Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Cisco AnyConnect Secure Mobility Client v4.10 for Red Hat Enterprise Linux 8.1
CCEVS-VR-11289-2022 		L4Re Secure Separation Kernel CC Version 1.0.1
BSI-DSZ-CC-1177-2025
name Cisco AnyConnect Secure Mobility Client v4.10 for Red Hat Enterprise Linux 8.1 L4Re Secure Separation Kernel CC Version 1.0.1
category Other Devices and Systems Operating Systems
scheme US DE
status archived active
not_valid_after 18.07.2024 18.02.2030
not_valid_before 18.07.2022 18.02.2025
cert_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11289-ci.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1177c_pdf.pdf
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11289-vr.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1177a_pdf.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11289-st.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1177b_pdf.pdf
manufacturer Cisco Systems, Inc. Kernkonzept GmbH
manufacturer_web https://www.cisco.com https://kernkonzept.com
security_level {} EAL4+, ALC_FLR.3
dgst 85cb3ef6d43eeee8 7929b54ea442ff99
heuristics/cert_id CCEVS-VR-11289-2022 BSI-DSZ-CC-1177-2025
heuristics/cert_lab US BSI
heuristics/extracted_sars ASE_CCL.1, AGD_PRE.1, AVA_VAN.1, ALC_CMC.1, AGD_OPE.1, ATE_IND.1, ASE_INT.1, ASE_ECD.1, ASE_OBJ.1, ASE_REQ.1, ALC_CMS.1, ASE_TSS.1, ALC_TSU_EXT.1, ADV_FSP.1 ADV_TDS.3, AVA_VAN.3, ALC_FLR.3, ASE_CCL.1, ATE_FUN.1, ASE_OBJ.2, ASE_INT.1, ALC_CMC.4, ASE_REQ.2, AGD_PRE.1, ATE_IND.2, ATE_DPT.1, ASE_ECD.1, ADV_IMP.1, ALC_LCD.1, ASE_SPD.1, ATE_COV.2, ALC_DVS.1, ALC_TAT.1, AGD_OPE.1, ALC_CMS.4, ALC_DEL.1, ASE_TSS.1, ADV_FSP.4, ADV_ARC.1
heuristics/extracted_versions 4.10, 8.1 1.0.1
heuristics/scheme_data
  • api_url: https://www.niap-ccevs.org/api/project/product/pcl_products/11289/
  • categories: ['Application Software', ' Virtual Private Network']
  • category: Application Software
  • certification_date: 18.07.2022
  • evaluation_facility: Gossamer Security Solutions
  • expiration_date: 18.07.2024
  • id: CCEVS-VR-VID11289
  • product: Cisco AnyConnect Secure Mobility Client v4.10 for Red Hat Enterprise Linux 8.1
  • scheme: US
  • url: https://www.niap-ccevs.org/products/11289
  • vendor: Cisco Systems, Inc.
heuristics/protection_profiles a1cc4a4e079f4d1f, 0525a97b2c253a6b {}
protection_profile_links https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/PP_APP_v1.3.pdf, https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/MOD_VPN_CLI_v2.3.pdf {}
pdf_data/cert_filename st_vid11289-ci.pdf 1177c_pdf.pdf
pdf_data/cert_keywords/cc_cert_id
  • US:
    • CCEVS-VR-VID11289-2022: 1
  • DE:
    • BSI-DSZ-CC-1177-2025: 1
pdf_data/cert_keywords/cc_security_level
  • EAL:
    • EAL 2: 1
  • EAL:
    • EAL 2: 1
    • EAL 4: 1
    • EAL 4 augmented: 1
pdf_data/cert_keywords/cc_sar
  • ALC:
    • ALC_FLR: 1
  • ALC:
    • ALC_FLR: 1
    • ALC_FLR.3: 1
pdf_data/cert_keywords/vendor
  • Cisco:
    • Cisco: 1
    • Cisco Systems, Inc: 1
pdf_data/cert_keywords/eval_facility
  • Gossamer:
    • Gossamer Security: 1
pdf_data/cert_keywords/crypto_protocol
  • VPN:
    • VPN: 1
pdf_data/cert_keywords/standard_id
  • ISO:
    • ISO/IEC 15408: 2
    • ISO/IEC 18045: 2
pdf_data/cert_metadata
  • /CreationDate: D:20220726163231-04'00'
  • /ModDate: D:20220726163231-04'00'
