Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
STARCOS 3.7 COS HBA-SMC
BSI-DSZ-CC-0976-V4-2021 		STARCOS 3.7 COS HBA-SMC
BSI-DSZ-CC-0976-V5-2026
status archived active
not_valid_after 18.06.2026 17.06.2031
not_valid_before 18.06.2021 17.06.2026
cert_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0976V4c_pdf.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/EUCC-3087-2026-0011%20Certificate.pdf
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0976V4a_pdf.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/EUCC-3087-2026-0011%20Certification%20Report.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0976V4b_pdf.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/EUCC-3087-2026-0011%20Security%20Target.pdf
manufacturer G+D Mobile Security GmbH Giesecke+Devrient ePayments GmbH
manufacturer_web https://www.gi-de.com/de/de/mobile-security/ https://www.gi-de.com/de/
security_level ATE_DPT.2, AVA_VAN.5, ALC_DVS.2, EAL4+ AVA_VAN.5, ALC_FLR.1, EAL4+, ALC_DVS.2, ATE_DPT.2
heuristics/cert_id BSI-DSZ-CC-0976-V4-2021 BSI-DSZ-CC-0976-V5-2026
heuristics/extracted_sars ASE_ECD.1, ADV_FSP.4, ALC_LCD.1, ADV_ARC.1, ASE_SPD.1, ASE_REQ.2, AGD_PRE.1, ALC_CMS.4, AVA_VAN.5, ASE_CCL.1, ALC_TAT.1, ASE_OBJ.2, ALC_FLR.1, ADV_IMP.1, ASE_TSS.1, ALC_DEL.1, ASE_INT.1, ADV_TDS.3, ALC_DVS.2, ATE_DPT.2, ATE_IND.2, ATE_COV.2, ATE_FUN.1, AGD_OPE.1, ALC_CMC.4 ASE_ECD.1, ADV_IMP.2, ADV_FSP.4, ALC_LCD.1, ADV_ARC.1, ADV_INT.3, ALC_CMC.5, ASE_SPD.1, ASE_REQ.2, AGD_PRE.1, ALC_CMS.4, AVA_VAN.5, ASE_CCL.1, ASE_OBJ.2, ALC_FLR.1, ATE_FUN.2, ASE_TSS.1, ALC_DEL.1, ASE_INT.1, ALC_DVS.2, ALC_TAT.3, ATE_DPT.2, ATE_IND.2, ATE_COV.3, AGD_OPE.1, ADV_TDS.5
heuristics/report_references/directly_referenced_by BSI-DSZ-CC-0976-V5-2026 {}
heuristics/report_references/directly_referencing BSI-DSZ-CC-1110-V3-2020, BSI-DSZ-CC-0976-V3-2019 BSI-DSZ-CC-0976-V4-2021, BSI-DSZ-CC-1110-V8-2025
heuristics/report_references/indirectly_referenced_by BSI-DSZ-CC-0976-V5-2026 {}
heuristics/report_references/indirectly_referencing BSI-DSZ-CC-0976-V2-2018, BSI-DSZ-CC-0916-2015, BSI-DSZ-CC-0976-2015, BSI-DSZ-CC-0782-2012, BSI-DSZ-CC-1110-2019, BSI-DSZ-CC-0891-V2-2016, BSI-DSZ-CC-0945-V3-2018, BSI-DSZ-CC-1110-V3-2020, BSI-DSZ-CC-0891-2015, BSI-DSZ-CC-0945-V2-2018, BSI-DSZ-CC-0976-V3-2019, BSI-DSZ-CC-0945-2017, BSI-DSZ-CC-0879-2014, BSI-DSZ-CC-0782-V2-2015, BSI-DSZ-CC-1110-V2-2019 BSI-DSZ-CC-0976-V2-2018, BSI-DSZ-CC-1110-V7-2024, BSI-DSZ-CC-1110-V4-2021, BSI-DSZ-CC-0976-2015, BSI-DSZ-CC-0945-V3-2018, BSI-DSZ-CC-0891-2015, BSI-DSZ-CC-0879-2014, BSI-DSZ-CC-0782-V2-2015, BSI-DSZ-CC-0916-2015, BSI-DSZ-CC-1110-V3-2020, BSI-DSZ-CC-1110-V2-2019, BSI-DSZ-CC-1110-V6-2023, BSI-DSZ-CC-1110-V5-2022, BSI-DSZ-CC-1110-V8-2025, BSI-DSZ-CC-1110-2019, BSI-DSZ-CC-0891-V2-2016, BSI-DSZ-CC-0945-V2-2018, BSI-DSZ-CC-0945-2017, BSI-DSZ-CC-0976-V4-2021, BSI-DSZ-CC-0782-2012, BSI-DSZ-CC-0976-V3-2019
heuristics/scheme_data
  • category: eHealth
  • cert_id: EUCC-3087-2026-0011
  • certification_date: 17.06.2026
  • enhanced:
    • applicant: Giesecke & Devrient GmbH seit 1. Juli 2017 Giesecke+Devrient Mobile Security GmbH seit 1. Juli 2023 Giesecke+Devrient ePayments GmbH Prinzregentenstr. 161 81677 München
    • assurance_level: EAL4+,ALC_DVS.2,ATE_DPT.2,AVA_VAN.5,ALC_FLR.1
    • certification_date: 17.06.2026
    • description: The Target of Evaluation (TOE) is the product STARCOS 3.6 COSGKV C1 developed by Giesecke & Devrient GmbH. The TOE is a smart card product according to the G2 Card Operating System (G2-COS) specification from gematik. The TOE is intended to be used as a card operating system platform for specific card types and applications of the card generation G2 in the framework of the German health care system, and therefore implements the mandatory part of the G2-COS specification with the base functionality of the operating system platform only. The TOE implements from the PP-0082-V2 the base part without any of the optional packages.
