Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Palo Alto Networks PA-500, PA-2000 Series, PA-4000 Series, and PA-5000 Series Next-Generation Firewall with PAN-OS 4.0.12-h2 and User Identification Agent v3.1.2
CCEVS-VR-VID-10392-2013 		Red Hat Enterprise Linux Version 6.2 on IBM Hardware for Power and System z Architectures
BSI-DSZ-CC-0848-2012
name Palo Alto Networks PA-500, PA-2000 Series, PA-4000 Series, and PA-5000 Series Next-Generation Firewall with PAN-OS 4.0.12-h2 and User Identification Agent v3.1.2 Red Hat Enterprise Linux Version 6.2 on IBM Hardware for Power and System z Architectures
category Boundary Protection Devices and Systems Operating Systems
scheme US DE
not_valid_after 22.04.2015 01.09.2019
not_valid_before 11.04.2013 23.10.2012
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid10392-vr.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0848a_pdf.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid10392-st.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0848b_pdf.pdf
manufacturer Palo Alto Networks, Inc. Red Hat, Inc.
manufacturer_web https://www.paloaltonetworks.com/ https://www.redhat.com
security_level ATE_DPT.3, EAL4+, ALC_FLR.2 EAL4+, ALC_FLR.3
dgst bdc993babbbfb13c eb21447ac76f2965
heuristics/cert_id CCEVS-VR-VID-10392-2013 BSI-DSZ-CC-0848-2012
heuristics/cert_lab US BSI
heuristics/cpe_matches {} cpe:2.3:o:redhat:enterprise_linux:6.2:*:*:*:*:*:*:*, cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*
heuristics/related_cves {} CVE-2001-0690, CVE-2000-0844, CVE-2002-0044, CVE-2000-0701, CVE-2001-0641, CVE-2001-0889, CVE-2000-1134, CVE-2002-0836, CVE-2001-0736, CVE-2000-0230, CVE-1999-0297, CVE-2000-0508, CVE-2000-0017, CVE-2002-0638, CVE-2000-0751, CVE-2001-0197, CVE-2000-1009, CVE-2001-0309, CVE-2001-0886, CVE-2001-0233, CVE-2007-3103, CVE-2001-0441, CVE-2000-0867, CVE-1999-0037, CVE-2001-0473, CVE-2000-0750, CVE-2016-7091, CVE-2002-1232, CVE-1999-0894, CVE-2000-0607, CVE-2000-0170, CVE-1999-0798, CVE-2000-1125, CVE-2001-0977, CVE-2000-0606, CVE-2001-1002, CVE-2000-0378, CVE-2003-0041, CVE-2001-0128, CVE-2000-0604, CVE-2001-1028, CVE-2017-1000253, CVE-1999-1288, CVE-2002-0080, CVE-2000-1207
heuristics/extracted_sars ALC_CMC.4, ADV_IMP.1, ATE_COV.2, ALC_TAT.1, ALC_DEL.1, ALC_LCD.1, ADV_FSP.5, AGD_OPE.1, ADV_INT.1, AVA_VAN.3, AGD_PRE.1, ALC_CMS.4, ATE_FUN.1, ATE_DPT.3, ADV_ARC.1, ADV_TDS.4, ALC_FLR.2, ALC_DVS.1, ATE_IND.2 ASE_INT.1, ALC_CMC.4, ASE_ECD.1, APE_ECD.1, ADV_IMP.1, ATE_COV.2, ASE_TSS.1, ALC_TAT.1, ASE_SPD.1, ALC_DEL.1, ALC_LCD.1, ALC_FLR.3, AGD_OPE.1, AVA_VAN.3, AGD_PRE.1, ALC_CMS.4, ATE_FUN.1, APE_REQ.2, ADV_ARC.1, ASE_OBJ.2, APE_CCL.1, ADV_TDS.3, ATE_DPT.1, ASE_REQ.2, ALC_DVS.1, ADV_INT.3, APE_INT.1, APE_SPD.1, ADV_FSP.4, ATE_IND.2, APE_OBJ.2, ASE_CCL.1, ADV_SPM.1
heuristics/extracted_versions 3.1.2, 4.0.12 6.2
heuristics/report_references/directly_referencing {} BSI-DSZ-CC-0754-2012
heuristics/report_references/indirectly_referencing {} BSI-DSZ-CC-0754-2012
heuristics/scheme_data
  • category: Firewall
  • certification_date: 11.04.2013
  • evaluation_facility: Leidos Common Criteria Testing Laboratory
  • expiration_date: 11.04.2015
  • id: CCEVS-VR-VID10392
  • product: Palo Alto Networks PA-500, PA-2000 Series, PA-4000 Series, and PA-5000 Series Next-Generation Firewall with PAN-OS 4.0.12-h2 and User Identification Agent v3.1.2
  • scheme: US
  • url: https://www.niap-ccevs.org/product/10392
  • vendor: Palo Alto Networks, Inc.
