This page was not yet optimized for use on mobile devices.

Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.

	Bundesdruckerei Document Application withtamper-evident casing Version 2.6.1; FirmwareVersion 1.6.24-604, TOE Casing Version 0 BSI-DSZ-CC-1247-2025	secunet konnektor 2.0.0 und 2.1.0, Version 6.0.8:2.0.0 und 6.0.8:2.1.0 BSI-DSZ-CC-1209-V3-2026
name	Bundesdruckerei Document Application withtamper-evident casing Version 2.6.1; FirmwareVersion 1.6.24-604, TOE Casing Version 0	secunet konnektor 2.0.0 und 2.1.0, Version 6.0.8:2.0.0 und 6.0.8:2.1.0
category	Other Devices and Systems	Other Devices and Systems
scheme	DE	DE
status	active	active
not_valid_after	29.01.2030	23.02.2031
not_valid_before	30.01.2025	24.02.2026
cert_link	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1247c_pdf.pdf	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1209V3c_pdf.pdf
report_link	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1247a_pdf.pdf	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1209V3a_pdf.pdf
st_link	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1247b_pdf.pdf	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1209V3b_pdf.pdf
manufacturer	Bundesdruckerei GmbH	Secunet Security Networks AG
manufacturer_web	https://www.bundesdruckerei.de	https://www.secunet.com/en/
security_level	EAL3	ALC_FLR.2, AVA_VAN.3, ALC_TAT.1, ADV_FSP.4, ADV_TDS.3, ADV_IMP.1, EAL3+
dgst	df606f5845937bda	3e757d2a69494fe3
heuristics/cert_id	BSI-DSZ-CC-1247-2025	BSI-DSZ-CC-1209-V3-2026
heuristics/cert_lab	BSI	BSI
heuristics/cpe_matches	{}	{}
heuristics/verified_cpe_matches	{}	{}
heuristics/related_cves	{}	{}
heuristics/direct_transitive_cves	{}	{}
heuristics/indirect_transitive_cves	{}	{}
heuristics/extracted_sars	AGD_OPE.1, ALC_DEL.1, ATE_FUN.1, ASE_CCL.1, AVA_VAN.5, ASE_TSS.1, ASE_INT.1, ADV_ARC.1, ASE_REQ.2, ATE_COV.2, ALC_CMC.3, ALC_LCD.1, ADV_TDS.2	AGD_OPE.1, ALC_DEL.1, AVA_VAN.3, AGD_PRE.1, ALC_FLR.2, ASE_TSS.1, ADV_IMP.1, ADV_ARC.1, ALC_TAT.1, ADV_FSP.4, ALC_CMS.4, ADV_TDS.3
heuristics/extracted_versions	1.6.24, 2.6.1	2.0.0, 2.1.0, 6.0.8
heuristics/prev_certificates	{}	{}
heuristics/next_certificates	{}	{}
heuristics/report_references/directly_referenced_by	{}	{}
heuristics/report_references/directly_referencing	BSI-DSZ-CC-1215-2023	BSI-DSZ-CC-1209-V2-2025
heuristics/report_references/indirectly_referenced_by	{}	{}
heuristics/report_references/indirectly_referencing	BSI-DSZ-CC-1181-2021, BSI-DSZ-CC-1215-2023, BSI-DSZ-CC-1161-2020, BSI-DSZ-CC-1093, BSI-DSZ-CC-1125-2019	BSI-DSZ-CC-1209-V2-2025
heuristics/scheme_data	category: Electronic ID documents cert_id: BSI-DSZ-CC-1247-2025 certification_date: 30.01.2025 enhanced: applicant: Bundesdruckerei GmbH Kommandantenstraße 18 10969 Berlin assurance_level: EAL3 cert_link: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1247c_pdf.pdf?__blob=publicationFile&v=2 certification_date: 30.01.2025 description: The Target of Evaluation (TOE) is the Bundesdruckerei Document Application with tamper-evident casing 2.6.1. The Document Application is running on a Document Management Terminal (DMT). It is used to read the German Passport (ePass), to read and update the electronic data of the German Identity Card (“Personalausweis (PA)”) and electronic Resident Permit Card (“elektronischer Aufenthaltstitel (eAT)”) as well as to verify the document’s authenticity and the integrity of its data. The TOE is operated by governmental organisations, e.g. municipal office, police, government or other state approved agencies. The TOE is specifically applied in registration offices to allow card holders to verify that their ePass, PA or eAT is working correctly. In case of PA and eAT it is further possible to update the address information of the card holder, the card holder’s PIN for