Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Palo Alto Networks PA-500, PA-2000 Series, PA-4000 Series, and PA-5000 Series Next-Generation Firewall with PAN-OS 4.0.12-h2 and User Identification Agent v3.1.2
CCEVS-VR-VID-10392-2013 		Sm@rtCafe Expert Version 5.0
BSI-DSZ-CC-0537-2009
name Palo Alto Networks PA-500, PA-2000 Series, PA-4000 Series, and PA-5000 Series Next-Generation Firewall with PAN-OS 4.0.12-h2 and User Identification Agent v3.1.2 Sm@rtCafe Expert Version 5.0
category Boundary Protection Devices and Systems ICs, Smart Cards and Smart Card-Related Devices and Systems
scheme US DE
not_valid_after 22.04.2015 01.09.2019
not_valid_before 11.04.2013 17.12.2009
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid10392-vr.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0537a_pdf.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid10392-st.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0537b_pdf.pdf
manufacturer Palo Alto Networks, Inc. G+D Mobile Security GmbH
manufacturer_web https://www.paloaltonetworks.com/ https://www.gi-de.com/de/de/mobile-security/
security_level ATE_DPT.3, EAL4+, ALC_FLR.2 EAL4+
dgst bdc993babbbfb13c b7f131020fc0cf4f
heuristics/cert_id CCEVS-VR-VID-10392-2013 BSI-DSZ-CC-0537-2009
heuristics/cert_lab US BSI
heuristics/extracted_sars ALC_CMC.4, ADV_IMP.1, ATE_COV.2, ALC_TAT.1, ALC_DEL.1, ALC_LCD.1, ADV_FSP.5, AGD_OPE.1, ADV_INT.1, AVA_VAN.3, AGD_PRE.1, ALC_CMS.4, ATE_FUN.1, ATE_DPT.3, ADV_ARC.1, ADV_TDS.4, ALC_FLR.2, ALC_DVS.1, ATE_IND.2 ATE_COV.2, ADV_RCR.1, ALC_TAT.1, AVA_VLA.4, ADV_HLD.2, ATE_FUN.1, AGD_USR.1, AVA_SOF.1, ATE_IND.2, AGD_ADM.1, ADV_LLD.1, ALC_DVS.2, ALC_LCD.1, ADV_IMP.2, ATE_DPT.1, ADV_FSP.2, ADV_SPM.1, AVA_MSU.3
heuristics/extracted_versions 3.1.2, 4.0.12 5.0
heuristics/report_references/directly_referencing {} BSI-DSZ-CC-0404-2007, BSI-DSZ-CC-0411-2007, BSI-DSZ-CC-0410-2007
heuristics/report_references/indirectly_referencing {} BSI-DSZ-CC-0404-2007, BSI-DSZ-CC-0411-2007, BSI-DSZ-CC-0410-2007
heuristics/scheme_data
  • category: Firewall
  • certification_date: 11.04.2013
  • evaluation_facility: Leidos Common Criteria Testing Laboratory
  • expiration_date: 11.04.2015
  • id: CCEVS-VR-VID10392
  • product: Palo Alto Networks PA-500, PA-2000 Series, PA-4000 Series, and PA-5000 Series Next-Generation Firewall with PAN-OS 4.0.12-h2 and User Identification Agent v3.1.2
  • scheme: US
  • url: https://www.niap-ccevs.org/product/10392
  • vendor: Palo Alto Networks, Inc.
heuristics/st_references/directly_referencing {} BSI-DSZ-CC-0404-2007, BSI-DSZ-CC-0411-2007, BSI-DSZ-CC-0410-2007
heuristics/st_references/indirectly_referencing {} BSI-DSZ-CC-0404-2007, BSI-DSZ-CC-0411-2007, BSI-DSZ-CC-0410-2007
maintenance_updates
pdf_data/report_filename st_vid10392-vr.pdf 0537a_pdf.pdf
pdf_data/report_frontpage
  • DE:
  • US:
    • cert_id: CCEVS-VR-VID10392-2013
    • cert_item: Palo Alto Networks PA-500, PA-2000 Series, PA-4000 Series, and PA-5000 Series Next-Generation Firewall running PAN-OS 4.0.12-h2
    • cert_lab: US NIAP
  • DE:
    • cert_id: BSI-DSZ-CC-0537-2009