heuristics/protection_profiles {} 70cdc8b0cf910af7
maintenance_updates
protection_profile_links {} https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0067b_pdf.pdf
pdf_data/report_filename st_vid10392-vr.pdf 0848a_pdf.pdf
pdf_data/report_frontpage
  • DE:
  • US:
    • cert_id: CCEVS-VR-VID10392-2013
    • cert_item: Palo Alto Networks PA-500, PA-2000 Series, PA-4000 Series, and PA-5000 Series Next-Generation Firewall running PAN-OS 4.0.12-h2
    • cert_lab: US NIAP
  • DE:
    • cert_id: BSI-DSZ-CC-0848-2012
    • cert_item: Red Hat Enterprise Linux, Version 6.2 on IBM Hardware for Power and System z Architectures
    • cert_lab: BSI
    • developer: Red Hat, Inc
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
  • US:
pdf_data/report_keywords/cc_cert_id
  • US:
    • CCEVS-VR-VID10392-2013: 1
  • DE:
    • BSI-DSZ-CC-0754-2012: 3
    • BSI-DSZ-CC-0848-2012: 21
pdf_data/report_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP-0067-: 2
    • BSI-CC-PP-0067-2010: 1
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 4: 3
    • EAL 4 augmented: 3
  • EAL:
    • EAL 4: 6
    • EAL 4 augmented: 3
    • EAL1: 7
    • EAL2: 3
    • EAL3: 4
    • EAL4: 8
    • EAL5: 6
    • EAL6: 3
    • EAL7: 4
  • ITSEC:
    • ITSEC Evaluation: 1
pdf_data/report_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.4: 1
    • ADV_IMP.1: 1
    • ADV_TDS.3: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.4: 1
    • ALC_CMS.4: 1
    • ALC_DEL.1: 1
    • ALC_DVS.1: 1
    • ALC_FLR.2: 5
    • ALC_LCD.1: 1
    • ALC_TAT.1: 1
  • ATE:
    • ATE_COV.2: 1
    • ATE_DPT: 1
    • ATE_DPT.3: 4
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.3: 1
  • ADV:
    • ADV_ARC: 1
    • ADV_ARC.1: 1
    • ADV_FSP: 1
    • ADV_FSP.1: 1
    • ADV_FSP.2: 1
    • ADV_FSP.3: 1
    • ADV_FSP.4: 1
    • ADV_FSP.5: 1
    • ADV_FSP.6: 1
    • ADV_IMP: 1
    • ADV_IMP.1: 1
    • ADV_IMP.2: 1
    • ADV_INT: 1
    • ADV_INT.1: 1
    • ADV_INT.2: 1
    • ADV_INT.3: 1
    • ADV_SPM: 1
    • ADV_SPM.1: 1
    • ADV_TDS: 1
    • ADV_TDS.1: 1
    • ADV_TDS.2: 1
    • ADV_TDS.3: 1
    • ADV_TDS.4: 1
    • ADV_TDS.5: 1
    • ADV_TDS.6: 1
  • AGD:
    • AGD_OPE: 1
    • AGD_OPE.1: 1
    • AGD_PRE: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC: 1
    • ALC_CMC.1: 1
    • ALC_CMC.2: 1
    • ALC_CMC.3: 1
    • ALC_CMC.4: 1
    • ALC_CMC.5: 1
    • ALC_CMS: 1
    • ALC_CMS.1: 1
    • ALC_CMS.2: 1
    • ALC_CMS.3: 1
    • ALC_CMS.4: 1
    • ALC_CMS.5: 1
    • ALC_DEL: 1
    • ALC_DEL.1: 1
    • ALC_DVS: 1
    • ALC_DVS.1: 1
    • ALC_DVS.2: 1
    • ALC_FLR: 1
    • ALC_FLR.1: 1
    • ALC_FLR.2: 1
    • ALC_FLR.3: 5
    • ALC_LCD.1: 1
    • ALC_LCD.2: 1
    • ALC_TAT: 1
    • ALC_TAT.1: 1
    • ALC_TAT.2: 1
    • ALC_TAT.3: 1
  • APE:
    • APE_CCL.1: 1
    • APE_ECD.1: 1
    • APE_INT.1: 1