eID applications, and the community ID (“Gemeindeschlüssel”). In addition, the eID application functionality of the PA or eAT can be activated or deactivated. Additionally, the TOE ensures secure communication to external control software and provides a tamper-evident enclosure. Necessary protocols for the communication of the TOE with the electronic identity documents like the ePass, PA or eAT are described in [ICAO_9303], [TR-03110-1], [TR-03110-2], and [TR-03110-3]. entries: [frozendict({'id': 'BSI', 'description': 'The changes are mainly related to an update of life cycle security aspects by including a production site. Additionally a production test functionality has been changed, the seals have been updated to a new Bundesdruckerei GmbH Logo including a respective update of AGD and a minor change in the ST. Configuration Management procedures required a change in the product identifier. Therefore the version number changed from "Bundesdruckerei Document Application with tamper-evident casing Version 2.6.1, Firmware Version 2.0.4-612, TOE Casing Version 0" to "Bundesdruckerei Document Application with tamper-evident casing Version 2.6.1; Firmware Version 2.0.8-616, TOE Casing Version 0".'}), frozendict({'id': 'BSI', 'description': 'Maintenance Report'}), frozendict({'id': 'BSI-DSZ-CC-1247-2025', 'description': 'Certificate'})] evaluation_facility: TÜV Informationstechnik GmbH expiration_date: 29.01.2030 product: Bundesdruckerei Document Application with tamper-evident casing Version 2.6.1, Firmware Version 1.6.24-604, TOE Casing Version 0 protection_profile: Common Criteria Protection Profile for Document Management Terminal DMT-PP, BSI-CC-PP-0064-V2-2018, Version: 2.0, 2018-06-06, Federal Office for Information Security (BSI) report_link: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1247a_pdf.pdf?__blob=publicationFile&v=2 target_link: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1247b_pdf.pdf?__blob=publicationFile&v=2 product: Bundesdruckerei Document Application with tamper-evident casing Version 2.6.1, Firmware Version 1.6.24-604, TOE Casing … subcategory: Software url: https://www.bsi.bund.de/SharedDocs/Zertifikate_CC/CC/Hoheitliche_Dokumente-Software/1247.html vendor: Bundesdruckerei GmbH	category: eHealth cert_id: BSI-DSZ-CC-1209-V3-2026 certification_date: 24.02.2026 enhanced: applicant: secunet Security Networks AG Kurfürstenstraße 58 45138 Essen Deutschland assurance_level: EAL3,ADV_FSP.4,ADV_IMP.1,ADV_TDS.3,ALC_FLR.2,ALC_TAT.1,AVA_VAN.3 cert_link: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1209V3c_pdf.pdf?__blob=publicationFile&v=2 certification_date: 24.02.2026 description: The Target of evaluation (TOE) is a software product consisting of the Netzkonnektor and the Anwendungskonnektor as specified in the Protection Profile BSI-CC-PP-0098-V3-2021-MA-02. The Netzkonnektor includes the security functionality of a Firewall, a VPN-client, an NTP Server, a name service (DNS) and a DHCP service. The TOE also includes the basic functions for establishment of secure TLS connections to other IT products. The TOE is part of the Konnektor and it is delivered pre-installed on exactly one hardware-configuration. The security functionality of the Anwendungskonnektor comprises the signature service, encryption and decryption of documents, a card terminal service and a smart card service. Together with the network connector, the Anwendungskonnektor also enables secure communication between the connector and the client system and between Fachmodulen and Fachdiensten. entries: [frozendict({'id': 'BSI', 'description': 'The Target of evaluation (TOE) is a software product consisting of the Netzkonnektor and the Anwendungskonnektor as specified in the Protection Profile BSI-CC-PP-0098-V3-2021-MA-02. The