Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Huawei iTrustee 5.0
NSCIB-CC-19-0016828-CR 		Palo Alto Networks M-100, M-200, M-500, and M-600 Hardware, and Virtual Appliances all running Panorama 9.0
CCEVS-VR-VID-11070-2020
name Huawei iTrustee 5.0 Palo Alto Networks M-100, M-200, M-500, and M-600 Hardware, and Virtual Appliances all running Panorama 9.0
category Operating Systems Network and Network-Related Devices and Systems
scheme NL US
not_valid_after 19.12.2024 17.08.2022
not_valid_before 19.12.2019 17.08.2020
cert_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/cert%20019-016828.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11070-ci.pdf
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/NSCIB-CC-19-0016828-CR.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11070-vr.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/[ST]%20CC%20Huawei%20iTrustee%20Software%20V5.0%20Security%20Target%20V6.0.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11070-st.pdf
manufacturer Huawei Technologies Co., Ltd. Palo Alto Networks, Inc.
manufacturer_web https://www.huawei.com https://www.paloaltonetworks.com/
security_level AVA_TEE.2, EAL2 {}
dgst 5d570a7228cacac4 f9742f73d0a952a3
heuristics/cert_id NSCIB-CC-19-0016828-CR CCEVS-VR-VID-11070-2020
heuristics/cert_lab US
heuristics/extracted_sars ADV_TDS.1, AVA_TEE.2, ADV_ARC.1, AVA_VAN.2, AGD_OPE.1, ADV_FSP.2, AGD_PRE.1 ADV_FSP.1, ALC_CMC.1, AVA_VAN.1, ATE_IND.1, ALC_CMS.1, AGD_OPE.1, AGD_PRE.1
heuristics/extracted_versions 5.0 9.0
heuristics/scheme_data
  • category: Network Device
  • certification_date: 17.08.2020
  • evaluation_facility: Leidos Common Criteria Testing Laboratory
  • expiration_date: 17.08.2022
  • id: CCEVS-VR-VID11070
  • product: Palo Alto Networks M-100, M-200, M-500, and M-600 Hardware, and Virtual Appliances all running Panorama 9.0
  • scheme: US
  • url: https://www.niap-ccevs.org/product/11070
  • vendor: Palo Alto Networks, Inc.
maintenance_updates
protection_profile_links {} https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/CPP_ND_V2.1.pdf
pdf_data/cert_filename cert 019-016828.pdf st_vid11070-ci.pdf
pdf_data/cert_keywords/cc_cert_id
  • NL:
    • CC-19-0016828: 1
  • US:
    • CCEVS-VR-VID11070-2020: 1
pdf_data/cert_keywords/cc_security_level
  • EAL:
    • EAL2: 2
    • EAL2 augmented: 1
pdf_data/cert_keywords/cc_sar
  • AVA:
    • AVA_TEE.2: 1
pdf_data/cert_keywords/vendor
  • Huawei:
    • Huawei: 1
    • Huawei Technologies Co: 1
pdf_data/cert_keywords/eval_facility
  • BrightSight:
    • Brightsight: 1
  • Leidos:
    • Leidos: 1
pdf_data/cert_keywords/tee_name
  • other:
    • iTrustee: 1
pdf_data/cert_keywords/standard_id
  • ISO:
    • ISO/IEC 15408: 2
    • ISO/IEC 18045: 2
pdf_data/cert_metadata
  • /CreationDate: D:20191223131613+01'00'
  • /Creator: NL-ARN-SAL-C
  • /ModDate: D:20191223133219+01'00'
  • /Producer: KONICA MINOLTA bizhub C300i
  • pdf_file_size_bytes: 76186
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
  • /CreationDate: D:20200819132142-04'00'
  • /ModDate: D:20200819132608-04'00'
  • /Producer: iText 2.1.0 (by lowagie.com)
