Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
POLYAS CORE Version 2.5.0
BSI-DSZ-CC-0862-V2-2021
SailPoint IdentityIQ File Access Manager Version 8.1
CCEVS-VR-VID-11116-2020
name POLYAS CORE Version 2.5.0 SailPoint IdentityIQ File Access Manager Version 8.1
scheme DE US
status active archived
not_valid_after 24.06.2026 08.12.2022
not_valid_before 25.06.2021 08.12.2020
cert_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0862V2c_pdf.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11116-ci.pdf
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0862V2a_pdf.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11116-vr.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0862V2b_pdf.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11116-st.pdf
manufacturer POLYAS GmbH SailPoint Technologies, Inc.
manufacturer_web https://www.sailpoint.com
security_level ALC_DVS.1, ALC_CMC.3, ALC_CMS.3, EAL2+, ALC_LCD.1 {}
dgst 8916d91243168c04 aea180ad21fbff5d
heuristics/cert_id BSI-DSZ-CC-0862-V2-2021 CCEVS-VR-VID-11116-2020
heuristics/cert_lab BSI US
heuristics/cpe_matches {} cpe:2.3:a:sailpoint:identityiq:8.1:-:*:*:*:*:*:*
heuristics/related_cves {} CVE-2024-10905, CVE-2022-45435, CVE-2025-10280, CVE-2022-46835, CVE-2023-32217, CVE-2024-1714
heuristics/extracted_sars ALC_DEL.1, ATE_FUN.1, ASE_INT.1, AGD_OPE.1, ATE_COV.1, ASE_CCL.1, ADV_ARC.1, AVA_VAN.2, ASE_SPD.1, ATE_IND.2, ASE_ECD.1, ADV_TDS.1, ALC_CMS.3, AGD_PRE.1, ALC_DVS.1, ADV_FSP.2, ASE_TSS.1, ASE_REQ.2, ALC_CMC.3, ALC_LCD.1, ASE_OBJ.2 ALC_CMS.1, ASE_OBJ.1, AGD_OPE.1, ASE_ECD.1, AVA_VAN.1, AGD_PRE.1, ASE_CCL.1, ASE_REQ.1, ASE_TSS.1, ASE_INT.1, ALC_CMC.1, ALC_TSU_EXT.1, ATE_IND.1, ADV_FSP.1
heuristics/extracted_versions 2.5.0 8.1
heuristics/report_references/directly_referencing BSI-DSZ-CC-0862-2016 {}
heuristics/report_references/indirectly_referencing BSI-DSZ-CC-0862-2016 {}
heuristics/scheme_data
  • category: Other products
  • cert_id: BSI-DSZ-CC-0862-V2-2021
  • certification_date: 25.06.2021
  • enhanced:
    • applicant: POLYAS GmbH Marie-Calm-Straße 1-5 34131 Kassel
    • assurance_level: EAL2,ALC_LCD.1,ALC_DVS.1,ALC_CMS.3,ALC_CMC.3
    • certification_date: 25.06.2021
    • description: The Target of Evaluation (TOE) is the product for conducting online elections (in short: online voting product) POLYAS CORE Version 2.2.3. Corresponding to the security requirements from the claimed Protection Profile BSI-CC-PP-0037, POLYAS CORE V2.2.3 is sufficient to securely implement elections in associations, for boards and bodies such as at universities, within the scope of education and research, and in particular other non-political elections with low attack potential. The functional and security features of the TOE relate only to the polling phase incl. tallying, but not to the election preparation (such as drawing up the electoral register, for example) or to the archiving of the polling and result data. A client-sided TOE at the endpoint device does not exist. The complete range of functions is provided by the server-sided TOE.
