| name |
SonicWALL SonicOS Enhanced v5.9.0 on NSA Series and TZ Series Appliances |
TCOS Smart Meter Security Module Version 1.0 Release 1/P60C144PVA |
| category |
Boundary Protection Devices and Systems |
ICs, Smart Cards and Smart Card-Related Devices and Systems |
| scheme |
CA |
DE |
| status |
archived |
active |
| not_valid_after |
02.07.2019 |
18.11.2026 |
| not_valid_before |
05.02.2014 |
18.11.2016 |
| cert_link |
https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/383-4-224%20cert%20v1.1e.doc |
|
| report_link |
https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/383-4-224%20CR%20v1.1e.pdf |
https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0957V2a_pdf.pdf |
| st_link |
https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/383-4-224%20ST%20v2.5.pdf |
https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0957V2b_pdf.pdf |
| manufacturer |
SonicWALL, Inc |
T-Systems International GMBH |
| manufacturer_web |
https://www.sonicwall.com/ |
https://www.t-systems.de/ |
| security_level |
{} |
EAL4+, AVA_VAN.5 |
| dgst |
39b571b9fbff67dd |
6c674f76d69001ee |
| heuristics/cert_id |
383-4-224 |
BSI-DSZ-CC-0957-V2-2016 |
| heuristics/cert_lab |
CANADA |
BSI |
| heuristics/cpe_matches |
cpe:2.3:o:sonicwall:sonicos:5.9.0.7:*:*:*:*:*:*:*, cpe:2.3:o:sonicwall:sonicos:5.9.0.0:*:*:*:*:*:*:* |
{} |
| heuristics/verified_cpe_matches |
{} |
{} |
| heuristics/related_cves |
CVE-2019-7479, CVE-2019-12259, CVE-2020-5140, CVE-2019-12255, CVE-2020-5143, CVE-2020-5135, CVE-2021-3450, CVE-2019-7475, CVE-2020-5142, CVE-2019-12257, CVE-2019-7474, CVE-2020-5139, CVE-2019-12261, CVE-2020-5138, CVE-2019-12260, CVE-2020-5134, CVE-2019-12263, CVE-2020-5137, CVE-2019-7477, CVE-2020-5130, CVE-2020-5141, CVE-2019-12256, CVE-2018-9867, CVE-2019-12258, CVE-2019-7487, CVE-2020-5136, CVE-2019-12265 |
{} |
| heuristics/direct_transitive_cves |
{} |
{} |
| heuristics/indirect_transitive_cves |
{} |
{} |
| heuristics/extracted_sars |
ADV_FSP.2, ASE_CCL.1, AGD_PRE.1, ATE_FUN.1, ATE_COV.1, ALC_FLR.2, ASE_SPD.1, ALC_CMC.1, AGD_OPE.1, ATE_IND.1, ASE_INT.1, ASE_ECD.1, ASE_OBJ.1, ALC_CMS.1, ASE_TSS.1, AVA_VAN.1, ASE_REQ.2, ADV_TDS.1 |
ADV_TDS.3, ASE_CCL.1, ATE_FUN.1, ASE_OBJ.2, AVA_VAN.5, ASE_INT.1, ALC_CMC.4, APE_ECD.1, ASE_REQ.2, AGD_PRE.1, ATE_DPT.1, ATE_IND.3, ASE_ECD.1, ALC_FLR.1, APE_OBJ.2, ADV_IMP.1, ALC_LCD.1, ADV_FSP.4, ASE_SPD.1, APE_INT.1, ATE_COV.2, ADV_INT.3, ASE_TSS.2, ALC_DVS.1, ALC_TAT.1, APE_CCL.1, AGD_OPE.1, ALC_CMS.4, APE_SPD.1, ALC_DEL.1, ADV_ARC.1, ADV_SPM.1, APE_REQ.2 |
| heuristics/extracted_versions |
5.9.0 |
1.0 |
| heuristics/prev_certificates |
{} |
{} |
| heuristics/next_certificates |
{} |
{} |
| heuristics/report_references/directly_referenced_by |
{} |
BSI-DSZ-CC-0918-V6-2024, BSI-DSZ-CC-0919-V3-2023, BSI-DSZ-CC-0831-V9-2024, BSI-DSZ-CC-0919-V4-2025, BSI-DSZ-CC-0831-V3-2021, BSI-DSZ-CC-0831-V6-2023, BSI-DSZ-CC-0831-V8-2024, BSI-DSZ-CC-0831, BSI-DSZ-CC-0831-V5-2022, BSI-DSZ-CC-0831-V7-2023, BSI-DSZ-CC-0918-V5-2023, BSI-DSZ-CC-0918-V8-2025, BSI-DSZ-CC-0831-V2-2020, BSI-DSZ-CC-0918-V4-2022, BSI-DSZ-CC-1035-2017, BSI-DSZ-CC-0831-V4-2021, BSI-DSZ-CC-0919-V2-2021 |
| heuristics/report_references/directly_referencing |
{} |
BSI-DSZ-CC-0978-2016, BSI-DSZ-CC-0957-2015 |
| heuristics/report_references/indirectly_referenced_by |
{} |
