Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
F5 Networks BIG-IP® Application Delivery Controller (ADC-AP) version 11.5.1 HF10 (build 10.123.180)
BSI-DSZ-CC-0975-2018 		ID-ONE Cosmo V9 Essential version 3 (Cosmo V9)
NSCIB-CC-200833-CR
name F5 Networks BIG-IP® Application Delivery Controller (ADC-AP) version 11.5.1 HF10 (build 10.123.180) ID-ONE Cosmo V9 Essential version 3 (Cosmo V9)
category Network and Network-Related Devices and Systems ICs, Smart Cards and Smart Card-Related Devices and Systems
scheme DE NL
not_valid_after 15.02.2023 14.12.2023
not_valid_before 15.02.2018 14.12.2018
cert_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0975c_pdf.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/Signed%20certificate%20CC-18-200833.pdf
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0975a_pdf.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/[CR]%20NSCIB-CC-200833-CR.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0975b_pdf.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/[ST-Lite]%20FQR%20110%208959%20Ed%203.0%20-%20ID%20One%20Cosmo%20V9%20Essential%20Public%20Security%20Target.pdf
manufacturer F5 Networks, Inc. Idemia
manufacturer_web https://www.f5.com/ https://www.idemia.com
security_level EAL4+, ALC_FLR.3 ALC_DVS.2, EAL5+, AVA_VAN.5
dgst 582b7ee77ad6041b 3f27923299d501ca
heuristics/cert_id BSI-DSZ-CC-0975-2018 NSCIB-CC-200833-CR
heuristics/cert_lab BSI
heuristics/extracted_sars ASE_INT.1, ALC_CMC.4, ASE_ECD.1, APE_ECD.1, ADV_IMP.1, ATE_COV.2, ASE_TSS.1, ALC_TAT.1, ASE_SPD.1, ALC_DEL.1, ALC_LCD.1, ALC_FLR.3, AGD_OPE.1, AVA_VAN.3, AGD_PRE.1, ALC_CMS.4, ATE_FUN.1, APE_REQ.2, ADV_ARC.1, ASE_OBJ.2, APE_CCL.1, ADV_TDS.3, ATE_DPT.1, ASE_REQ.2, ALC_DVS.1, ADV_INT.3, APE_INT.1, APE_SPD.1, ADV_FSP.4, ATE_IND.2, APE_OBJ.2, ASE_CCL.1, ADV_SPM.1 ASE_INT.1, ALC_DVS.2, ALC_CMC.4, ASE_ECD.1, ADV_IMP.1, ATE_COV.2, ALC_FLR.1, ASE_TSS.1, ASE_SPD.1, ALC_CMS.5, AVA_VAN.5, ALC_DEL.1, ALC_LCD.1, ADV_FSP.5, AGD_OPE.1, AGD_PRE.1, ATE_FUN.1, ATE_DPT.3, ADV_ARC.1, ASE_OBJ.2, ALC_TAT.2, ADV_TDS.4, ASE_REQ.2, ASE_CCL.1
heuristics/extracted_versions 10.123.180, 11.5.1 3
heuristics/report_references/directly_referenced_by {} NSCIB-CC-200716-CR2
heuristics/report_references/directly_referencing BSI-DSZ-CC-0856-2017 {}
heuristics/report_references/indirectly_referenced_by {} NSCIB-CC-200716-CR2
heuristics/report_references/indirectly_referencing BSI-DSZ-CC-0856-2017 {}
heuristics/st_references/directly_referencing {} BSI-DSZ-CC-0945-V2-2018
heuristics/st_references/indirectly_referencing {} BSI-DSZ-CC-0945-V2-2018
heuristics/protection_profiles {} 9399bd94f9925b16
maintenance_updates
protection_profile_links {} https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/ANSSI-CC-profil_PP-2010-03en.pdf
pdf_data/cert_filename 0975c_pdf.pdf Signed certificate CC-18-200833.pdf
pdf_data/cert_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-0975-2018: 1
  • FR:
    • ANSSI-PP-2010/03-M01: 1
  • NL:
    • CC-18-200833: 1
pdf_data/cert_keywords/cc_security_level
  • EAL:
    • EAL 2: 1
    • EAL 4: 1
    • EAL 4 augmented: 1
  • EAL:
    • EAL7: 1
pdf_data/cert_keywords/cc_sar
  • ALC:
    • ALC_FLR: 1
    • ALC_FLR.3: 1
  • ALC:
    • ALC_DVS.2: 1
  • AVA:
    • AVA_VAN.5: 1
pdf_data/cert_keywords/vendor
  • Idemia:
    • Idemia: 1
pdf_data/cert_keywords/eval_facility
  • BrightSight:
    • Brightsight: 1
pdf_data/cert_metadata
  • /Author: Bundesamt für Sicherheit in der Informationstechnik
