Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Junos OS 22.2R1 for MX Series with MX-SPC3
Certificate Number: 2023/145 		SUSE Linux Enterprise Micro 5.3
BSI-DSZ-CC-1214-2025
name Junos OS 22.2R1 for MX Series with MX-SPC3 SUSE Linux Enterprise Micro 5.3
category Network and Network-Related Devices and Systems Operating Systems
scheme AU DE
not_valid_after 21.12.2028 23.01.2030
not_valid_before 21.12.2023 24.01.2025
cert_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/AISEP_Certificate_2023_145_Junos%2022.2R1%20for%20MX%20series%20with%20MX-SPC3_EFT-T030_OS.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1214c_pdf.pdf
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/AISEP-CC-CR-2023-EFT-T030-CR-V1.0.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1214a_pdf.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/Juniper%20JunOS%2022.2R1%20MX%20Routers%20with%20MX-SPC3%201.1%201.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1214b_pdf.pdf
manufacturer Juniper Networks, Inc. SUSE LLC
manufacturer_web https://www.juniper.net/ https://www.suse.com
security_level {} ASE_SPD.1, ATE_IND.1, ALC_CMS.1, ASE_INT.1, ALC_TSU_EXT.1, AGD_OPE.1, ALC_CMC.1, ADV_FSP.1, AVA_VAN.1, ASE_TSS.1, ASE_OBJ.2, ASE_REQ.2, ASE_CCL.1, AGD_PRE.1, ASE_ECD.1
dgst ddd51b9acf9f4543 389fe2beff7b8953
heuristics/cert_id Certificate Number: 2023/145 BSI-DSZ-CC-1214-2025
heuristics/cert_lab [] BSI
heuristics/cpe_matches {} cpe:2.3:o:suse:linux_enterprise_micro:5.3:*:*:*:*:-:*:*, cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:*
heuristics/related_cves {} CVE-2005-3147, CVE-2005-3146, CVE-2005-3148, CVE-2000-0229, CVE-1999-0405, CVE-2005-0639, CVE-2007-0460, CVE-1999-0462, CVE-2007-6167, CVE-2007-4074, CVE-2004-1191, CVE-2000-0438, CVE-2000-0218, CVE-1999-0746, CVE-2005-1043, CVE-2004-1491, CVE-2007-4393, CVE-2004-1184, CVE-2005-0206, CVE-1999-0434, CVE-2000-0361, CVE-2005-0638, CVE-2008-3949
heuristics/extracted_sars ASE_TSS.1, ADV_FSP.1, ALC_CMC.1, ASE_INT.1, ASE_SPD.1, ASE_OBJ.1, AVA_VAN.1, ATE_IND.1, ALC_CMS.1, AGD_OPE.1, ASE_REQ.1, ASE_CCL.1, ASE_ECD.1, AGD_PRE.1 ASE_CCL.1, AGD_PRE.1, ASE_TSS.1, ADV_FSP.1, ALC_CMC.1, ASE_SPD.1, ASE_INT.1, AVA_VAN.1, ATE_IND.1, ALC_CMS.1, ASE_OBJ.2, AGD_OPE.1, ASE_ECD.1, ALC_TSU_EXT.1, ASE_REQ.2
heuristics/extracted_versions 22.2 5.3
heuristics/scheme_data
heuristics/protection_profiles 89f2a255423f4a20, 27e82aaf21b02155 e34797b67a3163c5, ed9c9d74c3710878
protection_profile_links https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/mod_vpngw_v1.1.pdf, https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/CPP_ND_V2.2E.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/PP_OS_V4.2.1.pdf, https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pkg_ssh_v1.0.pdf