BSI-DSZ-CC-0918-V6-2024, BSI-DSZ-CC-0919-V3-2023, BSI-DSZ-CC-0919-V4-2025, BSI-DSZ-CC-0831-V9-2024, BSI-DSZ-CC-0918-V7-2025, BSI-DSZ-CC-0831-V6-2023, BSI-DSZ-CC-0831-V3-2021, BSI-DSZ-CC-0831-V8-2024, BSI-DSZ-CC-0831, BSI-DSZ-CC-0831-V5-2022, BSI-DSZ-CC-0831-V2-2020, BSI-DSZ-CC-0918-V5-2023, BSI-DSZ-CC-0918-V8-2025, BSI-DSZ-CC-0831-V7-2023, BSI-DSZ-CC-0918-V4-2022, BSI-DSZ-CC-1035-2017, BSI-DSZ-CC-0831-V4-2021, BSI-DSZ-CC-0919-V2-2021 |
| heuristics/report_references/indirectly_referencing |
{} |
BSI-DSZ-CC-0978-2016, BSI-DSZ-CC-0666-2012, BSI-DSZ-CC-0957-2015, BSI-DSZ-CC-0845-2012, BSI-DSZ-CC-0845-V2-2013 |
| heuristics/scheme_data |
|
- category: Intelligent measuring systems
- cert_id: BSI-DSZ-CC-0957-V2-2016
- certification_date: 18.11.2016
- enhanced:
- applicant: Deutsche Telekom Security GmbH Untere Industriestraße 20 57250 Netphen
- assurance_level: EAL4+,AVA_VAN.5
- certification_date: 18.11.2016
- description: The Target of Evaluation (TOE) is the product TCOS Smart Meter Security Module Version 1.0 Release 1/P60C144PVA developed by T-Systems International GmbH. The TOE is a Smart Meter Security Module according to the Technical Guideline BSI TR-03109-2, Version 1.1 intended to be used by a Smart Meter Gateway in a Smart Metering System. The TOE serves as cryptographic service provider for the Smart Meter Gateway and supports the Smart Meter Gateway for its specific cryptographic needs. These cryptographic services cover the following issues: Digital Signature Generation, Digital Signature Verification, Key Agreement for TLS, Key Agreement for Content Data Encryption, Key Pair Generation, Random Number Generation, Component Authentication via the PACE Protocol with Negotiation of Session Keys, Secure Messaging, and Secure Storage of Key Material and further data relevant for the Gateway.
- entries: [frozendict({'id': 'BSI-DSZ-CC-0957-V2-2016-RA-01 (Ausstellungsdatum / Certification Date 27.09.2021)', 'description': 'Re-Assessment'}), frozendict({'id': 'BSI-DSZ-CC-0957-V2-2016 (Ausstellungsdatum / Certification Date 18.11.2016, gültig bis / valid until 17.11.2026)', 'description': 'TCOS Smart Meter Security Module Version 1.0 Release 2/P60C144PVE'}), frozendict({'id': 'BSI-DSZ-CC-0957-2015 (Ausstellungsdatum / Certification Date 09.02.2015, gültig bis / valid until 09.02.2025)', 'description': 'Security Target'})]
- evaluation_facility: SRC Security Research & Consulting GmbH
- expiration_date: 17.11.2026
- product: TCOS Smart Meter Security Module Version 1.0 Release 2/P60C144PVE
- protection_profile: Protection Profile for the Security Module of a Smart Meter Gateway (Security Module PP) - Schutzprofil für das Sicherheitsmodul der Kommunikationseinheit eines intelligenten Messsystems für Stoff- und Energiemengen Version 1.03, 11 December 2014, BSI-CC-PP-0077-V2-2015
- report_link: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte09/0957V2a_pdf.pdf?__blob=publicationFile&v=1
- target_link: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte09/0957V2b_pdf.pdf?__blob=publicationFile&v=1
- product: TCOS Smart Meter Security Module Version 1.0 Release 2/P60C144PVE
- subcategory: Security module for an Smart Metering Gateway
- url: https://www.bsi.bund.de/SharedDocs/Zertifikate_CC/CC/Smartmeter_Sicherheitsmodule/0957_0957V2_0957V2RA1.html
