Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Ciena Waveserver Ai Rel 1.3
CCEVS-VR-VID-10967-2019
Dencrypt Server System 5.0
CSEC2020003
name Ciena Waveserver Ai Rel 1.3 Dencrypt Server System 5.0
category Network and Network-Related Devices and Systems Mobility
scheme US SE
status archived active
not_valid_after 26.06.2021 09.07.2026
not_valid_before 26.06.2019 09.07.2021
cert_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid10967-ci.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/CCRA%20-%20Dencrypt%20Server%20System%205.0.pdf
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid10967-vr.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/Certification%20Report%20-%20Dencrypt%20Server%20System%205.0.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid10967-st.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ST%20-%20Dencrypt%20Server.pdf
manufacturer Ciena, Inc. Dencrypt A/S
manufacturer_web https://www.ciena.com/ https://www.dencrypt.dk/
security_level {} ALC_FLR.2, EAL2
dgst 811cf8b1c8951221 4733598d7e270be9
heuristics/cert_id CCEVS-VR-VID-10967-2019 CSEC2020003
heuristics/cert_lab US []
heuristics/extracted_sars AGD_OPE.1, ASE_SPD.1, ADV_FSP.1, ASE_REQ.1, ASE_OBJ.1, AVA_VAN.1, ASE_ECD.1, ASE_CCL.1, AGD_PRE.1, ALC_CMS.1, ALC_CMC.1, ASE_INT.1, ASE_TSS.1, ATE_IND.1 ADV_ARC.1, ATE_IND.2, AGD_PRE.1, ATE_FUN.1, AGD_OPE.1, ASE_REQ.2, ADV_TDS.1, ASE_ECD.1, AVA_VAN.2, ASE_OBJ.2, ASE_SPD.1, ATE_COV.1, ASE_INT.1, ADV_FSP.2, ASE_TSS.1, ALC_DEL.1, ALC_CMC.2, ALC_CMS.2, ASE_CCL.1, ALC_FLR.2
heuristics/extracted_versions 1.3 5.0
heuristics/protection_profiles 48ac4778e4272298 {}
protection_profile_links https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/CPP_ND_V2.0E.pdf {}
pdf_data/cert_filename st_vid10967-ci.pdf CCRA - Dencrypt Server System 5.0.pdf
pdf_data/cert_keywords/cc_cert_id
  • US:
    • CCEVS-VR-VID10967-2019: 1
  • SE:
    • CSEC2020003: 1
pdf_data/cert_keywords/cc_security_level
  • EAL:
    • EAL 2: 2
pdf_data/cert_keywords/cc_sar
  • ALC:
    • ALC_FLR: 1
    • ALC_FLR.2: 1
pdf_data/cert_keywords/eval_facility
  • Acumen:
    • Acumen Security: 1
  • atsec:
    • atsec: 1
pdf_data/cert_metadata
  • /CreationDate: D:20190628123807-04'00'
  • /ModDate: D:20190628123807-04'00'
  • /Producer: iText 2.1.0 (by lowagie.com)
  • pdf_file_size_bytes: 179856
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
  • /CreationDate: D:20210905105543+02'00'
  • /Creator: RICOH MP C4504ex
  • /ModDate: D:20210905111124+02'00'
  • /Producer: RICOH MP C4504ex
  • pdf_file_size_bytes: 871869
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
pdf_data/report_filename st_vid10967-vr.pdf Certification Report - Dencrypt Server System 5.0.pdf
pdf_data/report_frontpage
  • US:
    • cert_id: CCEVS-VR-VID10967-2019