    • entries: [frozendict({'id': 'BSI-DSZ-CC-0862-V2-2021-MA-02 (Ausstellungsdatum / Certification Date 11.03.2022)', 'description': 'security functionality is unchanged. Configuration management procedures require a change of the product version from version 2.5.3 to version 2.5.4.'}), frozendict({'id': 'BSI-DSZ-CC-0862-V2-2021-MA-01 (Ausstellungsdatum / Certification Date 24.11.2021)', 'description': 'Security Target'}), frozendict({'id': 'BSI-DSZ-CC-0862-V2-2021 (Ausstellungsdatum / Certification Date 25.06.2021, gültig bis / valid until 24.06.2026) Zertifizierungsreport / Certification Report', 'description': 'This re-certification was conducted, because the validity of the previous certificate expired and to include minor product changes in the certified scope.'}), frozendict({'id': 'BSI-DSZ-CC-0862-2016 (Ausstellungsdatum / Certification Date 10.03.2016, gültig bis / valid until 09.03.2021)', 'description': 'Security Target'})]
    • evaluation_facility: Deutsches Forschungszentrum für Künstliche Intelligenz GmbH
    • expiration_date: 24.06.2026
    • product: POLYAS CORE Version 2.5.0
    • protection_profile: Common Criteria Schutzprofil für Basissatz von Sicherheitsanforderungen an Online-Wahlprodukte, Version 1.0, 18. April 2008, BSI-CC-PP-0037-2008
  • product: POLYAS CORE Version 2.5.0
  • url: https://www.bsi.bund.de/SharedDocs/Zertifikate_CC/CC/Sonstiges/0862_0862V2.html
  • vendor: POLYAS GmbH
  • api_url: https://www.niap-ccevs.org/api/project/product/pcl_products/11116/
  • categories: ['Application Software']
  • category: Application Software
  • certification_date: 08.12.2020
  • evaluation_facility: Booz Allen Hamilton Common Criteria Testing Laboratory
  • expiration_date: 08.12.2022
  • id: CCEVS-VR-VID11116
  • product: SailPoint IdentityIQ File Access Manager Version 8.1
  • scheme: US
  • url: https://www.niap-ccevs.org/products/11116
  • vendor: SailPoint Technologies, Inc.
heuristics/protection_profiles fc76773839dc79d0 a1cc4a4e079f4d1f
maintenance_updates
protection_profile_links https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0037b.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/PP_APP_v1.3.pdf
pdf_data/cert_filename 0862V2c_pdf.pdf st_vid11116-ci.pdf
pdf_data/cert_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-0862-V2-2021: 1
  • US:
    • CCEVS-VR-VID11116-2020: 1
pdf_data/cert_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP-0037-2008: 1
pdf_data/cert_keywords/cc_security_level
  • EAL:
    • EAL 2: 2
  • EAL:
    • EAL 2: 1
pdf_data/cert_keywords/cc_sar
  • ALC:
    • ALC_CMC.3: 1
    • ALC_CMS.3: 1
    • ALC_DVS.1: 1
    • ALC_LCD.1: 1
  • ALC:
    • ALC_FLR: 1
pdf_data/cert_keywords/eval_facility
  • BoozAllenHamilton:
    • Booz Allen Hamilton: 1
pdf_data/cert_keywords/standard_id