pdf_data/cert_filename AISEP_Certificate_2023_145_Junos 22.2R1 for MX series with MX-SPC3_EFT-T030_OS.pdf 1214c_pdf.pdf
pdf_data/cert_keywords/cc_cert_id
  • AU:
    • Certificate Number: 2023/145: 1
  • DE:
    • BSI-DSZ-CC-1214-2025: 1
pdf_data/cert_keywords/cc_security_level
  • EAL:
    • EAL 2: 1
    • EAL 4: 1
pdf_data/cert_keywords/cc_sar
  • ADV:
    • ADV_FSP.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.1: 1
    • ALC_CMS.1: 1
    • ALC_FLR: 1
    • ALC_TSU_EXT.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_IND.1: 1
  • AVA:
    • AVA_VAN.1: 1
pdf_data/cert_keywords/crypto_protocol
  • VPN:
    • VPN: 1
  • SSH:
    • SSH: 1
pdf_data/cert_keywords/standard_id
  • ISO:
    • ISO/IEC 15408: 2
    • ISO/IEC 18045: 2
pdf_data/cert_metadata
  • /CreationDate: D:20240321153546+11'00'
  • /ModDate: D:20240321153546+11'00'
  • pdf_file_size_bytes: 160998
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
  • /Author: Federal Office for Information Security
  • /Keywords: "Common Criteria, Certification, Zertifizierung, Operating System Protection Profile, Linux-based, General Purpose Operating System, SUSE LLC, BSI-DSZ-CC-1214-2025"
  • /Subject: Common Criteria, Certification, Zertifizierung, Operating System Protection Profile, Linux-based, General Purpose Operating System, SUSE LLC, BSI-DSZ-CC-1214-2025
  • /Title: Certificate BSI-DSZ-CC-1214-2025
  • pdf_file_size_bytes: 338083
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
pdf_data/report_filename AISEP-CC-CR-2023-EFT-T030-CR-V1.0.pdf 1214a_pdf.pdf
pdf_data/report_frontpage
  • DE:
  • DE:
    • cc_security_level: Common Criteria Part 3 extended ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.2, ASE_REQ.2, ASE_SPD.1, ASE_TSS.1, ADV_FSP.1, AGD_OPE.1, AGD_PRE.1, ALC_CMC.1, ALC_CMS.1, ALC_TSU_EXT.1, ATE_IND.1, AVA_VAN.1 valid until: 23 January 2030 SOGIS Recognition Agreement for components up to EAL 4
    • cc_version: PP conformant Common Criteria Part 2 extended
    • cert_id: BSI-DSZ-CC-1214-2025
    • cert_item: SUSE Linux Enterprise Micro 5.3
    • cert_lab: BSI
    • developer: SUSE LLC
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
    • ref_protection_profiles: Protection Profile for General Purpose Operating Systems Version 4.2.1, 22 April 2019, CCEVS-VR-PP- 0047, NIAP, Functional Package for Secure Shell (SSH), Version 1.0, 13 May 2021, CCEVS-VR-PP-0075, NIAP
pdf_data/report_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-1214-2025: 17
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 1: 1
    • EAL 2: 3
    • EAL 4: 3
pdf_data/report_keywords/cc_sar
  • ADV:
    • ADV_FSP.1: 2
  • AGD:
    • AGD_OPE.1: 2
    • AGD_PRE.1: 2
  • ALC:
    • ALC_CMC.1: 2
    • ALC_CMS.1: 2
    • ALC_FLR: 3
    • ALC_TSU_EXT.1: 3