    • cert_item: Sm@rtCafe Expert Version 5.0
    • cert_lab: BSI
    • developer: Giesecke & Devrient GmbH
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
  • US:
pdf_data/report_keywords/cc_cert_id
  • US:
    • CCEVS-VR-VID10392-2013: 1
  • DE:
    • BSI-DSZ-CC-0404: 1
    • BSI-DSZ-CC-0404-2007: 3
    • BSI-DSZ-CC-0410: 1
    • BSI-DSZ-CC-0410-2007: 3
    • BSI-DSZ-CC-0411: 1
    • BSI-DSZ-CC-0411-2007: 3
    • BSI-DSZ-CC-0537: 3
    • BSI-DSZ-CC-0537-2009: 19
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 4: 3
    • EAL 4 augmented: 3
  • EAL:
    • EAL 1: 1
    • EAL 4: 9
    • EAL 4 augmented: 3
    • EAL 7: 1
    • EAL1: 5
    • EAL2: 3
    • EAL3: 4
    • EAL4: 7
    • EAL5: 6
    • EAL5+: 1
    • EAL6: 3
    • EAL7: 4
pdf_data/report_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.4: 1
    • ADV_IMP.1: 1
    • ADV_TDS.3: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.4: 1
    • ALC_CMS.4: 1
    • ALC_DEL.1: 1
    • ALC_DVS.1: 1
    • ALC_FLR.2: 5
    • ALC_LCD.1: 1
    • ALC_TAT.1: 1
  • ATE:
    • ATE_COV.2: 1
    • ATE_DPT: 1
    • ATE_DPT.3: 4
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.3: 1
  • ACM:
    • ACM_AUT: 2
    • ACM_AUT.1: 1
    • ACM_CAP: 2
    • ACM_CAP.4: 1
    • ACM_SCP: 2
    • ACM_SCP.2: 1
  • ADO:
    • ADO_DEL: 2
    • ADO_DEL.2: 1
    • ADO_IGS: 2
    • ADO_IGS.1: 1
  • ADV:
    • ADV_FSP: 2
    • ADV_HLD: 2
    • ADV_IMP: 2
    • ADV_IMP.2: 5
    • ADV_INT: 2
    • ADV_LLD: 2
    • ADV_RCR: 2
    • ADV_SPM: 2
  • AGD:
    • AGD_ADM: 2
    • AGD_USR: 2
  • ALC:
    • ALC_DVS: 2
    • ALC_DVS.1: 1
    • ALC_FLR: 2
    • ALC_LCD: 1
    • ALC_LCD.1: 1
    • ALC_TAT: 2
    • ALC_TAT.1: 1
  • APE:
    • APE_DES: 1
    • APE_ENV: 1
    • APE_INT: 1
    • APE_OBJ: 1
    • APE_REQ: 1
    • APE_SRE: 1
  • ASE:
    • ASE_DES: 1
    • ASE_ENV: 1
    • ASE_INT: 1
    • ASE_OBJ: 1
    • ASE_PPC: 1
    • ASE_REQ: 1
    • ASE_SRE: 1
    • ASE_TSS: 1
  • ATE:
    • ATE_COV: 2
    • ATE_DPT: 2
    • ATE_FUN: 4
    • ATE_IND: 4
  • AVA:
    • AVA_CCA: 2
    • AVA_MSU: 2
    • AVA_SOF: 3
    • AVA_VLA: 5
    • AVA_VLA.2: 1
    • AVA_VLA.3: 1
    • AVA_VLA.4: 6
pdf_data/report_keywords/cc_claims
  • OE:
    • OE.APPLET: 1
    • OE.NATIVE: 1
    • OE.VERIFICATION: 1
pdf_data/report_keywords/vendor
  • Microsoft:
    • Microsoft: 3
  • GD:
    • Giesecke & Devrient: 10
  • NXP:
    • NXP: 11
pdf_data/report_keywords/eval_facility
  • TUV:
    • TÜV Informationstechnik: 2
pdf_data/report_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 2
  • DES:
    • 3DES:
      • 3-DES: 1
      • 3DES: 1
    • DES:
      • DES: 2
pdf_data/report_keywords/asymmetric_crypto
  • RSA:
    • RSA 1024: 1
pdf_data/report_keywords/crypto_scheme
  • KEX:
    • Key Exchange: 2
pdf_data/report_keywords/crypto_protocol
  • IKE:
    • IKE: 2
  • SSH:
    • SSH: 8
    • SSHv1: 1
  • TLS:
    • SSL:
      • SSL: 12
    • TLS:
      • TLS: 1
  • VPN:
    • VPN: 8
pdf_data/report_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 1
pdf_data/report_keywords/side_channel_analysis
  • other:
    • JIL: 4
