Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
F5 BIG-IP 13.1.1 for LTM+AFM
CSEC2017016 		genuscreen 7.0
BSI-DSZ-CC-1142-2020
name F5 BIG-IP 13.1.1 for LTM+AFM genuscreen 7.0
scheme SE DE
status archived active
not_valid_after 19.06.2024 17.08.2025
not_valid_before 19.06.2019 18.08.2020
cert_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/Certificate%20-%20F5%20BIG-IP%20FWcPP%20AFM%2013.1.1.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1142c_pdf.pdf
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/Certification%20Report%20-%20F5%20BIG-IP%20FWcPP%20AFM%2013.1.1.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1142a_pdf.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/F5%20BIG-IP%20FWcPP%20AFM%2013.1.1%20ST%20v0.14.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1142b_pdf.pdf
manufacturer F5 Networks, Inc. genua GmbH
manufacturer_web https://www.f5.com/ https://www.genua.de
security_level {} ASE_TSS.2, AVA_VAN.4, ALC_FLR.2, EAL4+
dgst ac9c6fb88bf26690 cb3f4b9ba75d937b
heuristics/cert_id CSEC2017016 BSI-DSZ-CC-1142-2020
heuristics/cert_lab [] BSI
heuristics/extracted_sars ASE_TSS.1, ADV_FSP.1, ALC_CMC.1, ASE_INT.1, ASE_SPD.1, ASE_OBJ.1, AVA_VAN.1, ATE_IND.1, ALC_CMS.1, AGD_OPE.1, ASE_REQ.1, ASE_CCL.1, ASE_ECD.1, AGD_PRE.1 ASE_INT.1, ALC_CMC.4, ASE_ECD.1, ADV_IMP.1, ATE_COV.2, ALC_TAT.1, ASE_SPD.1, ALC_DEL.1, ALC_LCD.1, AGD_OPE.1, AGD_PRE.1, ALC_CMS.4, ATE_FUN.1, ADV_ARC.1, ASE_OBJ.2, ADV_TDS.3, ATE_DPT.1, ASE_TSS.2, ALC_FLR.2, ASE_REQ.2, ALC_DVS.1, ADV_FSP.4, ATE_IND.2, AVA_VAN.4, ADV_TAT.1, ASE_CCL.1
heuristics/extracted_versions 13.1.1 7.0
heuristics/report_references/directly_referenced_by {} BSI-DSZ-CC-1194-2023
heuristics/report_references/indirectly_referenced_by {} BSI-DSZ-CC-1194-2023
heuristics/protection_profiles 5c8dd9013898f051 {}
protection_profile_links https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/CPP_FW_V2.0E.pdf {}
pdf_data/cert_filename Certificate - F5 BIG-IP FWcPP AFM 13.1.1.pdf 1142c_pdf.pdf
pdf_data/cert_keywords/cc_cert_id
  • SE:
    • CSEC2017016: 1
  • DE:
    • BSI-DSZ-CC-1142-2020: 1
pdf_data/cert_keywords/cc_security_level
  • EAL:
    • EAL 1: 1
    • EAL 2: 1
  • EAL:
    • EAL 2: 1
    • EAL 4: 2
    • EAL 4 augmented: 1
    • EAL 5: 1
pdf_data/cert_keywords/cc_sar
  • ALC:
    • ALC_FLR: 1
  • ASE:
    • ASE_SPD.1: 1
  • ALC:
    • ALC_FLR: 1
    • ALC_FLR.2: 1
  • ASE:
    • ASE_TSS.2: 1
  • AVA:
    • AVA_VAN.4: 1
pdf_data/cert_keywords/eval_facility
  • atsec:
    • atsec: 1
pdf_data/cert_keywords/standard_id
  • ISO:
    • ISO/IEC 15408: 2
    • ISO/IEC 18045: 2
pdf_data/cert_metadata
  • /CreationDate: D:20190812092351+02'00'
  • /Creator: RICOH MP C4504ex
  • /ModDate: D:20190812092551+02'00'
  • /Producer: RICOH MP C4504ex
  • pdf_file_size_bytes: 893020
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
  • /Author: Bundesamt für Sicherheit in der Informationstechnik
  • /CreationDate: D:20200826080252+02'00'
  • /Creator: Writer