  • /CreationDate: D:20180220161811+01'00'
  • /Creator: Writer
  • /Keywords: "Common Criteria, Certification, Zertifizierung, F5 Networks, BIG-IP, Application Delivery Controller (ADC-AP) version 11.5.1 HF10"
  • /ModDate: D:20180220163412+01'00'
  • /Producer: LibreOffice 5.2
  • /Subject: Certificate, Zertifikat
  • /Title: Certificate BSI-DSZ-CC-0975-2017
  • pdf_file_size_bytes: 919805
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
  • /CreationDate: D:20181214152613+01'00'
  • /Creator: BHC364e
  • /ModDate: D:20181214142726+01'00'
  • /Producer: KONICA MINOLTA bizhub C364e
  • /Title: BHC364e-20181214152613
  • pdf_file_size_bytes: 198723
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
pdf_data/report_filename 0975a_pdf.pdf [CR] NSCIB-CC-200833-CR.pdf
pdf_data/report_frontpage
  • DE:
    • cc_security_level: Common Criteria Part 3 conformant EAL 4 augmented by ALC_FLR.3
    • cc_version: Product specific Security Target Common Criteria Part 2 extended
    • cert_id: BSI-DSZ-CC-0975-2018
    • cert_item: F5 Networks BIG-IP® Application Delivery Controller (ADC-AP) version 11.5.1 HF10 (build 10.123.180
    • cert_lab: BSI
    • developer: F5 Networks, Inc
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
    • ref_protection_profiles: None
  • NL:
  • DE:
  • NL:
    • cert_id: NSCIB-CC-200833-CR
    • cert_item: ID-ONE Cosmo V9 Essential version 3 (Cosmo V9
    • cert_lab: Brightsight
    • developer: Idemia
pdf_data/report_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-0856-2017: 4
    • BSI-DSZ-CC-0975-2018: 21
  • FR:
    • ANSSI-PP-2010/03-M01: 1
  • NL:
    • NSCIB-CC-200833-CR: 12
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 1: 7
    • EAL 2: 8
    • EAL 3: 4
    • EAL 4: 9
    • EAL 4 augmented: 3
    • EAL 5: 6
    • EAL 6: 3
    • EAL 7: 4
    • EAL4: 1
  • ITSEC:
    • ITSEC Evaluation: 1
  • EAL:
    • EAL 5: 1
    • EAL 5 augmented: 1
    • EAL 6: 1
    • EAL 6 augmented: 1
    • EAL4: 1
    • EAL5: 2
    • EAL5 augmented: 1
    • EAL5+: 2
    • EAL6: 1
    • EAL6 augmented: 1
    • EAL6+: 1
pdf_data/report_keywords/cc_sar
  • ADV:
    • ADV_ARC: 1
    • ADV_ARC.1: 1
    • ADV_FSP: 1
    • ADV_FSP.1: 1
    • ADV_FSP.2: 1
    • ADV_FSP.3: 1
    • ADV_FSP.4: 1
    • ADV_FSP.5: 1
    • ADV_FSP.6: 1
    • ADV_IMP: 1
    • ADV_IMP.1: 1
    • ADV_IMP.2: 1
    • ADV_INT: 1
    • ADV_INT.1: 1
    • ADV_INT.2: 1
    • ADV_INT.3: 1
    • ADV_SPM: 1
    • ADV_SPM.1: 1
    • ADV_TDS: 1
    • ADV_TDS.1: 1
    • ADV_TDS.2: 1
    • ADV_TDS.3: 1
    • ADV_TDS.4: 1
    • ADV_TDS.5: 1
    • ADV_TDS.6: 1
  • AGD:
    • AGD_OPE: 4
    • AGD_OPE.1: 1
    • AGD_PRE: 4
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC: 1
    • ALC_CMC.1: 1
    • ALC_CMC.2: 1
    • ALC_CMC.3: 1
    • ALC_CMC.4: 1
    • ALC_CMC.5: 1
    • ALC_CMS: 1
    • ALC_CMS.1: 1
    • ALC_CMS.2: 1
    • ALC_CMS.3: 1
    • ALC_CMS.4: 1
    • ALC_CMS.5: 1
    • ALC_DEL: 1
    • ALC_DEL.1: 1
    • ALC_DVS: 1
    • ALC_DVS.1: 1
    • ALC_DVS.2: 1
    • ALC_FLR: 3
    • ALC_FLR.1: 1
    • ALC_FLR.2: 1
    • ALC_FLR.3: 5
    • ALC_LCD.1: 1
    • ALC_LCD.2: 1
    • ALC_TAT: 1
    • ALC_TAT.1: 1
    • ALC_TAT.2: 1
    • ALC_TAT.3: 1
  • APE:
    • APE_CCL.1: 1
    • APE_ECD.1: 1
    • APE_INT.1: 1
    • APE_OBJ.1: 1
    • APE_OBJ.2: 1
    • APE_REQ.1: 1
    • APE_REQ.2: 1
    • APE_SPD.1: 1
  • ASE:
    • ASE_CCL: 1
    • ASE_CCL.1: 1
    • ASE_ECD: 1