  • /Producer: iText 2.1.0 (by lowagie.com)
  • pdf_file_size_bytes: 181880
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
  • /Author: Bundesamt für Sicherheit in der Informationstechnik
  • /Keywords: "Common Criteria, Certification, Zertifizierung, Kernkonzept, Mikrokernel L4Re"
  • /Subject: Common Criteria, Certification, Zertifizierung, Kernkonzept, Mikrokernel L4Re
  • /Title: Urkunde BSI-DSZ-CC-1177-2025
  • pdf_file_size_bytes: 230300
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
pdf_data/report_filename st_vid11289-vr.pdf 1177a_pdf.pdf
pdf_data/report_frontpage
  • DE:
  • US:
    • cert_id: CCEVS-VR-11289-2022
    • cert_item: Cisco Systems, Inc. AnyConnect Secure Mobility Client v4.10 for Red Hat Enterprise Linux 8.1
    • cert_lab: US NIAP
  • DE:
    • cert_id: BSI-DSZ-CC-1177-2025
    • cert_item: L4Re Secure Separation Kernel CC Version 1.0.1
    • cert_lab: BSI
    • developer: Kernkonzept GmbH
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
  • US:
pdf_data/report_keywords/cc_cert_id
  • US:
    • CCEVS-VR-11289-2022: 1
  • DE:
    • BSI-DSZ-CC-1177-2025: 12
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 1: 1
    • EAL 2: 3
    • EAL 4: 5
    • EAL 4 augmented: 3
pdf_data/report_keywords/cc_sar
  • ALC:
    • ALC_FLR: 3
    • ALC_FLR.3: 4
pdf_data/report_keywords/cc_claims
  • OE:
    • OE.HARDWARE: 1
    • OE.NOEVIL: 1
    • OE.PHYSICAL: 1
pdf_data/report_keywords/vendor
  • Cisco:
    • Cisco: 18
    • Cisco Systems, Inc: 4
  • NXP:
    • NXP: 1
pdf_data/report_keywords/eval_facility
  • Gossamer:
    • Gossamer Security: 4
  • atsec:
    • atsec: 3
pdf_data/report_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 1
pdf_data/report_keywords/asymmetric_crypto
  • FF:
    • DH:
      • Diffie-Hellman: 1
pdf_data/report_keywords/hash_function
  • SHA:
    • SHA2:
      • SHA-2: 1
pdf_data/report_keywords/crypto_protocol
  • IKE:
    • IKE: 2
    • IKEv2: 1
  • IPsec:
    • IPsec: 3
  • VPN:
    • VPN: 16
pdf_data/report_keywords/randomness
  • PRNG:
    • DRBG: 1
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7148: 1
pdf_data/report_keywords/standard_id
  • X509:
    • X.509: 1
  • BSI:
    • AIS 1: 1
    • AIS 14: 1
    • AIS 19: 1
    • AIS 23: 1
    • AIS 32: 1
  • ISO:
    • ISO/IEC 15408: 4
    • ISO/IEC 17065: 2
    • ISO/IEC 18045: 4
pdf_data/report_keywords/certification_process
  • ConfidentialDocument:
    • 7] Final Evaluation Technical Report, Version 2, 2025-02-04, atsec information security GmbH, (confidential document) 7 specifically • AIS 1 Anforderungen an Aufbau und Inhalt von Einzelprüfberichten für Evaluationen: 1
    • Separation Kernel CC, Version 1.0.1 Konfigurationsliste, Version 1.0, 2024-11-18, Kernkonzept GmbH (confidential document) [9] L4Re Secure Boot Guidance, 2022-10-07, Kernkonzept GmbH [10] L4Re Configuration Guidance: 1
    • being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification: 1
pdf_data/report_metadata
  • /Author: comptont
  • /CreationDate: D:20220726161454-04'00'
  • /Creator: Microsoft® Word for Microsoft 365
  • /ModDate: D:20220726161454-04'00'
  • /Producer: Microsoft® Word for Microsoft 365
  • pdf_file_size_bytes: 240622
  • pdf_hyperlinks: http://www.kb.cert.org/vuls/, https://web.nvd.nist.gov/view/vuln/search