    • APE_OBJ.1: 1
    • APE_OBJ.2: 1
    • APE_REQ.1: 1
    • APE_REQ.2: 1
    • APE_SPD.1: 1
  • ASE:
    • ASE_CCL: 1
    • ASE_CCL.1: 1
    • ASE_ECD: 1
    • ASE_ECD.1: 1
    • ASE_INT: 1
    • ASE_INT.1: 1
    • ASE_OBJ: 1
    • ASE_OBJ.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.1: 1
    • ASE_REQ.2: 1
    • ASE_SPD: 1
    • ASE_SPD.1: 1
    • ASE_TSS: 1
    • ASE_TSS.1: 1
    • ASE_TSS.2: 1
  • ATE:
    • ATE_COV: 1
    • ATE_COV.1: 1
    • ATE_COV.2: 1
    • ATE_COV.3: 1
    • ATE_DPT: 1
    • ATE_DPT.1: 1
    • ATE_DPT.2: 1
    • ATE_DPT.3: 1
    • ATE_DPT.4: 1
    • ATE_FUN: 1
    • ATE_FUN.1: 1
    • ATE_FUN.2: 1
    • ATE_IND: 1
    • ATE_IND.1: 1
    • ATE_IND.2: 1
    • ATE_IND.3: 1
  • AVA:
    • AVA_VAN: 2
    • AVA_VAN.1: 1
    • AVA_VAN.2: 1
    • AVA_VAN.3: 1
    • AVA_VAN.4: 1
    • AVA_VAN.5: 1
pdf_data/report_keywords/vendor
  • Microsoft:
    • Microsoft: 3
pdf_data/report_keywords/eval_facility
  • atsec:
    • atsec: 3
pdf_data/report_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 1
    • Serpent:
      • Serpent: 1
    • Twofish:
      • Twofish: 1
  • DES:
    • 3DES:
      • TDES: 1
pdf_data/report_keywords/asymmetric_crypto
  • FF:
    • DSA:
      • DSA: 1
  • RSA:
    • RSA 1024: 1
pdf_data/report_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 1
    • SHA2:
      • SHA-2: 4
      • SHA-256: 3
      • SHA512: 1
pdf_data/report_keywords/crypto_scheme
  • KEX:
    • Key Exchange: 2
  • KEX:
    • Key Exchange: 2
  • MAC:
    • MAC: 1
pdf_data/report_keywords/crypto_protocol
  • IKE:
    • IKE: 2
  • SSH:
    • SSH: 8
    • SSHv1: 1
  • TLS:
    • SSL:
      • SSL: 12
    • TLS:
      • TLS: 1
  • VPN:
    • VPN: 8
  • PGP:
    • PGP: 1
  • SSH:
    • SSH: 7
    • SSHv2: 1
pdf_data/report_keywords/randomness
  • RNG:
    • RNG: 1
pdf_data/report_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 1
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7125: 2
    • BSI 7148: 1
pdf_data/report_keywords/standard_id
  • CC:
    • CCIMB-2006-09-001: 1
    • CCIMB-2007-09-002: 1
    • CCIMB-2007-09-003: 1
    • CCIMB-2007-09-004: 1
  • FIPS:
    • FIPS 140-2: 1
  • NIST:
    • NIST SP 800-53: 2
  • BSI:
    • AIS 20: 2
    • AIS 32: 1
    • AIS 38: 1
  • FIPS:
    • FIPS 180-3: 2
    • FIPS PUB 186-3: 2
  • RFC:
    • RFC 4253: 2
pdf_data/report_keywords/certification_process
  • ConfidentialDocument:
    • 9th 2012), CI list from CVS showing zipl bootmanager for zSeries platform (August 9th 2012), (all confidential documents) [11] Technical Specification zArchitecture Principles of Operation, Ninth edition, August 2010: 1
    • Version 4, October 9th 2012, Final Evaluation Technical Report, atsec information security GmbH (confidential document) [10] Configuration lists for the TOE: CI list of CC evidence, test cases, test plans, man pages: 1
