Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
POLYAS CORE Version 2.5.0
BSI-DSZ-CC-0862-V2-2021 		Soprano GAMMA Version 3.0.9 (CC)
Certificate Number: 2016/99
name POLYAS CORE Version 2.5.0 Soprano GAMMA Version 3.0.9 (CC)
scheme DE AU
status active archived
not_valid_after 24.06.2026 17.05.2021
not_valid_before 25.06.2021 17.05.2016
cert_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0862V2c_pdf.pdf
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0862V2a_pdf.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/EFS-T040%20CR.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0862V2b_pdf.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/EFS-T040%20ST.pdf
manufacturer POLYAS GmbH Soprano Design Pty Ltd
manufacturer_web https://www.polyas.de https://www.soprano.com.au
security_level ALC_DVS.1, ALC_CMC.3, ALC_CMS.3, EAL2+, ALC_LCD.1 EAL2
dgst 8916d91243168c04 70e33537b3b28c97
heuristics/cert_id BSI-DSZ-CC-0862-V2-2021 Certificate Number: 2016/99
heuristics/cert_lab BSI []
heuristics/extracted_sars ALC_DEL.1, ATE_FUN.1, ASE_INT.1, AGD_OPE.1, ATE_COV.1, ASE_CCL.1, ADV_ARC.1, AVA_VAN.2, ASE_SPD.1, ATE_IND.2, ASE_ECD.1, ADV_TDS.1, ADV_FSP.2, ALC_CMS.3, ALC_DVS.1, AGD_PRE.1, ASE_TSS.1, ASE_REQ.2, ALC_CMC.3, ALC_LCD.1, ASE_OBJ.2 ALC_DEL.1, ATE_FUN.1, ASE_INT.1, ALC_CMS.2, AGD_OPE.1, ATE_COV.1, ASE_CCL.1, ADV_ARC.1, AVA_VAN.2, ASE_SPD.1, ATE_IND.2, ASE_ECD.1, ADV_TDS.1, ADV_FSP.2, AGD_PRE.1, ALC_CMC.2, ASE_TSS.1, ASE_REQ.2, ASE_OBJ.2
heuristics/extracted_versions 2.5.0 3.0.9
heuristics/report_references/directly_referencing BSI-DSZ-CC-0862-2016 {}
heuristics/report_references/indirectly_referencing BSI-DSZ-CC-0862-2016 {}
heuristics/scheme_data
  • category: Other products
  • cert_id: BSI-DSZ-CC-0862-V2-2021
  • certification_date: 25.06.2021
  • enhanced:
    • applicant: POLYAS GmbH Marie-Calm-Straße 1-5 34131 Kassel
    • assurance_level: EAL2,ALC_LCD.1,ALC_DVS.1,ALC_CMS.3,ALC_CMC.3
    • certification_date: 25.06.2021
    • description: The Target of Evaluation (TOE) is the product for conducting online elections (in short: online voting product) POLYAS CORE Version 2.2.3. Corresponding to the security requirements from the claimed Protection Profile BSI-CC-PP-0037, POLYAS CORE V2.2.3 is sufficient to securely implement elections in associations, for boards and bodies such as at universities, within the scope of education and research, and in particular other non-political elections with low attack potential. The functional and security features of the TOE relate only to the polling phase incl. tallying, but not to the election preparation (such as drawing up the electoral register, for example) or to the archiving of the polling and result data. A client-sided TOE at the endpoint device does not exist. The complete range of functions is provided by the server-sided TOE.