Netzkonnektor includes the security functionality of a Firewall, a VPN-client, an NTP Server, a name service (DNS) and a DHCP service. The TOE also includes the basic functions for establishment of secure TLS connections to other IT products. The TOE is part of the Konnektor and it is delivered pre-installed on exactly one hardware-configuration. The security functionality of the Anwendungskonnektor comprises the signature service, encryption and decryption of documents, a card terminal service and a smart card service. Together with the network connector, the Anwendungskonnektor also enables secure communication between the connector and the client system and between Fachmodulen and Fachdiensten.'}), frozendict({'id': 'BSI', 'description': 'The Target of evaluation (TOE) is a software product consisting of the Netzkonnektor and the Anwendungskonnektor as specified in the Protection Profile BSI-CC-PP-0098-V3-2021-MA-02. The Netzkonnektor includes the security functionality of a Firewall, a VPN-client, an NTP Server, a name service (DNS) and a DHCP service. The TOE also includes the basic functions for establishment of secure TLS connections to other IT products. The TOE is part of the Konnektor and it is delivered pre-installed on exactly one hardware-configuration. The security functionality of the Anwendungskonnektor comprises the signature service, encryption and decryption of documents, a card terminal service and a smart card service. Together with the network connector, the Anwendungskonnektor also enables secure communication between the connector and the client system and between Fachmodulen and Fachdiensten.'}), frozendict({'id': 'BSI-DSZ-CC-1209-2023-MA-02 (Ausstellungsdatum / Certification Date 19.08.2024) Maintenance Report', 'description': 'Security Target'}), frozendict({'id': 'BSI-DSZ-CC-1209-2023-MA-01 (Ausstellungsdatum / Certification Date 31.10.2023)', 'description': 'Security Target'}), frozendict({'id': 'BSI-DSZ-CC-1209-2023 (Ausstellungsdatum / Certification Date 19.10.2023, gültlig bis / valid until 18.10.2028)', 'description': 'Certificate'})] evaluation_facility: SRC Security Research & Consulting GmbH expiration_date: 23.02.2031 product: secunet konnektor 2.0.0 und 2.1.0, Version 6.0.8:2.0.0 und 6.0.8:2.1.0 protection_profile: Common Criteria Schutzprofil (Protection Profile), Schutzprofil 2: Anforderungen an den Konnektor, BSI-CC-PP-0098-V3-2021-MA-02, Version 1.6.1, 15.03.2023, Bundesamt für Sicherheit in der Informationstechnik (BSI) report_link: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1209V3a_pdf.pdf?__blob=publicationFile&v=2 target_link: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1209V3b_pdf.pdf?__blob=publicationFile&v=2 product: secunet konnektor 2.0.0 und 2.1.0, Version 6.0.8:2.0.0 und 6.0.8:2.1.0 subcategory: Software url: https://www.bsi.bund.de/SharedDocs/Zertifikate_CC/CC/Gesundheitswesen_Software/1209.html vendor: secunet Security Networks AG
heuristics/st_references/directly_referenced_by	{}	{}
heuristics/st_references/directly_referencing	{}	BSI-DSZ-CC-1135-2020, BSI-DSZ-CC-1209-V2-2025, BSI-DSZ-CC-1190-2022, BSI-DSZ-CC-1174-2021, BSI-DSZ-CC-1157-2020, BSI-DSZ-CC-1218-2023, BSI-DSZ-CC-1184-2022, BSI-DSZ-CC-1163-2021
heuristics/st_references/indirectly_referenced_by	{}	{}
heuristics/st_references/indirectly_referencing	{}	BSI-DSZ-CC-1135-2020, BSI-DSZ-CC-1209-V2-2025, BSI-DSZ-CC-1190-2022, BSI-DSZ-CC-1174-2021, BSI-DSZ-CC-1157-2020, BSI-DSZ-CC-1218-2023, BSI-DSZ-CC-1184-2022, BSI-DSZ-CC-1163-2021
heuristics/protection_profiles	{}	359e684867077664