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7125: 2
    • BSI 7148: 1
    • BSI 7149: 1
pdf_data/report_keywords/cplc_data
  • ICFab:
    • IC Fabricator: 2
  • ICType:
    • IC Type: 2
pdf_data/report_keywords/standard_id
  • CC:
    • CCIMB-2006-09-001: 1
    • CCIMB-2007-09-002: 1
    • CCIMB-2007-09-003: 1
    • CCIMB-2007-09-004: 1
  • FIPS:
    • FIPS 140-2: 1
  • NIST:
    • NIST SP 800-53: 2
  • BSI:
    • AIS 20: 3
    • AIS 25: 2
    • AIS 26: 2
    • AIS 32: 1
    • AIS 34: 3
    • AIS 35: 2
    • AIS 36: 2
    • AIS 37: 1
    • AIS20: 1
    • AIS36: 3
  • ISO:
    • ISO/IEC 15408:2005: 3
pdf_data/report_keywords/certification_process
  • ConfidentialDocument:
    • 7] Evaluation Technical Report, Version 2, Date: 2009-10-14, BSI-DSZ-CC-0537, TUVIT (confidential document) [8] Configuration list for the TOE, Version 1.4, Date: 2009-08-27, Giesecke & Devrient: 1
    • Version 3.0, Status 27.08.2009, Security Target SmartCafe Expert V5.0, Giesecke & Devrient (confidential document) 8 specifically • AIS 20, Version 1, 2 December 1999, Funktionalitätsklassen und: 1
  • OutOfScope:
    • are tested through Module Tests. As the initialisation and the personalisation process are out of scope of this evaluation, the TOE was always tested in its usage phase. 16 / 36 BSI-DSZ-CC-0537-2009: 1
    • contained in one or more Java packages. Note, that applets are not part of the TOE and therefore out of scope. The hardware platform was always the NXP P5CD144V0B. ● an emulator which is required for test: 1
    • out of scope: 3
    • the Smart Card at the initialisation site. The initialisation and the personalisation process are out of scope of this evaluation. 13 / 36 Certification Report BSI-DSZ-CC-0537-2009 The hardware product can be: 1
pdf_data/report_metadata
  • /Author: SAIC
  • /CreationDate: D:20130514115641
  • /Creator: Microsoft® Office Word 2007
  • /ModDate: D:20130514115641
  • /Producer: Microsoft® Office Word 2007
  • /Subject: Validation Report
  • /Title: Palo Alto Networks Inc. PA-Series Next Generation Firewall
  • pdf_file_size_bytes: 483560
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 28
  • /Author: Bundesamt für Sicherheit in der Informationstechnik
  • /CreationDate: D:20100111131526+01'00'
  • /Creator: Writer
  • /Keywords: Sm@rtCafe ExpertVersion 5.0, Giesecke & Devrient GmbH, Java Card, Common Criteria, Certification, Zertifzierung
  • /ModDate: D:20100111135143+01'00'
  • /Producer: StarOffice 9
  • /Subject: Common Criteria Certification
  • /Title: Certification Report BSI-DSZ-CC-0537-2009
  • pdf_file_size_bytes: 1096697
  • pdf_hyperlinks: http://de.wikipedia.org/wiki/Electrically_Erasable_Programmable_Read_Only_Memory, http://www.bsi.bund.de/
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 36
pdf_data/st_filename st_vid10392-st.pdf 0537b_pdf.pdf
pdf_data/st_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-0404: 1
    • BSI-DSZ-CC-0404-2007: 2
    • BSI-DSZ-CC-0410-2007: 2
    • BSI-DSZ-CC-0411-2007: 2
pdf_data/st_keywords/cc_protection_profile_id
  • BSI:
    • BSI-PP-0002: 1
    • BSI-PP-0026: 3