    • entries: [frozendict({'id': 'BSI-DSZ-CC-0862-V2-2021-MA-02 (Ausstellungsdatum / Certification Date 11.03.2022)', 'description': 'security functionality is unchanged. Configuration management procedures require a change of the product version from version 2.5.3 to version 2.5.4.'}), frozendict({'id': 'BSI-DSZ-CC-0862-V2-2021-MA-01 (Ausstellungsdatum / Certification Date 24.11.2021)', 'description': 'Security Target'}), frozendict({'id': 'BSI-DSZ-CC-0862-V2-2021 (Ausstellungsdatum / Certification Date 25.06.2021, gültig bis / valid until 24.06.2026) Zertifizierungsreport / Certification Report', 'description': 'This re-certification was conducted, because the validity of the previous certificate expired and to include minor product changes in the certified scope.'}), frozendict({'id': 'BSI-DSZ-CC-0862-2016 (Ausstellungsdatum / Certification Date 10.03.2016, gültig bis / valid until 09.03.2021)', 'description': 'Security Target'})]
    • evaluation_facility: Deutsches Forschungszentrum für Künstliche Intelligenz GmbH
    • expiration_date: 24.06.2026
    • product: POLYAS CORE Version 2.5.0
    • protection_profile: Common Criteria Schutzprofil für Basissatz von Sicherheitsanforderungen an Online-Wahlprodukte, Version 1.0, 18. April 2008, BSI-CC-PP-0037-2008
  • product: POLYAS CORE Version 2.5.0
  • url: https://www.bsi.bund.de/SharedDocs/Zertifikate_CC/CC/Sonstiges/0862_0862V2.html
  • vendor: POLYAS GmbH
heuristics/protection_profiles fc76773839dc79d0 {}
maintenance_updates
protection_profile_links https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0037b.pdf {}
pdf_data/cert_filename 0862V2c_pdf.pdf
pdf_data/cert_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-0862-V2-2021: 1
pdf_data/cert_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP-0037-2008: 1
pdf_data/cert_keywords/cc_security_level
  • EAL:
    • EAL 2: 2
pdf_data/cert_keywords/cc_sar
  • ALC:
    • ALC_CMC.3: 1
    • ALC_CMS.3: 1
    • ALC_DVS.1: 1
    • ALC_LCD.1: 1
pdf_data/cert_keywords/cc_sfr
pdf_data/cert_keywords/cc_claims
pdf_data/cert_keywords/vendor
pdf_data/cert_keywords/eval_facility
pdf_data/cert_keywords/symmetric_crypto
pdf_data/cert_keywords/asymmetric_crypto
pdf_data/cert_keywords/pq_crypto
pdf_data/cert_keywords/hash_function
pdf_data/cert_keywords/crypto_scheme
pdf_data/cert_keywords/crypto_protocol
pdf_data/cert_keywords/randomness
pdf_data/cert_keywords/cipher_mode
pdf_data/cert_keywords/ecc_curve
pdf_data/cert_keywords/crypto_engine
pdf_data/cert_keywords/tls_cipher_suite
pdf_data/cert_keywords/crypto_library
pdf_data/cert_keywords/vulnerability
pdf_data/cert_keywords/side_channel_analysis
pdf_data/cert_keywords/technical_report_id
pdf_data/cert_keywords/device_model
pdf_data/cert_keywords/tee_name
pdf_data/cert_keywords/os_name
pdf_data/cert_keywords/cplc_data
pdf_data/cert_keywords/ic_data_group
pdf_data/cert_keywords/standard_id
  • ISO:
    • ISO/IEC 15408: 2
    • ISO/IEC 18045: 2
pdf_data/cert_keywords/javacard_version
pdf_data/cert_keywords/javacard_api_const
pdf_data/cert_keywords/javacard_packages
pdf_data/cert_keywords/certification_process
pdf_data/report_filename 0862V2a_pdf.pdf EFS-T040 CR.pdf