  • ISO:
    • ISO/IEC 15408: 2
    • ISO/IEC 18045: 2
pdf_data/report_filename 0862V2a_pdf.pdf st_vid11116-vr.pdf
pdf_data/report_frontpage
  • DE:
    • cert_id: BSI-DSZ-CC-0862-V2-2021
    • cert_item: POLYAS Core, Version 2.5.0
    • cert_lab: BSI
    • developer: POLYAS GmbH
    • match_rules: ['(BSI-DSZ-CC-.+?) zu (.+?) der (.*)']
  • US:
  • DE:
  • US:
    • cert_id: CCEVS-VR-VID11116-2020
    • cert_item: SailPoint IdentityIQ File Access Manager 8.1
    • cert_lab: US NIAP
pdf_data/report_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-0862-: 1
    • BSI-DSZ-CC-0862-2016: 2
    • BSI-DSZ-CC-0862-V2-2021: 15
  • US:
    • CCEVS-VR-VID11116-2020: 1
pdf_data/report_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP-0037: 2
    • BSI-CC-PP-0037-2008: 2
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 1: 1
    • EAL 2: 6
    • EAL 2+: 1
    • EAL 4: 1
pdf_data/report_keywords/cc_sar
  • ALC:
    • ALC_CMC.3: 4
    • ALC_CMS.3: 4
    • ALC_DVS.1: 4
    • ALC_FLR: 2
    • ALC_LCD.1: 4
  • ALC:
    • ALC_TSU_EXT.1: 1
pdf_data/report_keywords/cc_sfr
  • FAU:
    • FAU_GEN.1: 3
    • FAU_SAR.1: 2
  • FDP:
    • FDP_DAU.1: 2
    • FDP_IFC: 4
    • FDP_IFF: 4
    • FDP_IFF.5: 3
    • FDP_RIP: 4
    • FDP_SDI.2: 2
    • FDP_UCT: 4
    • FDP_UIT: 4
  • FIA:
    • FIA_ATD.1: 2
    • FIA_UAU: 2
    • FIA_UAU.6: 1
    • FIA_UID: 2
    • FIA_USB: 3
  • FMT:
    • FMT_SMR.2: 2
  • FPR:
    • FPR_ANO.1: 2
    • FPR_UNL: 4
  • FPT:
    • FPT_ITT.1: 2
    • FPT_RCV.1: 2
    • FPT_RCV.4: 2
    • FPT_TST.1: 2
  • FTA:
    • FTA_SSL: 1
    • FTA_SSL.3: 1
    • FTA_SSL.4: 1
    • FTA_TSE.1: 2
  • FTP:
    • FTP_TRP: 4
pdf_data/report_keywords/vendor
  • Microsoft:
    • Microsoft: 4
pdf_data/report_keywords/eval_facility
  • DFKI:
    • DFKI: 3
  • BoozAllenHamilton:
    • Booz Allen Hamilton: 3
pdf_data/report_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES-256: 1
pdf_data/report_keywords/hash_function
  • SHA:
    • SHA2:
      • SHA-256: 2
pdf_data/report_keywords/crypto_protocol
  • TLS:
    • TLS:
      • TLS: 1
  • TLS:
    • TLS:
      • TLS: 5
pdf_data/report_keywords/randomness
  • PRNG:
    • DRBG: 2
  • RNG:
    • RBG: 1
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7148: 1
pdf_data/report_keywords/tee_name
  • IBM:
    • SE: 1
pdf_data/report_keywords/standard_id
  • BSI:
    • AIS 32: 1
    • AIS 38: 1
  • ISO:
    • ISO/IEC 15408: 4
    • ISO/IEC 17065: 2
    • ISO/IEC 18045: 4
pdf_data/report_metadata
  • /CreationDate: D:20201216151544-05'00'
  • /ModDate: D:20201216152004-05'00'
  • pdf_file_size_bytes: 920189
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 25
pdf_data/st_filename 0862V2b_pdf.pdf st_vid11116-st.pdf
pdf_data/st_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP-0037: 3