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL 4: 1
    • EAL4: 3
    • EAL4 augmented: 3
  • EAL:
    • EAL 4: 2
    • EAL 4 augmented: 1
    • EAL 5: 3
    • EAL 5 augmented: 1
    • EAL4: 8
    • EAL4 augmented: 2
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_ARC: 1
    • ADV_ARC.1: 10
    • ADV_FSP: 1
    • ADV_FSP.4: 11
    • ADV_FSP.5: 1
    • ADV_IMP: 1
    • ADV_IMP.1: 7
    • ADV_INT.1: 1
    • ADV_TDS: 1
    • ADV_TDS.3: 15
    • ADV_TDS.4: 1
  • AGD:
    • AGD_OPE: 1
    • AGD_OPE.1: 10
    • AGD_PRE: 1
    • AGD_PRE.1: 6
  • ALC:
    • ALC_CMC: 1
    • ALC_CMC.4: 15
    • ALC_CMS: 1
    • ALC_CMS.4: 6
    • ALC_DEL: 1
    • ALC_DEL.1: 5
    • ALC_DVS: 1
    • ALC_DVS.1: 5
    • ALC_FLR: 1
    • ALC_FLR.2: 16
    • ALC_LCD: 1
    • ALC_LCD.1: 6
    • ALC_TAT: 1
    • ALC_TAT.1: 7
  • ATE:
    • ATE_COV: 1
    • ATE_COV.2: 5
    • ATE_DPT: 1
    • ATE_DPT.3: 9
    • ATE_FUN: 1
    • ATE_FUN.1: 8
    • ATE_IND: 1
    • ATE_IND.2: 7
  • AVA:
    • AVA_VAN: 1
    • AVA_VAN.3: 7
  • ACM:
    • ACM_AUT: 2
    • ACM_AUT.1: 11
    • ACM_CAP: 2
    • ACM_CAP.3: 3
    • ACM_CAP.4: 22
    • ACM_SCP: 3
    • ACM_SCP.2: 8
  • ADO:
    • ADO_DEL: 2
    • ADO_DEL.2: 10
    • ADO_IGS: 1
    • ADO_IGS.1: 10
  • ADV:
    • ADV_FSP: 2
    • ADV_FSP.1: 10
    • ADV_FSP.2: 20
    • ADV_HLD: 2
    • ADV_HLD.1: 2
    • ADV_HLD.2: 22
    • ADV_IMP: 1
    • ADV_IMP.1: 3
    • ADV_IMP.2: 22
    • ADV_LLD: 2
    • ADV_LLD.1: 21
    • ADV_RCR: 2
    • ADV_RCR.1: 15
    • ADV_SPM: 2
    • ADV_SPM.1: 31
  • AGD:
    • AGD_ADM: 2
    • AGD_ADM.1: 26
    • AGD_USR: 2
    • AGD_USR.1: 19
  • ALC:
    • ALC_DVS: 2
    • ALC_DVS.1: 11
    • ALC_DVS.2: 1
    • ALC_LCD: 2
    • ALC_LCD.1: 9
    • ALC_TAT: 2
    • ALC_TAT.1: 13
  • ATE:
    • ATE_COV: 2
    • ATE_COV.2: 8
    • ATE_DPT: 2
    • ATE_DPT.1: 6
    • ATE_FUN: 2
    • ATE_FUN.1: 17
    • ATE_IND: 1
    • ATE_IND.2: 9
  • AVA:
    • AVA_MSU: 2
    • AVA_MSU.2: 15
    • AVA_MSU.3: 1
    • AVA_SOF: 2
    • AVA_SOF.1: 9
    • AVA_VLA: 1
    • AVA_VLA.2: 1
    • AVA_VLA.3: 1
    • AVA_VLA.4: 28
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_ARP: 2
    • FAU_ARP.1: 4
    • FAU_ARP.1.1: 1
    • FAU_GEN: 10
    • FAU_GEN.1: 4
    • FAU_GEN.2: 1
    • FAU_SAA: 7
    • FAU_SAA.1: 2
    • FAU_SAR: 4
    • FAU_SAR.1: 3
    • FAU_SAR.1.1: 1
    • FAU_SAR.1.2: 1
    • FAU_SAR.2: 4
    • FAU_SAR.2.1: 1
    • FAU_SAR.3: 3
    • FAU_SAR.3.1: 1
    • FAU_SEL: 5
    • FAU_SEL.1: 2
    • FAU_STG: 10
    • FAU_STG.1: 4
    • FAU_STG.1.1: 1
    • FAU_STG.1.2: 1
    • FAU_STG.3: 4
    • FAU_STG.3.1: 1
  • FCS:
    • FCS_CKM: 2
    • FCS_CKM.1: 9
    • FCS_CKM.1.1: 2
    • FCS_CKM.2: 3
    • FCS_CKM.2.1: 1
    • FCS_CKM.4: 5
    • FCS_CKM.4.1: 1
    • FCS_CKM_EXT: 1
    • FCS_CKM_EXT.2: 1
    • FCS_COP: 1
    • FCS_COP.1: 27
    • FCS_COP.1.1: 6
    • FCS_COP_EXT.1: 1
  • FDP:
    • FDP_IFC.1: 19
    • FDP_IFC.1.1: 3
    • FDP_IFF.1: 21
    • FDP_IFF.1.1: 3
    • FDP_IFF.1.2: 5
    • FDP_IFF.1.3: 3
    • FDP_IFF.1.4: 3
    • FDP_IFF.1.5: 3
    • FDP_IFF.1.6: 2
    • FDP_ITC.1: 2
    • FDP_ITC.2: 2
    • FDP_RIP: 1