pdf_data/report_frontpage
  • DE:
    • cert_id: BSI-DSZ-CC-0862-V2-2021
    • cert_item: POLYAS Core, Version 2.5.0
    • cert_lab: BSI
    • developer: POLYAS GmbH
    • match_rules: ['(BSI-DSZ-CC-.+?) zu (.+?) der (.*)']
  • DE:
pdf_data/report_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-0862-: 1
    • BSI-DSZ-CC-0862-2016: 2
    • BSI-DSZ-CC-0862-V2-2021: 15
  • AU:
    • Certification Report 2016/99: 1
  • FR:
    • Certification Report 2016/99: 1
pdf_data/report_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP-0037: 2
    • BSI-CC-PP-0037-2008: 2
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 1: 1
    • EAL 2: 6
    • EAL 2+: 1
    • EAL 4: 1
  • EAL:
    • EAL 2: 3
    • EAL1: 1
    • EAL2: 3
pdf_data/report_keywords/cc_sar
  • ALC:
    • ALC_CMC.3: 4
    • ALC_CMS.3: 4
    • ALC_DVS.1: 4
    • ALC_FLR: 2
    • ALC_LCD.1: 4
pdf_data/report_keywords/cc_sfr
  • FAU:
    • FAU_GEN.1: 3
    • FAU_SAR.1: 2
  • FDP:
    • FDP_DAU.1: 2
    • FDP_IFC: 4
    • FDP_IFF: 4
    • FDP_IFF.5: 3
    • FDP_RIP: 4
    • FDP_SDI.2: 2
    • FDP_UCT: 4
    • FDP_UIT: 4
  • FIA:
    • FIA_ATD.1: 2
    • FIA_UAU: 2
    • FIA_UAU.6: 1
    • FIA_UID: 2
    • FIA_USB: 3
  • FMT:
    • FMT_SMR.2: 2
  • FPR:
    • FPR_ANO.1: 2
    • FPR_UNL: 4
  • FPT:
    • FPT_ITT.1: 2
    • FPT_RCV.1: 2
    • FPT_RCV.4: 2
    • FPT_TST.1: 2
  • FTA:
    • FTA_SSL: 1
    • FTA_SSL.3: 1
    • FTA_SSL.4: 1
    • FTA_TSE.1: 2
  • FTP:
    • FTP_TRP: 4
pdf_data/report_keywords/vendor
  • Samsung:
    • Samsung: 1
pdf_data/report_keywords/eval_facility
  • DFKI:
    • DFKI: 3
pdf_data/report_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES-256: 1
pdf_data/report_keywords/hash_function
  • SHA:
    • SHA2:
      • SHA-256: 2
pdf_data/report_keywords/crypto_protocol
  • TLS:
    • TLS:
      • TLS: 1
  • TLS:
    • TLS:
      • TLS: 4
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7148: 1
pdf_data/report_keywords/tee_name
  • IBM:
    • SE: 1
pdf_data/report_keywords/standard_id
  • BSI:
    • AIS 32: 1
    • AIS 38: 1
  • ISO:
    • ISO/IEC 15408: 4
    • ISO/IEC 17065: 2
    • ISO/IEC 18045: 4
pdf_data/report_keywords/certification_process
  • OutOfScope:
    • conducting penetration testing they were deemed to require greater than a basic attack potential or out of scope of the TOE itself. Issues were identified in the underlying operational environment of the web app: 1
    • out of scope: 1
pdf_data/report_metadata
  • /Author: Terence.Caulfield
  • /CreationDate: D:20160520085532+10'00'
  • /Creator: PScript5.dll Version 5.2.2
  • /ModDate: D:20160526122612+10'00'
  • /Producer: Acrobat Distiller 9.0.0 (Windows)
  • /Title: Microsoft Word - R25945042.DOC
  • pdf_file_size_bytes: 54784
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 19
pdf_data/st_filename 0862V2b_pdf.pdf EFS-T040 ST.pdf
pdf_data/st_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP-0037: 3
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL 2: 4
    • EAL 3: 1
    • EAL2: 1
    • EAL3: 1
  • EAL:
    • EAL2: 4
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 3
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_CMC.3: 2