    • ASE_ECD.1: 1
    • ASE_INT: 1
    • ASE_INT.1: 1
    • ASE_OBJ: 1
    • ASE_OBJ.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ: 1
    • ASE_REQ.1: 1
    • ASE_REQ.2: 1
    • ASE_SPD: 1
    • ASE_SPD.1: 1
    • ASE_TSS: 1
    • ASE_TSS.1: 1
    • ASE_TSS.2: 1
  • ATE:
    • ATE_COV: 1
    • ATE_COV.1: 1
    • ATE_COV.2: 1
    • ATE_COV.3: 1
    • ATE_DPT: 1
    • ATE_DPT.1: 1
    • ATE_DPT.2: 1
    • ATE_DPT.3: 1
    • ATE_DPT.4: 1
    • ATE_FUN: 1
    • ATE_FUN.1: 1
    • ATE_FUN.2: 1
    • ATE_IND: 1
    • ATE_IND.1: 1
    • ATE_IND.2: 1
    • ATE_IND.3: 1
  • AVA:
    • AVA_VAN: 2
    • AVA_VAN.1: 1
    • AVA_VAN.2: 1
    • AVA_VAN.3: 1
    • AVA_VAN.4: 1
    • AVA_VAN.5: 1
  • ALC:
    • ALC_DVS.2: 2
    • ALC_FLR.1: 1
  • AVA:
    • AVA_VAN: 1
    • AVA_VAN.5: 6
pdf_data/report_keywords/cc_sfr
  • FCS:
    • FCS_CKM.1: 1
  • FIA:
    • FIA_AFL: 1
    • FIA_SOS: 1
  • FTP:
    • FTP_ITC.1: 1
    • FTP_TRP.1: 1
pdf_data/report_keywords/vendor
  • Idemia:
    • Idemia: 3
  • Infineon:
    • Infineon Technologies AG: 1
  • Oberthur:
    • Oberthur Technologies: 1
pdf_data/report_keywords/eval_facility
  • atsec:
    • atsec: 3
  • BrightSight:
    • Brightsight: 2
pdf_data/report_keywords/symmetric_crypto
  • constructions:
    • MAC:
      • HMAC: 9
  • AES_competition:
    • AES:
      • AES: 3
  • DES:
    • 3DES:
      • 3DES: 2
      • Triple-DES: 2
    • DES:
      • DES: 3
  • constructions:
    • MAC:
      • CBC-MAC: 1
      • HMAC: 2
pdf_data/report_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 10
    • ECDH:
      • ECDH: 7
      • ECDHE: 1
    • ECDSA:
      • ECDSA: 13
  • FF:
    • DH:
      • DH: 6
  • RSA:
    • RSASSAPKCS1-v1_5: 1
  • ECC:
    • ECC:
      • ECC: 5
    • ECDH:
      • ECDH: 3
    • ECDSA:
      • ECDSA: 3
  • FF:
    • DH:
      • Diffie-Hellman: 1
  • RSA:
    • RSA-CRT: 2
pdf_data/report_keywords/hash_function
  • MD:
    • MD5:
      • MD5: 5
  • SHA:
    • SHA1:
      • SHA-1: 13
    • SHA2:
      • SHA-256: 7
      • SHA-384: 7
      • SHA256: 2
      • SHA384: 1
  • SHA:
    • SHA1:
      • SHA-1: 2
    • SHA2:
      • SHA-224: 2
      • SHA-384: 2
      • SHA-512: 2
pdf_data/report_keywords/crypto_scheme
  • KA:
    • Key agreement: 2
  • MAC:
    • MAC: 4
  • MAC:
    • MAC: 1
pdf_data/report_keywords/crypto_protocol
  • IKE:
    • IKE: 1
  • SSH:
    • SSH: 8
  • TLS:
    • SSL:
      • SSL: 1
    • TLS:
      • TLS: 14
      • TLSv1.1: 6
      • TLSv1.2: 7
  • VPN:
    • VPN: 7
pdf_data/report_keywords/cipher_mode
  • CBC:
    • CBC: 2
  • CBC:
    • CBC: 1
  • ECB:
    • ECB: 1
pdf_data/report_keywords/ecc_curve
  • NIST:
    • NIST P-256: 2
    • P-256: 2
    • secp256r1: 8
pdf_data/report_keywords/vulnerability
  • CVE:
    • CVE-2013-0169: 1
pdf_data/report_keywords/side_channel_analysis
  • SCA:
    • side channels: 1
  • FI:
    • DFA: 1
  • other:
    • JIL: 3
    • JIL-AM: 2
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7148: 1
    • BSI TR-02102: 1
pdf_data/report_keywords/standard_id
  • BSI:
    • AIS 20: 2
    • AIS 32: 1
  • ISO:
    • ISO/IEC 15408: 4
    • ISO/IEC 17065: 2
    • ISO/IEC 18045: 4
  • PKCS:
    • PKCS#1: 10
  • RFC:
    • RFC1321: 1
    • RFC2104: 1
    • RFC3447: 10
    • RFC3526: 1
    • RFC4251: 1
    • RFC4252: 2
    • RFC4253: 4
    • RFC4346: 4
    • RFC4492: 6
    • RFC5246: 6
    • RFC6151: 1
  • SCP:
    • SCP03: 2
pdf_data/report_keywords/javacard_version