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL 2: 4
    • EAL 3: 1
    • EAL2: 1
    • EAL3: 1
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 3
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_CMC.3: 2
    • ALC_CMS.2: 1
    • ALC_CMS.3: 2
    • ALC_DEL.1: 1
    • ALC_DVS.1: 2
    • ALC_LCD.1: 2
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.2: 1
  • ADV:
    • ADV_FSP.1: 8
  • AGD:
    • AGD_OPE.1: 11
    • AGD_PRE.1: 3
  • ALC:
    • ALC_CMC.1: 5
    • ALC_CMS.1: 6
    • ALC_TSU_EXT.1: 8
  • ASE:
    • ASE_CCL.1: 15
    • ASE_ECD.1: 11
    • ASE_INT.1: 13
    • ASE_OBJ.1: 5
    • ASE_REQ.1: 11
    • ASE_TSS.1: 6
  • ATE:
    • ATE_IND.1: 6
  • AVA:
    • AVA_VAN: 1
    • AVA_VAN.1: 8
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN.1: 7
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_SAR.1: 5
    • FAU_SAR.1.1: 1
  • FDP:
    • FDP_ACC.1: 8
    • FDP_DAU.1: 6
    • FDP_DAU.1.1: 1
    • FDP_DAU.1.2: 1
    • FDP_IFC: 28
    • FDP_IFC.1: 12
    • FDP_IFF: 42
    • FDP_IFF.1: 3
    • FDP_IFF.4: 1
    • FDP_IFF.5: 8
    • FDP_IFF.5.1: 1
    • FDP_RIP: 11
    • FDP_RIP.1: 1
    • FDP_SDI.1: 1
    • FDP_SDI.2: 6
    • FDP_SDI.2.1: 1
    • FDP_SDI.2.2: 1
    • FDP_UCT: 16
    • FDP_UIT: 16
  • FIA:
    • FIA_ATD.1: 10
    • FIA_ATD.1.1: 1
    • FIA_UAU.1: 6
    • FIA_UAU.1.1: 1
    • FIA_UAU.1.2: 1
    • FIA_UAU.2: 5
    • FIA_UAU.2.1: 1
    • FIA_UAU.6: 4
    • FIA_UAU.6.1: 1
    • FIA_UID.1: 10
    • FIA_UID.1.1: 1
    • FIA_UID.1.2: 1
    • FIA_UID.2: 7
    • FIA_UID.2.1: 1
    • FIA_USB: 17
  • FMT:
    • FMT_MSA.3: 3
    • FMT_SMR.1: 1
    • FMT_SMR.2: 9
  • FPR:
    • FPR_ANO.1: 6
    • FPR_ANO.1.1: 1
    • FPR_UNL: 10
    • FPR_UNL.1: 1
  • FPT:
    • FPT_ITT.1: 7
    • FPT_ITT.1.1: 1
    • FPT_RCV.1: 6
    • FPT_RCV.1.1: 1
    • FPT_RCV.4: 6
    • FPT_RCV.4.1: 1
    • FPT_SSL.3: 1
    • FPT_SSL.4: 1
    • FPT_STM.1: 2
    • FPT_TST.1: 5
    • FPT_TST.1.1: 1
    • FPT_TST.1.2: 1
    • FPT_TST.1.3: 1
  • FTA:
    • FTA_SSL.3: 5
    • FTA_SSL.3.1: 1
    • FTA_SSL.4: 7
    • FTA_SSL.4.1: 1
    • FTA_TSE.1: 6
    • FTA_TSE.1.1: 1
  • FTP:
    • FTP_ITC.1: 8
    • FTP_TRP: 29
    • FTP_TRP.1: 8
  • FCS:
    • FCS_CKM_EXT: 2
    • FCS_CKM_EXT.1: 2
    • FCS_CKM_EXT.1.1: 1
    • FCS_COP: 1
    • FCS_RBG_EXT: 2
    • FCS_RBG_EXT.1: 4
    • FCS_RBG_EXT.1.1: 2
    • FCS_STO_EXT: 2
    • FCS_STO_EXT.1: 4
    • FCS_STO_EXT.1.1: 1
  • FDP:
    • FDP_DAR_EXT: 2
    • FDP_DAR_EXT.1: 4
    • FDP_DAR_EXT.1.1: 1
    • FDP_DEC_EXT: 2
    • FDP_DEC_EXT.1: 3
    • FDP_DEC_EXT.1.1: 2
    • FDP_DEC_EXT.1.2: 1
    • FDP_NET_EXT: 2
    • FDP_NET_EXT.1: 2
    • FDP_NET_EXT.1.1: 1
  • FMT:
    • FMT_CFG_EXT: 2
    • FMT_CFG_EXT.1: 3
    • FMT_CFG_EXT.1.1: 1
    • FMT_CFG_EXT.1.2: 1
    • FMT_MEC_EXT: 2
    • FMT_MEC_EXT.1: 6
    • FMT_MEC_EXT.1.1: 1