  • pdf_file_size_bytes: 184190
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
pdf_data/report_filename NSCIB-CC-19-0016828-CR.pdf st_vid11070-vr.pdf
pdf_data/report_frontpage
  • NL:
    • cert_id: NSCIB-CC-0016828-CR
    • cert_item: Huawei iTrustee v5.0
    • cert_lab: Brightsight
    • developer: Huawei Technologies Co., Ltd
  • US:
  • NL:
  • US:
    • cert_id: CCEVS-VR-VID11070-2020
    • cert_item: for Palo Alto Networks M-100, M-200, M-500, and M-600 Hardware, and Virtual Appliances all running Panorama 9.0
    • cert_lab: US NIAP
pdf_data/report_keywords/cc_cert_id
  • NL:
    • CC-19-0016828: 1
    • NSCIB-CC-0016828-CR: 12
  • US:
    • CCEVS-VR-VID11070-2020: 1
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 2: 1
    • EAL 2 augmented: 1
    • EAL2: 4
    • EAL2 augmented: 2
    • EAL2+: 1
    • EAL4: 1
pdf_data/report_keywords/cc_sar
  • AVA:
    • AVA_TEE.2: 3
  • ADV:
    • ADV_FSP.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.1: 1
    • ALC_CMS.1: 1
  • ATE:
    • ATE_IND.1: 1
  • AVA:
    • AVA_VAN.1: 1
pdf_data/report_keywords/vendor
  • Huawei:
    • Huawei: 18
    • Huawei Technologies Co: 4
pdf_data/report_keywords/eval_facility
  • BrightSight:
    • Brightsight: 3
  • Leidos:
    • Leidos: 7
pdf_data/report_keywords/crypto_protocol
  • IPsec:
    • IPsec: 1
  • SSH:
    • SSH: 5
    • SSHv2: 1
  • TLS:
    • TLS:
      • TLS: 6
  • VPN:
    • VPN: 1
pdf_data/report_keywords/randomness
  • RNG:
    • RBG: 1
pdf_data/report_keywords/side_channel_analysis
  • other:
    • JIL: 1
    • reverse engineering: 1
pdf_data/report_keywords/tee_name
  • other:
    • TEE: 22
    • iTrustee: 20
pdf_data/report_keywords/standard_id
  • ISO:
    • ISO/IEC 15408: 2
    • ISO/IEC 18045: 2
  • FIPS:
    • FIPS 140-2: 1
pdf_data/report_keywords/certification_process
  • OutOfScope:
    • e., stateful inspection filtering, IPsec VPN gateway, IPS/IDS threat prevention) are not evaluated (out of scope). Only the secure communication channels from Panorama to firewalls and Wildfires are claimed: 1
    • out of scope: 1
pdf_data/report_metadata
  • /Author:
  • /CreationDate:
  • /Creator: PDFCreator Version 1.2.0
  • /Keywords:
  • /ModDate: D:20191223171225+01'00'
  • /Producer: GPL Ghostscript 9.0
  • /Subject:
  • /Title: Certification Report_NSCIB-CC-19-0016828-CR.pdf
  • pdf_file_size_bytes: 305591
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 12
  • /CreationDate: D:20200818101618-04'00'
  • /ModDate: D:20200818101618-04'00'
  • pdf_file_size_bytes: 584455
  • pdf_hyperlinks: http://www.niap-ccevs.org/
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 19
pdf_data/st_filename [ST] CC Huawei iTrustee Software V5.0 Security Target V6.0.pdf st_vid11070-st.pdf
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL 2: 4
    • EAL2: 1
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • AVA:
    • AVA_TEE: 4
    • AVA_TEE.2: 17
    • AVA_VAN: 2
    • AVA_VAN.2: 5
  • ADV:
    • ADV_FSP.1: 1
  • AGD:
    • AGD_OPE: 1
    • AGD_PRE: 1
  • ALC:
    • ALC_CMC.1: 1
    • ALC_CMS.1: 1
  • ASE:
    • ASE_CCL: 1
    • ASE_ECD: 1