  • ASE:
    • ASE_CCL.1: 2
    • ASE_ECD.1: 2
    • ASE_INT.1: 2
    • ASE_OBJ.2: 2
    • ASE_REQ.2: 2
    • ASE_SPD.1: 2
    • ASE_TSS.1: 2
  • ATE:
    • ATE_IND.1: 2
  • AVA:
    • AVA_VAN.1: 2
pdf_data/report_keywords/cc_sfr
  • FCS:
    • FCS_RBG_EXT.1: 2
  • FTP:
    • FTP_ITC_EXT.1: 2
pdf_data/report_keywords/cc_claims
  • OE:
    • OE.PLATFORM: 1
    • OE.PROPER_ADMIN: 1
    • OE.PROPER_USER: 1
pdf_data/report_keywords/eval_facility
  • Teron:
    • Teron Labs: 4
  • atsec:
    • atsec: 4
pdf_data/report_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 11
      • AES-: 1
  • constructions:
    • MAC:
      • HMAC: 9
      • HMAC-SHA-256: 1
      • HMAC-SHA-384: 2
      • HMAC-SHA-512: 1
pdf_data/report_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 1
    • ECDH:
      • ECDH: 3
    • ECDSA:
      • ECDSA: 9
  • FF:
    • DH:
      • DH: 6
      • Diffie-Hellman: 3
    • DSA:
      • DSA: 1
pdf_data/report_keywords/hash_function
  • PBKDF:
    • PBKDF2: 2
  • SHA:
    • SHA2:
      • SHA-2: 7
      • SHA-256: 2
      • SHA-384: 1
      • SHA-512: 2
pdf_data/report_keywords/crypto_scheme
  • KA:
    • Key Agreement: 1
    • Key agreement: 1
  • KEX:
    • KEX: 1
    • Key Exchange: 3
pdf_data/report_keywords/crypto_protocol
  • IPsec:
    • IPsec: 2
  • SSH:
    • SSH: 3
    • SSHv2: 2
  • VPN:
    • VPN: 8
  • IKE:
    • IKE: 1
    • IKEv2: 3
  • IPsec:
    • IPsec: 1
  • SSH:
    • SSH: 22
    • SSHv2: 2
  • TLS:
    • TLS:
      • TLS: 10
      • TLS v1.2: 2
      • TLSv1.2: 1
pdf_data/report_keywords/randomness
  • RNG:
    • RBG: 1
  • PRNG:
    • DRBG: 1
  • RNG:
    • RNG: 3
pdf_data/report_keywords/cipher_mode
  • CBC:
    • CBC: 4
  • CTR:
    • CTR: 1
  • GCM:
    • GCM: 8
  • XTS:
    • XTS: 2
pdf_data/report_keywords/ecc_curve
  • NIST:
    • NIST P-256: 2
    • NIST P-521: 1
    • P-256: 8
    • P-384: 10
    • P-521: 9
pdf_data/report_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 1
pdf_data/report_keywords/side_channel_analysis
  • SCA:
    • side-channel: 1
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7148: 1
    • BSI TR-02102: 1
pdf_data/report_keywords/standard_id
  • BSI:
    • AIS 20: 2
    • AIS 32: 1
  • FIPS:
    • FIPS 180-4: 1
    • FIPS 186-5: 5
    • FIPS180-4: 9
    • FIPS186-5: 5
    • FIPS186-58: 1
    • FIPS197: 3
    • FIPS198-1: 4
  • ISO:
    • ISO/IEC 15408: 4
    • ISO/IEC 17065: 2
    • ISO/IEC 18045: 4
  • PKCS:
    • PKCS#1: 1
  • RFC:
    • RFC 4253: 1
    • RFC 5246: 1
    • RFC2104: 3
    • RFC2898: 2
    • RFC3447: 1
    • RFC4251: 3
    • RFC4252: 4
    • RFC4253: 9
    • RFC4306: 2
    • RFC4419: 2
    • RFC4868: 2
    • RFC5246: 6
    • RFC5288: 2
    • RFC5647: 2
    • RFC5656: 3
    • RFC5903: 3
    • RFC5996: 2
    • RFC6668: 2