    • cert_item: for the Ciena Waveserver Ai Rel 1.3
    • cert_lab: US NIAP
  • US:
pdf_data/report_keywords/cc_cert_id
  • US:
    • CCEVS-VR-VID10967-2019: 1
  • SE:
    • CSEC2020003: 1
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 2: 2
    • EAL 2 augmented: 1
    • EAL2: 1
    • EAL3: 1
pdf_data/report_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_DEL.1: 1
    • ALC_FLR.2: 3
  • ASE:
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.2: 1
pdf_data/report_keywords/cc_sfr
  • FAU:
    • FAU_GEN.1: 1
  • FCS:
    • FCS_CKM.1: 1
    • FCS_CKM.2: 1
    • FCS_CKM.4: 1
    • FCS_COP: 4
    • FCS_DRBG_EXT.1: 1
    • FCS_SSHS_EXT.1: 1
    • FCS_TLSC_EXT.2: 1
    • FCS_TLSS_EXT.2: 1
pdf_data/report_keywords/cc_claims
  • A:
    • A.ADMIN_CREDENTIALS_SECURE: 2
    • A.LIMITED_FUNCTIONALITY: 2
    • A.NO_THRU_TRAFFIC_PROTECTION: 2
    • A.PHYSICAL_PROTECTION: 2
    • A.REGULAR_UPDATES: 2
    • A.RESIDUAL_INFORMATION: 2
    • A.TRUSTED_ADMINISTRATOR: 2
  • OE:
    • OE.ADMIN_CREDENTIALS_SECURE: 1
    • OE.NO_GENERAL_PURPOSE: 1
    • OE.NO_THRU_TRAFFIC_PROTECTION: 1
    • OE.PHYSICAL: 1
    • OE.TRUSTED_ADMIN: 1
    • OE.UPDATES: 1
  • T:
    • T.PASSWORD_CRACKING: 1
    • T.SECURITY_FUNCTIONALITY_COMPROMISE: 1
    • T.SECURITY_FUNCTIONALITY_FAILURE: 1
    • T.UNAUTHORIZED_ADMINISTRATOR_ACCESS: 1
    • T.UNDETECTED_ACTIVITY: 1
    • T.UNTRUSTED_COMMUNICATION_CHANNELS: 1
    • T.UPDATE_COMPROMISE: 1
    • T.WEAK_AUTHENTICATION_ENDPOINTS: 1
    • T.WEAK_CRYPTOGRAPHY: 1
  • A:
    • A.CROSS-SYSTEM: 1
    • A.FIREWALL: 1
    • A.LINK: 1
    • A.NETWORK: 1
    • A.NOEVIL: 1
    • A.PHYSICAL: 1
    • A.REVIEW: 1
    • A.TIME: 1
    • A.TRUSTANCHOR: 1
    • A.USER: 1
    • A.WORKSTATION: 1
  • OSP:
    • OSP.ACCOUNT: 1
    • OSP.CA: 1
    • OSP.CLIENTKEY: 1
    • OSP.MANAGE: 1
    • OSP.PROVISIONING: 1
    • OSP.SERVICE: 1
    • OSP.TUNNEL: 1
  • T:
    • T.BRIDGE: 1
    • T.COMMUNICATION: 1
    • T.MASQUERADE: 1
    • T.UNAUTH: 1
    • T.UNDETECTED: 1
pdf_data/report_keywords/eval_facility
  • Acumen:
    • Acumen Security: 4
  • atsec:
    • atsec: 5
pdf_data/report_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 5
  • constructions:
    • MAC:
      • HMAC: 1
      • HMAC-SHA-256: 1
      • HMAC-SHA-384: 1
      • HMAC-SHA-512: 1
  • AES_competition:
    • AES:
      • AES: 1
pdf_data/report_keywords/asymmetric_crypto
  • ECC:
    • ECDSA:
      • ECDSA: 1
  • FF:
    • DH:
      • Diffie-Hellman: 1
pdf_data/report_keywords/hash_function
  • SHA:
    • SHA2:
      • SHA-256: 1
      • SHA-384: 1
      • SHA-512: 1
pdf_data/report_keywords/crypto_scheme
  • KEX:
    • Key exchange: 1
  • MAC:
    • MAC: 1
pdf_data/report_keywords/crypto_protocol
  • SSH:
    • SSH: 11
    • SSHv2: 1
  • TLS:
    • TLS:
      • TLS: 5
      • TLS v1.2: 7
  • SSH:
    • SSH: 1
  • TLS:
    • TLS:
      • TLS: 20
      • TLS 1.2: 2
  • VPN:
    • VPN: 1
pdf_data/report_keywords/randomness
  • PRNG:
    • DRBG: 1
pdf_data/report_keywords/cipher_mode
  • CBC:
    • CBC: 2
  • CTR:
    • CTR: 2
  • GCM:
    • GCM: 2
pdf_data/report_keywords/ecc_curve
  • NIST:
    • P-256: 2
    • P-384: 2
    • P-521: 2
pdf_data/report_keywords/tls_cipher_suite
  • TLS:
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384: 2
    • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: 2
    • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: 2
    • TLS_RSA_WITH_AES_256_CBC_SHA256: 2
    • TLS_RSA_WITH_AES_256_GCM_SHA384: 2
pdf_data/report_keywords/crypto_library
  • Generic:
    • Crypto Library 2: 1
pdf_data/report_keywords/standard_id
  • FIPS:
    • FIPS PUB 186-4: 2
  • ISO:
    • ISO/IEC 14888-3: 1
    • ISO/IEC 18031:2011: 1
    • ISO/IEC 9796-2: 1
  • PKCS:
    • PKCS #1: 1
  • RFC:
    • RFC 3526: 1
    • RFC 5246: 2
    • RFC 5289: 8
    • RFC 8017: 1
    • RFC2818: 1
  • CC:
    • CCMB-2017-04-001: 1
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
    • CCMB-2017-04-004: 1
  • ISO:
    • ISO/IEC 17025: 2
pdf_data/report_keywords/certification_process
  • OutOfScope:
    • optional) The Web UI management interface is out of scope (All HTTPS and TLSS requirements were evaluated and tested: 1
    • out of scope: 1
    • part of the evaluated configuration: NTP server (optional) The Web UI management interface is out of scope (All HTTPS and TLSS requirements were evaluated and tested) gRPC is disabled 20 8 IT Product: 1
pdf_data/report_metadata
  • /CreationDate: D:20190628114507-04'00'
  • /ModDate: D:20190628114507-04'00'
  • pdf_file_size_bytes: 695875
  • pdf_hyperlinks: http://nvd.nist.gov/
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 27
  • /Author: MAAVA
  • /CreationDate: D:20210712153905+02'00'
  • /ModDate: D:20210712153905+02'00'
  • /Producer: Microsoft: Print To PDF
  • /Title: Microsoft Word - Dencrypt_Server_5.0_Certification Report
  • pdf_file_size_bytes: 974794
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 20
pdf_data/st_filename st_vid10967-st.pdf ST - Dencrypt Server.pdf
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL2: 7
    • EAL2 augmented: 1
    • EAL4+: 1
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_FSP.1: 2
  • AGD:
    • AGD_OPE.1: 2
    • AGD_PRE.1: 2
  • ALC:
    • ALC_CMC.1: 2
    • ALC_CMS.1: 2
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.1: 1
    • ASE_REQ.1: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_IND.1: 2
  • AVA:
    • AVA_VAN.1: 2
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_CMS.2: 1
    • ALC_DEL.1: 1
    • ALC_FLR.2: 4