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 13
pdf_data/st_filename st_vid11289-st.pdf 1177b_pdf.pdf
pdf_data/st_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-1177: 2
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL 4: 1
    • EAL4: 2
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_FSP.1: 2
  • AGD:
    • AGD_OPE.1: 2
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.1: 2
    • ALC_CMS.1: 1
    • ALC_TSU_EXT.1: 3
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 2
    • ASE_OBJ.1: 2
    • ASE_REQ.1: 2
    • ASE_TSS.1: 1
  • ATE:
    • ATE_IND.1: 2
  • AVA:
    • AVA_VAN.1: 2
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.4: 1
    • ADV_IMP.1: 1
    • ADV_TDS.3: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.4: 1
    • ALC_CMS.4: 1
    • ALC_DEL.1: 1
    • ALC_DVS.1: 1
    • ALC_FLR.3: 6
    • ALC_LCD.1: 1
    • ALC_TAT.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.2: 1
    • ATE_DPT.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.3: 1
pdf_data/st_keywords/cc_sfr
  • FCS:
    • FCS_CKM: 2
    • FCS_CKM.1: 7
    • FCS_CKM.1.1: 2
    • FCS_CKM.2: 5
    • FCS_CKM.2.1: 2
    • FCS_CKM_EXT.1: 5
    • FCS_CKM_EXT.1.1: 2
    • FCS_CKM_EXT.2: 5
    • FCS_CKM_EXT.2.1: 1
    • FCS_CKM_EXT.4: 4
    • FCS_CKM_EXT.4.1: 1
    • FCS_COP: 1
    • FCS_COP.1: 20
    • FCS_COP.1.1: 4
    • FCS_RBG_EXT.1: 8
    • FCS_RBG_EXT.1.1: 1
    • FCS_STO_EXT.1: 4
    • FCS_STO_EXT.1.1: 1
  • FDP:
    • FDP_DAR_EXT.1: 4
    • FDP_DAR_EXT.1.1: 1
    • FDP_DEC_EXT.1: 4
    • FDP_DEC_EXT.1.1: 1
    • FDP_DEC_EXT.1.2: 1
    • FDP_NET_EXT.1: 4
    • FDP_NET_EXT.1.1: 1
    • FDP_RIP.2: 4
    • FDP_RIP.2.1: 1
  • FMT:
    • FMT_CFG_EXT.1: 5
    • FMT_CFG_EXT.1.1: 1
    • FMT_CFG_EXT.1.2: 1
    • FMT_MEC_EXT.1: 5
    • FMT_MEC_EXT.1.1: 1
    • FMT_SMF: 4
    • FMT_SMF.1: 5
    • FMT_SMF.1.1: 1
  • FPR:
    • FPR_ANO_EXT.1: 4
    • FPR_ANO_EXT.1.1: 1
  • FPT:
    • FPT_AEX_EXT.1: 4
    • FPT_AEX_EXT.1.1: 2
    • FPT_AEX_EXT.1.2: 1
    • FPT_AEX_EXT.1.3: 2
    • FPT_AEX_EXT.1.4: 1
    • FPT_AEX_EXT.1.5: 1
    • FPT_API_EXT.1: 4
    • FPT_API_EXT.1.1: 1
    • FPT_IDV_EXT.1: 4
    • FPT_IDV_EXT.1.1: 1
    • FPT_LIB_EXT.1: 4
    • FPT_LIB_EXT.1.1: 1
    • FPT_TST_EXT: 3
    • FPT_TST_EXT.1: 3
    • FPT_TUD_EXT.1: 4
    • FPT_TUD_EXT.1.1: 1
    • FPT_TUD_EXT.1.2: 1
    • FPT_TUD_EXT.1.3: 1
    • FPT_TUD_EXT.1.4: 1
    • FPT_TUD_EXT.1.5: 1
    • FPT_TUD_EXT.2: 2
    • FPT_TUD_EXT.2.1: 1
    • FPT_TUD_EXT.2.2: 1
    • FPT_TUD_EXT.2.3: 1
  • FTP:
    • FTP_DIT_EXT.1: 5
    • FTP_DIT_EXT.1.1: 1
  • FDP:
    • FDP_ACC: 30
    • FDP_ACC.1: 4
    • FDP_ACC.2: 8
    • FDP_ACF: 30
    • FDP_ACF.1: 20
    • FDP_IFC.2: 7
    • FDP_IFC.2.1: 1
    • FDP_IFC.2.2: 1
    • FDP_IFF.1: 6
    • FDP_IFF.1.1: 1
    • FDP_IFF.1.2: 1
    • FDP_IFF.1.3: 1
    • FDP_IFF.1.4: 1
    • FDP_IFF.1.5: 1
    • FDP_RIP.1: 5
    • FDP_RIP.1.1: 1
  • FIA:
    • FIA_UID.2: 6
    • FIA_UID.2.1: 1
  • FMT:
    • FMT_MSA: 39
    • FMT_MSA.1: 5
    • FMT_MSA.3: 15
    • FMT_MTD: 5
    • FMT_MTD.1: 1
    • FMT_SMF: 1
    • FMT_SMF.1: 5
    • FMT_SMF.1.1: 1
    • FMT_SMR: 6
    • FMT_SMR.1: 6
  • FPR:
    • FPR_UNO.1: 5
    • FPR_UNO.1.1: 1
pdf_data/st_keywords/cc_claims
  • A:
    • A.NO_TOE_BYPASS: 1
    • A.PHYSICAL: 1
    • A.PROPER_ADMIN: 1