    • RFC7919: 2
    • RFC8017: 2
    • RFC8268: 4
    • RFC8332: 2
  • X509:
    • X.509: 1
pdf_data/report_keywords/certification_process
  • ConfidentialDocument:
    • Report, Version 4, 2025-01-08, Final Evaluation Technical Report, atsec information security GmbH, (confidential document) [8] Protection Profile for General Purpose Operating Systems Version 4.2.1, 22 April 2019: 1
    • and SUSE LLC [11] Configuration list for the TOE, 2025-01-08, Master Configuration List, SUSE LLC (confidential document) 7 specifically • AIS 20, Version 3, Funktionalitätsklassen und Evaluationsmethodologie für: 1
    • being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification: 1
pdf_data/report_metadata
pdf_data/st_filename Juniper JunOS 22.2R1 MX Routers with MX-SPC3 1.1 1.pdf 1214b_pdf.pdf
pdf_data/st_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-1214: 1
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_FSP.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.1: 1
    • ALC_CMS.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.1: 1
    • ASE_REQ.1: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_IND.1: 1
  • AVA:
    • AVA_VAN: 1
    • AVA_VAN.1: 1
  • ALC:
    • ALC_TSU_EXT: 5
    • ALC_TSU_EXT.1: 4
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN: 5
    • FAU_GEN.1: 8
    • FAU_GEN.2: 5
    • FAU_GEN.2.1: 1
    • FAU_STG.1: 5
    • FAU_STG.1.1: 1
    • FAU_STG.1.2: 1
    • FAU_STG_EXT: 2
    • FAU_STG_EXT.1: 4
    • FAU_STG_EXT.1.1: 1
    • FAU_STG_EXT.1.2: 1
    • FAU_STG_EXT.1.3: 1
  • FCS:
    • FCS_CKM: 12
    • FCS_CKM.1: 20
    • FCS_CKM.2: 16
    • FCS_CKM.2.1: 1
    • FCS_CKM.4: 12
    • FCS_CKM.4.1: 1
    • FCS_COP: 55
    • FCS_COP.1: 7
    • FCS_ITC: 1
    • FCS_NTP_EXT.1.4: 1
    • FCS_RBG_EXT: 2
    • FCS_RBG_EXT.1: 12
    • FCS_RBG_EXT.1.1: 2
    • FCS_RBG_EXT.1.2: 1
    • FCS_SSHS_EXT: 2
    • FCS_SSHS_EXT.1: 7
    • FCS_SSHS_EXT.1.1: 1
    • FCS_SSHS_EXT.1.2: 1
    • FCS_SSHS_EXT.1.3: 1
    • FCS_SSHS_EXT.1.4: 1
    • FCS_SSHS_EXT.1.5: 1
    • FCS_SSHS_EXT.1.6: 1
    • FCS_SSHS_EXT.1.7: 1
    • FCS_SSHS_EXT.1.8: 1
    • FCS_TLSC_EXT.2.3: 1
  • FIA:
    • FIA_AFL: 2
    • FIA_AFL.1: 10
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_PMG_EXT: 2
    • FIA_PMG_EXT.1: 6
    • FIA_PMG_EXT.1.1: 1
    • FIA_PSK_EXT.1: 5
    • FIA_PSK_EXT.1.1: 1
    • FIA_PSK_EXT.1.2: 1
    • FIA_PSK_EXT.1.3: 1
    • FIA_PSK_EXT.1.4: 1
    • FIA_UAU: 2
    • FIA_UAU.7: 5
    • FIA_UAU.7.1: 1
    • FIA_UAU_EXT: 2
    • FIA_UAU_EXT.2: 5
    • FIA_UAU_EXT.2.1: 1
    • FIA_UIA_EXT: 2
    • FIA_UIA_EXT.1: 11
    • FIA_UIA_EXT.1.1: 1
    • FIA_UIA_EXT.1.2: 1
    • FIA_UID.1: 3
  • FMT:
    • FMT_MOF: 20
    • FMT_MOF.1: 3
    • FMT_MTD: 13
    • FMT_MTD.1: 2
    • FMT_SMF: 20
    • FMT_SMF.1: 3