  • /Keywords: "Common Criteria, Certification, Zertifizierung"
  • /ModDate: D:20200828100319+02'00'
  • /Producer: LibreOffice 6.2
  • /Subject: BSI-DSZ-CC-1142-2020 for genuscreen 7.0 from genua GmbH
  • /Title: Certification Report BSI-DSZ-CC-1142-2020
  • pdf_file_size_bytes: 284767
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
pdf_data/report_filename Certification Report - F5 BIG-IP FWcPP AFM 13.1.1.pdf 1142a_pdf.pdf
pdf_data/report_frontpage
  • DE:
  • DE:
    • cc_security_level: Common Criteria Part 3 extended EAL 4 augmented by ALC_FLR.2, ASE_TSS.2 and AVA_VAN.4
    • cc_version: Product specific Security Target, Common Criteria Part 2 extended
    • cert_id: BSI-DSZ-CC-1142-2020
    • cert_item: genuscreen 7.0
    • cert_lab: BSI
    • developer: genua GmbH
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
    • ref_protection_profiles: None
pdf_data/report_keywords/cc_cert_id
  • SE:
    • CSEC2017016: 1
  • DE:
    • BSI-DSZ-CC-1085-2019: 3
    • BSI-DSZ-CC-1142-2020: 15
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 1: 3
  • EAL:
    • EAL 1: 1
    • EAL 2: 2
    • EAL 2+: 1
    • EAL 4: 8
    • EAL 4 augmented: 3
    • EAL 5: 3
    • EAL 5+: 1
    • EAL 6: 1
pdf_data/report_keywords/cc_sar
  • ADV:
    • ADV_FSP.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.1: 1
    • ALC_CMS.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.1: 1
    • ASE_SPD.1: 4
    • ASE_TSS.1: 1
  • ATE:
    • ATE_IND.1: 1
  • AVA:
    • AVA_VAN.1: 1
  • ALC:
    • ALC_FLR: 3
    • ALC_FLR.2: 5
  • ASE:
    • ASE_TSS.2: 5
  • AVA:
    • AVA_VAN.4: 5
pdf_data/report_keywords/cc_claims
  • A:
    • A.ADMIN_CREDENTIALS_SECURE: 1
    • A.LIMITED_FUNCTIONALITY: 1
    • A.PHYSICAL_PROTECTION: 1
    • A.REGULAR_UPDATES: 1
    • A.RESIDUAL_INFORMATION: 1
    • A.TRUSTED_ADMINISTRATOR: 1
  • T:
    • T.NETWORK_ACCESS: 1
    • T.NETWORK_DISCLOSURE: 1
    • T.NETWORK_MISUSE: 1
    • T.PASSWORD_CRACKING: 1
    • T.SECURITY_FUNCTIONALITY_COMPROMISE: 1
    • T.SECURITY_FUNCTIONALITY_FAILURE: 1
    • T.UNATHORIZED_ADMINISTRATOR_ACCESS: 1
    • T.UNDETECTED_ACTIVITY: 1
    • T.UNTRUSTED_COMMUNICATION_CHANNELS: 1
    • T.UPDATE_COMPROMISE: 1
    • T.WEAK_AUTHENTICATION_ENDPOINTS: 1
    • T.WEAK_CRYPTOGRAPHY: 1
  • A:
    • A.ADMIN: 3
    • A.HANET: 3
    • A.INIT: 3
    • A.NOEVIL: 3
    • A.PHYSEC: 4
    • A.REMOTE_AUTH: 3
    • A.SINGEN: 3
    • A.TIMESTMP: 2
pdf_data/report_keywords/eval_facility
  • atsec:
    • atsec: 4
  • secuvera:
    • secuvera: 3
pdf_data/report_keywords/symmetric_crypto
  • constructions:
    • MAC:
      • HMAC: 1
pdf_data/report_keywords/asymmetric_crypto
  • FF:
    • DH:
      • DH: 1
pdf_data/report_keywords/hash_function
  • SHA:
    • SHA2:
      • SHA256: 5
      • SHA512: 5
pdf_data/report_keywords/crypto_scheme
  • MAC:
    • MAC: 1
  • KEX:
    • Key Exchange: 1
pdf_data/report_keywords/crypto_protocol
  • SSH:
    • SSH: 9
  • TLS:
    • SSL:
      • SSL: 7
    • TLS:
      • TLS: 10
      • TLSv1.1: 1
      • TLSv1.2: 1
  • IKE:
    • IKE: 1