pdf_data/report_metadata
  • /Author: SAIC
  • /CreationDate: D:20130514115641
  • /Creator: Microsoft® Office Word 2007
  • /ModDate: D:20130514115641
  • /Producer: Microsoft® Office Word 2007
  • /Subject: Validation Report
  • /Title: Palo Alto Networks Inc. PA-Series Next Generation Firewall
  • pdf_file_size_bytes: 483560
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 28
  • /Author: Bundesamt für Sicherheit in der Informationstechnik
  • /CreationDate: D:20121026111748+02'00'
  • /Creator: Writer
  • /Keywords: "Common Criteria, Certification, Zertifizierung, Operating System Protection Profile, OSPP, Linux, Red Hat Enterprise Linux 6.2"
  • /ModDate: D:20121029114318+01'00'
  • /Producer: LibreOffice 3.5
  • /Title: Certification Report BSI-DSZ-CC-0848-2012
  • pdf_file_size_bytes: 956655
  • pdf_hyperlinks: https://www.bsi.bund.de/zertifizierung, http://www.commoncriteriaportal.org/, https://www.bsi.bund.de/
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 40
pdf_data/st_filename st_vid10392-st.pdf 0848b_pdf.pdf
pdf_data/st_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-0848: 1
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL 4: 1
    • EAL4: 3
    • EAL4 augmented: 3
  • EAL:
    • EAL4: 3
    • EAL4 augmented: 1
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_ARC: 1
    • ADV_ARC.1: 10
    • ADV_FSP: 1
    • ADV_FSP.4: 11
    • ADV_FSP.5: 1
    • ADV_IMP: 1
    • ADV_IMP.1: 7
    • ADV_INT.1: 1
    • ADV_TDS: 1
    • ADV_TDS.3: 15
    • ADV_TDS.4: 1
  • AGD:
    • AGD_OPE: 1
    • AGD_OPE.1: 10
    • AGD_PRE: 1
    • AGD_PRE.1: 6
  • ALC:
    • ALC_CMC: 1
    • ALC_CMC.4: 15
    • ALC_CMS: 1
    • ALC_CMS.4: 6
    • ALC_DEL: 1
    • ALC_DEL.1: 5
    • ALC_DVS: 1
    • ALC_DVS.1: 5
    • ALC_FLR: 1
    • ALC_FLR.2: 16
    • ALC_LCD: 1
    • ALC_LCD.1: 6
    • ALC_TAT: 1
    • ALC_TAT.1: 7
  • ATE:
    • ATE_COV: 1
    • ATE_COV.2: 5
    • ATE_DPT: 1
    • ATE_DPT.3: 9
    • ATE_FUN: 1
    • ATE_FUN.1: 8
    • ATE_IND: 1
    • ATE_IND.2: 7
  • AVA:
    • AVA_VAN: 1
    • AVA_VAN.3: 7
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.4: 1
    • ADV_IMP.1: 1
    • ADV_TDS.3: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.4: 1
    • ALC_CMS.4: 1
    • ALC_DEL.1: 1
    • ALC_DVS.1: 1
    • ALC_FLR.3: 4
    • ALC_LCD.1: 1
    • ALC_TAT.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.2: 1
    • ATE_DPT.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.3: 1
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_ARP: 2
    • FAU_ARP.1: 4
    • FAU_ARP.1.1: 1
    • FAU_GEN: 10
    • FAU_GEN.1: 4
    • FAU_GEN.2: 1
    • FAU_SAA: 7
    • FAU_SAA.1: 2
    • FAU_SAR: 4
    • FAU_SAR.1: 3
    • FAU_SAR.1.1: 1
    • FAU_SAR.1.2: 1
    • FAU_SAR.2: 4
    • FAU_SAR.2.1: 1
    • FAU_SAR.3: 3