    • FMT_SMR: 2
    • FMT_SMR.1: 5
    • FMT_SMR.2: 12
    • FMT_SMR.2.1: 1
    • FMT_SMR.2.2: 1
    • FMT_SMR.2.3: 1
  • FPT:
    • FPT_APW_EXT: 2
    • FPT_APW_EXT.1: 5
    • FPT_APW_EXT.1.1: 1
    • FPT_APW_EXT.1.2: 1
    • FPT_FLS: 5
    • FPT_FLS.1: 2
    • FPT_SKP_EXT: 2
    • FPT_SKP_EXT.1: 5
    • FPT_SKP_EXT.1.1: 1
    • FPT_STM: 1
    • FPT_STM.1: 2
    • FPT_STM_EXT: 2
    • FPT_STM_EXT.1: 5
    • FPT_STM_EXT.1.1: 1
    • FPT_STM_EXT.1.2: 1
    • FPT_TST_EXT: 2
    • FPT_TST_EXT.1: 6
    • FPT_TST_EXT.1.1: 1
    • FPT_TST_EXT.3: 4
    • FPT_TST_EXT.3.1: 1
    • FPT_TST_EXT.3.2: 1
    • FPT_TUD_EXT: 2
    • FPT_TUD_EXT.1: 10
    • FPT_TUD_EXT.1.1: 1
    • FPT_TUD_EXT.1.2: 1
  • FTA:
    • FTA_SSL: 2
    • FTA_SSL.3: 7
    • FTA_SSL.4: 6
    • FTA_SSL_EXT: 2
    • FTA_SSL_EXT.1: 6
    • FTA_SSL_EXT.1.1: 1
    • FTA_TAB: 2
    • FTA_TAB.1: 9
  • FTP:
    • FTP_ITC: 3
    • FTP_ITC.1: 26
    • FTP_ITC.1.1: 1
    • FTP_ITC.1.2: 1
    • FTP_ITC.1.3: 1
    • FTP_ITC.2: 6
    • FTP_TRP: 9
    • FTP_TRP.1: 3
  • FAU:
    • FAU_GEN: 1
    • FAU_GEN.1: 8
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
  • FCS:
    • FCS_CKM: 2
    • FCS_CKM.1: 9
    • FCS_CKM.1.1: 1
    • FCS_CKM.2: 9
    • FCS_CKM.2.1: 1
    • FCS_CKM_EXT: 1
    • FCS_CKM_EXT.4: 9
    • FCS_CKM_EXT.4.1: 2
    • FCS_CKM_EXT.4.2: 1
    • FCS_COP.1: 49
    • FCS_COP.1.1: 4
    • FCS_RBG_EXT: 2
    • FCS_RBG_EXT.1: 10
    • FCS_RBG_EXT.1.1: 1
    • FCS_RBG_EXT.1.2: 1
    • FCS_RNG.1: 2
    • FCS_SSHC_EXT: 1
    • FCS_SSHC_EXT.1: 8
    • FCS_SSHS_EXT: 1
    • FCS_SSHS_EXT.1: 9
    • FCS_SSHS_EXT.1.3: 1
    • FCS_SSH_EXT: 1
    • FCS_SSH_EXT.1: 14
    • FCS_SSH_EXT.1.1: 1
    • FCS_SSH_EXT.1.2: 1
    • FCS_SSH_EXT.1.3: 1
    • FCS_SSH_EXT.1.4: 1
    • FCS_SSH_EXT.1.5: 1
    • FCS_SSH_EXT.1.6: 1
    • FCS_SSH_EXT.1.7: 1
    • FCS_SSH_EXT.1.8: 1
    • FCS_STO_EXT: 1
    • FCS_STO_EXT.1: 8
    • FCS_STO_EXT.1.1: 1
    • FCS_TLSC_EXT: 5
    • FCS_TLSC_EXT.1: 12
    • FCS_TLSC_EXT.2: 9
    • FCS_TLSC_EXT.4: 9
  • FDP:
    • FDP_ACF_EXT: 1
    • FDP_ACF_EXT.1: 8
    • FDP_ACF_EXT.1.1: 1
  • FIA:
    • FIA_AFL: 1
    • FIA_AFL.1: 8
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_UAU: 1
    • FIA_UAU.5: 8
    • FIA_UAU.5.1: 1
    • FIA_UAU.5.2: 1
  • FMT:
    • FMT_MOF_EXT: 2
    • FMT_MOF_EXT.1: 8
    • FMT_SMF_EXT: 1
    • FMT_SMF_EXT.1: 9
    • FMT_SMF_EXT.1.1: 2
  • FPT:
    • FPT_ACF_EXT: 1
    • FPT_ACF_EXT.1: 8
    • FPT_ACF_EXT.1.1: 1
    • FPT_ACF_EXT.1.2: 1
    • FPT_ASLR_EXT: 2
    • FPT_ASLR_EXT.1: 8
    • FPT_SBOP_EXT: 1
    • FPT_SBOP_EXT.1: 9
    • FPT_TST_EXT: 1
    • FPT_TST_EXT.1: 8
    • FPT_TST_EXT.1.1: 1
    • FPT_TUD_EXT: 3
    • FPT_TUD_EXT.1: 9
    • FPT_TUD_EXT.1.1: 1
    • FPT_TUD_EXT.1.2: 1
    • FPT_TUD_EXT.2: 8