  • JavaCard:
    • Java Card 3.0.5: 2
pdf_data/report_keywords/certification_process
  • ConfidentialDocument:
    • Report, Version 7, 2018-02-15, Final Evaluation Technical Report, atsec information security GmbH (confidential document) [8] Configuration list for the TOE, 2017-09-26, CI list for documentation in Perforce: 1
    • being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification: 1
pdf_data/report_metadata
pdf_data/st_filename 0975b_pdf.pdf [ST-Lite] FQR 110 8959 Ed 3.0 - ID One Cosmo V9 Essential Public Security Target.pdf
pdf_data/st_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-0945-V2-2018: 2
pdf_data/st_keywords/cc_protection_profile_id
  • ANSSI:
    • ANSSI-CC-PP-2010/03_M01: 1
  • BSI:
    • BSI-CC-PP-0084-2014: 1
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL4: 3
    • EAL4 augmented: 1
  • EAL:
    • EAL4+: 2
    • EAL5: 5
    • EAL5 augmented: 1
    • EAL5+: 5
    • EAL6: 1
    • EAL6 augmented: 1
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.4: 1
    • ADV_IMP.1: 1
    • ADV_TDS.3: 1
  • AGD:
    • AGD_OPE: 2
    • AGD_OPE.1: 1
    • AGD_PRE: 2
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.4: 1
    • ALC_CMS.4: 1
    • ALC_DEL.1: 1
    • ALC_DVS.1: 1
    • ALC_FLR.3: 5
    • ALC_LCD.1: 1
    • ALC_TAT.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.2: 1
    • ATE_DPT.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.3: 1
  • ADV:
    • ADV_ARC.1: 6
    • ADV_FSP.1: 3
    • ADV_FSP.2: 2
    • ADV_FSP.4: 2
    • ADV_FSP.5: 8
    • ADV_IMP.1: 9
    • ADV_TDS.1: 2
    • ADV_TDS.3: 4
    • ADV_TDS.4: 8
  • AGD:
    • AGD_OPE: 2
    • AGD_OPE.1: 8
    • AGD_PRE: 6
    • AGD_PRE.1: 6
  • ALC:
    • ALC_CMC.4: 1
    • ALC_CMS.1: 1
    • ALC_CMS.5: 1
    • ALC_DEL.1: 1
    • ALC_DVS: 1
    • ALC_DVS.1: 2
    • ALC_DVS.2: 12
    • ALC_LCD.1: 3
    • ALC_TAT.1: 2
    • ALC_TAT.2: 3
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 4
    • ASE_INT.1: 5
    • ASE_OBJ.2: 3
    • ASE_REQ.1: 2
    • ASE_REQ.2: 2
    • ASE_SPD.1: 2
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 2
    • ATE_COV.2: 3
    • ATE_DPT.1: 2
    • ATE_DPT.3: 1
    • ATE_FUN.1: 6
  • AVA:
    • AVA_VAN: 1
    • AVA_VAN.5: 14
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN: 1
    • FAU_GEN.1: 12
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_GEN.2: 9
    • FAU_GEN.2.1: 1
    • FAU_STG: 1
    • FAU_STG_EXT.1: 14
    • FAU_STG_EXT.1.1: 2
  • FCS:
    • FCS_CKM: 15
    • FCS_CKM.1: 10
    • FCS_CKM.1.1: 1
    • FCS_CKM.2: 4
    • FCS_CKM.4: 3
    • FCS_CKM_EXT.4: 20
    • FCS_CKM_EXT.4.1: 2
    • FCS_COP.1: 36
    • FCS_COP.1.1: 3
    • FCS_RBG_EXT.1: 16
    • FCS_RBG_EXT.1.1: 2
    • FCS_RBG_EXT.1.2: 2
    • FCS_RNG.1.1: 1
    • FCS_RNG.1.2: 1
    • FCS_SSH_EXT.1: 15
    • FCS_SSH_EXT.1.1: 2
    • FCS_SSH_EXT.1.2: 2
    • FCS_SSH_EXT.1.3: 2
    • FCS_SSH_EXT.1.4: 2
    • FCS_SSH_EXT.1.5: 2
    • FCS_SSH_EXT.1.6: 2
    • FCS_SSH_EXT.1.7: 2
    • FCS_TLS_EXT.1: 22
    • FCS_TLS_EXT.1.1: 2
    • FCS_TLS_EXT.1.2: 2
  • FDP:
    • FDP_ACC.1: 17
    • FDP_ACC.1.1: 1
    • FDP_ACF.1: 9
    • FDP_ACF.1.1: 1
    • FDP_ACF.1.2: 1
    • FDP_ACF.1.3: 1
    • FDP_ACF.1.4: 1
    • FDP_IFC: 7
    • FDP_IFC.1: 7
    • FDP_IFF: 6
    • FDP_IFF.1: 7
    • FDP_ITC.1: 15
    • FDP_ITC.1.1: 1
    • FDP_ITC.1.2: 1
    • FDP_ITC.1.3: 1
    • FDP_ITC.2: 5
    • FDP_RIP.2: 11
    • FDP_RIP.2.1: 1
    • FDP_UCT.1: 8
    • FDP_UCT.1.1: 1