maintenance_updates	maintenance_date: 23.02.2026 maintenance_report_link: https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1247MA02a_pdf.pdf maintenance_st_link: https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1247MA2b_pdf.pdf maintenance_title: Bundesdruckerei Document Application with tamper-evident casing, Version 2.6.1; Firmware Version 2.0.8-616, TOE Casing Version 0 maintenance_date: 07.03.2025 maintenance_report_link: https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1247MA01a_pdf.pdf maintenance_st_link: None maintenance_title: Bundesdruckerei Document Application with tamper-evident casing Version 2.6.1, Firmware Version 2.0.4-612, TOE Casing Version 0 from Bundesdruckerei GmbH
protection_profiles
protection_profile_links	{}	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0098V3b_pdf.pdf
pdf_data/cert_filename	1247c_pdf.pdf	1209V3c_pdf.pdf
pdf_data/cert_frontpage
pdf_data/cert_keywords/cc_cert_id	DE: BSI-DSZ-CC-1247-2025: 1	DE: BSI-DSZ-CC-0098-V3-2021-MA-02: 1 BSI-DSZ-CC-1209-V3-2026: 1
pdf_data/cert_keywords/cc_protection_profile_id	BSI: BSI-CC-PP-0064-: 1
pdf_data/cert_keywords/cc_security_level	EAL: EAL 2: 1 EAL 3: 1 EAL 4: 1	EAL: EAL 2: 1 EAL 3: 1
pdf_data/cert_keywords/cc_sar	ALC: ALC_FLR: 1	ADV: ADV_FSP.4: 1 ADV_IMP.1: 1 ADV_TDS.3: 1 ALC: ALC_FLR: 1 ALC_FLR.2: 1 ALC_TAT.1: 1 AVA: AVA_VAN.3: 1
pdf_data/cert_keywords/cc_sfr
pdf_data/cert_keywords/cc_claims
pdf_data/cert_keywords/vendor
pdf_data/cert_keywords/eval_facility
pdf_data/cert_keywords/symmetric_crypto
pdf_data/cert_keywords/asymmetric_crypto
pdf_data/cert_keywords/pq_crypto
pdf_data/cert_keywords/hash_function
pdf_data/cert_keywords/crypto_scheme
pdf_data/cert_keywords/crypto_protocol
pdf_data/cert_keywords/randomness
pdf_data/cert_keywords/cipher_mode
pdf_data/cert_keywords/ecc_curve
pdf_data/cert_keywords/crypto_engine
pdf_data/cert_keywords/tls_cipher_suite
pdf_data/cert_keywords/crypto_library
pdf_data/cert_keywords/vulnerability
pdf_data/cert_keywords/side_channel_analysis
pdf_data/cert_keywords/technical_report_id
pdf_data/cert_keywords/device_model
pdf_data/cert_keywords/tee_name
pdf_data/cert_keywords/os_name
pdf_data/cert_keywords/cplc_data
pdf_data/cert_keywords/ic_data_group
pdf_data/cert_keywords/standard_id	ISO: ISO/IEC 15408: 2 ISO/IEC 18045: 2	ISO: ISO/IEC 15408: 2 ISO/IEC 18045: 2
pdf_data/cert_keywords/javacard_version
pdf_data/cert_keywords/javacard_api_const
pdf_data/cert_keywords/javacard_packages
pdf_data/cert_keywords/certification_process
pdf_data/cert_metadata
pdf_data/report_filename	1247a_pdf.pdf	1209V3a_pdf.pdf
pdf_data/report_frontpage	DE: cc_security_level: Common Criteria Part 3 extended EAL 3 valid until: 29 January 2030 cc_version: PP conformant Common Criteria Part 2 extended cert_id: BSI-DSZ-CC-1247-2025 cert_item: Bundesdruckerei Document Application with tamper-evident casing Version 2.6.1; Firmware Version 1.6.24-604, TOE Casing Version 0 cert_lab: BSI developer: Bundesdruckerei GmbH match_rules: ['(BSI-DSZ-CC-.+?) (?:for\|For) (.+?) from (.)'] ref_protection_profiles: Common Criteria Protection Profile for Document Management Terminal DMT-PP, BSI-CC-PP-0064- V2-2018, Version: 2.0, 2018-06-06, Federal Office for Information Security (BSI*	DE: cert_id: BSI-DSZ-CC-1209-V3-2026 cert_item: secunet konnektor 2.0.0 und 2.1.0, Version 6.0.8:2.0.0 und 6.0.8:2.1.0 cert_lab: BSI developer: secunet Security Networks AG match_rules: ['(BSI-DSZ-CC-.+?) zu (.+?) der (.*)']
pdf_data/report_keywords/cc_cert_id	DE: BSI-DSZ-CC-1215-2023: 2 BSI-DSZ-CC-1247-2025: 15	DE: BSI-DSZ-CC-0098-V3-2021-MA-02: 2 BSI-DSZ-CC-1209-V2-: 1 BSI-DSZ-CC-1209-V2-2025: 1 BSI-DSZ-CC-1209-V3-2026: 20
pdf_data/report_keywords/cc_protection_profile_id	BSI: BSI-CC-PP-0064-: 1 BSI-CC-PP-0064-V2-2018: 2	BSI: BSI-CC-PP-0098: 1 BSI-CC-PP-0098-V3-2021-MA-02: 1
pdf_data/report_keywords/cc_security_level	EAL: EAL 1: 1 EAL 2: 3 EAL 3: 3 EAL 4: 2	EAL: EAL 1: 1 EAL 2: 3 EAL 3: 4 EAL 4: 1 EAL 5+: 1 EAL 6: 1