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.2: 1
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN.1: 5
    • FAU_GEN.1.1: 2
    • FAU_GEN.1.2: 1
    • FAU_GEN.2: 3
    • FAU_GEN.2.1: 1
    • FAU_STG_EXT.1: 3
    • FAU_STG_EXT.1.1: 1
    • FAU_STG_EXT.1.2: 1
    • FAU_STG_EXT.1.3: 1
  • FCS:
    • FCS_CKM.1: 5
    • FCS_CKM.1.1: 1
    • FCS_CKM.2: 6
    • FCS_CKM.2.1: 1
    • FCS_CKM.4: 5
    • FCS_CKM.4.1: 1
    • FCS_COP: 16
    • FCS_COP.1: 4
    • FCS_DRBG_EXT.1: 1
    • FCS_DTLS: 1
    • FCS_RBG_EXT.1: 3
    • FCS_RBG_EXT.1.1: 1
    • FCS_RBG_EXT.1.2: 1
    • FCS_SSHC_EXT.1: 2
    • FCS_SSHC_EXT.1.5: 1
    • FCS_SSHS_EXT.1: 3
    • FCS_SSHS_EXT.1.1: 2
    • FCS_SSHS_EXT.1.2: 3
    • FCS_SSHS_EXT.1.3: 2
    • FCS_SSHS_EXT.1.4: 5
    • FCS_SSHS_EXT.1.5: 6
    • FCS_SSHS_EXT.1.6: 3
    • FCS_SSHS_EXT.1.7: 3
    • FCS_SSHS_EXT.1.8: 2
    • FCS_TLSC_EXT: 1
    • FCS_TLSC_EXT.1.1: 1
    • FCS_TLSC_EXT.2: 4
    • FCS_TLSC_EXT.2.1: 2
    • FCS_TLSC_EXT.2.2: 1
    • FCS_TLSC_EXT.2.3: 1
    • FCS_TLSC_EXT.2.4: 2
    • FCS_TLSC_EXT.2.5: 2
    • FCS_TLSS_EXT.2: 4
    • FCS_TLSS_EXT.2.1: 2
    • FCS_TLSS_EXT.2.2: 1
    • FCS_TLSS_EXT.2.3: 2
    • FCS_TLSS_EXT.2.4: 2
    • FCS_TLSS_EXT.2.5: 2
    • FCS_TLSS_EXT.2.6: 2
  • FIA:
    • FIA_AFL.1: 5
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_PMG_EXT.1: 3
    • FIA_PMG_EXT.1.1: 1
    • FIA_UAU.7: 3
    • FIA_UAU.7.1: 1
    • FIA_UAU_EXT.2: 3
    • FIA_UAU_EXT.2.1: 1
    • FIA_UIA_EXT.1: 3
    • FIA_UIA_EXT.1.1: 1
    • FIA_UIA_EXT.1.2: 1
  • FMT:
    • FMT_MOF: 2
    • FMT_MOF.1: 2
    • FMT_MTD: 3
    • FMT_MTD.1.1: 1
    • FMT_SMF.1: 3
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 1
    • FMT_SMR.2: 2
    • FMT_SMR.2.1: 1
    • FMT_SMR.2.2: 1
    • FMT_SMR.2.3: 1
  • FPT:
    • FPT_APW_EXT.1: 3
    • FPT_APW_EXT.1.1: 1
    • FPT_APW_EXT.1.2: 1
    • FPT_SKP_EXT.1: 3
    • FPT_SKP_EXT.1.1: 1
    • FPT_STM.1: 2
    • FPT_STM_EXT.1: 2
    • FPT_STM_EXT.1.1: 1
    • FPT_STM_EXT.1.2: 1
    • FPT_TST_EXT.1: 3
    • FPT_TST_EXT.1.1: 1
    • FPT_TUD_EXT.1: 3
    • FPT_TUD_EXT.1.1: 1
    • FPT_TUD_EXT.1.2: 1
    • FPT_TUD_EXT.1.3: 1
  • FTA:
    • FTA_SSL.3: 3
    • FTA_SSL.3.1: 1
    • FTA_SSL.4: 3
    • FTA_SSL.4.1: 1
    • FTA_SSL_EXT.1: 3
    • FTA_SSL_EXT.1.1: 1
    • FTA_TAB.1: 5
    • FTA_TAB.1.1: 1
  • FTP:
    • FTP_ITC.1: 4
    • FTP_ITC.1.1: 1
    • FTP_ITC.1.2: 1
    • FTP_ITC.1.3: 1
    • FTP_TRP: 2
    • FTP_TRP.1: 4
  • FAU:
    • FAU_GEN: 4
    • FAU_GEN.1: 8
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_SAR.1: 9
    • FAU_SAR.1.1: 1
    • FAU_SAR.1.2: 1
    • FAU_SAR.2: 4
    • FAU_SAR.2.1: 1
    • FAU_STG.2: 5
    • FAU_STG.2.1: 1
    • FAU_STG.2.2: 1
    • FAU_STG.2.3: 1
  • FCS:
    • FCS_CKM: 52
    • FCS_CKM.1: 18
    • FCS_CKM.1.1: 2
    • FCS_CKM.2: 10