  • IPsec:
    • IPsec: 7
  • SSH:
    • SSH: 5
  • VPN:
    • VPN: 7
pdf_data/report_keywords/randomness
  • RNG:
    • RNG: 2
pdf_data/report_keywords/cipher_mode
  • CBC:
    • CBC: 1
pdf_data/report_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 2
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7148: 1
    • BSI TR-02102: 1
pdf_data/report_keywords/standard_id
  • CC:
    • CCMB-2017-04-001: 1
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
    • CCMB-2017-04-004: 1
  • ISO:
    • ISO/IEC 17025: 2
  • BSI:
    • AIS 20: 2
    • AIS 32: 1
    • AIS 34: 1
    • AIS 38: 1
    • AIS20: 2
  • ISO:
    • ISO/IEC 15408: 4
    • ISO/IEC 17065: 2
    • ISO/IEC 18045: 4
pdf_data/report_keywords/certification_process
  • ConfidentialDocument:
    • being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification: 1
    • for genuscreen 7.0 from genua GmbH, Version 2, Date: 05.08.2020, secuvera GmbH (confidential document) [8] Guidance documentation for the TOE, genucenter Installations- und Konfigurationshandbuch: 1
  • OutOfScope:
    • The genucenter must be operated on real hardware. Running the genucenter in a virtual machine is out of scope for this TOE. The Security Target [6] is the basis for this certification. It is not based on a: 1
    • VPN, IKEv2/MOBIKE VPN, Dynamic Routing, genucenter HA, Remote Maintenance, genucenter REST API) are out of scope of the evaluated configuration. All information contained in the Security Target [6] and the: 1
    • components were installed on physical hardware, the installation of the TOE on virtual machines is out of scope of the evaluated configuration. For the operational configuration the firewall appliances and the: 1
    • out of scope: 3
pdf_data/report_metadata
  • /Author: AAXLN
  • /CreationDate: D:20190812073720+02'00'
  • /ModDate: D:20190812073720+02'00'
  • /Producer: Microsoft: Print To PDF
  • /Title: Microsoft Word - Certification Report - F5 BIG-IP v13.1.0 FWcPP 2.0
  • pdf_file_size_bytes: 916176
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 23
pdf_data/st_filename F5 BIG-IP FWcPP AFM 13.1.1 ST v0.14.pdf 1142b_pdf.pdf
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL2: 1
  • EAL:
    • EAL4: 4
    • EAL4 augmented: 1
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_FSP.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.1: 1
    • ALC_CMS.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.1: 1
    • ASE_REQ.1: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_IND.1: 1
  • AVA:
    • AVA_VAN.1: 1
  • ADV:
    • ADV_ARC: 1
    • ADV_ARC.1: 4
    • ADV_FSP: 1
    • ADV_FSP.1: 1
    • ADV_FSP.2: 2
    • ADV_FSP.4: 2
    • ADV_IMP: 1
    • ADV_IMP.1: 3
    • ADV_INT: 2
    • ADV_SPM: 2
    • ADV_TAT.1: 1
    • ADV_TDS: 1
    • ADV_TDS.1: 1
    • ADV_TDS.2: 1
    • ADV_TDS.3: 2
  • AGD:
    • AGD_OPE: 1
    • AGD_OPE.1: 3
    • AGD_PRE: 1
    • AGD_PRE.1: 3
  • ALC:
    • ALC_CMC: 1
    • ALC_CMC.4: 1
    • ALC_CMS: 1
    • ALC_CMS.4: 1
    • ALC_DEL: 1