    • FPT_TUD_EXT.2.1: 1
    • FPT_TUD_EXT.2.2: 1
  • FTA:
    • FTA_TAB: 1
    • FTA_TAB.1: 8
    • FTA_TAB.1.1: 1
  • FTP:
    • FTP_ITC_EXT: 3
    • FTP_ITC_EXT.1: 8
    • FTP_ITC_EXT.1.1: 1
    • FTP_TRP: 1
    • FTP_TRP.1: 8
    • FTP_TRP.1.1: 1
    • FTP_TRP.1.2: 1
    • FTP_TRP.1.3: 1
pdf_data/st_keywords/cc_claims
  • A:
    • A.ADMIN_CREDENTIALS_SECURE: 1
    • A.CONNECTIONS: 2
    • A.LIMITED_FUNCTIONALITY: 1
    • A.NO_THRU_TRAFFIC_PROTECTION: 1
    • A.PHYSICAL_PROTECTION: 1
    • A.REGULAR_UPDATES: 1
    • A.RESIDUAL_INFORMATION: 1
    • A.TRUSTED_ADMINSTRATOR: 1
  • O:
    • O.ADDRESS_FILTERING: 1
    • O.AUTHENTICATION: 1
    • O.CRYPTOGRAPHIC_FUNCTIONS: 1
    • O.FAIL_SECURE: 1
    • O.PORT_FILTERING: 1
    • O.SYSTEM_MONITORING: 1
    • O.TOE_ADMINISTRATION: 1
  • OE:
    • OE.ADMIN_CREDENTIALS_SECURE: 1
    • OE.CONNECTIONS: 1
    • OE.NO_GENERAL_PURPOSE: 1
    • OE.NO_THRU_TRAFFIC_PROTECTION: 1
    • OE.PHYSICAL: 1
    • OE.RESIDUAL_INFORMATION: 1
    • OE.TRUSTED_ADMIN: 1
    • OE.UPDATES: 1
  • T:
    • T.DATA_INTEGRITY: 1
    • T.PASSWORD_CRACKING: 1
    • T.REPLAY_ATTACK: 1
    • T.SECURITY_FUNCTIONALITY_COMPROMISE: 1
    • T.SECURITY_FUNCTIONALITY_FAILURE: 1
    • T.UNAUTHORIZED_ADMINISTRATOR_ACCESS: 1
    • T.UNDETECTED_ACTIVITY: 1
    • T.UNTRUSTED_COMMUNICATION_CHANNELS: 1
    • T.UPDATE_COMPROMISE: 1
    • T.WEAK_AUTHENTICATION_ENDPOINTS: 1
    • T.WEAK_CRYPTOGRAPHY: 1
  • A:
    • A.PLATFORM: 4
    • A.PROPER_ADMIN: 4
    • A.PROPER_USER: 4
  • O:
    • O.ACCOUNTABILITY: 7
    • O.INTEGRITY: 18
    • O.MANAGEMENT: 9
    • O.PROTECTED_COMMS: 22
    • O.PROTECTED_STORAGE: 8
  • OE:
    • OE.PLATFORM: 3
    • OE.PROPER_ADMIN: 2
    • OE.PROPER_USER: 3
  • T:
    • T.LIMITED_PHYSICAL_ACCESS: 3
    • T.LOCAL_ATTACK: 2
    • T.NETWORK_ATTACK: 10
    • T.NETWORK_EAVESDROP: 4
pdf_data/st_keywords/vendor
  • Microsoft:
    • Microsoft: 2
pdf_data/st_keywords/eval_facility
  • atsec:
    • atsec: 9
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 35
      • AES-: 1
  • DES:
    • DES:
      • DES: 1
  • constructions:
    • MAC:
      • HMAC: 30
      • HMAC-SHA-256: 5
      • HMAC-SHA-384: 3
      • HMAC-SHA-512: 1
  • AES_competition:
    • AES:
      • AES: 5
      • AES-256: 1
  • constructions:
    • MAC:
      • CBC-MAC: 1
      • HMAC: 4
      • HMAC-SHA-256: 2
      • HMAC-SHA-384: 2
      • HMAC-SHA-512: 2
pdf_data/st_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 4
    • ECDH:
      • ECDH: 4
    • ECDSA:
      • ECDSA: 36
  • FF:
    • DH:
      • DH: 35
      • Diffie-Hellman: 7
  • RSA:
    • RSA 2048: 7
    • RSA 4096: 6
  • ECC:
    • ECC:
      • ECC: 3
    • ECDH:
      • ECDH: 2
      • ECDHE: 2
    • ECDSA:
      • ECDSA: 8
  • FF:
    • DH:
      • DH: 1
      • DHE: 1