pdf_data/report_keywords/cc_sar	ADV: ADV_ARC: 1 ALC: ALC_FLR: 3 ATE: ATE_FUN: 1 ATE_IND: 4 AVA: AVA_VAN: 2	ADV: ADV_FSP.4: 4 ADV_IMP.1: 4 ADV_TDS.3: 4 ALC: ALC_CMS: 1 ALC_CMS.4: 1 ALC_FLR: 3 ALC_FLR.2: 4 ALC_TAT.1: 4 AVA: AVA_VAN.3: 5
pdf_data/report_keywords/cc_sfr	FAU: FAU_GEN.1: 1 FIA: FIA_API.1: 1 FIA_UAU.2: 1 FIA_UAU.4: 1 FIA_UAU.5: 1 FIA_UAU.6: 1 FIA_UID.2: 1 FMT: FMT_MTD: 3 FMT_SMF.1: 1 FMT_SMR.1: 1 FPT: FPT_PHP: 1 FTP: FTP_TRP: 1	FDP: FDP_ITC: 2 FDP_UIT: 2 FMT: FMT_MTD: 2
pdf_data/report_keywords/cc_claims
pdf_data/report_keywords/vendor
pdf_data/report_keywords/eval_facility	TUV: TÜV Informationstechnik: 3	SRC: SRC Security Research & Consulting: 4
pdf_data/report_keywords/symmetric_crypto	AES_competition: AES: AES: 5 AES-: 1 DES: 3DES: 3DES: 4 DES: DES: 2 constructions: MAC: CMAC: 2	AES_competition: AES: AES: 17 AES-: 4 AES-128: 2 AES-256: 2 constructions: MAC: HMAC: 10 HMAC-SHA-256: 1 HMAC-SHA-384: 1 HMAC-SHA-512: 1
pdf_data/report_keywords/asymmetric_crypto	ECC: ECDH: ECDH: 2 ECDSA: ECDSA: 7	ECC: ECC: ECC: 4 ECDH: ECDH: 5 ECDSA: ECDSA: 24 ECIES: ECIES: 2 FF: DH: DH: 7 Diffie-Hellman: 4 RSA: RSAOAEP: 4
pdf_data/report_keywords/pq_crypto
pdf_data/report_keywords/hash_function	SHA: SHA1: SHA1: 2 SHA2: SHA224: 1 SHA256: 6 SHA384: 2 SHA512: 1	SHA: SHA1: SHA-1: 1 SHA2: SHA-2: 1 SHA-256: 15 SHA-384: 3
pdf_data/report_keywords/crypto_scheme	MAC: MAC: 6	AEAD: AEAD: 1 KEX: Key Exchange: 5
pdf_data/report_keywords/crypto_protocol	PACE: PACE: 9 SSH: SSH: 5 TLS: TLS: TLS: 2 TLS 1.3: 1	IKE: IKE: 4 IKEv2: 12 IPsec: IPsec: 10 TLS: TLS: TLS: 26 TLS 1.2: 2 TLS v1.2: 6 VPN: VPN: 14
pdf_data/report_keywords/randomness	RNG: RNG: 6
pdf_data/report_keywords/cipher_mode	CBC: CBC: 6	CBC: CBC: 1 ECB: ECB: 1 GCM: GCM: 12
pdf_data/report_keywords/ecc_curve		ANSSI: FRP256v1: 1 Brainpool: brainpoolP256r1: 5 NIST: NIST P-256: 4 P-256: 4
pdf_data/report_keywords/crypto_engine
pdf_data/report_keywords/tls_cipher_suite
pdf_data/report_keywords/crypto_library
pdf_data/report_keywords/vulnerability
pdf_data/report_keywords/side_channel_analysis	FI: physical tampering: 4
pdf_data/report_keywords/technical_report_id	BSI: BSI 7148: 1	BSI: BSI 7148: 1 BSI TR-03111: 2 BSI TR-03116-1: 1 BSI TR-03154: 1 BSI TR-03155: 1
pdf_data/report_keywords/device_model
pdf_data/report_keywords/tee_name
pdf_data/report_keywords/os_name		STARCOS: STARCOS 3: 2
pdf_data/report_keywords/cplc_data
pdf_data/report_keywords/ic_data_group
pdf_data/report_keywords/standard_id	BSI: AIS 20: 1 AIS 32: 1 AIS 38: 1 AIS48: 1 FIPS: FIPS 197: 8 FIPS PUB 46-3: 2 FIPS180-4: 8 FIPS186-2: 6 FIPS186-4: 1 FIPS197: 1 ICAO: ICAO: 2 ISO: ISO/IEC 15408: 4 ISO/IEC 15946-: 6 ISO/IEC 17065: 2 ISO/IEC 18045: 4 ISO/IEC 9797-: 2 RFC: RFC5246: 1 RFC8446: 1	BSI: AIS 20: 2 AIS 32: 1 AIS 34: 1 FIPS: FIPS 180-4: 19 FIPS 197: 7 FIPS PUB 180-4: 1 FIPS180-4: 1 FIPS186-4: 8 FIPS197: 1 ISO: ISO/IEC 15408: 4 ISO/IEC 17065: 2 ISO/IEC 18045: 4 NIST: SP 800-38D: 3 PKCS: PKCS#1: 8 PKCS#12: 2 PKCS5: 1 RFC: RFC 2104: 1 RFC 3268: 1 RFC 8017: 1 RFC-2104: 3 RFC-2404: 1 RFC-3268: 3 RFC-3526: 2 RFC-3602: 2 RFC-4106: 1 RFC-4301: 3 RFC-4303: 3 RFC-4492: 2 RFC-4868: 1 RFC-4880: 1 RFC-5116: 1 RFC-5246: 4 RFC-5289: 1 RFC-5639: 10 RFC-5652: 3 RFC-6931: 1 RFC-6954: 2 RFC-7296: 5 RFC-8017: 10 RFC-8247: 1 RFC2104: 1 RFC2404: 1 RFC3268: 1 RFC3526: 1 RFC3602: 1 RFC4055: 1 RFC4106: 1 RFC4301: 1 RFC4303: 1 RFC4346: 1 RFC4868: 1 RFC4880: 1 RFC5246: 1 RFC5280: 1 RFC5289: 1 RFC5639: 10 RFC5652: 1 RFC5996: 1 RFC7027: 3 RFC7292: 1 RFC7296: 1 RFC8017: 1 X509: X.509: 2
pdf_data/report_keywords/javacard_version
pdf_data/report_keywords/javacard_api_const
pdf_data/report_keywords/javacard_packages