    • FMT_SMF: 2
    • FMT_SMF.1: 2
    • FMT_SMF.1.1: 1
  • FPR:
    • FPR_ANO_EXT: 2
    • FPR_ANO_EXT.1: 2
    • FPR_ANO_EXT.1.1: 1
  • FPT:
    • FPT_AEX_EXT: 2
    • FPT_AEX_EXT.1: 2
    • FPT_AEX_EXT.1.1: 2
    • FPT_AEX_EXT.1.2: 1
    • FPT_AEX_EXT.1.3: 2
    • FPT_AEX_EXT.1.4: 2
    • FPT_AEX_EXT.1.5: 1
    • FPT_API_EXT: 2
    • FPT_API_EXT.1: 2
    • FPT_API_EXT.1.1: 1
    • FPT_IDV_EXT: 2
    • FPT_IDV_EXT.1: 2
    • FPT_IDV_EXT.1.1: 1
    • FPT_LIB_EXT: 2
    • FPT_LIB_EXT.1: 2
    • FPT_LIB_EXT.1.1: 1
    • FPT_TUD_EXT: 2
    • FPT_TUD_EXT.1: 4
    • FPT_TUD_EXT.1.1: 1
    • FPT_TUD_EXT.1.2: 1
    • FPT_TUD_EXT.1.3: 2
    • FPT_TUD_EXT.1.4: 1
    • FPT_TUD_EXT.1.5: 1
    • FPT_TUD_EXT.2: 3
    • FPT_TUD_EXT.2.1: 1
    • FPT_TUD_EXT.2.2: 1
  • FTP:
    • FTP_DIT_EXT: 2
    • FTP_DIT_EXT.1: 3
    • FTP_DIT_EXT.1.1: 2
pdf_data/st_keywords/cc_claims
  • D:
    • D.H: 11
  • A:
    • A.PROPER_ADMIN: 1
    • A.PROPER_USER: 1
  • O:
    • O.INTEGRITY: 1
    • O.MANAGEMENT: 1
    • O.PROTECTED_COMMS: 1
    • O.PROTECTED_STORAGE: 1
    • O.QUALITY: 1
  • OE:
    • OE.PLATFORM: 1
    • OE.PROPER_ADMIN: 1
    • OE.PROPER_USER: 1
  • T:
    • T.LOCAL_ATTACK: 1
    • T.NETWORK_ATTACK: 1
    • T.NETWORK_EAVESDROP: 1
    • T.PHYSICAL_ACCESS: 1
pdf_data/st_keywords/vendor
  • Microsoft:
    • Microsoft: 20
pdf_data/st_keywords/eval_facility
  • BoozAllenHamilton:
    • Booz Allen Hamilton: 1
pdf_data/st_keywords/symmetric_crypto
  • DES:
    • DES:
      • DES: 29
  • AES_competition:
    • AES:
      • AES: 1
    • E2:
      • E2: 1
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA2:
      • SHA256: 6
pdf_data/st_keywords/crypto_protocol
  • TLS:
    • TLS:
      • TLS: 2
  • IPsec:
    • IPsec: 1
  • SSH:
    • SSH: 1
  • TLS:
    • TLS:
      • TLS: 19
pdf_data/st_keywords/randomness
  • PRNG:
    • DRBG: 4
  • RNG:
    • RBG: 1
pdf_data/st_keywords/standard_id
  • CC:
    • CCMB-2017-04-001: 1
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
    • CCMB-2017-04-004: 1
pdf_data/st_metadata
  • /Author: Niels Menke, Kai Reinhard, Melanie Volkamer, Dr. Sönke Maseberg, Florian Heinecke, Ibrahim Rabah, Jan Schirrmacher, Wolfgang Jung, Tobias Pressel
  • /CreationDate: D:20210528013617-07'00'
  • /Creator: Microsoft Word
  • /Keywords: remote Voting, eVoting, Online Wahlen, elektronische Wahlen
  • /ModDate: D:20210528013617-07'00'
  • /Producer: macOS Version 11.3.1 (Build 20E241) Quartz PDFContext
  • /Subject: 1.10
  • /Title: Security Target Polyas CORE zu Common Criteria Protection Profile BSI-PP-0037
  • pdf_file_size_bytes: 1705361
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 87
state/cert/pdf_hash Different Different
state/cert/txt_hash Different Different
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different