- vendor: Deutsche Telekom Security GmbH
|
| heuristics/st_references/directly_referenced_by |
{} |
BSI-DSZ-CC-0918-V6-2024, BSI-DSZ-CC-0919-V3-2023, BSI-DSZ-CC-0919-V4-2025, BSI-DSZ-CC-0822-V5-2023, BSI-DSZ-CC-0918-V7-2025, BSI-DSZ-CC-0918-V2-2021, BSI-DSZ-CC-0918-V3-2022, BSI-DSZ-CC-0822-V6-2024, BSI-DSZ-CC-0822-V7-2025, BSI-DSZ-CC-0918-V8-2025, BSI-DSZ-CC-0918-V5-2023, BSI-DSZ-CC-0918-V4-2022, BSI-DSZ-CC-0918-2020, BSI-DSZ-CC-0822-V4-2023, BSI-DSZ-CC-0919-V2-2021 |
| heuristics/st_references/directly_referencing |
{} |
BSI-DSZ-CC-0978-2016 |
| heuristics/st_references/indirectly_referenced_by |
{} |
BSI-DSZ-CC-0918-V6-2024, BSI-DSZ-CC-0919-V3-2023, BSI-DSZ-CC-0919-V4-2025, BSI-DSZ-CC-0822-V5-2023, BSI-DSZ-CC-0918-V7-2025, BSI-DSZ-CC-0918-V2-2021, BSI-DSZ-CC-0918-V3-2022, BSI-DSZ-CC-0822-V6-2024, BSI-DSZ-CC-0822-V7-2025, BSI-DSZ-CC-0918-V8-2025, BSI-DSZ-CC-0918-V5-2023, BSI-DSZ-CC-0918-V4-2022, BSI-DSZ-CC-0918-2020, BSI-DSZ-CC-0822-V4-2023, BSI-DSZ-CC-0919-V2-2021 |
| heuristics/st_references/indirectly_referencing |
{} |
BSI-DSZ-CC-0978-2016 |
| heuristics/protection_profiles |
ac9abe3d5c5a31f0 |
15eda6dafddbf8ca |
| maintenance_updates |
|
|
| protection_profiles |
|
|
| protection_profile_links |
https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp_nd_v1.1.pdf |
https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0077V2b_pdf.pdf |
| pdf_data/cert_filename |
383-4-224 cert v1.1e.doc |
|
| pdf_data/cert_frontpage |
|
|
| pdf_data/cert_keywords/cc_cert_id |
|
|
| pdf_data/cert_keywords/cc_protection_profile_id |
|
|
| pdf_data/cert_keywords/cc_security_level |
|
|
| pdf_data/cert_keywords/cc_sar |
|
|
| pdf_data/cert_keywords/cc_sfr |
|
|
| pdf_data/cert_keywords/cc_claims |
|
|
| pdf_data/cert_keywords/vendor |
|
|
| pdf_data/cert_keywords/eval_facility |
|
|
| pdf_data/cert_keywords/symmetric_crypto |
|
|
| pdf_data/cert_keywords/asymmetric_crypto |
|
|
| pdf_data/cert_keywords/pq_crypto |
|
|
| pdf_data/cert_keywords/hash_function |
|
|
| pdf_data/cert_keywords/crypto_scheme |
|
|
| pdf_data/cert_keywords/crypto_protocol |
|
|
| pdf_data/cert_keywords/randomness |
|
|
| pdf_data/cert_keywords/cipher_mode |
|
|
| pdf_data/cert_keywords/ecc_curve |
|
|
| pdf_data/cert_keywords/crypto_engine |
|
|
| pdf_data/cert_keywords/tls_cipher_suite |
|
|
| pdf_data/cert_keywords/crypto_library |
|
|
| pdf_data/cert_keywords/vulnerability |
|
|
| pdf_data/cert_keywords/side_channel_analysis |
|
|
| pdf_data/cert_keywords/technical_report_id |
|
|
| pdf_data/cert_keywords/device_model |
|
|
| pdf_data/cert_keywords/tee_name |
|
|
| pdf_data/cert_keywords/os_name |
|
|
| pdf_data/cert_keywords/cplc_data |
|
|
| pdf_data/cert_keywords/ic_data_group |
|
|
| pdf_data/cert_keywords/standard_id |
|
|
| pdf_data/cert_keywords/javacard_version |
|
|
| pdf_data/cert_keywords/javacard_api_const |
|
|
| pdf_data/cert_keywords/javacard_packages |
|
|
| pdf_data/cert_keywords/certification_process |
|
|
| pdf_data/cert_metadata |
|
|
| pdf_data/report_filename |
383-4-224 CR v1.1e.pdf |
0957V2a_pdf.pdf |
| pdf_data/report_frontpage |
- DE:
- CA:
- cert_id: 383-4-224-CR
- cert_lab: CANADA
|
- DE:
- cc_security_level: Common Criteria Part 3 conformant EAL 4 augmented by AVA_VAN.5
- cc_version: PP conformant Common Criteria Part 2 extended