    • ASE_INT: 1
    • ASE_OBJ: 1
    • ASE_REQ: 1
    • ASE_SPD: 1
    • ASE_TSS: 1
  • ATE:
    • ATE_IND.1: 1
  • AVA:
    • AVA_VAN.1: 1
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_ARP.1: 10
    • FAU_ARP.1.1: 1
    • FAU_GEN.1: 2
    • FAU_SAA.1: 2
    • FAU_SAR.1: 9
    • FAU_SAR.1.1: 1
    • FAU_SAR.1.2: 1
    • FAU_STG.1: 9
    • FAU_STG.1.1: 1
    • FAU_STG.1.2: 1
  • FCS:
    • FCS_CKM.1: 15
    • FCS_CKM.1.1: 1
    • FCS_CKM.2: 1
    • FCS_CKM.4: 13
    • FCS_CKM.4.1: 1
    • FCS_COP.1: 17
    • FCS_COP.1.1: 1
    • FCS_RNG.1: 1
  • FDP:
    • FDP_ACC: 28
    • FDP_ACC.1: 9
    • FDP_ACF: 24
    • FDP_ACF.1: 12
    • FDP_IFC: 18
    • FDP_IFC.1: 5
    • FDP_IFC.2: 3
    • FDP_IFF: 19
    • FDP_IFF.1: 8
    • FDP_ITC.1: 2
    • FDP_ITC.2: 2
    • FDP_ITT: 9
    • FDP_ITT.1: 2
    • FDP_RIP: 8
    • FDP_RIP.1: 2
    • FDP_ROL: 8
    • FDP_ROL.1: 3
    • FDP_SDI.2: 17
    • FDP_SDI.2.1: 1
    • FDP_SDI.2.2: 1
  • FIA:
    • FIA_ATD.1: 12
    • FIA_ATD.1.1: 1
    • FIA_UID.1: 1
    • FIA_UID.2: 11
    • FIA_UID.2.1: 1
    • FIA_USB.1: 10
    • FIA_USB.1.1: 1
    • FIA_USB.1.2: 1
    • FIA_USB.1.3: 1
  • FMT:
    • FMT_MSA: 47
    • FMT_MSA.1: 5
    • FMT_MSA.3: 10
    • FMT_SMF.1: 23
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 18
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_FLS.1: 15
    • FPT_FLS.1.1: 1
    • FPT_INI.1: 1
    • FPT_ITT: 1
    • FPT_STM: 1
    • FPT_TEE.1: 8
    • FPT_TEE.1.1: 1
    • FPT_TEE.1.2: 1
  • FAU:
    • FAU_GEN: 2
    • FAU_GEN.1: 4
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_GEN.2: 3
    • FAU_GEN.2.1: 1
    • FAU_STG_EXT: 1
    • FAU_STG_EXT.1: 3
    • FAU_STG_EXT.1.1: 1
    • FAU_STG_EXT.1.2: 1
    • FAU_STG_EXT.1.3: 1
  • FCS:
    • FCS_CKM: 3
    • FCS_CKM.1: 5
    • FCS_CKM.1.1: 1
    • FCS_CKM.2: 6
    • FCS_CKM.2.1: 1
    • FCS_CKM.4: 3
    • FCS_CKM.4.1: 1
    • FCS_COP: 19
    • FCS_COP.1: 4
    • FCS_RBG_EXT: 1
    • FCS_RBG_EXT.1: 5
    • FCS_RBG_EXT.1.1: 1
    • FCS_RBG_EXT.1.2: 1
    • FCS_SSHC_EXT.1.5: 1
    • FCS_SSHS_EXT: 1
    • FCS_SSHS_EXT.1: 3
    • FCS_SSHS_EXT.1.1: 1
    • FCS_SSHS_EXT.1.2: 1
    • FCS_SSHS_EXT.1.3: 1
    • FCS_SSHS_EXT.1.4: 1
    • FCS_SSHS_EXT.1.5: 2
    • FCS_SSHS_EXT.1.6: 1
    • FCS_SSHS_EXT.1.7: 1
    • FCS_SSHS_EXT.1.8: 2
    • FCS_TLSC_EXT: 2
    • FCS_TLSC_EXT.1: 3
    • FCS_TLSC_EXT.1.1: 2
    • FCS_TLSC_EXT.1.2: 2
    • FCS_TLSC_EXT.1.3: 1
    • FCS_TLSC_EXT.1.4: 1
    • FCS_TLSC_EXT.2: 2
    • FCS_TLSC_EXT.2.1: 1
    • FCS_TLSC_EXT.2.2: 2
    • FCS_TLSC_EXT.2.3: 1
    • FCS_TLSC_EXT.2.4: 1
    • FCS_TLSC_EXT.2.5: 1
    • FCS_TLSS_EXT: 2
    • FCS_TLSS_EXT.1: 3
    • FCS_TLSS_EXT.1.1: 1
    • FCS_TLSS_EXT.1.2: 1
    • FCS_TLSS_EXT.1.3: 1
    • FCS_TLSS_EXT.2: 2
    • FCS_TLSS_EXT.2.1: 1
    • FCS_TLSS_EXT.2.2: 1
    • FCS_TLSS_EXT.2.3: 1
    • FCS_TLSS_EXT.2.4: 1
    • FCS_TLSS_EXT.2.5: 1
    • FCS_TLSS_EXT.2.6: 1
  • FIA:
    • FIA_AFL: 1
    • FIA_AFL.1: 6
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_PMG_EXT: 1
    • FIA_PMG_EXT.1: 3
    • FIA_PMG_EXT.1.1: 1
    • FIA_UAU: 1
    • FIA_UAU.7: 3
    • FIA_UAU.7.1: 1
    • FIA_UAU_EXT: 1