    • FCS_CKM.2.1: 3
    • FCS_CKM.4: 24
    • FCS_CKM.4.1: 1
    • FCS_COP: 95
    • FCS_COP.1: 2
    • FCS_COP.1.1: 6
    • FCS_RBG_EXT.1: 12
    • FCS_RNG: 2
    • FCS_RNG.1: 18
    • FCS_RNG.1.1: 2
    • FCS_RNG.1.2: 2
    • FCS_SSHS_EXT: 2
    • FCS_SSHS_EXT.1: 13
    • FCS_SSHS_EXT.1.1: 2
    • FCS_SSHS_EXT.1.2: 1
    • FCS_SSHS_EXT.1.3: 2
    • FCS_SSHS_EXT.1.4: 2
    • FCS_SSHS_EXT.1.5: 2
    • FCS_SSHS_EXT.1.6: 2
    • FCS_SSHS_EXT.1.7: 2
    • FCS_SSHS_EXT.1.8: 2
    • FCS_TLSC_EXT: 2
    • FCS_TLSC_EXT.1: 7
    • FCS_TLSC_EXT.1.1: 3
    • FCS_TLSC_EXT.1.2: 1
    • FCS_TLSC_EXT.1.3: 1
    • FCS_TLSC_EXT.1.4: 1
    • FCS_TLSC_EXT.2: 10
    • FCS_TLSC_EXT.2.1: 2
    • FCS_TLSC_EXT.2.2: 2
    • FCS_TLSC_EXT.2.3: 2
    • FCS_TLSC_EXT.2.4: 2
    • FCS_TLSC_EXT.2.5: 2
    • FCS_TLSS_EXT: 3
    • FCS_TLSS_EXT.1: 17
    • FCS_TLSS_EXT.1.1: 4
    • FCS_TLSS_EXT.1.2: 2
    • FCS_TLSS_EXT.1.3: 2
    • FCS_TLSS_EXT.2: 19
    • FCS_TLSS_EXT.2.1: 4
    • FCS_TLSS_EXT.2.2: 2
    • FCS_TLSS_EXT.2.3: 2
    • FCS_TLSS_EXT.2.4: 3
    • FCS_TLSS_EXT.2.5: 2
    • FCS_TLSS_EXT.2.6: 2
    • FCS_TLS_EXT.1.1: 2
  • FDP:
    • FDP_ACC: 1
    • FDP_ACC.1: 1
    • FDP_ACF: 1
    • FDP_IFC.1: 1
    • FDP_ITC.1: 10
    • FDP_ITC.2: 19
    • FDP_ITC.2.1: 1
    • FDP_ITC.2.2: 1
    • FDP_ITC.2.3: 1
    • FDP_ITC.2.4: 1
    • FDP_ITC.2.5: 1
  • FIA:
    • FIA_UAU.2: 7
    • FIA_UAU.2.1: 1
    • FIA_UAU.4: 4
    • FIA_UAU.4.1: 1
    • FIA_UID.1: 1
    • FIA_UID.2: 7
    • FIA_UID.2.1: 1
  • FMT:
    • FMT_MTD: 1
    • FMT_MTD.1: 5
    • FMT_MTD.1.1: 1
    • FMT_SMF.1: 7
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 6
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_STM.1: 1
    • FPT_TDC.1: 1
  • FTP:
    • FTP_ITC.1: 21
    • FTP_ITC.1.1: 1
    • FTP_ITC.1.2: 1
    • FTP_ITC.1.3: 1
    • FTP_TRP.1: 2
pdf_data/st_keywords/cc_claims
  • A:
    • A.ADMIN_CREDENTIALS_SECURE: 2
    • A.LIMITED_FUNCTIONALITY: 2
    • A.NO_THRU_TRAFFIC_PROTECTION: 2
    • A.PHYSICAL_PROTECTION: 2
    • A.REGULAR_UPDATES: 2
    • A.RESIDUAL_INFORMATION: 2
    • A.TRUSTED_ADMINISTRATOR: 2
  • OE:
    • OE.ADMIN_CREDENTIALS_SECURE: 3
    • OE.NO_GENERAL_PURPOSE: 3
    • OE.NO_THRU_TRAFFIC_PROTECTION: 3
    • OE.PHYSICAL: 3
    • OE.RESIDUAL_INFORMATION: 2
    • OE.TRUSTED_ADMIN: 3
    • OE.UPDATES: 3
  • T:
    • T.PASSWORD_CRACKING: 1
    • T.SECURITY_FUNCTIONALITY_COMPROMISE: 1
    • T.SECURITY_FUNCTIONALITY_FAILURE: 1
    • T.UNAUTHORIZED_ADMINISTRATOR_ACCESS: 1
    • T.UNDETECTED_ACTIVITY: 1
    • T.UNTRUSTED_COMMUNICATION_CHANNELS: 1
    • T.UPDATE_COMPROMISE: 1
    • T.WEAK_AUTHENTICATION_ENDPOINTS: 1
    • T.WEAK_CRYPTOGRAPHY: 1
  • A:
    • A.CROSS-SYSTEM: 3
    • A.FIREWALL: 2
    • A.LINK: 3
    • A.NETWORK: 3
    • A.NOEVIL: 2
    • A.PHYSICAL: 3