    • FDP_UIT.1: 8
    • FDP_UIT.1.1: 1
    • FDP_UIT.1.2: 1
  • FIA:
    • FIA_AFL: 1
    • FIA_AFL.1: 10
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_ATD.1: 11
    • FIA_ATD.1.1: 1
    • FIA_PMG_EXT.1: 14
    • FIA_PMG_EXT.1.1: 1
    • FIA_SOS: 1
    • FIA_UAU: 19
    • FIA_UAU.1: 1
    • FIA_UAU.5: 6
    • FIA_UAU.7: 10
    • FIA_UAU.7.1: 1
    • FIA_UAU_EXT.2: 15
    • FIA_UAU_EXT.2.1: 2
    • FIA_UIA_EXT.1: 22
    • FIA_UIA_EXT.1.1: 2
    • FIA_UIA_EXT.1.2: 2
    • FIA_UID.1: 3
    • FIA_UIU_EXT.1: 1
  • FMT:
    • FMT_MSA: 17
    • FMT_MSA.1: 12
    • FMT_MSA.1.1: 1
    • FMT_MSA.3: 9
    • FMT_MTD.1: 9
    • FMT_MTD.1.1: 1
    • FMT_SMF.1: 12
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 14
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_APW: 1
    • FPT_APW_EXT.1: 13
    • FPT_APW_EXT.1.1: 2
    • FPT_APW_EXT.1.2: 2
    • FPT_FLS.1: 9
    • FPT_FLS.1.1: 1
    • FPT_SKP: 1
    • FPT_SKP_EXT.1: 13
    • FPT_SKP_EXT.1.1: 2
    • FPT_STM.1: 1
    • FPT_TDC.1: 9
    • FPT_TDC.1.1: 1
    • FPT_TDC.1.2: 1
    • FPT_TST_EXT: 1
    • FPT_TST_EXT.1: 13
    • FPT_TST_EXT.1.1: 2
    • FPT_TUD: 1
    • FPT_TUD_EXT.1: 14
    • FPT_TUD_EXT.1.1: 2
    • FPT_TUD_EXT.1.2: 2
    • FPT_TUD_EXT.1.3: 2
  • FRU:
    • FRU_RSA.1: 9
    • FRU_RSA.1.1: 1
  • FTA:
    • FTA_SSL.3: 10
    • FTA_SSL.3.1: 1
    • FTA_SSL.4: 10
    • FTA_SSL.4.1: 1
    • FTA_TAB.1: 13
    • FTA_TAB.1.1: 1
  • FTP:
    • FTP_ITC.1: 23
    • FTP_ITC.1.1: 1
    • FTP_ITC.1.2: 1
    • FTP_ITC.1.3: 1
    • FTP_TRP.1: 15
    • FTP_TRP.1.1: 1
    • FTP_TRP.1.2: 1
    • FTP_TRP.1.3: 1
  • FAU:
    • FAU_ARP.1: 21
    • FAU_ARP.1.1: 1
    • FAU_GEN: 1
    • FAU_GEN.1: 2
    • FAU_SAA.1: 3
    • FAU_STG.2: 11
    • FAU_STG.2.1: 1
    • FAU_STG.2.2: 1
    • FAU_STG.2.3: 1
  • FCO:
    • FCO_NRO: 18
    • FCO_NRO.2: 8
  • FCS:
    • FCS_CKM: 28
    • FCS_CKM.1: 25
    • FCS_CKM.1.1: 1
    • FCS_CKM.2: 14
    • FCS_CKM.2.1: 1
    • FCS_CKM.3: 12
    • FCS_CKM.3.1: 1
    • FCS_CKM.4: 24
    • FCS_CKM.4.1: 1
    • FCS_COP: 34
    • FCS_COP.1: 18
    • FCS_COP.1.1: 1
    • FCS_RNG: 11
    • FCS_RNG.1: 5
    • FCS_RNG.1.1: 1
    • FCS_RNG.1.2: 1
  • FDP:
    • FDP_ACC: 84
    • FDP_ACC.1: 24
    • FDP_ACC.2: 13
    • FDP_ACF: 69
    • FDP_ACF.1: 34
    • FDP_IFC: 31
    • FDP_IFC.1: 21
    • FDP_IFC.2: 2
    • FDP_IFF: 25
    • FDP_IFF.1: 16
    • FDP_ITC: 31
    • FDP_ITC.1: 10
    • FDP_ITC.2: 16
    • FDP_RIP: 131
    • FDP_RIP.1: 10
    • FDP_ROL: 17
    • FDP_ROL.1: 8
    • FDP_SDI: 8
    • FDP_SDI.2: 10
    • FDP_SDI.2.1: 1
    • FDP_SDI.2.2: 1
    • FDP_UCT: 13
    • FDP_UCT.1: 1
    • FDP_UIT: 21
    • FDP_UIT.1: 4
  • FIA:
    • FIA_AFL: 42
    • FIA_AFL.1: 8
    • FIA_ATD: 11
    • FIA_ATD.1: 2
    • FIA_UAU: 68
    • FIA_UAU.1: 11
    • FIA_UAU.4: 2
    • FIA_UAU.7: 2
    • FIA_UID: 35
    • FIA_UID.1: 16
    • FIA_UID.2: 1
    • FIA_USB: 10
    • FIA_USB.1: 3
  • FMT:
    • FMT_MOF: 12
    • FMT_MOF.1: 1
    • FMT_MSA: 229
    • FMT_MSA.1: 20
    • FMT_MSA.2: 5
    • FMT_MSA.3: 27
    • FMT_MTD: 41
    • FMT_MTD.1: 4
    • FMT_MTD.2: 2
    • FMT_MTD.3: 1
    • FMT_SMF: 70
    • FMT_SMF.1: 31
    • FMT_SMF.1.1: 1
    • FMT_SMR: 68
    • FMT_SMR.1: 57
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
    • FMT_SMR.2: 6
  • FPR:
    • FPR_UNO: 21
    • FPR_UNO.1: 13
    • FPR_UNO.1.1: 1
  • FPT:
    • FPT_FLS: 52
    • FPT_FLS.1: 21
    • FPT_FLS.1.1: 2
    • FPT_PHP: 9
    • FPT_PHP.3: 1