- cert_id: BSI-DSZ-CC-0957-V2-2016
- cert_item: TCOS Smart Meter Security Module Version 1.0 Release 2/P60C144PVE
- cert_lab: BSI
- developer: T-Systems International GmbH
- match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
- ref_protection_profiles: Protection Profile for the Security Module of a Smart Meter Gateway (Security Module PP) - Schutzprofil für das Sicherheitsmodul der Kommunikationseinheit eines intelligenten Messsystems für Stoff- und Energiemengen Version 1.03, 11 December 2014, BSI-CC-PP-0077-V2-2015
- CA:
|
| pdf_data/report_keywords/cc_cert_id |
|
- DE:
- BSI-DSZ-CC-0957-2015: 3
- BSI-DSZ-CC-0957-V2-2016: 24
- BSI-DSZ-CC-0978: 2
- BSI-DSZ-CC-0978-2016: 5
|
| pdf_data/report_keywords/cc_protection_profile_id |
|
- BSI:
- BSI-CC-PP-0077-V2-2015: 4
|
| pdf_data/report_keywords/cc_security_level |
|
- EAL:
- EAL 1: 7
- EAL 2: 4
- EAL 3: 4
- EAL 4: 13
- EAL 4 augmented: 3
- EAL 5: 10
- EAL 5+: 1
- EAL 6: 4
- EAL 7: 4
- ITSEC:
|
| pdf_data/report_keywords/cc_sar |
|
- ADV:
- ADV_ARC: 1
- ADV_ARC.1: 1
- ADV_FSP: 1
- ADV_FSP.1: 1
- ADV_FSP.2: 1
- ADV_FSP.3: 1
- ADV_FSP.4: 1
- ADV_FSP.5: 1
- ADV_FSP.6: 1
- ADV_IMP: 1
- ADV_IMP.1: 1
- ADV_IMP.2: 1
- ADV_INT: 1
- ADV_INT.1: 1
- ADV_INT.2: 1
- ADV_INT.3: 1
- ADV_SPM: 1
- ADV_SPM.1: 1
- ADV_TDS: 1
- ADV_TDS.1: 1
- ADV_TDS.2: 1
- ADV_TDS.3: 1
- ADV_TDS.4: 1
- ADV_TDS.5: 1
- ADV_TDS.6: 1
- AGD:
- AGD_OPE: 1
- AGD_OPE.1: 1
- AGD_PRE: 1
- AGD_PRE.1: 1
- ALC:
- ALC_CMC: 1
- ALC_CMC.1: 1
- ALC_CMC.2: 1
- ALC_CMC.3: 1
- ALC_CMC.4: 2
- ALC_CMC.5: 1
- ALC_CMS: 1
- ALC_CMS.1: 1
- ALC_CMS.2: 1
- ALC_CMS.3: 1
- ALC_CMS.4: 2
- ALC_CMS.5: 1
- ALC_DEL: 1
- ALC_DEL.1: 2
- ALC_DVS: 1
- ALC_DVS.1: 2
- ALC_DVS.2: 1
- ALC_FLR: 3
- ALC_FLR.1: 1
- ALC_FLR.2: 1
- ALC_FLR.3: 1
- ALC_LCD.1: 2
- ALC_LCD.2: 1
- ALC_TAT: 1
- ALC_TAT.1: 2
- ALC_TAT.2: 1
- ALC_TAT.3: 1
- APE:
- APE_CCL.1: 1
- APE_ECD.1: 1
- APE_INT.1: 1
- APE_OBJ.1: 1
- APE_OBJ.2: 1
- APE_REQ.1: 1
- APE_REQ.2: 1
- APE_SPD.1: 1
- ASE:
- ASE_CCL: 1
- ASE_CCL.1: 1
- ASE_ECD: 1
- ASE_ECD.1: 1
- ASE_INT: 1
- ASE_INT.1: 1
- ASE_OBJ: 1
- ASE_OBJ.1: 1
- ASE_OBJ.2: 1
- ASE_REQ.1: 1
- ASE_REQ.2: 1
- ASE_SPD: 1
- ASE_SPD.1: 1
- ASE_TSS: 1
- ASE_TSS.1: 1
- ASE_TSS.2: 1
- ATE:
- ATE_COV: 1
- ATE_COV.1: 1
- ATE_COV.2: 1
- ATE_COV.3: 1
- ATE_DPT: 1
- ATE_DPT.1: 1
- ATE_DPT.2: 1
- ATE_DPT.3: 1
- ATE_DPT.4: 1
- ATE_FUN: 1
- ATE_FUN.1: 1
- ATE_FUN.2: 1
- ATE_IND: 1
- ATE_IND.1: 1
- ATE_IND.2: 1
- ATE_IND.3: 1
- AVA:
- AVA_VAN: 2
- AVA_VAN.1: 1
- AVA_VAN.2: 1
- AVA_VAN.3: 1
- AVA_VAN.4: 1
- AVA_VAN.5: 6
|
| pdf_data/report_keywords/cc_sfr |
- FAU:
- FCS:
- FCS_CKM_EXT.4: 1
- FCS_RBG_EXT.1: 1
- FCS_TLS_EXT.1: 1
- FIA:
- FIA_PMG_EXT.1: 1
- FIA_UAU_EXT.2: 1
- FIA_UIA_EXT.1: 1
- FPT:
- FPT_APW_EXT.1: 1
- FPT_SKP_EXT.1: 1
- FPT_TST_EXT.1: 1
- FPT_TUD_EXT.1: 1
- FTA:
|
- FCS:
- FCS_CKM: 4
- FCS_COP: 6
- FCS_RNG.1: 1
- FIA:
- FIA_UAU.4: 1
- FIA_UAU.5: 1
- FIA_UID.1: 1
- FTP:
|
| pdf_data/report_keywords/cc_claims |
|
|
| pdf_data/report_keywords/vendor |
|
- NXP:
- NXP: 11
- NXP Semiconductors: 4
|
| pdf_data/report_keywords/eval_facility |
|
- SRC:
- SRC Security Research & Consulting: 3
- TSystems:
- T-Systems International: 13
- TUV:
- TÜV Informationstechnik: 1
|
| pdf_data/report_keywords/symmetric_crypto |
- AES_competition:
- constructions:
|
- AES_competition:
- constructions:
|
| pdf_data/report_keywords/asymmetric_crypto |
|
|
| pdf_data/report_keywords/pq_crypto |
|
|
| pdf_data/report_keywords/hash_function |
|
|
| pdf_data/report_keywords/crypto_scheme |
|
|
| pdf_data/report_keywords/crypto_protocol |
|
|
| pdf_data/report_keywords/randomness |
|
|
| pdf_data/report_keywords/cipher_mode |
|
|
| pdf_data/report_keywords/ecc_curve |
|
|
| pdf_data/report_keywords/crypto_engine |
|
|
| pdf_data/report_keywords/tls_cipher_suite |
|
|
| pdf_data/report_keywords/crypto_library |
|
|
| pdf_data/report_keywords/vulnerability |
|
|
| pdf_data/report_keywords/side_channel_analysis |
|
- FI:
- fault injection: 2
- malfunction: 1
- SCA:
- other:
|
| pdf_data/report_keywords/technical_report_id |
|
- BSI:
- BSI 7148: 1
- BSI TR-03109-2: 1
|
| pdf_data/report_keywords/device_model |
|
|
| pdf_data/report_keywords/tee_name |
|
|
| pdf_data/report_keywords/os_name |
|
|
| pdf_data/report_keywords/cplc_data |
|
|
| pdf_data/report_keywords/ic_data_group |
|
|
| pdf_data/report_keywords/standard_id |
- FIPS:
- FIPS 140-2: 1
- FIPS 180-3: 1
- FIPS 186-3: 1
- FIPS 197: 1
- FIPS 198: 1
- ISO:
|
- BSI:
- AIS 1: 1
- AIS 20: 3
- AIS 25: 1
- AIS 26: 3
- AIS 31: 1
- AIS 32: 1
- AIS 34: 2
- AIS 36: 5
- AIS 46: 1
- FIPS:
- FIPS 180-2: 2
- FIPS 186: 5
- FIPS 197: 2
- ISO:
- ISO/IEC 15408: 4
- ISO/IEC 17065: 2
- ISO/IEC 18045: 4
- RFC:
|
| pdf_data/report_keywords/javacard_version |
|
|
| pdf_data/report_keywords/javacard_api_const |
|
|
| pdf_data/report_keywords/javacard_packages |
|
|
| pdf_data/report_keywords/certification_process |
|
- ConfidentialDocument:
- 1.0 Release 2/P60C144PVE, Version 1.2, 27 October 2016, SRC Security Research & Consulting GmbH (confidential document) 9 specifically • AIS 1, Version 13, Durchführung der Ortsbesichtigung in der Entwicklungsumgebung: 1
- Version 1.0 Release 2/P60C144PVE, Version 1.3, 25 October 2016, T-Systems International GmbH (confidential document) [10] Guidance Documentation BSI-DSZ-CC-0957-V2-2016, Operational Guidance for users and: 1
- Y/B/X)/yVE, BSI-DSZ-CC-0978, Version 2, 17 December 2015, TÜV Informationstechnik GmbH (confidential document) [14] Product Data Sheet, SmartMX2 family P60x080/144 VA/VE, Secure high performance smart card: 1
- being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification: 1
|
| pdf_data/report_metadata |
- /Author: krshann
- /CCEF: EWA-Canada
- /CR date: 2 July 2014
- /CR version: 1.1
- /Certificate date: 5 February 2014
- /Company: CSEC-CSTC
- /CreationDate: D:20140702143223-04'00'
- /Creator: Acrobat PDFMaker 9.0 for Word
- /Developer name: Dell SonicWALL, Inc.
- /Document number: 383-4-224-CR
- /ETR title, version, date: Evaluation Technical Report for SonicOS Enhanced v5.9.0 on NSA Series and TZ Series Applances
- /Evaluation completion date: 28 November 2013
- /ModDate: D:20140702143225-04'00'
- /Producer: Adobe PDF Library 9.0
- /ST Title: SonicWall SonicOS Enhanced v5.9.0 on NSA Series and TZ Series Appliances Security Target
- /ST date: 27 June 2014
- /ST version: 2.5
- /SourceModified: D:20140702183059
- /Sponsor: Dell SonicWALL, Inc.
- /TOE Version: 5.9.0
- /TOE name and version: SonicWALL SonicOS Enhanced v5.9.0 on NSA Series and TZ Series Appliances
- /TOE short name: SonicOS 5.9.0
- /Title: EAL 2 Evaluation of <TOE name and version>