    • ALC_DEL.1: 1
    • ALC_DVS: 1
    • ALC_DVS.1: 2
    • ALC_FLR: 1
    • ALC_FLR.2: 3
    • ALC_LCD: 1
    • ALC_LCD.1: 2
    • ALC_TAT: 1
    • ALC_TAT.1: 1
  • ASE:
    • ASE_CCL: 1
    • ASE_CCL.1: 1
    • ASE_ECD: 1
    • ASE_ECD.1: 3
    • ASE_INT: 1
    • ASE_INT.1: 1
    • ASE_OBJ: 1
    • ASE_OBJ.2: 1
    • ASE_REQ: 1
    • ASE_REQ.1: 2
    • ASE_REQ.2: 1
    • ASE_SPD: 1
    • ASE_SPD.1: 1
    • ASE_TSS: 1
    • ASE_TSS.2: 4
  • ATE:
    • ATE_COV: 1
    • ATE_COV.1: 1
    • ATE_COV.2: 1
    • ATE_DPT: 1
    • ATE_DPT.1: 2
    • ATE_FUN: 1
    • ATE_FUN.1: 4
    • ATE_IND: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN: 1
    • AVA_VAN.4: 4
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN.1: 5
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 2
    • FAU_GEN.2: 5
    • FAU_GEN.2.1: 1
    • FAU_STG: 5
    • FAU_STG.1: 5
    • FAU_STG.1.1: 1
    • FAU_STG.1.2: 1
    • FAU_STG.3: 1
    • FAU_STG_EXT.1: 6
    • FAU_STG_EXT.1.1: 1
    • FAU_STG_EXT.1.2: 1
    • FAU_STG_EXT.1.3: 1
  • FCS:
    • FCS_CKM.1: 6
    • FCS_CKM.1.1: 1
    • FCS_CKM.2: 5
    • FCS_CKM.2.1: 1
    • FCS_CKM.4: 5
    • FCS_CKM.4.1: 1
    • FCS_COP: 23
    • FCS_COP.1: 4
    • FCS_DTLS: 1
    • FCS_RBG_EXT.1: 7
    • FCS_RBG_EXT.1.1: 1
    • FCS_RBG_EXT.1.2: 1
    • FCS_SSHC_EXT.1: 1
    • FCS_SSHS_EXT.1: 6
    • FCS_SSHS_EXT.1.1: 1
    • FCS_SSHS_EXT.1.2: 2
    • FCS_SSHS_EXT.1.3: 1
    • FCS_SSHS_EXT.1.4: 2
    • FCS_SSHS_EXT.1.5: 1
    • FCS_SSHS_EXT.1.6: 1
    • FCS_SSHS_EXT.1.7: 1
    • FCS_SSHS_EXT.1.8: 1
    • FCS_TLSC_EXT.2: 8
    • FCS_TLSC_EXT.2.1: 2
    • FCS_TLSC_EXT.2.2: 2
    • FCS_TLSC_EXT.2.3: 2
    • FCS_TLSC_EXT.2.4: 2
    • FCS_TLSC_EXT.2.5: 2
    • FCS_TLSS_EXT.1: 12
    • FCS_TLSS_EXT.1.1: 4
    • FCS_TLSS_EXT.1.2: 4
    • FCS_TLSS_EXT.1.3: 4
    • FCS_TLSS_EXT.2: 2
    • FCS_TLS_EXT: 1
  • FDP:
    • FDP_RIP.2: 7
    • FDP_RIP.2.1: 1
  • FIA:
    • FIA_AFL.1: 6
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_PMG_EXT.1: 6
    • FIA_PMG_EXT.1.1: 1
    • FIA_UAU.7: 5
    • FIA_UAU.7.1: 1
    • FIA_UAU_EXT.2: 6
    • FIA_UAU_EXT.2.1: 1
    • FIA_UIA_EXT.1: 7
  • FMT:
    • FMT_MOF: 10
    • FMT_MOF.1: 2
    • FMT_MTD: 10
    • FMT_MTD.1: 2
    • FMT_SMF.1: 6
    • FMT_SMF.1.1: 1
    • FMT_SMR.2: 6
    • FMT_SMR.2.1: 1
    • FMT_SMR.2.2: 1
    • FMT_SMR.2.3: 1
  • FPT:
    • FPT_APW_EXT.1: 5
    • FPT_APW_EXT.1.1: 1
    • FPT_APW_EXT.1.2: 1
    • FPT_SKP_EXT.1: 6
    • FPT_SKP_EXT.1.1: 1
    • FPT_STM_EXT.1: 7
    • FPT_STM_EXT.1.1: 1
    • FPT_STM_EXT.1.2: 1
    • FPT_TST_EXT: 6
    • FPT_TST_EXT.1: 4
    • FPT_TUD_EXT.1: 6
    • FPT_TUD_EXT.1.1: 1
    • FPT_TUD_EXT.1.2: 1
    • FPT_TUD_EXT.1.3: 1
  • FTA:
    • FTA_SSL.3: 5
    • FTA_SSL.3.1: 1
    • FTA_SSL.4: 5
    • FTA_SSL.4.1: 1
    • FTA_SSL_EXT.1: 6
    • FTA_SSL_EXT.1.1: 1
    • FTA_TAB.1: 6
    • FTA_TAB.1.1: 1
  • FTP:
    • FTP_ITC.1: 6
    • FTP_ITC.1.1: 1
    • FTP_ITC.1.2: 1
    • FTP_ITC.1.3: 1
    • FTP_TRP: 5
    • FTP_TRP.1: 3
  • FAU:
    • FAU_GEN: 17