    • FAU_SAR.3.1: 1
    • FAU_SEL: 5
    • FAU_SEL.1: 2
    • FAU_STG: 10
    • FAU_STG.1: 4
    • FAU_STG.1.1: 1
    • FAU_STG.1.2: 1
    • FAU_STG.3: 4
    • FAU_STG.3.1: 1
  • FCS:
    • FCS_CKM: 2
    • FCS_CKM.1: 9
    • FCS_CKM.1.1: 2
    • FCS_CKM.2: 3
    • FCS_CKM.2.1: 1
    • FCS_CKM.4: 5
    • FCS_CKM.4.1: 1
    • FCS_CKM_EXT: 1
    • FCS_CKM_EXT.2: 1
    • FCS_COP: 1
    • FCS_COP.1: 27
    • FCS_COP.1.1: 6
    • FCS_COP_EXT.1: 1
  • FDP:
    • FDP_IFC.1: 19
    • FDP_IFC.1.1: 3
    • FDP_IFF.1: 21
    • FDP_IFF.1.1: 3
    • FDP_IFF.1.2: 5
    • FDP_IFF.1.3: 3
    • FDP_IFF.1.4: 3
    • FDP_IFF.1.5: 3
    • FDP_IFF.1.6: 2
    • FDP_ITC.1: 2
    • FDP_ITC.2: 2
    • FDP_RIP: 1
    • FDP_RIP.2: 3
    • FDP_RIP.2.1: 1
  • FIA:
    • FIA_AFL: 1
    • FIA_AFL.1: 4
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_ATD: 1
    • FIA_ATD.1: 4
    • FIA_ATD.1.1: 1
    • FIA_UAU: 1
    • FIA_UAU.1: 5
    • FIA_UAU.1.1: 1
    • FIA_UAU.1.2: 1
    • FIA_UID: 1
    • FIA_UID.2: 3
    • FIA_UID.2.1: 1
    • FIA_USB: 1
    • FIA_USB.1: 3
    • FIA_USB.1.1: 1
  • FMT:
    • FMT_MOF.1: 25
    • FMT_MOF.1.1: 7
    • FMT_MSA: 11
    • FMT_MSA.1: 5
    • FMT_MSA.3: 11
    • FMT_MSA.3.1: 1
    • FMT_MSA.3.2: 1
    • FMT_MTD.1: 24
    • FMT_MTD.1.1: 7
    • FMT_MTD.2: 10
    • FMT_MTD.2.1: 2
    • FMT_MTD.2.2: 2
    • FMT_REV: 1
    • FMT_REV.1: 3
    • FMT_REV.1.1: 1
    • FMT_REV.1.2: 1
    • FMT_SMR: 1
    • FMT_SMR.1: 1
    • FMT_SMR.2: 3
    • FMT_SMR.2.1: 1
    • FMT_SMR.2.2: 1
    • FMT_SMR.2.3: 2
  • FPT:
    • FPT_FLS: 2
    • FPT_FLS.1: 7
    • FPT_FLS.1.1: 1
    • FPT_ITC: 3
    • FPT_ITC.1: 5
    • FPT_ITC.1.1: 1
    • FPT_ITT: 2
    • FPT_ITT.1: 6
    • FPT_ITT.1.1: 1
    • FPT_RCV: 1
    • FPT_RCV.1: 3
    • FPT_RCV.1.1: 1
    • FPT_RPL: 1
    • FPT_RPL.1: 3
    • FPT_RPL.1.1: 1
    • FPT_RPL.1.2: 1
    • FPT_STM: 1
    • FPT_STM.1: 6
    • FPT_STM.1.1: 1
    • FPT_TST.1: 10
    • FPT_TST.1.1: 2
    • FPT_TST.1.2: 2
    • FPT_TST.1.3: 2
  • FRU:
    • FRU_FLT: 2
    • FRU_FLT.1: 6
    • FRU_FLT.1.1: 1
    • FRU_RSA.1: 11
    • FRU_RSA.1.1: 2
  • FTA:
    • FTA_SSL: 4
    • FTA_SSL.1: 1
    • FTA_SSL.2: 4
    • FTA_SSL.2.1: 1
    • FTA_SSL.2.2: 1
    • FTA_SSL.3: 5
    • FTA_SSL.3.1: 1
    • FTA_TAB: 1
    • FTA_TAB.1: 4
    • FTA_TAB.1.1: 1
    • FTA_TSE: 1
    • FTA_TSE.1: 3
    • FTA_TSE.1.1: 1
  • FTP:
    • FTP_ITC.1: 8
    • FTP_ITC.1.1: 2
    • FTP_ITC.1.2: 2
    • FTP_ITC.1.3: 2
    • FTP_TRP.1: 8
    • FTP_TRP.1.1: 2
    • FTP_TRP.1.2: 2
    • FTP_TRP.1.3: 2
  • FAU:
    • FAU_GEN: 2
    • FAU_GEN.1: 11
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_GEN.2: 6
    • FAU_GEN.2.1: 1
    • FAU_SAR.1: 9
    • FAU_SAR.1.1: 1
    • FAU_SAR.1.2: 1
    • FAU_SAR.2: 6
    • FAU_SAR.2.1: 1
    • FAU_SAR.3: 7
    • FAU_SAR.3.1: 1
    • FAU_SEL.1: 9