    • FPT_RCV: 30
    • FPT_RCV.3: 7
    • FPT_RCV.4: 1
    • FPT_TDC: 8
    • FPT_TDC.1: 12
    • FPT_TDC.1.1: 1
    • FPT_TDC.1.2: 1
    • FPT_TST: 1
    • FPT_TST.1: 14
    • FPT_TST.1.1: 1
    • FPT_TST.1.2: 1
    • FPT_TST.1.3: 1
  • FRU:
    • FRU_FLT: 9
    • FRU_FLT.1: 1
  • FTP:
    • FTP_ITC: 17
    • FTP_ITC.1: 7
    • FTP_TRP.1: 4
pdf_data/st_keywords/cc_claims
  • A:
    • A.CONNECTIONS: 3
    • A.KEYS: 3
    • A.LDAP: 3
    • A.LOGSERVER: 2
    • A.MGMTNET: 3
    • A.NO_GENERAL_PURPOSE: 3
    • A.PEERTRUST: 4
    • A.PHYSICAL: 3
    • A.TIME: 3
    • A.TRAINED_ADMIN: 3
    • A.TRUSTED_ADMIN: 3
  • O:
    • O.APM-VPN: 16
    • O.DISPLAY_BANNER: 5
    • O.FAILOVER: 5
    • O.LTM-TRAFFICMGMT: 13
    • O.PROTECTED_COMMUNICATIONS: 18
    • O.RESIDUAL_INFORMATION_CLEARING: 5
    • O.RESOURCE_AVAILABILITY: 5
    • O.SESSION_LOCK: 6
    • O.SYSTEM_MONITORING: 8
    • O.TOE_ADMINISTRATION: 19
    • O.TSF_SELF_TEST: 4
    • O.VERIFIABLE_UPDATES: 5
  • OE:
    • OE.CONNECTIONS: 3
    • OE.KEYS: 3
    • OE.LDAP: 3
    • OE.LOGSERVER: 3
    • OE.MGMTNET: 3
    • OE.NO_GENERAL_PURPOSE: 3
    • OE.PEERTRUST: 3
    • OE.PHYSICAL: 3
    • OE.TIME: 5
    • OE.TRAINED_ADMIN: 4
    • OE.TRUSTED_ADMIN: 4
  • T:
    • T.ADMIN_ERROR: 5
    • T.RESOURCE_EXHAUSTION: 3
    • T.TSF_FAILURE: 3
    • T.UNAUTHORIZED_ACCESS: 5
    • T.UNAUTHORIZED_UPDATE: 3
    • T.UNDETECTED_ACTIONS: 1
    • T.USER_DATA_REUSE: 3
  • A:
    • A.APPLET: 5
    • A.DELETION: 3
    • A.VERIFICATION: 5
  • D:
    • D.API_DATA: 3
    • D.APP_CODE: 6
    • D.APP_C_DATA: 4
    • D.APP_I_DATA: 4
    • D.ARRAY: 6
    • D.CONFIG: 5
    • D.CRYPTO: 5
    • D.JCS_CODE: 3
    • D.JCS_DATA: 5
    • D.JCS_KEYS: 8
    • D.NB_REMAINTRYGLB: 1
    • D.PIN: 7
    • D.SEC_DATA: 7
    • D.SENSITIVE_DATA: 6
  • O:
    • O.ALARM: 23
    • O.APPLET: 16
    • O.CARD-: 1
    • O.CARD_MANAGEMENT: 66
    • O.CIPHER: 18
    • O.CODE_PKG: 22
    • O.DELETION: 15
    • O.FIREWALL: 64
    • O.GLOBAL_ARRAYS_CONFID: 19
    • O.GLOBAL_ARRAYS_INTEG: 10
    • O.INSTALL: 18
    • O.JAVAOBJECT: 49
    • O.KEY-MNGT: 27
    • O.LOAD: 16
    • O.NATIVE: 15
    • O.OBJ-DELETION: 8
    • O.OPERATE: 39
    • O.PATCH_LOADING: 25
    • O.PIN-: 7
    • O.PIN-MNGT: 17
    • O.REALLOCATION: 17
    • O.RESIDENT_APPLICATION: 24
    • O.RESOURCES: 23
    • O.SCP: 59
    • O.SECURE_COMPARE: 10
    • O.SID: 33
    • O.TRANSACTION: 19
  • OE:
    • OE.APPLET: 8
    • OE.CARD-MANAGEMENT: 1
    • OE.CARD_MANAGEMENT: 3
    • OE.CODE-: 3
    • OE.CODE-EVIDENCE: 18
    • OE.NATIVE: 1
    • OE.SCP: 12
    • OE.VERIFICATION: 38
  • OP:
    • OP.ARRAY_ACCESS: 9
    • OP.CREATE: 7
    • OP.DELETE_APPLET: 4
    • OP.DELETE_PCKG: 3
    • OP.DELETE_PCKG_APPLET: 3
    • OP.FLOW: 3
    • OP.IMPORT_KEY: 2
    • OP.INSTANCE_FIELD: 6
    • OP.INVK_INTERFACE: 7
    • OP.INVK_VIRTUAL: 6
    • OP.JAVA: 5
    • OP.LOCAL_STACK_ACCESS: 3
    • OP.OPERAND_STACK_ACCESS: 3
    • OP.PUT: 6
    • OP.STATIC_FIELD: 3
    • OP.THROW: 5
    • OP.TYPE_ACCESS: 5
  • OSP:
    • OSP.VERIFICATION: 5
  • R:
    • R.JAVA: 9
  • T:
    • T.CONFID-APPLI-DATA: 17
    • T.CONFID-JCS-: 8
    • T.CONFID-JCS-CODE: 4
    • T.CONFID-JCS-DATA: 5
    • T.CONFIGURATION: 5
    • T.CONF_DATA_APPLET: 5
    • T.DELETION: 6
    • T.EXE-CODE: 9
    • T.INSTALL: 6
    • T.INTEG-: 2
    • T.INTEG-APPLI-: 12
    • T.INTEG-APPLI-CODE: 9
    • T.INTEG-APPLI-DATA: 15
    • T.INTEG-JCS-: 7
    • T.INTEG-JCS-CODE: 6
    • T.INTEG-JCS-DATA: 5