    • FDP_RIP.2: 3
    • FDP_RIP.2.1: 1
  • FIA:
    • FIA_AFL: 1
    • FIA_AFL.1: 4
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_ATD: 1
    • FIA_ATD.1: 4
    • FIA_ATD.1.1: 1
    • FIA_UAU: 1
    • FIA_UAU.1: 5
    • FIA_UAU.1.1: 1
    • FIA_UAU.1.2: 1
    • FIA_UID: 1
    • FIA_UID.2: 3
    • FIA_UID.2.1: 1
    • FIA_USB: 1
    • FIA_USB.1: 3
    • FIA_USB.1.1: 1
  • FMT:
    • FMT_MOF.1: 25
    • FMT_MOF.1.1: 7
    • FMT_MSA: 11
    • FMT_MSA.1: 5
    • FMT_MSA.3: 11
    • FMT_MSA.3.1: 1
    • FMT_MSA.3.2: 1
    • FMT_MTD.1: 24
    • FMT_MTD.1.1: 7
    • FMT_MTD.2: 10
    • FMT_MTD.2.1: 2
    • FMT_MTD.2.2: 2
    • FMT_REV: 1
    • FMT_REV.1: 3
    • FMT_REV.1.1: 1
    • FMT_REV.1.2: 1
    • FMT_SMR: 1
    • FMT_SMR.1: 1
    • FMT_SMR.2: 3
    • FMT_SMR.2.1: 1
    • FMT_SMR.2.2: 1
    • FMT_SMR.2.3: 2
  • FPT:
    • FPT_FLS: 2
    • FPT_FLS.1: 7
    • FPT_FLS.1.1: 1
    • FPT_ITC: 3
    • FPT_ITC.1: 5
    • FPT_ITC.1.1: 1
    • FPT_ITT: 2
    • FPT_ITT.1: 6
    • FPT_ITT.1.1: 1
    • FPT_RCV: 1
    • FPT_RCV.1: 3
    • FPT_RCV.1.1: 1
    • FPT_RPL: 1
    • FPT_RPL.1: 3
    • FPT_RPL.1.1: 1
    • FPT_RPL.1.2: 1
    • FPT_STM: 1
    • FPT_STM.1: 6
    • FPT_STM.1.1: 1
    • FPT_TST.1: 10
    • FPT_TST.1.1: 2
    • FPT_TST.1.2: 2
    • FPT_TST.1.3: 2
  • FRU:
    • FRU_FLT: 2
    • FRU_FLT.1: 6
    • FRU_FLT.1.1: 1
    • FRU_RSA.1: 11
    • FRU_RSA.1.1: 2
  • FTA:
    • FTA_SSL: 4
    • FTA_SSL.1: 1
    • FTA_SSL.2: 4
    • FTA_SSL.2.1: 1
    • FTA_SSL.2.2: 1
    • FTA_SSL.3: 5
    • FTA_SSL.3.1: 1
    • FTA_TAB: 1
    • FTA_TAB.1: 4
    • FTA_TAB.1.1: 1
    • FTA_TSE: 1
    • FTA_TSE.1: 3
    • FTA_TSE.1.1: 1
  • FTP:
    • FTP_ITC.1: 8
    • FTP_ITC.1.1: 2
    • FTP_ITC.1.2: 2
    • FTP_ITC.1.3: 2
    • FTP_TRP.1: 8
    • FTP_TRP.1.1: 2
    • FTP_TRP.1.2: 2
    • FTP_TRP.1.3: 2
  • FAU:
    • FAU_ARP: 7
    • FAU_ARP.1: 11
    • FAU_SAA.1: 3
  • FCO:
    • FCO_NRO: 1
    • FCO_NRO.2: 9
  • FCS:
    • FCS_CKM.1: 15
    • FCS_CKM.1.1: 2
    • FCS_CKM.2: 6
    • FCS_CKM.2.1: 2
    • FCS_CKM.3: 5
    • FCS_CKM.3.1: 2
    • FCS_CKM.4: 13
    • FCS_CKM.4.1: 2
    • FCS_COP.1: 16
    • FCS_COP.1.1: 4
    • FCS_RND: 7
    • FCS_RND.1: 14
    • FCS_RND.1.1: 6
  • FDP:
    • FDP_ACC: 20
    • FDP_ACC.1: 22
    • FDP_ACC.2: 19
    • FDP_ACF: 15
    • FDP_ACF.1: 51
    • FDP_IFC: 23
    • FDP_IFC.1: 28
    • FDP_IFC.2: 11
    • FDP_IFF: 13
    • FDP_IFF.1: 50
    • FDP_IFF.2: 10
    • FDP_IFF.2.7: 1
    • FDP_ITC.1: 4
    • FDP_ITC.2: 25
    • FDP_ITT.1: 3
    • FDP_RIP: 43
    • FDP_RIP.1: 34
    • FDP_ROL: 4
    • FDP_ROL.1: 15
    • FDP_ROL.1.1: 2
    • FDP_SDI.2: 6
    • FDP_SDI.2.1: 2
    • FDP_SDI.2.2: 2
    • FDP_UIT: 1
    • FDP_UIT.1: 6
  • FIA:
    • FIA_ATD: 3
    • FIA_ATD.1: 7
    • FIA_SOS.2: 1
    • FIA_UID: 13
    • FIA_UID.1: 25
    • FIA_UID.2: 4
    • FIA_USB.1: 7
    • FIA_USB.1.1: 3
    • FIA_USB.1.2: 3
    • FIA_USB.1.3: 3
  • FMT:
    • FMT_LIM: 6
    • FMT_LIM.1: 20
    • FMT_LIM.1.1: 3
    • FMT_LIM.2: 13
    • FMT_LIM.2.1: 2
    • FMT_MSA: 49
    • FMT_MSA.1: 41
    • FMT_MSA.2: 16
    • FMT_MSA.3: 45
    • FMT_MTD: 3