    • FIA_UAU_EXT.2: 2
    • FIA_UAU_EXT.2.1: 1
    • FIA_UIA_EXT: 1
    • FIA_UIA_EXT.1: 5
    • FIA_UIA_EXT.1.1: 1
    • FIA_UIA_EXT.1.2: 1
  • FMT:
    • FMT_MOF: 4
    • FMT_MOF.1: 1
    • FMT_MTD: 4
    • FMT_MTD.1: 1
    • FMT_SMF: 1
    • FMT_SMF.1: 3
    • FMT_SMF.1.1: 1
    • FMT_SMR: 1
    • FMT_SMR.2: 3
    • FMT_SMR.2.1: 1
    • FMT_SMR.2.2: 1
    • FMT_SMR.2.3: 1
  • FPT:
    • FPT_APW_EXT: 1
    • FPT_APW_EXT.1: 5
    • FPT_APW_EXT.1.1: 1
    • FPT_APW_EXT.1.2: 1
    • FPT_SKP_EXT: 1
    • FPT_SKP_EXT.1: 3
    • FPT_SKP_EXT.1.1: 1
    • FPT_STM_EXT: 1
    • FPT_STM_EXT.1: 4
    • FPT_STM_EXT.1.1: 1
    • FPT_STM_EXT.1.2: 1
    • FPT_TST_EXT: 1
    • FPT_TST_EXT.1: 2
    • FPT_TST_EXT.1.1: 1
    • FPT_TUD_EXT: 1
    • FPT_TUD_EXT.1: 4
    • FPT_TUD_EXT.1.1: 1
    • FPT_TUD_EXT.1.2: 1
    • FPT_TUD_EXT.1.3: 1
  • FTA:
    • FTA_SSL: 2
    • FTA_SSL.3: 4
    • FTA_SSL.3.1: 1
    • FTA_SSL.4: 2
    • FTA_SSL.4.1: 1
    • FTA_SSL_EXT: 1
    • FTA_SSL_EXT.1: 4
    • FTA_SSL_EXT.1.1: 1
    • FTA_TAB: 1
    • FTA_TAB.1: 4
    • FTA_TAB.1.1: 1
  • FTP:
    • FTP_ITC: 1
    • FTP_ITC.1: 4
    • FTP_ITC.1.1: 1
    • FTP_ITC.1.2: 1
    • FTP_ITC.1.3: 1
    • FTP_TRP: 4
    • FTP_TRP.1: 3
pdf_data/st_keywords/cc_claims
  • A:
    • A.INTEGRATION: 5
    • A.PROTECTION_AFTER_DELILVERY: 1
    • A.PROTECTION_AFTER_DELIVER: 1
    • A.PROTECTION_AFTER_DELIVERY: 3
    • A.ROLLBACK: 5
    • A.SECUREBOOT: 5
    • A.SECURE_HARDWARE_PLATFO: 1
    • A.SECURE_HARDWARE_PLATFORM: 4
    • A.TA_DEVELOPMENT: 5
  • O:
    • O.CA_TA_IDENTIFICATION: 11
    • O.INITIALIZATION: 22
    • O.INSTANCE_TIME: 1
    • O.KEYS_USAGE: 14
    • O.OPERATION: 34
    • O.RNG: 1
    • O.RUNTIME_CONFIDENTIALITY: 22
    • O.RUNTIME_INTEGRITY: 24
    • O.TA_AUTHENTICITY: 17
    • O.TA_ISOLATION: 21
    • O.TEE_DATA_PROTECTION: 18
    • O.TEE_ID: 1
    • O.TEE_ISOLATION: 16
    • O.TRUSTED_STORAGE: 26
  • OE:
    • OE.INITIALIZATION: 26
    • OE.INSTANCE_TIME: 6
    • OE.INSTANC_TIME: 1
    • OE.INTEGRATION_CONFIGURATI: 3
    • OE.INTEGRATION_CONFIGURATION: 12
    • OE.PROTECTION_AFTER_DELIVE: 3
    • OE.PROTECTION_AFTER_DELIVERY: 8
    • OE.RNG: 7
    • OE.ROLLBACK: 9
    • OE.SECRETS: 6
    • OE.TA_DEVELOPMENT: 7
    • OE.TEE_ID: 11
    • OE.TRUSTED_HARDWARE: 24
  • OP:
    • OP.EXTRACT_KEY: 4
    • OP.LOAD: 3
    • OP.STORE: 4
    • OP.USE_KEY: 4
  • OSP:
    • OSP: 1
    • OSP.INTEGRATION_CONFIGURAT: 1
    • OSP.INTEGRATION_CONFIGURATION: 4
    • OSP.SECRETS: 5
  • T:
    • T.ABUSE_FUNCT: 15
    • T.CLONE: 12
    • T.FLASH_DUMP: 6
    • T.IMPERSONATION: 8
    • T.PERTURBATION: 14
    • T.RAM: 11
    • T.RNG: 9
    • T.ROGUE_CODE_EXECUTION: 15
    • T.SPY: 9
    • T.STORAGE_CORRUPTION: 12
    • T.TEE_FIRMWARE_DOWNGRADE: 8
  • A:
    • A.PHYSICAL_PROTECTION: 1
  • OE:
    • OE.ADMIN_CREDENTIALS_SECURE: 1
    • OE.NO_GENERAL_PURPOSE: 1
    • OE.NO_THRU_TRAFFIC_PROTECTION: 1
    • OE.PHYSICAL: 1
    • OE.RESIDUAL_INFORMATION: 1
    • OE.TRUSTED_ADMIN: 1
    • OE.UPDATES: 1
pdf_data/st_keywords/vendor
  • Huawei:
    • Huawei: 157
    • Huawei Technologies Co: 77
  • Broadcom:
    • Broadcom: 2