    • ALC_CMS.2: 1
    • ALC_CMS.3: 2
    • ALC_DEL.1: 1
    • ALC_DVS.1: 2
    • ALC_LCD.1: 2
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.2: 1
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_CMS.2: 1
    • ALC_DEL.1: 1
  • ASE:
    • ASE_CCL: 3
    • ASE_CCL.1: 1
    • ASE_ECD: 3
    • ASE_ECD.1: 1
    • ASE_INT: 3
    • ASE_INT.1: 1
    • ASE_OBJ: 3
    • ASE_OBJ.2: 1
    • ASE_REQ: 3
    • ASE_REQ.2: 1
    • ASE_SPD: 3
    • ASE_SPD.1: 1
    • ASE_TSS: 3
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.2: 1
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN.1: 7
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_SAR.1: 5
    • FAU_SAR.1.1: 1
  • FDP:
    • FDP_ACC.1: 8
    • FDP_DAU.1: 6
    • FDP_DAU.1.1: 1
    • FDP_DAU.1.2: 1
    • FDP_IFC: 28
    • FDP_IFC.1: 12
    • FDP_IFF: 42
    • FDP_IFF.1: 3
    • FDP_IFF.4: 1
    • FDP_IFF.5: 8
    • FDP_IFF.5.1: 1
    • FDP_RIP: 11
    • FDP_RIP.1: 1
    • FDP_SDI.1: 1
    • FDP_SDI.2: 6
    • FDP_SDI.2.1: 1
    • FDP_SDI.2.2: 1
    • FDP_UCT: 16
    • FDP_UIT: 16
  • FIA:
    • FIA_ATD.1: 10
    • FIA_ATD.1.1: 1
    • FIA_UAU.1: 6
    • FIA_UAU.1.1: 1
    • FIA_UAU.1.2: 1
    • FIA_UAU.2: 5
    • FIA_UAU.2.1: 1
    • FIA_UAU.6: 4
    • FIA_UAU.6.1: 1
    • FIA_UID.1: 10
    • FIA_UID.1.1: 1
    • FIA_UID.1.2: 1
    • FIA_UID.2: 7
    • FIA_UID.2.1: 1
    • FIA_USB: 17
  • FMT:
    • FMT_MSA.3: 3
    • FMT_SMR.1: 1
    • FMT_SMR.2: 9
  • FPR:
    • FPR_ANO.1: 6
    • FPR_ANO.1.1: 1
    • FPR_UNL: 10
    • FPR_UNL.1: 1
  • FPT:
    • FPT_ITT.1: 7
    • FPT_ITT.1.1: 1
    • FPT_RCV.1: 6
    • FPT_RCV.1.1: 1
    • FPT_RCV.4: 6
    • FPT_RCV.4.1: 1
    • FPT_SSL.3: 1
    • FPT_SSL.4: 1
    • FPT_STM.1: 2
    • FPT_TST.1: 5
    • FPT_TST.1.1: 1
    • FPT_TST.1.2: 1
    • FPT_TST.1.3: 1
  • FTA:
    • FTA_SSL.3: 5
    • FTA_SSL.3.1: 1
    • FTA_SSL.4: 7
    • FTA_SSL.4.1: 1
    • FTA_TSE.1: 6
    • FTA_TSE.1.1: 1
  • FTP:
    • FTP_ITC.1: 8
    • FTP_TRP: 29
    • FTP_TRP.1: 8
  • FAU:
    • FAU_GEN.1: 11
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_GEN.2: 6
    • FAU_GEN.2.1: 1
    • FAU_STG.1: 9
    • FAU_STG.1.1: 1
    • FAU_STG.1.2: 1
    • FAU_STG.3: 1
    • FAU_STG.4: 6
    • FAU_STG.4.1: 1
  • FCO:
    • FCO_NRR: 1
    • FCO_NRR.1: 1
    • FCO_NRR.2: 6
    • FCO_NRR.2.1: 1
    • FCO_NRR.2.2: 1
    • FCO_NRR.2.3: 1
  • FCS:
    • FCS_CKM: 2
    • FCS_CKM.1: 32
    • FCS_CKM.2: 11
    • FCS_CKM.2.1: 1
    • FCS_CKM.4: 17
    • FCS_CKM.4.1: 1
    • FCS_COP.1: 31
  • FDP:
    • FDP_ACC.1: 20
    • FDP_ACF.1: 10
    • FDP_ACF.1.1: 1
    • FDP_ACF.1.2: 1
    • FDP_ACF.1.3: 1
    • FDP_ACF.1.4: 1
    • FDP_IFC.1: 2
    • FDP_ITC.1: 10
    • FDP_ITC.2: 10
    • FDP_RIP: 1
    • FDP_RIP.1: 6
    • FDP_RIP.1.1: 1
  • FIA:
    • FIA_AFL.1: 6
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_SOS.1: 4
    • FIA_SOS.1.1: 1
    • FIA_UAU: 1
    • FIA_UAU.1: 4
    • FIA_UAU.2: 8
    • FIA_UAU.2.1: 1
    • FIA_UAU.7: 5
    • FIA_UAU.7.1: 1
    • FIA_UID.1: 8
    • FIA_UID.2: 7
    • FIA_UID.2.1: 1
  • FMT:
    • FMT_MSA.1: 8
    • FMT_MSA.1.1: 1
    • FMT_MSA.3: 8
    • FMT_MSA.3.1: 1
    • FMT_MSA.3.2: 1
    • FMT_REV: 1
    • FMT_REV.1: 6