    • FAU_SEL.1.1: 1
    • FAU_STG.1: 12
    • FAU_STG.1.1: 1
    • FAU_STG.1.2: 1
    • FAU_STG.3: 8
    • FAU_STG.3.1: 1
    • FAU_STG.4: 9
    • FAU_STG.4.1: 1
  • FCS:
    • FCS_CKM.1: 32
    • FCS_CKM.1.1: 3
    • FCS_CKM.2: 10
    • FCS_CKM.2.1: 1
    • FCS_CKM.4: 13
    • FCS_CKM.4.1: 1
    • FCS_COP.1: 21
    • FCS_COP.1.1: 2
    • FCS_RNG: 2
    • FCS_RNG.1: 45
    • FCS_RNG.1.1: 6
    • FCS_RNG.1.2: 7
  • FDP:
    • FDP_ACC.1: 37
    • FDP_ACC.1.1: 2
    • FDP_ACC.2: 9
    • FDP_ACC.2.1: 1
    • FDP_ACC.2.2: 1
    • FDP_ACF.1: 30
    • FDP_ACF.1.1: 3
    • FDP_ACF.1.2: 3
    • FDP_ACF.1.3: 3
    • FDP_ACF.1.4: 3
    • FDP_CDP: 5
    • FDP_CDP.1: 14
    • FDP_CDP.1.1: 2
    • FDP_ETC.2: 8
    • FDP_ETC.2.1: 1
    • FDP_ETC.2.2: 1
    • FDP_ETC.2.3: 1
    • FDP_ETC.2.4: 1
    • FDP_IFC.1: 14
    • FDP_IFC.2: 21
    • FDP_IFC.2.1: 2
    • FDP_IFC.2.2: 2
    • FDP_IFF.1: 22
    • FDP_IFF.1.1: 2
    • FDP_IFF.1.2: 2
    • FDP_IFF.1.3: 2
    • FDP_IFF.1.4: 2
    • FDP_IFF.1.5: 2
    • FDP_IFF.2: 7
    • FDP_IFF.2.1: 1
    • FDP_IFF.2.2: 1
    • FDP_IFF.2.3: 1
    • FDP_IFF.2.4: 1
    • FDP_IFF.2.5: 1
    • FDP_IFF.2.6: 1
    • FDP_ITC.1: 13
    • FDP_ITC.1.1: 1
    • FDP_ITC.1.2: 1
    • FDP_ITC.1.3: 1
    • FDP_ITC.2: 21
    • FDP_ITC.2.1: 2
    • FDP_ITC.2.2: 2
    • FDP_ITC.2.3: 2
    • FDP_ITC.2.4: 2
    • FDP_ITC.2.5: 2
    • FDP_RIP.2: 13
    • FDP_RIP.2.1: 1
    • FDP_RIP.3: 13
    • FDP_RIP.3.1: 1
    • FDP_TDC.1: 1
    • FDP_UCT: 1
  • FIA:
    • FIA_AFL.1: 9
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_ATD.1: 22
    • FIA_ATD.1.1: 2
    • FIA_SOS.1: 8
    • FIA_SOS.1.1: 1
    • FIA_UAU.1: 12
    • FIA_UAU.1.1: 1
    • FIA_UAU.1.2: 1
    • FIA_UAU.5: 10
    • FIA_UAU.5.1: 1
    • FIA_UAU.5.2: 1
    • FIA_UAU.7: 6
    • FIA_UAU.7.1: 1
    • FIA_UID.1: 14
    • FIA_UID.1.1: 1
    • FIA_UID.1.2: 1
    • FIA_USB.1: 1
    • FIA_USB.2: 10
    • FIA_USB.2.1: 1
    • FIA_USB.2.2: 1
    • FIA_USB.2.3: 1
    • FIA_USB.2.4: 1
  • FMT:
    • FMT_MSA.1: 37
    • FMT_MSA.1.1: 4
    • FMT_MSA.3: 40
    • FMT_MSA.3.1: 5
    • FMT_MSA.3.2: 5
    • FMT_MSA.4: 6
    • FMT_MSA.4.1: 1
    • FMT_MTD.1: 133
    • FMT_MTD.1.1: 20
    • FMT_REV.1: 12
    • FMT_REV.1.1: 2
    • FMT_REV.1.2: 2
    • FMT_SMF.1: 30
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 1
    • FMT_SMR.2: 37
    • FMT_SMR.2.1: 1
    • FMT_SMR.2.2: 1
    • FMT_SMR.2.3: 1
  • FPT:
    • FPT_FLS.1: 16
    • FPT_FLS.1.1: 2
    • FPT_STM.1: 8
    • FPT_STM.1.1: 1
    • FPT_TDC.1: 21
    • FPT_TDC.1.1: 2
    • FPT_TDC.1.2: 2
  • FTA:
    • FTA_SSL.1: 7
    • FTA_SSL.1.1: 1
    • FTA_SSL.1.2: 1
    • FTA_SSL.2: 7
    • FTA_SSL.2.1: 1
    • FTA_SSL.2.2: 1
  • FTP:
    • FTP_ITC.1: 11
    • FTP_ITC.1.1: 1
    • FTP_ITC.1.2: 1
    • FTP_ITC.1.3: 1
    • FTP_TRP.1: 2
pdf_data/st_keywords/cc_claims