    • FMT_MTD.1: 8
    • FMT_MTD.3: 5
    • FMT_MTD.3.1: 2
    • FMT_REV: 1
    • FMT_REV.1: 8
    • FMT_SMF.1: 28
    • FMT_SMR: 34
    • FMT_SMR.1: 63
  • FPR:
    • FPR_UNO.1: 7
    • FPR_UNO.1.1: 2
  • FPT:
    • FPT_AMT: 4
    • FPT_AMT.1: 11
    • FPT_FLS: 14
    • FPT_FLS.1: 27
    • FPT_ITT.1: 3
    • FPT_PHP: 3
    • FPT_PHP.3: 10
    • FPT_RCV: 9
    • FPT_RCV.3: 34
    • FPT_RCV.4: 7
    • FPT_RND.1: 1
    • FPT_RVM: 3
    • FPT_RVM.1: 15
    • FPT_RVM.1.1: 2
    • FPT_SEP: 3
    • FPT_SEP.1: 13
    • FPT_SEP.1.1: 2
    • FPT_SEP.1.2: 2
    • FPT_TDC.1: 6
    • FPT_TDC.1.1: 2
    • FPT_TDC.1.2: 3
    • FPT_TST: 1
    • FPT_TST.1: 11
    • FPT_TST.1.1: 2
    • FPT_TST.1.2: 3
    • FPT_TST.1.3: 2
  • FRU:
    • FRU_FLT: 3
    • FRU_FLT.1: 6
    • FRU_FLT.2: 5
    • FRU_RSA: 2
    • FRU_RSA.1: 8
  • FTP:
    • FTP_ITC: 3
    • FTP_ITC.1: 11
    • FTP_TRP.1: 2
pdf_data/st_keywords/cc_claims
  • A:
    • A.NO_GENERAL_PURPOSE: 1
    • A.NO_TOE_BYPASS: 1
    • A.PHYSICAL: 1
    • A.UIA_ONLY: 1
  • O:
    • O.ADMIN_ROLE: 1
    • O.AUDIT_GENERATION: 1
    • O.AUDIT_PROTECTION: 1
    • O.AUDIT_REVIEW: 1
    • O.CHANGE_MANAGEMENT: 1
    • O.CORRECT_: 1
    • O.CRYPTOGRAPHIC_: 1
    • O.CRYPTOGRAPHY_: 1
    • O.DISPLAY_BANNER: 1
    • O.DOCUMENT_KEY_LEAKAGE: 1
    • O.MAINT_MODE: 2
    • O.MANAGE: 2
    • O.MEDIATE: 4
    • O.REPLAY_DETECTION: 1
    • O.RESIDUAL_INFORMATION: 1
    • O.RESOURCE_SHARING: 1
    • O.ROBUST_ADMIN_GUIDANCE: 1
    • O.ROBUST_TOE_ACCESS: 1
    • O.SELF_PROTECTION: 2
    • O.SOUND_IMPLEMENTATION: 1
    • O.THOROUGH_FUNCTIONAL_: 1
    • O.TIME_STAMPS: 1
    • O.TRUSTED_PATH: 1
    • O.VULNERABILITY_ANALYSIS_TEST: 1
  • OE:
    • OE.CRYPTANALYTIC: 1
    • OE.NO_GENERAL_PURPOSE: 1
    • OE.NO_TOE_BYPASS: 1
    • OE.PHYSICAL: 1
    • OE.UIA_ONLY: 1
  • T:
    • T.ADDRESS_MASQUERADE: 1
    • T.ADMIN_ERROR: 1
    • T.ADMIN_ROGUE: 1
    • T.AUDIT_COMPROMISE: 1
    • T.CRYPTO_COMPROMISE: 1
    • T.FLAWED_DESIGN: 1
    • T.FLAWED_IMPLEMENTATION: 1
    • T.MALICIOUS_TSF_: 1
    • T.MASQUERADE: 1
    • T.POOR_TEST: 1
    • T.REPLAY: 1
    • T.RESIDUAL_DATA: 1
    • T.RESOURCE_EXHAUSTION: 1
    • T.SPOOFING: 1
    • T.UNATTENDED_SESSION: 1
    • T.UNAUTHORIZED_ACCESS: 1
    • T.UNIDENTIFIED_ACTIONS: 1
    • T.UNKNOWN_STATE: 1
  • A:
    • A.APPLET: 5
    • A.NATIVE: 9
    • A.VERIFICA: 1
    • A.VERIFICATION: 5
  • D:
    • D.API_DATA: 3
    • D.APP_: 1
    • D.APP_CODE: 7
    • D.APP_C_DATA: 3
    • D.APP_I_DATA: 5
    • D.CRYPTO: 6
    • D.JCS_: 1
    • D.JCS_CODE: 3
    • D.JCS_DATA: 4
    • D.PIN: 6
    • D.SEC_DATA: 7
  • O:
    • O.ALARM: 11
    • O.APPLET: 29
    • O.CARD-: 7
    • O.CARD-MANAGEMENT: 7
    • O.CARD_MANAGEMENT: 7
    • O.CHECK_INIT: 6
    • O.CIPHER: 11
    • O.CODE_PCKG: 8
    • O.CODE_PKG: 7
    • O.DELETION: 7
    • O.FIREWALL: 15
    • O.INSTALL: 13
    • O.JAVAOBJECT: 24
    • O.KEY-MNGT: 8
    • O.KEY_MNGT: 1
    • O.LOA: 1
    • O.LOAD: 8
    • O.NATIVE: 10
    • O.OBJ-DELETION: 4
    • O.OPERATE: 13
    • O.PACKAGE: 6
    • O.PIN-: 2
    • O.PIN-MNGT: 8
    • O.REALLO: 1
    • O.REALLOCATIO: 1