- pdf_file_size_bytes: 106675
- pdf_hyperlinks: {}
- pdf_is_encrypted: False
- pdf_number_of_pages: 15
|
|
| pdf_data/st_filename |
383-4-224 ST v2.5.pdf |
0957V2b_pdf.pdf |
| pdf_data/st_frontpage |
|
|
| pdf_data/st_keywords/cc_cert_id |
|
- DE:
- BSI-DSZ-CC-0978: 1
- BSI-DSZ-CC-0978-2016: 1
|
| pdf_data/st_keywords/cc_protection_profile_id |
|
- BSI:
- BSI-CC-PP-0035-2007: 1
- BSI-CC-PP-0073-2014: 1
- BSI-CC-PP-0077-V2-2015: 2
|
| pdf_data/st_keywords/cc_security_level |
|
- EAL:
- EAL 4: 5
- EAL 6: 1
- EAL 6 augmented: 1
- EAL 6+: 1
- EAL4: 4
- EAL4 augmented: 3
|
| pdf_data/st_keywords/cc_sar |
- ADV:
- ADV_FSP.2: 4
- ADV_TDS.1: 4
- AGD:
- AGD_OPE.1: 1
- AGD_PRE.1: 1
- ALC:
- ALC_CMC.1: 1
- ALC_CMS.1: 1
- ALC_FLR.2: 4
- ASE:
- ASE_CCL.1: 1
- ASE_ECD.1: 1
- ASE_INT.1: 1
- ASE_OBJ.1: 1
- ASE_REQ.1: 1
- ASE_REQ.2: 2
- ASE_SPD.1: 4
- ASE_TSS.1: 1
- ATE:
- ATE_COV.1: 4
- ATE_FUN.1: 4
- ATE_IND.1: 1
- AVA:
|
- ADV:
- ADV_ARC: 1
- ADV_ARC.1: 1
- ADV_FSP: 1
- ADV_FSP.4: 1
- ADV_IMP.1: 3
- ADV_TDS: 2
- ADV_TDS.3: 1
- AGD:
- AGD_OPE.1: 1
- AGD_PRE.1: 3
- ALC:
- ALC_CMC.4: 1
- ALC_CMS.4: 1
- ALC_DEL.1: 3
- ALC_DVS.1: 1
- ALC_FLR.1: 2
- ALC_LCD.1: 1
- ALC_TAT.1: 1
- ASE:
- ATE:
- ATE_COV.2: 1
- ATE_DPT.1: 1
- ATE_FUN.1: 1
- AVA:
|
| pdf_data/st_keywords/cc_sfr |
- FAU:
- FAU_GEN: 11
- FAU_GEN.1: 11
- FAU_GEN.1.1: 1
- FAU_GEN.1.2: 1
- FAU_GEN.2: 7
- FAU_GEN.2.1: 1
- FAU_STG: 1
- FAU_STG.1: 1
- FAU_STG_EXT: 2
- FAU_STG_EXT.1: 13
- FAU_STG_EXT.1.1: 2
- FCS:
- FCS_CKM: 1
- FCS_CKM.1: 17
- FCS_CKM.1.1: 1
- FCS_CKM.4: 15
- FCS_CKM_EXT: 2
- FCS_CKM_EXT.4: 18
- FCS_CKM_EXT.4.1: 2
- FCS_COP.1: 58
- FCS_COP.1.1: 4
- FCS_RBG_EXT.1: 13
- FCS_RBG_EXT.1.1: 2
- FCS_RBG_EXT.1.2: 2
- FCS_TLS_EXT.1: 17
- FCS_TLS_EXT.1.1: 2
- FDP:
- FDP_ITC.1: 1
- FDP_ITC.2: 1
- FDP_RIP.2: 7
- FDP_RIP.2.1: 1
- FIA:
- FIA_PMG_EXT: 2
- FIA_PMG_EXT.1: 14
- FIA_PMG_EXT.1.1: 2
- FIA_SOS: 1
- FIA_UAU: 2
- FIA_UAU.1: 9
- FIA_UAU.5: 1
- FIA_UAU.7: 7
- FIA_UAU.7.1: 1
- FIA_UAU_EXT: 1
- FIA_UAU_EXT.2: 14
- FIA_UAU_EXT.2.1: 2
- FIA_UIA_EXT: 2
- FIA_UIA_EXT.1: 18
- FIA_UIA_EXT.1.1: 2
- FIA_UIA_EXT.1.2: 2
- FIA_UID: 1
- FIA_UID.1: 9
- FMT:
- FMT_MTD.1: 9
- FMT_MTD.1.1: 1
- FMT_SMF.1: 8
- FMT_SMF.1.1: 1
- FMT_SMR.1: 5
- FMT_SMR.2: 7
- FMT_SMR.2.1: 1
- FMT_SMR.2.2: 1
- FMT_SMR.2.3: 1
- FPT:
- FPT_APT_EXT.1.2: 1
- FPT_APW_EXT.1: 12
- FPT_APW_EXT.1.1: 2
- FPT_APW_EXT.1.2: 1
- FPT_ITT.1: 7
- FPT_ITT.1.1: 1
- FPT_SKP_EXT.1: 12
- FPT_SKP_EXT.1.1: 2
- FPT_STM.1: 9
- FPT_STM.1.1: 1
- FPT_TST: 1
- FPT_TST.1: 1
- FPT_TST_EXT: 1
- FPT_TST_EXT.1: 13
- FPT_TST_EXT.1.1: 2
- FPT_TUD_EXT.1: 9
- FPT_TUD_EXT.1.1: 2
- FPT_TUD_EXT.1.2: 2
- FPT_TUD_EXT.1.3: 2
- FTA:
- FTA_SSL.3: 7
- FTA_SSL.3.1: 1
- FTA_SSL.4: 7
- FTA_SSL.4.1: 1
- FTA_SSL_EXT: 1
- FTA_SSL_EXT.1: 14
- FTA_SSL_EXT.1.1: 2
- FTA_TAB.1: 9
- FTA_TAB.1.1: 1
- FTP:
- FTP_ITC.1: 10
- FTP_ITC.1.1: 1
- FTP_ITC.1.2: 1
- FTP_ITC.1.3: 1
- FTP_TRP.1: 7
- FTP_TRP.1.1: 1
- FTP_TRP.1.2: 1
- FTP_TRP.1.3: 1
|
- FAU:
- FCS:
- FCS_CKM: 51
- FCS_CKM.1: 16
- FCS_CKM.2: 8
- FCS_CKM.4: 45
- FCS_CKM.4.1: 1
- FCS_COP: 59
- FCS_COP.1: 15
- FCS_RNG: 6
- FCS_RNG.1: 20
- FCS_RNG.1.1: 2
- FCS_RNG.1.2: 2
- FDP:
- FDP_ACC.1: 13
- FDP_ACC.2: 17
- FDP_ACC.2.1: 1
- FDP_ACC.2.2: 1
- FDP_ACF: 2
- FDP_ACF.1: 9
- FDP_ACF.1.1: 1
- FDP_ACF.1.2: 1
- FDP_ACF.1.3: 1
- FDP_ACF.1.4: 1