    • FMT_REV.1.1: 1
    • FMT_REV.1.2: 1
    • FMT_SMF.1: 17
    • FMT_SMR.1: 12
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_STM.1: 9
    • FPT_STM.1.1: 1
  • FTA:
    • FTA_SSL: 2
    • FTA_SSL.3: 6
    • FTA_SSL.3.1: 1
    • FTA_SSL.4: 5
    • FTA_SSL.4.1: 1
  • FTP:
    • FTP_ITC.1: 7
    • FTP_ITC.1.1: 1
    • FTP_ITC.1.2: 2
    • FTP_TRP.1: 6
    • FTP_TRP.1.1: 1
    • FTP_TRP.1.2: 1
    • FTP_TRP.1.3: 1
pdf_data/st_keywords/cc_claims
  • D:
    • D.H: 11
  • A:
    • A.ACCEPTABLE_USE: 2
    • A.INSTALL: 2
    • A.LOGICAL_PROTECT: 2
    • A.NO_EVIL: 2
    • A.PHYSICAL_PROTECT: 2
    • A.UNTRUSTED: 2
  • O:
    • O.AUDIT_REVIEW: 3
    • O.AUTH: 3
    • O.AUTH_CONTROL: 3
    • O.CRYPTO: 3
    • O.PROTECTED_COMMS: 3
    • O.SESSION_LOCK: 3
    • O.WIPE: 2
  • OE:
    • OE.APPS: 2
    • OE.INSTALL: 2
    • OE.LOGICAL_SECURITY: 2
    • OE.NO_EVIL: 2
    • OE.PHYSICAL_SECURITY: 2
    • OE.TRUSTED_USERS: 2
  • T:
    • T.EAVESDROPPING: 2
    • T.REQUEST: 2
    • T.UNAUTHORISED_ACCESS: 2
    • T.WEAK_CRYPTO: 2
pdf_data/st_keywords/vendor
  • Samsung:
    • Samsung: 1
pdf_data/st_keywords/symmetric_crypto
  • DES:
    • DES:
      • DES: 29
  • AES_competition:
    • AES:
      • AES: 15
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA2:
      • SHA256: 6
  • PBKDF:
    • PBKDF2: 2
pdf_data/st_keywords/crypto_protocol
  • TLS:
    • TLS:
      • TLS: 2
  • TLS:
    • TLS:
      • TLS: 5
pdf_data/st_keywords/cipher_mode
  • CBC:
    • CBC: 1
pdf_data/st_keywords/standard_id
  • FIPS:
    • FIPS 140-2: 1
    • FIPS 186-3: 2
    • FIPS PUB 186-4: 2
    • FIPS PUB 197: 2
  • NIST:
    • NIST SP 800-132: 1
    • NIST SP 800-56B: 1
  • PKCS:
    • PKCS #1: 2
    • PKCS#1: 1
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • Security (TLS) to prevent TOE data modification or disclosure while in transit. 2.6.2.1 Summary of out of scope items The following TOE features/components are not included in the scope of the evaluation: : 1
    • out of scope: 1
pdf_data/st_metadata
  • /Author: Niels Menke, Kai Reinhard, Melanie Volkamer, Dr. Sönke Maseberg, Florian Heinecke, Ibrahim Rabah, Jan Schirrmacher, Wolfgang Jung, Tobias Pressel
  • /CreationDate: D:20210528013617-07'00'
  • /Creator: Microsoft Word
  • /Keywords: remote Voting, eVoting, Online Wahlen, elektronische Wahlen
  • /ModDate: D:20210528013617-07'00'
  • /Producer: macOS Version 11.3.1 (Build 20E241) Quartz PDFContext
  • /Subject: 1.10
  • /Title: Security Target Polyas CORE zu Common Criteria Protection Profile BSI-PP-0037
  • pdf_file_size_bytes: 1705361
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 87
  • /Author: Terence.Caulfield
  • /CreationDate: D:20160520095917+10'00'
  • /Creator: PScript5.dll Version 5.2.2
  • /ModDate: D:20160526122650+10'00'
  • /Producer: Acrobat Distiller 9.0.0 (Windows)
  • /Title: Microsoft Word - R25857998.docx
  • pdf_file_size_bytes: 159445
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 42
state/cert/convert_ok True False
state/cert/download_ok True False
state/cert/pdf_hash Different Different
state/cert/txt_hash Different Different
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different