  • A:
    • A.NO_GENERAL_PURPOSE: 1
    • A.NO_TOE_BYPASS: 1
    • A.PHYSICAL: 1
    • A.UIA_ONLY: 1
  • O:
    • O.ADMIN_ROLE: 1
    • O.AUDIT_GENERATION: 1
    • O.AUDIT_PROTECTION: 1
    • O.AUDIT_REVIEW: 1
    • O.CHANGE_MANAGEMENT: 1
    • O.CORRECT_: 1
    • O.CRYPTOGRAPHIC_: 1
    • O.CRYPTOGRAPHY_: 1
    • O.DISPLAY_BANNER: 1
    • O.DOCUMENT_KEY_LEAKAGE: 1
    • O.MAINT_MODE: 2
    • O.MANAGE: 2
    • O.MEDIATE: 4
    • O.REPLAY_DETECTION: 1
    • O.RESIDUAL_INFORMATION: 1
    • O.RESOURCE_SHARING: 1
    • O.ROBUST_ADMIN_GUIDANCE: 1
    • O.ROBUST_TOE_ACCESS: 1
    • O.SELF_PROTECTION: 2
    • O.SOUND_IMPLEMENTATION: 1
    • O.THOROUGH_FUNCTIONAL_: 1
    • O.TIME_STAMPS: 1
    • O.TRUSTED_PATH: 1
    • O.VULNERABILITY_ANALYSIS_TEST: 1
  • OE:
    • OE.CRYPTANALYTIC: 1
    • OE.NO_GENERAL_PURPOSE: 1
    • OE.NO_TOE_BYPASS: 1
    • OE.PHYSICAL: 1
    • OE.UIA_ONLY: 1
  • T:
    • T.ADDRESS_MASQUERADE: 1
    • T.ADMIN_ERROR: 1
    • T.ADMIN_ROGUE: 1
    • T.AUDIT_COMPROMISE: 1
    • T.CRYPTO_COMPROMISE: 1
    • T.FLAWED_DESIGN: 1
    • T.FLAWED_IMPLEMENTATION: 1
    • T.MALICIOUS_TSF_: 1
    • T.MASQUERADE: 1
    • T.POOR_TEST: 1
    • T.REPLAY: 1
    • T.RESIDUAL_DATA: 1
    • T.RESOURCE_EXHAUSTION: 1
    • T.SPOOFING: 1
    • T.UNATTENDED_SESSION: 1
    • T.UNAUTHORIZED_ACCESS: 1
    • T.UNIDENTIFIED_ACTIONS: 1
    • T.UNKNOWN_STATE: 1
  • A:
    • A.AUTHUSER: 3
    • A.CONNECT: 5
    • A.DETECT: 3
    • A.MANAGE: 5
    • A.PEER: 6
    • A.PHYSICAL: 4
    • A.TRAINEDUSER: 3
  • O:
    • O.ANALYZE_AUDIT: 5
    • O.AUDITING: 15
    • O.CP: 19
    • O.CRYPTO: 16
    • O.DISCRETIONARY: 11
    • O.LS: 29
    • O.MANAGE: 26
    • O.NETWORK: 13
    • O.REMOTE_AUDIT: 8
    • O.ROLE: 16
    • O.RUNTIME: 5
    • O.SUBJECT: 11
    • O.TRUSTED_CHANNEL: 5
  • OE:
    • OE.ADMIN: 5
    • OE.INFO_PROTECT: 8
    • OE.INSTALL: 4
    • OE.MAINTENANCE: 3
    • OE.PHYSICAL: 3
    • OE.RECOVER: 4
    • OE.REMOTE: 3
    • OE.TRUSTED: 5
  • T:
    • T.ACCESS: 21
    • T.DATA_NOT_SEPARATED: 3
    • T.IA: 6
    • T.RESTRICT: 3
    • T.ROLE: 6
    • T.UNOBSERVED_AUDIT: 4
pdf_data/st_keywords/vendor
  • Microsoft:
    • Microsoft: 1
pdf_data/st_keywords/eval_facility
  • Leidos:
    • Leidos: 1
  • atsec:
    • atsec: 236
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 7
      • AES-256: 2
  • constructions:
    • MAC:
      • HMAC: 5
      • HMAC-SHA-256: 1
  • AES_competition:
    • AES:
      • AES: 5
      • AES-128: 1
      • AES128: 1
      • AES256: 1
    • Serpent:
      • Serpent: 1
    • Twofish:
      • Twofish: 2
  • DES:
    • 3DES:
      • TDES: 1
      • Triple-DES: 1
pdf_data/st_keywords/asymmetric_crypto
  • FF:
    • DH:
      • DH: 6
      • Diffie-Hellman: 4
  • RSA:
    • RSA-2048: 2
  • FF:
    • DH:
      • Diffie-Hellman: 2
    • DSA:
      • DSA: 17