pdf_data/report_keywords/certification_process	ConfidentialDocument: Technical Report, Version 2, 2024-12-09, 1247_ETR_241209_v2, TÜV Informationstechnik GmbH, (confidential document) [8] Common Criteria Protection Profile for Document Management Terminal DMT-PP: 1 being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification: 1 list for the TOE, Version 1.46, 2024-12-09, ALC_CMS_DMT_V1.46.xlsx, Bundesdruckerei GmbH (confidential document) [10] Guidance documentation for the TOE, Version 1.232, 2024-06-20, VISOTEC® V- ÄNDERUNGSTERMINAL: 1
pdf_data/report_metadata	/Author: Bundesamt für Sicherheit in der Informationstechnik /Keywords: "Common Criteria, Certification, Zertifizierung, Bundesdruckerei GmbH, DMT-PP, BSI-CC-PP-0064-V2-2018" /Subject: Common Criteria, Certification, Zertifizierung, Bundesdruckerei GmbH, DMT-PP, BSI-CC-PP-0064-V2-2018 /Title: Certification Report BSI-DSZ-CC-1247-2024 pdf_file_size_bytes: 397517 pdf_hyperlinks: https://www.bsi.bund.de/zertifizierung, https://www.commoncriteriaportal.org/, https://www.bsi.bund.de/, http://www.commoncriteriaportal.org/, https://www.bsi.bund.de/zertifizierungsreporte, https://www.bsi.bund.de/AIS, https://www.sogis.eu/, http://www.commoncriteriaportal.org/cc/ pdf_is_encrypted: False pdf_number_of_pages: 28	/Author: Bundesamt für Sicherheit in der Informationstechnik /Keywords: "Common Criteria, Certification, Zertifizierung, Konnektor, eHealth, Gesundheitswesen, BSI-DSZ-CC-1209-V3-2026" /Subject: Common Criteria, Certification, Zertifizierung, Konnektor, eHealth, Gesundheitswesen, BSI-DSZ-CC-1209-V3-2026 /Title: Report BSI-DSZ-CC-1209-V3-2026 pdf_file_size_bytes: 443151 pdf_hyperlinks: {} pdf_is_encrypted: False pdf_number_of_pages: 39
pdf_data/st_filename	1247b_pdf.pdf	1209V3b_pdf.pdf
pdf_data/st_frontpage
pdf_data/st_keywords/cc_cert_id	DE: BSI-DSZ-CC-1247: 1	DE: BSI-DSZ-CC-1135-2020: 1 BSI-DSZ-CC-1157-2020: 1 BSI-DSZ-CC-1163-2021: 1 BSI-DSZ-CC-1174-2021: 1 BSI-DSZ-CC-1184-2022: 1 BSI-DSZ-CC-1190-2022: 1 BSI-DSZ-CC-1209-2023: 1 BSI-DSZ-CC-1209-V2-2025: 1 BSI-DSZ-CC-1209-V3-2025: 1 BSI-DSZ-CC-1218-2023: 1
pdf_data/st_keywords/cc_protection_profile_id	BSI: BSI-CC-PP-0064-: 1 BSI-CC-PP-0064-V2-2018: 3	BSI: BSI-CC-PP-0097: 6 BSI-CC-PP-0098: 21 BSI-CC-PP-0098“: 1 BSI-PP-0032: 1
pdf_data/st_keywords/cc_security_level	EAL: EAL 3: 4 EAL3: 1 EAL4+: 2	EAL: EAL3: 8
pdf_data/st_keywords/cc_sar	ADV: ADV_ARC.1: 1 ADV_TDS.2: 1 AGD: AGD_OPE.1: 1 ALC: ALC_CMC.3: 1 ALC_DEL.1: 1 ALC_LCD.1: 1 APE: APE_ECD: 1 ASE: ASE_CCL.1: 1 ASE_INT.1: 1 ASE_REQ.2: 1 ASE_TSS.1: 1 ATE: ATE_COV.2: 1 ATE_FUN.1: 1 AVA: AVA_VAN.2: 1 AVA_VAN.5: 2	ADV: ADV_ARC.1: 3 ADV_FSP: 1 ADV_FSP.4: 6 ADV_IMP: 1 ADV_IMP.1: 6 ADV_TDS: 1 ADV_TDS.3: 6 AGD: AGD_OPE: 1 AGD_OPE.1: 13 AGD_PRE.1: 4 ALC: ALC_DEL.1: 6 ALC_FLR.2: 6 ALC_TAT.1: 6 ASE: ASE_TSS.1: 1 AVA: AVA_VAN: 1 AVA_VAN.3: 7 AVA_VAN.5: 2
pdf_data/st_keywords/cc_sfr	FAU: FAU_GEN: 1 FAU_GEN.1: 5 FAU_GEN.1.1: 3 FAU_GEN.1.2: 2 FCS: FCS_CKM: 13 FCS_CKM.1: 15 FCS_CKM.4: 5 FCS_CKM.4.1: 1 FCS_COP: 29 FCS_COP.1: 25 FCS_RNG: 3 FCS_RNG.1: 6 FCS_RNG.1.1: 1 FCS_RNG.1.2: 1 FDP: FDP_RIP.1: 4 FDP_RIP.1.1: 1 FIA: FIA_API: 1 FIA_API.1: 6 FIA_API.1.1: 1 FIA_UAU.1: 3 FIA_UAU.2: 6 FIA_UAU.2.1: 1 FIA_UAU.4: 5 FIA_UAU.4.1: 1 FIA_UAU.5: 4 FIA_UAU.5.1: 1 FIA_UAU.5.2: 1 FIA_UAU.6: 4 FIA_UAU.6.1: 1 FIA_UID.1: 2 FIA_UID.2: 6 FIA_UID.2.1: 1 FMT: FMT_MTD: 22 FMT_MTD.1: 5 FMT_SMF.1: 7 FMT_SMF.1.1: 1 FMT_SMR.1: 5 FMT_SMR.1.1: 1 FMT_SMR.1.2: 1 FPT: FPT_PHP: 4 FPT_PHP.1: 2 FTP: FTP_TRP: 4 FTP_TRP.1: 3 FTP_TRP.1.2: 1	FAU: FAU_GEN: 26 FAU_GEN.1: 12 FAU_GEN.2: 1 FAU_SAR: 6 FAU_SAR.1: 2 FAU_STG: 14 FAU_STG.1: 2 FAU_STG.3: 1 FAU_STG.4: 1 FCS: FCS_CKM: 116 FCS_CKM.1: 31 FCS_CKM.2: 7 FCS_CKM.4: 29 FCS_CMK.4: 1 FCS_COP: 254 FCS_COP.1: 29 FDP: FDP_ACC: 90 FDP_ACC.1: 48 FDP_ACF: 112 FDP_ACF.1: 75 FDP_ACF.1.2: 1 FDP_DAU: 33 FDP_DAU.1: 3 FDP_DAU.2: 9 FDP_DAU.2.1: 1 FDP_ETC: 17 FDP_ETC.2: 8 FDP_IFC: 19 FDP_IFC.1: 18 FDP_IFF: 21 FDP_IFF.1: 