:
    • STARCOS 3: 190
pdf_data/st_keywords/ic_data_group
  • EF:
    • EF.COM: 12
    • EF.DG1: 33
    • EF.DG13: 3
    • EF.DG14: 3
    • EF.DG15: 1
    • EF.DG16: 32
    • EF.DG2: 11
    • EF.DG3: 11
    • EF.DG4: 10
    • EF.DG5: 9
    • EF.SOD: 12
pdf_data/st_keywords/standard_id
  • CC:
    • CCMB-2012-09-001: 1
    • CCMB-2012-09-002: 1
    • CCMB-2012-09-003: 1
  • FIPS:
    • FIPS PUB 186-4: 3
  • ISO:
    • ISO/IEC 18031:2011: 4
    • ISO/IEC 9796-2: 1
  • NIST:
    • NIST SP 800-56B: 2
    • NIST SP 800-90: 1
    • SP 800-56B: 3
    • SP 800-90A: 1
  • PKCS:
    • PKCS #1: 1
  • RFC:
    • RFC 2560: 1
    • RFC 2818: 3
    • RFC 2986: 2
    • RFC 3268: 16
    • RFC 4346: 4
    • RFC 4492: 8
    • RFC 5246: 20
    • RFC 5280: 7
    • RFC 5289: 12
    • RFC 5759: 1
    • RFC 6125: 2
  • X509:
    • X.509: 16
  • BSI:
    • AIS 20: 1
    • AIS 31: 1
    • AIS 32: 1
    • AIS20: 1
  • CC:
    • CCMB-2017-04-001: 2
    • CCMB-2017-04-002: 2
    • CCMB-2017-04-003: 2
    • CCMB-2017-04-004: 2
  • FIPS:
    • FIPS 180-2: 1
    • FIPS 180-415: 1
    • FIPS 197: 2
    • FIPS 46-3: 2
    • FIPS PUB 186-2: 1
    • FIPS PUB 46-3: 1
  • ICAO:
    • ICAO: 14
  • ISO:
    • ISO/IEC 14443: 2
    • ISO/IEC 7816-2: 1
    • ISO/IEC 7816-4: 1
  • RFC:
    • RFC3369: 1
pdf_data/st_metadata
  • /Author: Teresa MacArthur
  • /Client Full Name: Fortinet Inc.
  • /Client Short Name: Fortinet
  • /Comments: CC V3.1 Security Target Template Version 1_0
  • /Company: EWA-Canada
  • /CreationDate: D:20171128143512-05'00'
  • /Creator: Acrobat PDFMaker 10.1 for Word
  • /Document Number: 1877-000-D102
  • /ModDate: D:20171128143523-05'00'
  • /Producer: Adobe PDF Library 10.0
  • /Product_Name: FortiWeb 5.6
  • /ST_Date: 28 November 2017
  • /ST_Version: 1.10
  • /SourceModified: D:20171128193030
  • /Title: Security Target
  • pdf_file_size_bytes: 600277
  • pdf_hyperlinks: https://support.fortinet.com/
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 69
  • /Author: Ulrich Stutenbäumer, Giesecke + Devrient Mobile Security GmbH
  • /CreationDate: D:20200813110600+02'00'
  • /Creator: Microsoft® Word für Office 365
  • /Keywords: smartcard programmed on a contactless chip for machine readable travel documents (MRTD) based on the requirements and recommendations of the International Civil Aviation Organization (ICAO). It addresses the advanced security methods Basic Access Control in the ‘ICAO Doc 9303’. Version 1.5/Status 12.08.2020
  • /ModDate: D:20200813111747+02'00'
  • /Producer: Microsoft® Word für Office 365
  • /Subject: Target of Evaluation = STARCOS 3.7 ID eAT BAC C1, STARCOS 3.7 ID ePass BAC C1
  • /Title: Security Target Lite
  • pdf_file_size_bytes: 976160
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 88
state/cert/convert_garbage True False
state/cert/pdf_hash Different Different
state/cert/txt_hash Different Different
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different