    • A.PROPER_USER: 1
    • A.TRUSTED_CONFIG: 1
  • O:
    • O.AUTHENTICATION: 1
    • O.CRYPTOGRAPHIC_FUNCTIONS: 1
    • O.INTEGRITY: 1
    • O.KNOWN_STATE: 1
    • O.MANAGEMENT: 1
    • O.NONDISCLOSURE: 1
    • O.PROTECTED_COMMS: 1
    • O.PROTECTED_STORAGE: 1
    • O.QUALITY: 1
  • OE:
    • OE.NO_TOE_BYPASS: 1
    • OE.PHYSICAL: 1
    • OE.PLATFORM: 1
    • OE.PROPER_ADMIN: 1
    • OE.PROPER_USER: 1
    • OE.TRUSTED_CONFIG: 1
  • T:
    • T.LOCAL_ATTACK: 1
    • T.NETWORK_ATTACK: 1
    • T.NETWORK_EAVESDROP: 1
    • T.PHYSICAL_ACCESS: 1
    • T.TSF_CONFIGURATION: 1
    • T.TSF_FAILURE: 1
    • T.UNAUTHORIZED_ACCESS: 1
    • T.USER_DATA_REUSE: 1
  • A:
    • A.ENVIRONMENT: 2
    • A.NOEVIL: 2
    • A.PHYSICAL: 2
  • O:
    • O.AVAILABILITY: 11
    • O.CONFIDENTIALITY: 19
    • O.INTEGRITY: 5
  • OE:
    • OE.HARDWARE: 2
    • OE.NOEVIL: 2
    • OE.PHYSICAL: 2
  • T:
    • T.DEPLETION: 2
    • T.DISCLOSURE: 2
    • T.MODIFICATION: 2
pdf_data/st_keywords/vendor
  • Cisco:
    • Cisco: 66
    • Cisco Systems, Inc: 5
  • NXP:
    • NXP: 1
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 7
  • DES:
    • DES:
      • DES: 1
  • constructions:
    • MAC:
      • HMAC: 8
      • HMAC-SHA-256: 2
      • HMAC-SHA-384: 1
pdf_data/st_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 4
    • ECDSA:
      • ECDSA: 11
  • FF:
    • DH:
      • DH: 9
      • Diffie-Hellman: 5
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA2:
      • SHA-2: 1
      • SHA-256: 2
      • SHA-384: 3
      • SHA256: 2
pdf_data/st_keywords/crypto_scheme
  • KEX:
    • Key Exchange: 2
  • MAC:
    • MAC: 3
pdf_data/st_keywords/crypto_protocol
  • IKE:
    • IKE: 27
    • IKEv1: 2
    • IKEv2: 14
  • IPsec:
    • IPsec: 61
  • TLS:
    • SSL:
      • SSL: 1
    • TLS:
      • TLS: 2
  • VPN:
    • VPN: 67
  • VPN:
    • VPN: 1
pdf_data/st_keywords/randomness
  • PRNG:
    • DRBG: 5
pdf_data/st_keywords/cipher_mode
  • CBC:
    • CBC: 2
  • GCM:
    • GCM: 3
pdf_data/st_keywords/ecc_curve
  • NIST:
    • P-256: 16
    • P-384: 16
pdf_data/st_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 3
pdf_data/st_keywords/side_channel_analysis
  • SCA:
    • side channels: 3
pdf_data/st_keywords/tee_name
  • ARM:
    • TrustZone: 1
pdf_data/st_keywords/standard_id
  • CC:
    • CCMB-2017-04-001: 1
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
    • CCMB-2017-04-004: 1
  • FIPS:
    • FIPS PUB 186-4: 7
    • FIPS186-4: 3
  • NIST:
    • NIST SP 800-38A: 2
    • NIST SP 800-38D: 2
  • RFC:
    • RFC 3602: 1
    • RFC 4106: 1
    • RFC 4301: 2
    • RFC 4303: 1
    • RFC 4868: 1
    • RFC 4945: 1
    • RFC 5280: 3
    • RFC 5282: 1
    • RFC 6379: 1
    • RFC 6960: 1
    • RFC 8784: 1
    • RFC8247: 1
  • X509:
    • X.509: 11
pdf_data/st_metadata
  • /Author: Kernkonzept GmbH
  • /Keywords: L4Re Operating System Framework, L4Re Hypervisor, Microkernel, Operating system
  • /Subject: L4Re SSK
  • /Title: Security Target for L4Re Secure Separation Kernel CC 1.0.1
  • pdf_file_size_bytes: 621521
  • pdf_hyperlinks: https://l4re.org/doc/group__l4__icu__api.html
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 61
state/cert/pdf_hash Different Different
state/cert/txt_hash Different Different
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different