20 FDP_ITC: 31 FDP_ITC.1: 31 FDP_ITC.2: 43 FDP_RIP: 21 FDP_RIP.1: 2 FDP_SDI: 7 FDP_SDI.1: 1 FDP_SDI.2: 2 FDP_SOS.2: 1 FDP_UCT: 5 FDP_UCT.1: 1 FDP_UIT: 16 FDP_UIT.1: 6 FIA: FIA_API: 13 FIA_API.1: 3 FIA_API.1.1: 2 FIA_SOS: 17 FIA_SOS.1: 1 FIA_SOS.2: 3 FIA_UAU: 41 FIA_UAU.1: 4 FIA_UAU.5: 4 FIA_UID: 14 FIA_UID.1: 12 FMT: FMT_MOF: 18 FMT_MOF.1: 2 FMT_MSA: 110 FMT_MSA.1: 10 FMT_MSA.3: 26 FMT_MSA.4: 2 FMT_MTD: 44 FMT_MTD.1: 7 FMT_SMF: 29 FMT_SMF.1: 14 FMT_SMR: 10 FMT_SMR.1: 43 FMT_SMR.1.1: 1 FPT: FPT_EMS: 16 FPT_EMS.1: 9 FPT_EMS.1.1: 2 FPT_EMS.1.2: 2 FPT_FLS: 10 FPT_FLS.1: 2 FPT_STM: 17 FPT_STM.1: 4 FPT_TDC: 38 FPT_TDC.1: 14 FPT_TDC.1.2: 1 FPT_TEE: 9 FPT_TEE.1: 2 FPT_TST: 24 FPT_TST.1: 10 FTA: FTA_TAB: 14 FTA_TAB.1: 2 FTP: FTP_ITC: 96 FTP_ITC.1: 49 FTP_TRP: 15 FTP_TRP.1: 10
pdf_data/st_keywords/cc_claims	A: A.PKI: 4 OE: OE.PKI: 4 OSP: OSP.RNG: 4 R: R.CRL: 3	A: A.AK: 88 A.NK: 67 O: O.AK: 372 O.NK: 209 OE: OE.AK: 198 OE.NK: 207 OSP: OSP.AK: 79 OSP.NK: 23 T: T.AK: 113 T.NK: 131
pdf_data/st_keywords/vendor
pdf_data/st_keywords/eval_facility
pdf_data/st_keywords/symmetric_crypto	AES_competition: AES: AES: 8 E2: E2: 1 DES: 3DES: 3DES: 4 Triple-DES: 4 DES: DES: 1 constructions: MAC: CMAC: 2 KMAC: 1	AES_competition: AES: AES: 71 AES-128: 4 AES-192: 1 AES-256: 7 AES128: 4 AES256: 4 E2: E2: 2 HPC: HPC: 5 DES: DES: DES: 4 constructions: MAC: HMAC: 41 HMAC-SHA-256: 1 HMAC-SHA-384: 1 HMAC-SHA-512: 1
pdf_data/st_keywords/asymmetric_crypto	ECC: ECDH: ECDH: 2 ECDSA: ECDSA: 1 FF: DH: DH: 2 Diffie-Hellman: 1	ECC: ECC: ECC: 25 ECDSA: ECDSA: 32 ECIES: ECIES: 19 FF: DH: Diffie-Hellman: 1 RSA: RSA 2048: 5 RSA 4096: 1 RSA-2048: 1 RSAOAEP: 8
pdf_data/st_keywords/pq_crypto
pdf_data/st_keywords/hash_function	SHA: SHA1: SHA-1: 7 SHA1: 2 SHA2: SHA-224: 2 SHA-256: 5 SHA-384: 2 SHA-512: 2 SHA256: 2	SHA: SHA1: SHA-1: 6 SHA2: SHA-2: 8 SHA-256: 34 SHA-384: 7 SHA-512: 5 SHA256: 1
pdf_data/st_keywords/crypto_scheme	MAC: MAC: 12	KEX: Key Exchange: 3 MAC: MAC: 1
pdf_data/st_keywords/crypto_protocol	PACE: PACE: 27 TLS: TLS: TLS: 2 TLS 1.2: 2 TLS1.2: 6	IKE: IKE: 21 IKEv2: 7 IPsec: IPsec: 34 TLS: SSL: SSL: 1 TLS: TLS: 292 TLS 1.2: 3 TLS 1.3: 2 VPN: VPN: 61
pdf_data/st_keywords/randomness	RNG: RNG: 25	RNG: RNG: 15
pdf_data/st_keywords/cipher_mode	CBC: CBC: 4	CBC: CBC: 4 GCM: GCM: 7
pdf_data/st_keywords/ecc_curve	Brainpool: brainpoolP224r1: 1 brainpoolP256r1: 1 brainpoolP384r1: 1 brainpoolP512r1: 1 NIST: NIST P-384: 1 P-256: 2 P-384: 1 secp256r1: 4 secp384r1: 4 secp521r1: 2	Brainpool: brainpoolP256r1: 3 brainpoolP384r1: 1 NIST: NIST P-256: 3 P-256: 5 P-384: 2
pdf_data/st_keywords/crypto_engine
pdf_data/st_keywords/tls_cipher_suite	TLS: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: 1 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: 1 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384: 1 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: 1 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: 1	TLS: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: 3 TLS_DHE_RSA_WITH_AES_256_CBC_SHA: 3 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: 3 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: 2 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: 3 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: 3 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384: 3 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: 2 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384146: 1
pdf_data/st_keywords/crypto_library
pdf_data/st_keywords/vulnerability
pdf_data/st_keywords/side_channel_analysis	FI: physical tampering: 5	SCA: side channel: 1
pdf_data/st_keywords/technical_report_id		BSI: BSI TR-03111: 2 BSI TR-03114: 2 BSI TR-03116-1: 4 BSI TR-03144: 8 BSI TR-03154: 1 BSI TR-03155: 1
pdf_data/st_keywords/device_model