  • Microsoft:
    • Microsoft: 1
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 6
  • DES:
    • 3DES:
      • 3DES: 1
    • DES:
      • DES: 5
  • constructions:
    • MAC:
      • CMAC: 2
      • HMAC: 2
  • AES_competition:
    • AES:
      • AES: 33
      • AES-256: 5
  • DES:
    • 3DES:
      • 3DES: 1
  • constructions:
    • MAC:
      • HMAC: 9
      • HMAC-SHA-256: 7
      • HMAC-SHA-384: 3
      • HMAC-SHA-512: 5
pdf_data/st_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 1
    • ECDH:
      • ECDH: 1
    • ECDSA:
      • ECDSA: 1
  • FF:
    • DH:
      • DH: 1
  • ECC:
    • ECC:
      • ECC: 6
    • ECDH:
      • ECDH: 2
      • ECDHE: 4
    • ECDSA:
      • ECDSA: 21
  • FF:
    • DH:
      • DH: 7
      • DHE: 4
      • Diffie-Hellman: 9
    • DSA:
      • DSA: 4
  • RSA:
    • RSA 2048: 2
    • RSA-2048: 1
pdf_data/st_keywords/hash_function
  • MD:
    • MD5:
      • MD5: 5
  • SHA:
    • SHA1:
      • SHA-1: 3
      • SHA1: 4
    • SHA2:
      • SHA-2: 2
      • SHA224: 4
      • SHA384: 4
  • SHA:
    • SHA1:
      • SHA-1: 4
    • SHA2:
      • SHA-256: 7
      • SHA-384: 5
      • SHA-512: 4
      • SHA256: 7
pdf_data/st_keywords/crypto_scheme
  • MAC:
    • MAC: 2
  • KEX:
    • Key Exchange: 1
  • MAC:
    • MAC: 2
pdf_data/st_keywords/crypto_protocol
  • IPsec:
    • IPsec: 1
  • VPN:
    • VPN: 1
  • IKE:
    • IKE: 1
  • IPsec:
    • IPsec: 3
  • SSH:
    • SSH: 47
    • SSHv2: 7
  • TLS:
    • SSL:
      • SSL: 5
      • SSL 2.0: 4
      • SSL 3.0: 4
    • TLS:
      • TLS: 76
      • TLS 1.0: 4
      • TLS 1.1: 4
      • TLS 1.2: 6
      • TLS1.1: 1
      • TLS1.2: 1
      • TLSv1.1: 3
      • TLSv1.2: 6
  • VPN:
    • VPN: 4
pdf_data/st_keywords/randomness
  • RNG:
    • RNG: 29
  • PRNG:
    • DRBG: 14
  • RNG:
    • RBG: 3
    • RNG: 6
pdf_data/st_keywords/cipher_mode
  • CBC:
    • CBC: 4
  • CCM:
    • CCM: 1
  • CTR:
    • CTR: 2
  • ECB:
    • ECB: 4
  • XTS:
    • XTS: 3
  • CBC:
    • CBC: 7
  • CCM:
    • CCM: 4
  • CTR:
    • CTR: 6
  • GCM:
    • GCM: 11
pdf_data/st_keywords/ecc_curve
  • NIST:
    • P-256: 16
    • P-384: 14
    • P-521: 10
    • secp256r1: 7
    • secp384r1: 7
    • secp521r1: 3
pdf_data/st_keywords/tls_cipher_suite
  • TLS:
    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA: 7
    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: 2
    • TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: 2
    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA: 7
    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: 2
    • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: 2
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: 7
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: 5
    • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: 7
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: 7
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384: 5
    • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: 7
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: 5
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: 5
    • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: 5