    • T.NATIVE: 6
    • T.OBJ-DELETION: 4
    • T.PATCH_LOADING: 5
    • T.PHYSICAL: 4
    • T.RESOURCES: 8
    • T.SID: 18
pdf_data/st_keywords/vendor
  • Microsoft:
    • Microsoft: 2
  • Idemia:
    • IDEMIA: 24
    • Idemia: 2
  • Infineon:
    • Infineon: 1
    • Infineon Technologies AG: 1
  • Morpho:
    • Morpho: 1
  • Oberthur:
    • Oberthur Technologies: 1
pdf_data/st_keywords/eval_facility
  • atsec:
    • atsec: 99
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 14
  • constructions:
    • MAC:
      • HMAC: 11
      • HMAC-SHA-256: 1
      • HMAC-SHA-384: 1
  • AES_competition:
    • AES:
      • AES: 24
  • DES:
    • 3DES:
      • TDES: 14
      • Triple-DES: 2
    • DES:
      • DES: 15
  • constructions:
    • MAC:
      • CMAC: 3
      • HMAC: 3
pdf_data/st_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 11
    • ECDH:
      • ECDH: 7
      • ECDHE: 1
    • ECDSA:
      • ECDSA: 15
  • FF:
    • DH:
      • DH: 6
      • DHE: 2
      • Diffie-Hellman: 2
  • RSA:
    • RSASSAPKCS1-v1_5: 1
  • ECC:
    • ECC:
      • ECC: 5
    • ECDH:
      • ECDH: 3
    • ECDSA:
      • ECDSA: 4
  • FF:
    • DH:
      • Diffie-Hellman: 4
pdf_data/st_keywords/hash_function
  • MD:
    • MD5:
      • MD5: 5
  • SHA:
    • SHA1:
      • SHA-1: 15
    • SHA2:
      • SHA-256: 10
      • SHA-384: 9
      • SHA256: 1
      • SHA384: 1
  • SHA:
    • SHA1:
      • SHA-1: 5
    • SHA2:
      • SHA-2: 1
      • SHA-224: 3
      • SHA-256: 6
      • SHA-384: 4
      • SHA-512: 3
      • SHA256: 4
pdf_data/st_keywords/crypto_scheme
  • KA:
    • Key agreement: 2
  • KEX:
    • Key Exchange: 1
  • MAC:
    • MAC: 1
  • KA:
    • Key Agreement: 3
    • Key agreement: 1
  • MAC:
    • MAC: 2
pdf_data/st_keywords/crypto_protocol
  • IKE:
    • IKE: 2
  • SSH:
    • SSH: 79
  • TLS:
    • SSL:
      • SSL: 16
    • TLS:
      • TLS: 96
      • TLS 1.0: 2
      • TLS 1.1: 4
      • TLS 1.2: 4
      • TLS v1.1: 1
      • TLSv1.1: 4
      • TLSv1.2: 5
  • VPN:
    • VPN: 22
  • PACE:
    • PACE: 1
pdf_data/st_keywords/randomness
  • RNG:
    • RBG: 6
    • RNG: 17
  • RNG:
    • RNG: 15
pdf_data/st_keywords/cipher_mode
  • CBC:
    • CBC: 5
  • GCM:
    • GCM: 2
  • CBC:
    • CBC: 2
  • ECB:
    • ECB: 5
pdf_data/st_keywords/ecc_curve
  • NIST:
    • NIST P-256: 10
    • P-256: 13
    • curve P-256: 1
    • secp256r1: 8
pdf_data/st_keywords/tls_cipher_suite
  • TLS:
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: 1
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: 1
    • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: 1
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: 1
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384: 1
    • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: 1
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: 1
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: 1
    • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: 1
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: 1
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384: 1
    • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: 1
    • TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: 1
    • TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256: 1
    • TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256: 1
    • TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: 1
    • TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384: 1
    • TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384: 1
    • TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: 1
    • TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256: 1
    • TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256: 1
    • TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: 1
    • TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384: 1
    • TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384: 1
    • TLS_RSA_WITH_AES_128_CBC_SHA: 1
    • TLS_RSA_WITH_AES_128_CBC_SHA256: 1
    • TLS_RSA_WITH_AES_128_GCM_SHA256: 1
    • TLS_RSA_WITH_AES_256_CBC_SHA: 1
    • TLS_RSA_WITH_AES_256_CBC_SHA256: 1
    • TLS_RSA_WITH_AES_256_GCM_SHA384: 1
pdf_data/st_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 14
pdf_data/st_keywords/vulnerability
  • CVE:
    • CVE-2017-6164: 1
pdf_data/st_keywords/side_channel_analysis
  • FI:
    • fault injection: 1
    • malfunction: 2
    • physical tampering: 2
  • SCA:
    • DPA: 2
    • SPA: 1
    • physical probing: 4
    • timing attack: 1
pdf_data/st_keywords/cplc_data
  • ICType:
    • IC Type: 1
pdf_data/st_keywords/standard_id
  • BSI:
    • AIS20: 1
  • FIPS:
    • FIPS 140-2: 6
    • FIPS 186-2: 1
    • FIPS PUB 186-3: 3
    • FIPS197: 2
    • FIPS198-1: 2
  • PKCS:
    • PKCS#1: 10
  • RFC:
    • RFC 2246: 1
    • RFC 2616: 1
    • RFC 2818: 1
    • RFC 4253: 2
    • RFC 4346: 1
    • RFC 5246: 1
    • RFC1321: 2
    • RFC2104: 2
    • RFC2616: 2
    • RFC2818: 2
    • RFC3447: 11
    • RFC3526: 2
    • RFC4251: 4
    • RFC4252: 5
    • RFC4253: 9
    • RFC4254: 2
    • RFC4346: 9
    • RFC4492: 7
    • RFC5228: 2
    • RFC5246: 8
    • RFC5280: 3
    • RFC6151: 1
  • X509:
    • X.509: 4
  • BSI:
    • AIS31: 1
  • FIPS:
    • FIPS 140-2: 1
    • FIPS 198: 1
    • FIPS PUB 180-3: 2
    • FIPS PUB 186-3: 1
    • FIPS PUB 197: 5
    • FIPS PUB 46-3: 3
    • FIPS PUB 81: 6
  • ISO:
    • ISO/IEC 14443: 2
    • ISO/IEC 7816: 2
    • ISO/IEC 7816-6: 1
    • ISO/IEC 9796-1: 2
    • ISO/IEC 9797: 8
    • ISO/IEC 9797-1: 1
  • NIST:
    • NIST SP 800-90: 1
  • PKCS:
    • PKCS#1: 3
  • SCP:
    • SCP02: 4
    • SCP03: 4
pdf_data/st_keywords/javacard_version
  • JavaCard:
    • Java Card 3.0.5: 7
pdf_data/st_keywords/javacard_api_const
  • misc:
    • TYPE_ACCESS: 5
pdf_data/st_keywords/javacard_packages
  • com:
    • com.oberthurcs.javacard: 3
    • com.oberthurcs.javacard.sac: 1
    • com.oberthurcs.javacard.sac.sac: 1
  • javacard:
    • javacard.framework: 4
    • javacard.sac: 1
    • javacard.sac.sac: 1
    • javacard.security: 3
  • javacardx:
    • javacardx.crypto: 2
    • javacardx.framework.util: 1
    • javacardx.security: 1
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • TOE, including the fipscardsync utility provided with BIG-IP for convenience, are considered to be out of scope for this evaluation. 7.1.4.3 Certificate validation For TLS sessions, the TOE implements: 1
    • out of scope: 1
  • OutOfScope:
    • a timeout policy that prevent them from being blocked should a card fails to answer. That point is out of scope of this Security Target, though. Finally, the objectives O.SCP.RECOVERY and O.SCP.SUPPORT are: 1
    • out of scope: 1
pdf_data/st_metadata
state/cert/convert_garbage False True
state/cert/pdf_hash Different Different
state/cert/txt_hash Different Different
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different