pdf_data/st_keywords/tee_name		IBM: SE: 1
pdf_data/st_keywords/os_name		STARCOS: STARCOS 3: 2
pdf_data/st_keywords/cplc_data
pdf_data/st_keywords/ic_data_group	EF: EF.COM: 2 EF.DG1: 2 EF.DG13: 1 EF.DG16: 2 EF.DG2: 1 EF.DG3: 2 EF.DG4: 2 EF.DG5: 1 EF.SOD: 2
pdf_data/st_keywords/standard_id	BSI: AIS31: 2 FIPS: FIPS 180-4: 2 FIPS 186-2: 1 FIPS 186-4: 1 FIPS PUB 197: 1 FIPS180-4: 3 FIPS186-2: 2 FIPS186-4: 3 FIPS197: 2 ICAO: ICAO: 13 ISO: ISO/IEC 14443: 2 ISO/IEC 7816-4: 1 RFC: RFC3369: 1 RFC5280: 1	CC: CCMB-2017-04-002: 1 CCMB-2017-04-003: 1 CCMB-2017-04-004: 1 FIPS: FIPS 180-4: 1 FIPS 197: 7 FIPS PUB 180-4: 12 FIPS PUB 186-5: 2 PKCS: PKCS #12: 1 PKCS#1: 22 PKCS#12: 2 PKCS#7: 1 RFC: RFC 2104: 2 RFC 2131: 3 RFC 2132: 3 RFC 2404: 2 RFC 2406: 1 RFC 2560: 1 RFC 3268: 1 RFC 3526: 1 RFC 3602: 3 RFC 4055: 2 RFC 4106: 2 RFC 4122: 2 RFC 4301: 4 RFC 4302: 1 RFC 4303: 5 RFC 4492: 1 RFC 4868: 2 RFC 5083: 1 RFC 5084: 1 RFC 5116: 1 RFC 5126: 1 RFC 5246: 7 RFC 5280: 1 RFC 5289: 2 RFC 5639: 3 RFC 5652: 2 RFC 5869: 1 RFC 5905: 1 RFC 7027: 1 RFC 7296: 6 RFC 8017: 4 RFC 8422: 2 RFC 8446: 1 RFC-5246: 2 RFC-5639: 1 RFC2617: 1 RFC2818: 1 RFC4122: 2 RFC5652: 3 RFC7296: 1 X509: X.509: 30
pdf_data/st_keywords/javacard_version
pdf_data/st_keywords/javacard_api_const
pdf_data/st_keywords/javacard_packages
pdf_data/st_keywords/certification_process
pdf_data/st_metadata	/Author: Alexander Haferland /Keywords: CC, ST, Common Criteria, Security Target, Inspection System, PA, eAT, ePass /Subject: Security Target /Title: Bundesdruckerei Document Application Common Criteria Evaluation pdf_file_size_bytes: 1424956 pdf_hyperlinks: {} pdf_is_encrypted: False pdf_number_of_pages: 91	/Author: Tekampe, Nils pdf_file_size_bytes: 5270607 pdf_hyperlinks: http://www.rfc-editor.org/rfc/rfc4868.txt, https://tools.ietf.org/html/rfc5639, http://www.rfc-editor.org/rfc/rfc4055.txt, https://www.w3.org/TR/2010/REC-xpath20-20101214/, https://tools.ietf.org/html/rfc4122, http://www.ietf.org/rfc/rfc5652.txt, http://tools.ietf.org/html/rfc2560, http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf, https://www.secg.org/sec1-v2.pdf, https://www.w3.org/TR/2007/REC-xslt20-20070123/, http://www.ietf.org/rfc/rfc8017.txt, http://www.ietf.org/rfc/rfc2131.txt, http://www.etsi.org/, http://www.ietf.org/rfc/rfc4303.txt, http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256, http://www.rfc-editor.org/rfc/rfc3602.txt, http://www.ietf.org/rfc/rfc2406.txt, http://partners.adobe.com/public/developer/en/tiff/TIFF6.pdf, http://www.ietf.org/rfc/rfc2132.txt, http://www.rfc-editor.org/rfc/rfc4106.txt, https://tools.ietf.org/html/rfc5116, http://www.gematik.de/, http://www.rfc-editor.org/rfc/rfc2404.txt, https://www.w3.org/TR/2008/REC-xmldsig-core-20080610/, http://www.ietf.org/rfc/rfc7296.txt, http://www.ietf.org/rfc/rfc5280.txt, https://www.w3.org/TR/xml/, http://www.ietf.org/rfc/rfc7027.txt, http://www.ietf.org/rfc/rfc5905.txt, http://www.rfc-editor.org/rfc/rfc3526.txt, https://www.w3.org/TR/2013/REC-xmlenc-core1-20130411/, http://www.unicode.org/versions/Unicode6.2.0/, http://www.rfc-editor.org/rfc/rfc8017.txt pdf_is_encrypted: False pdf_number_of_pages: 410
state/cert/convert_garbage	None	None
state/cert/convert_ok	True	True
state/cert/download_ok	True	True
state/cert/extract_ok	False	False
state/cert/pdf_hash	Different	Different
state/cert/txt_hash	Different	Different
state/report/convert_garbage	None	None
state/report/convert_ok	True	True
state/report/download_ok	True	True
state/report/extract_ok	True	True
state/report/pdf_hash	Different	Different
state/report/txt_hash	Different	Different
state/st/convert_garbage	None	None
state/st/convert_ok	True	True
state/st/download_ok	True	True
state/st/extract_ok	True	True
state/st/pdf_hash	Different	Different
state/st/txt_hash	Different	Different