    • FAU_GEN.1: 5
    • FAU_GEN.2: 1
    • FAU_SAR: 10
    • FAU_SAR.1: 3
    • FAU_SAR.3: 1
  • FCS:
    • FCS_CKM: 86
    • FCS_CKM.1: 21
    • FCS_CKM.4: 22
    • FCS_COP: 67
    • FCS_COP.1: 20
    • FCS_RNG: 1
    • FCS_RNG.1: 12
    • FCS_RNG.1.1: 2
    • FCS_RNG.1.2: 2
  • FDP:
    • FDP_IFC: 43
    • FDP_IFC.1: 31
    • FDP_IFC.2: 2
    • FDP_IFF: 34
    • FDP_IFF.1: 37
    • FDP_ITT: 21
    • FDP_ITT.1: 3
  • FIA:
    • FIA_ATD: 5
    • FIA_ATD.1: 1
    • FIA_SOS: 5
    • FIA_SOS.1: 1
    • FIA_UAU: 10
    • FIA_UAU.2: 1
    • FIA_UAU.6: 1
    • FIA_UID: 5
    • FIA_UID.1: 3
    • FIA_UID.2: 2
  • FMT:
    • FMT_MOF: 5
    • FMT_MOF.1: 1
    • FMT_MSA: 125
    • FMT_MSA.1: 24
    • FMT_MSA.2: 3
    • FMT_MSA.3: 18
    • FMT_SMF: 39
    • FMT_SMF.1: 22
    • FMT_SMR: 6
    • FMT_SMR.1: 25
  • FPT:
    • FPT_ITT: 7
    • FPT_ITT.1: 3
    • FPT_STM.1: 3
    • FPT_TEE: 7
    • FPT_TEE.1: 2
    • FPT_TRC: 5
    • FPT_TRC.1: 1
    • FPT_TRC.1.1: 1
    • FPT_TRC.1.2: 1
  • FTP:
    • FTP_STM.1: 1
pdf_data/st_keywords/cc_claims
  • A:
    • A.ADMIN_CREDENTIALS_SECURE: 1
    • A.LIMITED_FUNCTIONALITY: 1
    • A.PHYSICAL_PROTECTION: 1
    • A.REGULAR_UPDATES: 1
    • A.RESIDUAL_INFORMATION: 1
    • A.TRUSTED_ADMINISTRATOR: 1
  • OE:
    • OE.ADMIN_CREDENTIALS_SECURE: 1
    • OE.NO_GENERAL_PURPOSE: 1
    • OE.PHYSICAL: 1
    • OE.RESIDUAL_INFORMATION: 1
    • OE.TRUSTED_ADMIN: 1
    • OE.UPDATES: 1
  • T:
    • T.NETWORK_ACCESS: 1
    • T.NETWORK_DISCLOSURE: 1
    • T.NETWORK_MISUSE: 1
    • T.PASSWORD_CRACKING: 1
    • T.SECURITY_FUNCTIONALITY_COMPROMISE: 1
    • T.SECURITY_FUNCTIONALITY_FAILURE: 1
    • T.UNAUTHORIZED_ADMINISTRATOR_ACCESS: 1
    • T.UNDETECTED_ACTIVITY: 1
    • T.UNTRUSTED_COMMUNICATION_CHANNELS: 1
    • T.UPDATE_COMPROMISE: 1
    • T.WEAK_AUTHENTICATION_ENDPOINTS: 1
    • T.WEAK_CRYPTOGRAPHY: 1
  • A:
    • A.ADMIN: 3
    • A.HANET: 2
    • A.INIT: 3
    • A.NOEVIL: 3
    • A.PHYSEC: 3
    • A.REMOTE_AUTH: 2
    • A.SINGEN: 4
    • A.TIMESTMP: 3
  • O:
    • O.AUDREC: 5
    • O.AUTH: 11
    • O.AVAIL: 7
    • O.CONFID: 11
    • O.INTEG: 8
    • O.MEDIAT: 4
    • O.NOREPLAY: 11
  • OE:
    • OE.ADMIN: 2
    • OE.HANET: 4
    • OE.INIT: 7
    • OE.NOEVIL: 3
    • OE.PHYSEC: 4
    • OE.REMOTE_AUTH: 1
    • OE.SINGEN: 4
    • OE.TIMESTMP: 5
  • T:
    • T.MEDIAT: 3
    • T.MMODIFY: 3
    • T.MODIFY: 3
    • T.MSNIFF: 3
    • T.NOAUTH: 3
    • T.SELPRO: 3
    • T.SNIFF: 3
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 12
  • constructions:
    • MAC:
      • HMAC: 1
      • HMAC-SHA-256: 1
  • AES_competition:
    • AES:
      • AES: 13
  • constructions:
    • MAC:
      • HMAC: 4
      • HMAC-SHA-256: 1
pdf_data/st_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 3
    • ECDH:
      • ECDH: 3
      • ECDHE: 1
    • ECDSA:
      • ECDSA: 3
  • FF:
    • DH:
      • DH: 1
      • Diffie-Hellman: 4
  • ECC:
    • ECC:
      • ECC: 3
    • ECDH:
      • ECDH: 2
  • FF:
    • DH:
      • DH: 2
      • Diffie-Hellman: 6