- FDP_ETC.1: 7
- FDP_ETC.1.1: 1
- FDP_ETC.1.2: 1
- FDP_IFC: 1
- FDP_IFC.1: 8
- FDP_ITC: 8
- FDP_ITC.1: 20
- FDP_ITC.1.1: 1
- FDP_ITC.1.2: 1
- FDP_ITC.1.3: 1
- FDP_ITC.2: 14
- FDP_ITT.1: 1
- FDP_RIP: 1
- FDP_RIP.1: 7
- FDP_RIP.1.1: 1
- FDP_SDI: 1
- FDP_SDI.1: 1
- FDP_SDI.2: 8
- FDP_SDI.2.1: 1
- FDP_SDI.2.2: 1
- FDP_UCT.1: 8
- FDP_UIT: 1
- FDP_UIT.1: 7
- FDP_UIT.1.2: 1
- FIA:
- FIA_ATD.1: 10
- FIA_ATD.1.1: 1
- FIA_SOS: 1
- FIA_SOS.1: 3
- FIA_SOS.1.1: 1
- FIA_UAU: 18
- FIA_UAU.1: 5
- FIA_UAU.4: 6
- FIA_UAU.4.1: 1
- FIA_UAU.5: 6
- FIA_UAU.5.1: 1
- FIA_UAU.5.2: 1
- FIA_UID: 1
- FIA_UID.1: 14
- FIA_UID.1.1: 1
- FIA_UID.1.2: 1
- FIA_USB: 1
- FIA_USB.1: 6
- FIA_USB.1.1: 1
- FIA_USB.1.2: 1
- FIA_USB.1.3: 1
- FMT:
- FMT_LIM: 6
- FMT_LIM.1: 25
- FMT_LIM.1.1: 2
- FMT_LIM.2: 23
- FMT_LIM.2.1: 2
- FMT_MSA.1: 2
- FMT_MSA.3: 6
- FMT_SMF.1: 10
- FMT_SMF.1.1: 1
- FMT_SMR: 1
- FMT_SMR.1: 6
- FMT_SMR.1.1: 1
- FMT_SMR.1.2: 1
- FPT:
- FPT_EMS: 6
- FPT_EMS.1: 15
- FPT_EMS.1.1: 2
- FPT_EMS.1.2: 2
- FPT_FLS: 1
- FPT_FLS.1: 11
- FPT_FLS.1.1: 1
- FPT_ITT.1: 1
- FPT_PHP: 1
- FPT_PHP.3: 10
- FPT_PHP.3.1: 1
- FPT_TST: 1
- FPT_TST.1: 7
- FPT_TST.1.1: 1
- FPT_TST.1.2: 1
- FPT_TST.1.3: 1
- FRU:
- FTP:
- FTP_ICT.1: 4
- FTP_ITC: 1
- FTP_ITC.1: 10
- FTP_ITC.1.1: 1
- FTP_ITC.1.2: 1
- FTP_ITC.1.3: 1
- FTP_TRP.1: 4
|
| pdf_data/st_keywords/cc_claims |
- A:
- A.NO_GENERAL_PURPOSE: 1
- A.PHYSICAL: 1
- A.TRUSTED_ADMIN: 1
- O:
- O.DISPLAY_BANNER: 2
- O.PROTECTED_COMMUNICATI: 2
- O.RESIDUAL_INFORMATION_C: 2
- O.SESSION_LOCK: 2
- O.SYSTEM_MONITORING: 2
- O.TOE_ADMINISTRATION: 2
- O.TSF_SELF_TEST: 2
- O.VERIFIABLE_UPDATES: 2
- OE:
- OE.NO_GENERAL_PURPOSE: 1
- OE.PHYSICAL: 1
- OE.TRUSTED_ADMIN: 1
- T:
- T.ADMIN_ERROR: 1
- T.TSF_FAILURE: 1
- T.UNAUTHORIZED_ACCESS: 1
- T.UNAUTHORIZED_UPDATE: 1
- T.UNDETECTED_ACTIONS: 1
- T.USER_DATA_REUSE: 1
|
- O:
- O.FW_HW: 1
- O.HW_AES: 4
- O.MEM_ACCESS: 3
- O.PACE: 5
- O.RND: 3
- O.SFR_ACCESS: 3
- OE:
- OSP:
- T:
|
| pdf_data/st_keywords/vendor |
|
- NXP:
- NXP: 2
- NXP Semiconductors: 1
|
| pdf_data/st_keywords/eval_facility |
|
- TSystems:
- T-Systems International: 79
|
| pdf_data/st_keywords/symmetric_crypto |
- AES_competition:
- constructions:
|
- AES_competition:
- DES:
- constructions:
|
| pdf_data/st_keywords/asymmetric_crypto |
|
|
| pdf_data/st_keywords/pq_crypto |
|
|
| pdf_data/st_keywords/hash_function |
|
|
| pdf_data/st_keywords/crypto_scheme |
|
|
| pdf_data/st_keywords/crypto_protocol |
- IKE:
- IKE: 15
- IKEv1: 9
- IKEv2: 2
- IPsec:
- SSH:
- TLS:
- SSL:
- TLS:
- TLS: 26
- TLS 1.0: 2
- TLS 1.1: 1
- TLS 1.2: 1
- VPN:
|
|
| pdf_data/st_keywords/randomness |
|
|
| pdf_data/st_keywords/cipher_mode |
|
|
| pdf_data/st_keywords/ecc_curve |
|
- Brainpool:
- brainpoolP256r1: 2
- brainpoolP384r1: 2
- brainpoolP512r1: 2
- NIST:
- NIST P-256: 1
- NIST P-384: 1
- P-256: 11
- P-384: 15
- secp256r1: 1
- secp384r1: 1
|
| pdf_data/st_keywords/crypto_engine |
|
|
| pdf_data/st_keywords/tls_cipher_suite |
- TLS:
- TLS_DHE_RSA_WITH_AES_128_CBC_SHA: 3
- TLS_DHE_RSA_WITH_AES_256_CBC_SHA: 1
- TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: 1
- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: 1
- TLS_RSA_WITH_AES_128_CBC_SHA: 3
- TLS_RSA_WITH_AES_128_CBC_SHA256: 1
- TLS_RSA_WITH_AES_256_CBC_SHA: 1
|
|
| pdf_data/st_keywords/crypto_library |
|
|