    • O.REALLOCATION: 6
    • O.REMOTE: 7
    • O.REMOTE_MTHD: 5
    • O.REMOTE_OBJ: 8
    • O.REMOTE_OBJECT: 1
    • O.RESOURCES: 9
    • O.RMI_SERVICE: 13
    • O.RND: 11
    • O.ROR: 5
    • O.SCP: 53
    • O.SHRD_VAR: 1
    • O.SHRD_VAR_CO: 2
    • O.SHRD_VAR_CONF: 1
    • O.SHRD_VAR_CONFID: 5
    • O.SHRD_VAR_IN: 1
    • O.SHRD_VAR_INTEG: 5
    • O.SID: 14
    • O.SIDE_CHANNEL: 9
    • O.TRANSACTION: 8
    • O.XYZ: 1
  • OE:
    • OE.APPLET: 9
    • OE.NATIVE: 9
    • OE.VERIFICAT: 1
    • OE.VERIFICATION: 22
    • OE.XYZ: 1
  • OP:
    • OP.APPLET_DELETION: 5
    • OP.APPLET_INSTALLATION: 5
    • OP.BYTECODE: 1
    • OP.CREATE: 3
    • OP.DELETE_APPLET: 3
    • OP.DELETE_PCKG: 2
    • OP.DELETE_PCKG_APPLET: 2
    • OP.GET_ROR: 2
    • OP.INVK_INTERFACE: 1
    • OP.INVOKE: 2
    • OP.JAVA: 2
    • OP.PACKAGE_DELETION: 5
    • OP.PACKAGE_LOADING: 5
    • OP.PUT: 5
    • OP.RECEIVE: 1
    • OP.RET_RORD: 3
    • OP.SEND: 1
  • OSP:
    • OSP.VERIFICATION: 3
  • R:
    • R.CMRG: 4
    • R.JAVA: 15
  • T:
    • T.A: 1
    • T.CHIP: 4
    • T.CONF: 1
    • T.CONFID-: 2
    • T.CONFID-APPLI-DATA: 3
    • T.CONFID-JCS-: 1
    • T.CONFID-JCS-CODE: 3
    • T.CONFID-JCS-DATA: 3
    • T.DELETION: 5
    • T.EXE-: 5
    • T.EXE-CODE: 7
    • T.EXE-CODE-REMOTE: 3
    • T.INSTALL: 5
    • T.INTEG: 1
    • T.INTEG-: 4
    • T.INTEG-APPLI-: 2
    • T.INTEG-APPLI-CODE: 8
    • T.INTEG-APPLI-DATA: 8
    • T.INTEG-JCS-: 4
    • T.INTEG-JCS-CODE: 3
    • T.INTEG-JCS-DATA: 3
    • T.LEAKAGE: 7
    • T.NATIV: 1
    • T.NATIVE: 4
    • T.OBJ-: 1
    • T.OBJ-DELETION: 3
    • T.PHYSI: 1
    • T.PHYSICAL: 7
    • T.RESOURC: 1
    • T.RESOURCES: 3
    • T.RND: 11
    • T.SID: 14
pdf_data/st_keywords/vendor
  • Microsoft:
    • Microsoft: 1
  • GD:
    • Giesecke & Devrient: 8
  • NXP:
    • NXP: 14
    • NXP Semiconductors: 3
pdf_data/st_keywords/eval_facility
  • Leidos:
    • Leidos: 1
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 7
      • AES-256: 2
  • constructions:
    • MAC:
      • HMAC: 5
      • HMAC-SHA-256: 1
  • AES_competition:
    • AES:
      • AES: 16
      • AES-: 1
  • DES:
    • 3DES:
      • 3-DES: 5
      • Triple-DES: 1
    • DES:
      • DES: 9
pdf_data/st_keywords/asymmetric_crypto
  • FF:
    • DH:
      • DH: 6
      • Diffie-Hellman: 4
  • RSA:
    • RSA-2048: 2
  • FF:
    • DSA:
      • DSA: 1
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 15
    • SHA2:
      • SHA-2: 1
      • SHA-256: 1
      • SHA-384: 2
      • SHA-512: 2
  • SHA:
    • SHA2:
      • SHA256: 1
pdf_data/st_keywords/crypto_scheme
  • KEX:
    • Key Exchange: 2
  • MAC:
    • MAC: 1
pdf_data/st_keywords/crypto_protocol
  • IKE:
    • IKE: 13
    • IKEv1: 2
  • IPsec:
    • IPsec: 1
  • SSH:
    • SSH: 14
    • SSHv1: 1
  • TLS:
    • SSL:
      • SSL: 22
    • TLS:
      • TLS: 3
      • TLS 1.2: 1
      • TLS v1.0: 3
      • TLSv1.0: 1
  • VPN:
    • VPN: 40
pdf_data/st_keywords/randomness
  • PRNG:
    • PRNG: 1
  • RNG:
    • RNG: 8
  • RNG:
    • RND: 22
  • TRNG:
    • TRNG: 3
pdf_data/st_keywords/cipher_mode
  • CBC:
    • CBC: 3
  • CTR:
    • CTR: 2
  • ECB:
    • ECB: 2
  • CBC:
    • CBC: 1
  • ECB:
    • ECB: 2
pdf_data/st_keywords/tls_cipher_suite
  • TLS:
    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA: 1
    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA: 1
    • TLS_RSA_WITH_AES_128_CBC_SHA: 1
    • TLS_RSA_WITH_AES_256_CBC_SHA: 1
pdf_data/st_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 6
pdf_data/st_keywords/side_channel_analysis
  • FI:
    • DFA: 2
    • Malfunction: 6
    • malfunction: 2
    • physical tampering: 1
  • SCA:
    • DPA: 3
    • Leak-Inherent: 6
    • SPA: 2
    • physical probing: 1
    • side channel: 1
    • side-channel: 1
    • timing attack: 1
    • timing attacks: 1
  • other:
    • Reverse Engineering: 1
pdf_data/st_keywords/standard_id
  • CC:
    • CCMB-2007-09-002: 1
    • CCMB-2007-09-003: 1
  • FIPS:
    • FIPS 140-2: 12
    • FIPS 180-3: 1
    • FIPS PUB 140-2: 7
    • FIPS140-2: 1
  • NIST:
    • NIST SP 800-57: 3
  • RFC:
    • RFC 792: 2
  • BSI:
    • AIS 20: 2
    • AIS 31: 1
    • AIS20: 3
    • AIS31: 2
  • CC:
    • CCIMB-2005-08-001: 1
    • CCIMB-2005-08-002: 1
    • CCIMB-2005-08-003: 1
    • CCMB-2005-08-004: 1
  • FIPS:
    • FIPS PUB 197: 1
    • FIPS PUB 46-3: 1
  • ICAO:
    • ICAO: 3
  • ISO:
    • ISO/IEC 7816-3: 1
    • ISO/IEC 7816-5: 1
  • PKCS:
    • PKCS1: 2
  • RFC:
    • RFC 3447: 1
pdf_data/st_keywords/javacard_version
  • GlobalPlatform:
    • GlobalPlatform 2.1.1: 4
  • JavaCard:
    • Java Card 2.2: 1
    • Java Card 2.2.2: 3
pdf_data/st_keywords/javacard_packages
  • java:
    • java.lang: 1
    • java.rmi: 2
  • javacard:
    • javacard.framework: 5
    • javacard.framework.applet: 1
    • javacard.framework.service: 1
    • javacard.security: 2
  • javacardx:
    • javacardx.crypto: 2
    • javacardx.rmi: 1
    • javacardx.security: 1
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • a timeout policy that prevent them from being blocked should a card fails to answer. That point is out of scope of this ST, though. 8.1.1.14 T.PHYSICAL Covered by O.SCP.IC. Physical protections rely on the SCP: 1
    • out of scope: 2
    • the Smart Card at the initialisation site. The initialisation and the personalisation process are out of scope of this evaluation. The TOE’s delivery scope beside the initialisation file and the mask keys: 1
pdf_data/st_metadata
  • /Author: G&D/CSRD22
  • /Comments: Open
  • /Company: GuD
  • /CreationDate: D:20091027093026+01'00'
  • /Creator: Acrobat PDFMaker 7.0 für Word
  • /Keywords: Version 1.0 / Status 27.10.2009, Java Card, Standard 2.2 configuration, SUN Java Card System PP, Global Platform 2.1.1 Card Implementation, NXP P5CD040/080/144
  • /ModDate: D:20091027105141+01'00'
  • /Producer: Acrobat Distiller 7.0 (Windows)
  • /SourceModified: D:20091027082407
  • /Subject: Security Target Lite SmartCafe Expert V5.0
  • /Title: Security Target Lite SmartCafe Expert V5.0
  • pdf_file_size_bytes: 2381740
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: True
  • pdf_number_of_pages: 178
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different