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 5
    • SHA2:
      • SHA-256: 4
      • SHA-384: 5
      • SHA256: 2
  • SHA:
    • SHA2:
      • SHA-256: 5
      • SHA-512: 3
      • SHA256: 3
pdf_data/st_keywords/crypto_scheme
  • MAC:
    • MAC: 8
  • KEX:
    • Key Exchange: 5
  • MAC:
    • MAC: 2
pdf_data/st_keywords/crypto_protocol
  • SSH:
    • SSH: 70
  • TLS:
    • DTLS:
      • DTLS: 3
    • SSL:
      • SSL: 15
      • SSL 1.0: 1
      • SSL 2.0: 5
      • SSL 3.0: 5
    • TLS:
      • TLS: 121
      • TLS 1.0: 5
      • TLS 1.1: 8
      • TLS 1.2: 10
      • TLS v1.1: 16
      • TLS v1.2: 18
      • TLS1.1: 2
      • TLSv1.1: 1
      • TLSv1.2: 1
  • VPN:
    • VPN: 1
  • IKE:
    • IKE: 82
    • IKEv1: 7
    • IKEv2: 6
  • IPsec:
    • IPsec: 37
  • SSH:
    • SSH: 111
  • TLS:
    • TLS:
      • TLS: 3
  • VPN:
    • VPN: 20
pdf_data/st_keywords/randomness
  • PRNG:
    • DRBG: 1
  • RNG:
    • RBG: 1
    • RNG: 3
  • RNG:
    • RNG: 5
pdf_data/st_keywords/cipher_mode
  • CBC:
    • CBC: 5
  • CTR:
    • CTR: 1
  • GCM:
    • GCM: 4
  • CBC:
    • CBC: 6
  • CTR:
    • CTR: 5
pdf_data/st_keywords/ecc_curve
  • NIST:
    • P-256: 6
    • P-384: 8
    • secp256r1: 7
    • secp384r1: 6
pdf_data/st_keywords/tls_cipher_suite
  • TLS:
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: 5
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: 3
    • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: 3
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: 5
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384: 3
    • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: 3
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: 7
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: 4
    • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: 4
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: 7
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384: 4
    • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: 4
    • TLS_RSA_WITH_AES_128_CBC_SHA: 7
    • TLS_RSA_WITH_AES_128_CBC_SHA256: 4
    • TLS_RSA_WITH_AES_128_GCM_SHA256: 2
    • TLS_RSA_WITH_AES_256_CBC_SHA: 7
    • TLS_RSA_WITH_AES_256_CBC_SHA256: 4
    • TLS_RSA_WITH_AES_256_GCM_SHA384: 2
pdf_data/st_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 22
  • LibreSSL:
    • LibreSSL: 1
  • OpenSSL:
    • OpenSSL: 1
pdf_data/st_keywords/side_channel_analysis
  • SCA:
    • side channel: 1
pdf_data/st_keywords/technical_report_id
  • BSI:
    • BSI TR-02102: 2
    • BSI TR-02102-1: 2
    • BSI TR-02102-2: 2
    • BSI TR-02102-3: 2
    • BSI TR-02102-4: 2
pdf_data/st_keywords/standard_id
  • CC:
    • CCMB-2017-04-001: 1
  • FIPS:
    • FIPS 140-2: 1
    • FIPS PUB 186-4: 7
  • ISO:
    • ISO/IEC 10118-: 1
    • ISO/IEC 14888-3: 2
    • ISO/IEC 18031:2011: 3
    • ISO/IEC 9796-2: 2
    • ISO/IEC 9797-: 3
  • NIST:
    • NIST SP 800-56A: 1
    • NIST SP 800-56B: 1
  • PKCS:
    • PKCS #1: 1
    • PKCS12: 1
  • RFC:
    • RFC 2460: 1
    • RFC 2818: 3
    • RFC 2986: 1