      • Diffie-Hellman: 5
    • DSA:
      • DSA: 1
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 2
      • SHA1: 3
    • SHA2:
      • SHA-256: 12
      • SHA-384: 4
      • SHA-512: 3
  • PBKDF:
    • PBKDF: 2
    • PBKDF2: 1
  • SHA:
    • SHA1:
      • SHA-1: 1
    • SHA2:
      • SHA-256: 6
      • SHA-384: 6
      • SHA-512: 6
pdf_data/st_keywords/crypto_scheme
  • AEAD:
    • AEAD: 2
  • KA:
    • Key Agreement: 2
  • KEX:
    • Key Exchange: 4
    • Key exchange: 1
  • MAC:
    • MAC: 4
  • KA:
    • Key Agreement: 1
  • MAC:
    • MAC: 3
pdf_data/st_keywords/crypto_protocol
  • IKE:
    • IKE: 57
    • IKEv1: 19
    • IKEv2: 17
  • IPsec:
    • IPsec: 40
  • SSH:
    • SSH: 112
    • SSHv2: 13
  • TLS:
    • DTLS:
      • DTLS: 1
    • SSL:
      • SSL: 3
    • TLS:
      • TLS: 3
  • VPN:
    • VPN: 37
  • PGP:
    • PGP: 1
  • SSH:
    • SSH: 99
    • SSHv2: 3
  • TLS:
    • SSL:
      • SSL: 2
    • TLS:
      • TLS: 65
      • TLS 1.2: 3
      • TLS v1.2: 1
      • TLSv1.0: 1
      • TLSv1.1: 1
      • TLSv1.2: 3
pdf_data/st_keywords/randomness
  • PRNG:
    • DRBG: 31
    • PRNG: 1
  • RNG:
    • RBG: 3
    • RNG: 1
  • PRNG:
    • DRBG: 5
    • PRNG: 1
  • RNG:
    • RBG: 2
    • RNG: 4
pdf_data/st_keywords/cipher_mode
  • CBC:
    • CBC: 16
  • CCM:
    • CCM: 1
  • CTR:
    • CTR: 4
  • GCM:
    • GCM: 12
  • CBC:
    • CBC: 2
  • CCM:
    • CCM: 1
  • CTR:
    • CTR: 3
  • GCM:
    • GCM: 2
  • XTS:
    • XTS: 2
pdf_data/st_keywords/ecc_curve
  • NIST:
    • Curve P-256: 2
    • Curve P-384: 1
    • Curve P-521: 1
    • P-256: 36
    • P-384: 35
    • P-521: 27
    • prime256v1: 2
    • prime384v1: 1
  • NIST:
    • P-256: 14
    • P-384: 16
    • P-521: 16
    • secp256r1: 2
    • secp384r1: 2
    • secp521r1: 2
pdf_data/st_keywords/tls_cipher_suite
  • TLS:
    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: 2
    • TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: 2
    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: 2
    • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: 2
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: 1
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: 2
    • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: 2
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: 1
    • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: 2
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: 1
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: 2
    • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: 2
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: 1
    • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: 2
pdf_data/st_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 7
  • OpenSSL:
    • OpenSSL: 12