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: 5
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384: 5
    • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: 5
    • TLS_RSA_WITH_AES_128_CBC_SHA: 3
    • TLS_RSA_WITH_AES_128_CBC_SHA256: 3
    • TLS_RSA_WITH_AES_256_CBC_SHA: 3
    • TLS_RSA_WITH_AES_256_CBC_SHA256: 2
pdf_data/st_keywords/side_channel_analysis
  • SCA:
    • side-channels: 1
pdf_data/st_keywords/tee_name
  • IBM:
    • SE: 1
  • other:
    • TEE: 397
    • iTrustee: 48
pdf_data/st_keywords/standard_id
  • CC:
    • CCMB-2017-04-001: 1
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
    • CCMB-2017-04-004: 1
  • FIPS:
    • FIPS 180-4: 3
    • FIPS 197: 1
    • FIPS 46: 1
    • FIPS 81: 1
    • FIPS PUB 180-4: 1
    • FIPS PUB 197: 1
    • FIPS PUB 46-3: 1
  • PKCS:
    • PKCS #1: 2
    • PKCS #3: 1
    • PKCS1: 2
  • RFC:
    • RFC 1321: 2
    • RFC 2202: 1
    • RFC 3610: 1
    • RFC 4231: 1
    • RFC2119: 1
  • FIPS:
    • FIPS 140-2: 2
    • FIPS 186-4: 3
    • FIPS PUB 186-4: 17
  • ISO:
    • ISO/IEC 10118-: 1
    • ISO/IEC 14888-3: 2
    • ISO/IEC 18031:2011: 4
    • ISO/IEC 9796-2: 2
  • NIST:
    • NIST SP 800-56A: 2
    • SP 800-90A: 2
  • PKCS:
    • PKCS #1: 2
    • PKCS#12: 2
  • RFC:
    • RFC 2818: 2
    • RFC 2986: 2
    • RFC 3268: 20
    • RFC 3447: 2
    • RFC 3526: 3
    • RFC 3986: 1
    • RFC 4253: 2
    • RFC 4346: 4
    • RFC 4492: 24
    • RFC 5246: 22
    • RFC 5280: 4
    • RFC 5288: 4
    • RFC 5289: 44
    • RFC 5759: 1
    • RFC 5952: 1
    • RFC 6125: 3
    • RFC 6960: 1
  • X509:
    • X.509: 6
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • design and development. Delivering image of iTrustee to device manufacturer. The other phases are out of scope of this ST. The TOE doesn’t provides TA management. CC Huawei iTustee Software Security Target 2: 1
    • out of scope: 1
  • OutOfScope:
    • ISP links to ensure application performance and scale capacity. The SD-WAN capability is considered out of scope for the Panorama evaluation. Automatic Panorama Connection Recovery To ensure that you do not: 1
    • If it is stored via External HSM (operational environment), it is protected by the HSM and is out of scope. The TOE zeroizes (i.e., overwrite) non-persistent cryptographic keys as soon as their associated: 1
    • e., stateful inspection filtering, IPsec VPN gateway, IPS/IDS threat prevention) are not evaluated (out of scope). Only the secure communication channels from Panorama to firewalls and Wildfires are claimed. The: 1
    • extent specified by the security functional requirements: TLS, HTTPS, SSH. The features below are out of scope. Table 2 Excluded Features Feature Description Telnet and HTTP Management Protocols Telnet and HTTP: 1
    • operational environment), it is protected by the HSM and is out of scope. The TOE zeroizes (i.e: 1
    • out of scope: 4
pdf_data/st_metadata
state/cert/pdf_hash Different Different
state/cert/txt_hash Different Different
state/report/convert_garbage True False
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different