| pdf_data/st_keywords/vulnerability |
|
|
| pdf_data/st_keywords/side_channel_analysis |
|
- FI:
- DFA: 1
- Malfunction: 12
- Physical tampering: 1
- fault injection: 1
- malfunction: 3
- physical tampering: 5
- SCA:
- DPA: 2
- Leak-Inherent: 4
- Physical Probing: 2
- SPA: 2
- physical probing: 2
- side channel: 1
- side channels: 1
- side-channels: 1
- timing attacks: 1
|
| pdf_data/st_keywords/technical_report_id |
|
|
| pdf_data/st_keywords/device_model |
|
|
| pdf_data/st_keywords/tee_name |
|
|
| pdf_data/st_keywords/os_name |
|
|
| pdf_data/st_keywords/cplc_data |
|
|
| pdf_data/st_keywords/ic_data_group |
|
|
| pdf_data/st_keywords/standard_id |
- FIPS:
- FIPS 140-2: 4
- FIPS 201: 1
- FIPS PUB 186-2: 1
- FIPS PUB 186-3: 2
- FIPS PUB 197: 2
- FIPS1: 1
- NIST:
- NIST SP 800-38A: 2
- NIST SP 800-56B: 1
- NIST SP 800-90: 1
- RFC:
- RFC 2246: 2
- RFC 2818: 2
- RFC 3602: 2
- RFC 4106: 1
- RFC 4109: 1
- RFC 4303: 2
- RFC 4346: 1
- RFC 4868: 2
- RFC 5246: 1
- RFC8: 1
|
- BSI:
- CC:
- CCMB-2012-09-001: 1
- CCMB-2012-09-002: 1
- CCMB-2012-09-003: 2
- CCMB-2012-09-004: 2
- FIPS:
- FIPS PUB 186-4: 1
- FIPS186: 10
- FIPS197: 3
- ISO:
- RFC:
- X509:
|
| pdf_data/st_keywords/javacard_version |
|
|
| pdf_data/st_keywords/javacard_api_const |
|
|
| pdf_data/st_keywords/javacard_packages |
|
|
| pdf_data/st_keywords/certification_process |
|
- OutOfScope:
- entities. 72 As these external entities only indirectly interact with the TOE, these entities are out of scope for this ST. 73 During its pre-operational phases the TOE interacts with the Integrator and the: 1
- out of scope: 1
|
| pdf_data/st_metadata |
- /Author: File/Properties/Summary/Author
- /CreationDate: D:20140627091517-04'00'
- /Creator: Microsoft® Office Word 2007
- /ModDate: D:20140627091517-04'00'
- /Producer: Microsoft® Office Word 2007
- /Subject: SonicOS Enhanced v5.9.0 on NSA Series and TZ Series Appliances
- /Title: Security Target
- pdf_file_size_bytes: 1553739
- pdf_hyperlinks: http://en.wikipedia.org/wiki/Thermal_noise, mailto:[email protected], http://en.wikipedia.org/wiki/Random_number, http://www.all-acronyms.com/DRBG/Deterministic_Random_Bit_Generator/1273417, http://en.wikipedia.org/wiki/Transducer, http://en.wikipedia.org/wiki/Analog_to_digital_converter, http://en.wikipedia.org/wiki/Amplifier, https://www.mysonicwall.com/, http://en.wikipedia.org/wiki/Quantum, http://www.corsec.com/, http://en.wikipedia.org/wiki/Photoelectric_effect, http://www.sonicwall.com/
- pdf_is_encrypted: False
- pdf_number_of_pages: 71
|
|
| state/cert/convert_garbage |
None |
None |
| state/cert/convert_ok |
False |
False |
| state/cert/download_ok |
True |
False |
| state/cert/extract_ok |
False |
False |
| state/cert/pdf_hash |
Different |
Different |
| state/cert/txt_hash |
Equal |
Equal |
| state/report/convert_garbage |
None |
None |
| state/report/convert_ok |
True |
True |
| state/report/download_ok |
True |
True |
| state/report/extract_ok |
True |
True |
| state/report/pdf_hash |
Different |
Different |
| state/report/txt_hash |
Different |
Different |
| state/st/convert_garbage |
None |
None |
| state/st/convert_ok |
True |
True |
| state/st/download_ok |
True |
True |
| state/st/extract_ok |
True |
True |
| state/st/pdf_hash |
Different |
Different |
| state/st/txt_hash |
Different |
Different |