  • libgcrypt:
    • libgcrypt: 3
pdf_data/st_keywords/side_channel_analysis
  • FI:
    • DFA: 1
pdf_data/st_keywords/tee_name
  • IBM:
    • SSC: 1
pdf_data/st_keywords/standard_id
  • CC:
    • CCMB-2017-04-001: 1
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
  • FIPS:
    • FIPS 180-4: 5
    • FIPS 186-4: 5
    • FIPS 197: 5
    • FIPS 198-1: 5
    • FIPS PUB 186-4: 10
  • ISO:
    • ISO/IEC 14888-3: 1
    • ISO/IEC 18031:2011: 2
    • ISO/IEC 9796-2: 1
  • NIST:
    • NIST SP 800-56A: 2
    • SP 800-56: 1
  • PKCS:
    • PKCS #1: 1
  • RFC:
    • RFC 2409: 2
    • RFC 2460: 1
    • RFC 2986: 2
    • RFC 3526: 3
    • RFC 3602: 4
    • RFC 4106: 3
    • RFC 4109: 2
    • RFC 4251: 2
    • RFC 4252: 1
    • RFC 4253: 3
    • RFC 4254: 1
    • RFC 4301: 2
    • RFC 4303: 1
    • RFC 4306: 2
    • RFC 4443: 1
    • RFC 4868: 4
    • RFC 4945: 2
    • RFC 5077: 1
    • RFC 5114: 1
    • RFC 5280: 5
    • RFC 5282: 1
    • RFC 5656: 1
    • RFC 5996: 1
    • RFC 6668: 1
    • RFC 768: 1
    • RFC 791: 1
    • RFC 792: 1
    • RFC 793: 1
    • RFC2460: 1
    • RFC3526: 2
    • RFC5656: 1
    • RFC768: 1
    • RFC791: 1
    • RFC793: 1
  • X509:
    • X.509: 13
  • FIPS:
    • FIPS 140-2: 1
    • FIPS PUB 186-4: 6
  • NIST:
    • NIST SP 800-38A: 4
    • NIST SP 800-38D: 2
    • NIST SP 800-38E: 2
    • NIST SP 800-56A: 1
    • NIST SP 800-57: 1
  • PKCS:
    • PKCS #7: 1
  • RFC:
    • RFC 4251: 1
    • RFC 4252: 6
    • RFC 4253: 7
    • RFC 5246: 11
    • RFC 5280: 3
    • RFC 5288: 4
    • RFC 5289: 12
    • RFC 5647: 2
    • RFC 5656: 10
    • RFC 6066: 1
    • RFC 6125: 2
    • RFC 6668: 2
    • RFC 8268: 2
    • RFC 8332: 6
    • RFC 8603: 1
    • RFC4252: 4
    • RFC4253: 4
    • RFC5280: 1
    • RFC5288: 1
    • RFC5289: 1
    • RFC5656: 2
    • RFC6066: 1
    • RFC7919: 1
    • RFC8603: 1
  • X509:
    • X.509: 14
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • FTP) and Secure Socket Layer (SSL) are out of scope. The TOE includes cryptographic modules which implement the underlying cryptographic services: 1
    • out of scope: 1
    • to any information exchange. Telnet, File Transfer Protocol (FTP) and Secure Socket Layer (SSL) are out of scope. The TOE includes cryptographic modules which implement the underlying cryptographic services. The: 1
  • OutOfScope:
    • The OS relies upon a trustworthy computing platform for its execution. This underlying platform is out of scope of this PP. A.PROPER_USER PP Origin: OSPP The user of the OS is not willfully negligent or hostile: 1
    • out of scope: 1
pdf_data/st_metadata
state/cert/convert_garbage True False
state/cert/pdf_hash Different Different
state/cert/txt_hash Different Different
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different