    • A.REVIEW: 2
    • A.TIME: 3
    • A.TRUSTANCHOR: 2
    • A.USER: 3
    • A.WORKSTATION: 2
  • O:
    • O.ACCESS: 5
    • O.AUDIT: 8
    • O.BRDIGE: 1
    • O.BRIDGE: 4
    • O.CA: 5
    • O.CHANNEL: 6
    • O.CLIENTKEY: 5
    • O.MANAGE: 5
    • O.PROVISIONING: 6
    • O.PUSH: 5
    • O.REMOTE: 5
    • O.REVIEW: 6
    • O.SERVICE: 5
    • O.TUNNEL: 5
  • OE:
    • OE.CROSS-SYSTEM: 3
    • OE.FIREWALL: 3
    • OE.LINK: 5
    • OE.NETWORK: 3
    • OE.NOEVIL: 3
    • OE.PHYSICAL: 3
    • OE.REVIEW: 5
    • OE.TIME: 6
    • OE.TRUSTANCHOR: 4
    • OE.USER: 3
    • OE.WORKSTATION: 3
  • OSP:
    • OSP.ACCOUNT: 2
    • OSP.CA: 3
    • OSP.CLIENTKEY: 2
    • OSP.MANAGE: 3
    • OSP.PROVISIONING: 3
    • OSP.SERVICE: 2
    • OSP.TUNNEL: 3
  • T:
    • T.BRIDGE: 3
    • T.COMMUNICATION: 3
    • T.MASQUERADE: 2
    • T.UNAUTH: 3
    • T.UNDETECTED: 2
pdf_data/st_keywords/eval_facility
  • Acumen:
    • Acumen Security: 2
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 21
  • constructions:
    • MAC:
      • HMAC: 7
      • HMAC-SHA-256: 1
      • HMAC-SHA-384: 2
      • HMAC-SHA-512: 2
  • AES_competition:
    • AES:
      • AES: 26
      • AES-256: 6
  • constructions:
    • MAC:
      • HMAC: 1
      • HMAC-SHA-384: 1
      • HMAC-SHA-512: 1
pdf_data/st_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 5
    • ECDH:
      • ECDH: 2
      • ECDHE: 1
    • ECDSA:
      • ECDSA: 12
  • FF:
    • DH:
      • DH: 1
      • DHE: 1
      • Diffie-Hellman: 10
    • DSA:
      • DSA: 1
  • ECC:
    • ECDH:
      • ECDHE: 1
  • FF:
    • DH:
      • DH: 2
      • Diffie-Hellman: 8
  • RSA:
    • RSA 4096: 2
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA2:
      • SHA-256: 4
      • SHA-384: 2
      • SHA-512: 6
      • SHA256: 4
      • SHA384: 2
      • SHA512: 2
  • SHA:
    • SHA2:
      • SHA384: 1
      • SHA512: 2
pdf_data/st_keywords/crypto_scheme
  • KEX:
    • Key exchange: 1
  • MAC:
    • MAC: 5
  • MAC:
    • MAC: 5
pdf_data/st_keywords/crypto_protocol
  • SSH:
    • SSH: 45
    • SSHv2: 2
  • TLS:
    • DTLS:
      • DTLS: 3
    • SSL:
      • SSL: 3
      • SSL 2.0: 2
      • SSL 3.0: 2
    • TLS:
      • TLS: 58
      • TLS 1.0: 2
      • TLS 1.1: 2
      • TLS 1.2: 2
      • TLS v1.2: 12
      • TLS1.1: 1
      • TLS1.2: 1
  • SSH:
    • SSH: 73
    • SSHv2: 1
  • TLS:
    • DTLS:
      • DTLS: 2
    • SSL:
      • SSL: 9
      • SSL 2.0: 4
      • SSL 3.0: 4
    • TLS:
      • TLS: 147
      • TLS 1.0: 4
      • TLS 1.1: 8
      • TLS 1.2: 20
      • TLS v1.0: 2
      • TLS v1.2: 1
  • VPN:
    • VPN: 2
pdf_data/st_keywords/randomness
  • PRNG:
    • DRBG: 4
  • RNG:
    • RBG: 1
    • RNG: 5
  • TRNG:
    • TRNG: 2
  • RNG:
    • RNG: 11
pdf_data/st_keywords/cipher_mode
  • CBC:
    • CBC: 7
  • CTR:
    • CTR: 6
  • GCM:
    • GCM: 7
  • CFB:
    • CFB: 2
  • GCM:
    • GCM: 7
pdf_data/st_keywords/ecc_curve
  • NIST:
    • P-256: 10
    • P-384: 10
    • P-521: 10
    • secp256r1: 4
    • secp384r1: 4
    • secp521r1: 4
  • NIST:
    • secp256r1: 4
    • secp384r1: 9
    • secp521r1: 4
pdf_data/st_keywords/tls_cipher_suite
  • TLS:
    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: 1
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384: 6
    • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: 6
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384: 6
    • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: 6
    • TLS_RSA_WITH_AES_256_CBC_SHA256: 4
    • TLS_RSA_WITH_AES_256_GCM_SHA384: 6
  • TLS:
    • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: 4
pdf_data/st_keywords/crypto_library
  • Generic:
    • Crypto Library 2: 1
  • OpenSSL:
    • OpenSSL: 9
pdf_data/st_keywords/standard_id
  • FIPS:
    • FIPS PUB 186-4: 13
  • ISO:
    • ISO/IEC 10118-: 1
    • ISO/IEC 14888-3: 3
    • ISO/IEC 18031:2011: 4
    • ISO/IEC 9796-2: 3
  • PKCS:
    • PKCS #1: 3
    • PKCS#12: 1
  • RFC:
    • RFC 2818: 4
    • RFC 2986: 2
    • RFC 3526: 5
    • RFC 4253: 2
    • RFC 5246: 9
    • RFC 5280: 8
    • RFC 5288: 6
    • RFC 5289: 24
    • RFC 6125: 2
    • RFC 6187: 1
    • RFC 6960: 4
    • RFC 8017: 4
    • RFC2818: 1
    • RFC6125: 1
  • X509:
    • X.509: 17
  • CC:
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
    • CCMB-2017-04-004: 1
  • FIPS:
    • FIPS 140-2: 1
    • FIPS PUB 186-4: 2
    • FIPS186-4: 2
    • FIPS197: 4
  • NIST:
    • NIST SP 800-38A: 2
    • NIST SP 800-38D: 3
    • NIST SP 800-56A: 1
  • PKCS:
    • PKCS #1: 2
  • RFC:
    • RFC 2818: 3
    • RFC 4253: 5
    • RFC 4346: 4
    • RFC 5246: 7
    • RFC 5280: 2
    • RFC 5289: 3
    • RFC 5647: 1
    • RFC 6125: 5
    • RFC3261: 1
    • RFC3711: 1
    • RFC4252: 5
    • RFC4253: 8
    • RFC5246: 2
    • RFC5289: 1
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • optional) • The Web UI management interface is out of scope (All HTTPS and TLSS requirements were evaluated and tested: 1
    • out of scope: 1
    • part of the evaluated configuration: • NTP server (optional) • The Web UI management interface is out of scope (All HTTPS and TLSS requirements were evaluated and tested) • gRPC is disabled 1.8 TOE: 1
  • OutOfScope:
    • indicated as “REQUIRED” but not listed in the later elements of this component are implemented is out of scope of the evaluation activity for this requirement. RFC 5647 only applies to the RFC compliant: 1
    • out of scope: 1
pdf_data/st_metadata
state/cert/pdf_hash Different Different
state/cert/txt_hash Different Different
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different