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 15
    • SHA2:
      • SHA-2: 1
      • SHA-256: 1
      • SHA-384: 2
      • SHA-512: 2
  • SHA:
    • SHA1:
      • SHA-1: 3
    • SHA2:
      • SHA-224: 1
      • SHA-256: 1
      • SHA-384: 1
      • SHA-512: 1
pdf_data/st_keywords/crypto_scheme
  • KEX:
    • Key Exchange: 2
  • MAC:
    • MAC: 8
pdf_data/st_keywords/crypto_protocol
  • IKE:
    • IKE: 13
    • IKEv1: 2
  • IPsec:
    • IPsec: 1
  • SSH:
    • SSH: 14
    • SSHv1: 1
  • TLS:
    • SSL:
      • SSL: 22
    • TLS:
      • TLS: 3
      • TLS 1.2: 1
      • TLS v1.0: 3
      • TLSv1.0: 1
  • VPN:
    • VPN: 40
  • IPsec:
    • IPsec: 3
  • SSH:
    • SSH: 45
    • SSHv2: 5
  • TLS:
    • SSL:
      • SSL: 11
    • TLS:
      • TLS: 3
  • VPN:
    • VPN: 1
pdf_data/st_keywords/randomness
  • PRNG:
    • PRNG: 1
  • RNG:
    • RNG: 8
  • RNG:
    • RNG: 14
pdf_data/st_keywords/cipher_mode
  • CBC:
    • CBC: 3
  • CTR:
    • CTR: 2
  • ECB:
    • ECB: 2
  • CBC:
    • CBC: 4
  • CTR:
    • CTR: 1
  • GCM:
    • GCM: 3
  • XTS:
    • XTS: 3
pdf_data/st_keywords/tls_cipher_suite
  • TLS:
    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA: 1
    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA: 1
    • TLS_RSA_WITH_AES_128_CBC_SHA: 1
    • TLS_RSA_WITH_AES_256_CBC_SHA: 1
pdf_data/st_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 6
  • OpenSSL:
    • OpenSSL: 7
  • libgcrypt:
    • libgcrypt: 4
pdf_data/st_keywords/technical_report_id
  • BSI:
    • BSI TR-02102: 1
pdf_data/st_keywords/standard_id
  • CC:
    • CCMB-2007-09-002: 1
    • CCMB-2007-09-003: 1
  • FIPS:
    • FIPS 140-2: 12
    • FIPS 180-3: 1
    • FIPS PUB 140-2: 7
    • FIPS140-2: 1
  • NIST:
    • NIST SP 800-57: 3
  • RFC:
    • RFC 792: 2
  • BSI:
    • AIS 20: 1
    • AIS 31: 1
  • FIPS:
    • FIPS 140-2: 15
    • FIPS 186-3: 1
    • FIPS PUB 186-3: 4
    • FIPS140-2: 1
  • RFC:
    • RFC 2460: 1
    • RFC 3484: 1
    • RFC 3542: 1
    • RFC 4213: 1
    • RFC 4252: 9
    • RFC 4253: 10
    • RFC 768: 1
    • RFC 791: 1
    • RFC 792: 1
    • RFC 793: 1
    • RFC4253: 3
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • DAC mechanism but may be supplemented by further restrictions. These additional restrictions are out of scope for this evaluation. Examples of objects which are accessible to users that cannot be used to store: 1
    • PAT) for simple as well as more complex protocols. This mechanism is out of scope for the evaluation: 1
    • as Port Address Translation (PAT) for simple as well as more complex protocols. This mechanism is out of scope for the evaluation. Furthermore, packet mangling support is provided with IPTables which is also: 1
    • out of scope: 3
pdf_data/st_metadata
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different