    • RFC 3268: 12
    • RFC 3513: 1
    • RFC 4253: 2
    • RFC 4346: 4
    • RFC 4443: 1
    • RFC 4492: 21
    • RFC 5246: 10
    • RFC 5280: 2
    • RFC 5288: 2
    • RFC 5289: 19
    • RFC 5735: 1
    • RFC 5759: 1
    • RFC 6125: 2
    • RFC 6187: 1
    • RFC 768: 1
    • RFC 791: 1
    • RFC 792: 1
    • RFC 793: 1
    • RFC2460: 1
    • RFC3513: 1
    • RFC4443: 1
    • RFC5280: 1
    • RFC5735: 1
    • RFC768: 1
    • RFC791: 1
    • RFC792: 1
    • RFC793: 1
    • RFC959: 1
  • X509:
    • X.509: 12
  • BSI:
    • AIS 20: 2
    • AIS 31: 2
    • AIS20: 2
    • AIS31: 1
  • CC:
    • CCMB-2012-04-003: 1
    • CCMB-2017-04-001: 1
    • CCMB-2017-04-002: 1
  • FIPS:
    • FIPS180-4: 2
  • PKCS:
    • PKCS#1: 9
  • RFC:
    • RFC 2104: 1
    • RFC 2409: 1
    • RFC 2460: 1
    • RFC 3447: 1
    • RFC 3526: 1
    • RFC 4109: 1
    • RFC 4253: 1
    • RFC 4306: 1
    • RFC 4418: 1
    • RFC 5639: 1
    • RFC 6151: 1
    • RFC 6668: 1
    • RFC2104: 6
    • RFC2409: 9
    • RFC2460: 1
    • RFC3502: 1
    • RFC3526: 4
    • RFC4253: 3
    • RFC4301: 1
    • RFC4344: 1
    • RFC4418: 4
    • RFC4432: 1
    • RFC5639: 3
    • RFC5656: 1
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • 1.4.10.5 No Dynamic Routing The dynamic routing feature which uses OSPF only works with IPv4 and is out of scope for this TOE. 1.4.10.6 No genucenter HA While the HA setup for the genuscreens is part of the: 1
    • and genucenter versions 200, 400, 600 and 800 in the field with hardware revision 6 and 7 which are out of scope for the current certification. The software genuscreen 7.0 runs on this hardware with the same: 1
    • cryptocard to perform cryptographic operations for IPsec usage. However, usage of the cryptocard is out of scope for this TOE. 1.4.10.2 No VPN to Other Appliances or Mobile Clients It is possible to build VPN: 1
    • hardware has not been evaluated. Also, operating the genucenter software on a virtual machine is out of scope for this certification. If the virtual genucenter is used, the end user has to ensure that all: 1
    • is out of scope. 1.4.10.8 No genucenter Rest API The genucenter REST API is out of scope and must not be used. 1.4.11 Physical Scope The physical scope of the TOE consists only of software: 1
    • out of scope: 7
    • the HA setup for genucenter is out of scope. 1.4.10.7 No Remote Maintenance The remote maintenance feature using a rendezvous genuscreen: 1
pdf_data/st_metadata
  • /AAPL:Keywords: []
  • /Author: Rasma
  • /CreationDate: D:20190808112321Z
  • /Creator: Word
  • /Keywords:
  • /ModDate: D:20190812072019+02'00'
  • /Producer: macOS Version 10.14.4 (Build 18E226) Quartz PDFContext
  • /Subject:
  • /Title: F5 BIG-IP AFM 13.1.1 ST v0.14
  • pdf_file_size_bytes: 1158773
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 71
state/cert/convert_garbage True False
state/cert/pdf_hash Different Different
state/cert/txt_hash Different Different
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different