    • entries: [frozendict({'id': 'EUCC-3087-2026-0011 / BSI-DSZ-CC-0976-V5-2026 (Ausstellungsdatum / Certification Date 17.06.2026, gültig bis / valid until 16.06.2031)', 'description': "The focus of this re-certification was on the transfer of the certification procedure to CC/CEM:2022 and to EUCC. Included is the update of the product life-cycle concerning the involved development and production sites, the underlying HW-certificate as well as the vulnerability analysis and valuation of the TOE's (crypto) implementation. The certified product itself including its related guidance documentation did not change."}), frozendict({'id': 'BSI', 'description': "The maintenance procedure for BSI-DSZ-CC-0976-V4-2021 covers the update of the product life-cycle concerning the involved development and production sites and additionally addresses the update of the Security Target (ST) and user guidance documentation regards the TOE's random number generation functionality. The certified product itself did not change."}), frozendict({'id': 'BSI', 'description': 'The partial ALC re-evaluation for procedure 0976-V4 covers the update of the product life-cycle concerning the involved development and production sites. The certified product itself did not change.'}), frozendict({'id': 'BSI', 'description': 'The focus of this re-certification was on the adaptation of the Target of Evaluation (TOE) to the current version of the G2.1 COS-specification from gematik and the corresponding Protection Profile PP-0082-V4. This was related to the re-certification of the underlying Integrated Circuit (IC), to adaptations in the life-cycle model, to the integration of the functional packages Crypto Box and Logical Channel, to further specific changes in the Embedded Software as well as a corresponding update of the associated user guidance documentation. In particular, the TOE’s (crypto) implementation was revised, re-evaluated and re-assessed.'}), frozendict({'id': 'BSI', 'description': 'The partial ALC re-evaluation for procedure 0976-V3 covers the update of the product life-cycle concerning the involved development and production sites. The certified product itself did not change.'}), frozendict({'id': 'BSI', 'description': 'The partial ALC re-evaluation for procedure 0976-V3 covers the update of the product life-cycle concerning the involved development and production sites. The certified product itself did not change.'}), frozendict({'id': 'BSI', 'description': 'Software'}), frozendict({'id': 'BSI-DSZ-CC-0976-V2-2018 (Ausstellungsdatum / Certification Date 20.09.2018, gültig bis / valid until 19.09.2023) Zertifizierungsreport / Certification Report Sicherheitsvorgaben / Security Target Zertifikate / Certificate Im Fokus der vorliegenden Re-Zertifizierung stand die Anpassung des Evaluierungsgegenstandes (EVG) an die aktuelle Version der G2.1 COS-Spezifikation der gematik und das zugehörige überarbeitete Schutzprofil PP-0082-V3. Dies war verbunden mit einem Wechsel des unterliegenden Halbleiters, Anpassungen im Lebenszyklusmodell sowie spezifischen Änderungen in der Embedded Software und einer entsprechenden Aktualisierung der zugehörigen Benutzerdokumentation.', 'description': 'Software'}), frozendict({'id': 'BSI', 'description': 'The changes are related to an update and reevaluation of the product life-cycle caused by changes in the development and porduction sites. The certified product itself did not change.'}), frozendict({'id': 'BSI', 'description': 'Security Target'}), frozendict({'id': 'BSI', 'description': 'Security Target'})]
    • evaluation_facility: SRC Security Research & Consulting GmbH
    • expiration_date: 16.06.2031
    • product: STARCOS 3.7 COS HBA-SMC
    • protection_profile: Card Operating System Generation 2 (PP COS G2), Version 2.1, 10 July 2019, BSI-CC-PP-0082-V4-2019
  • product: STARCOS 3.7 COS HBA-SMC
  • subcategory: Smartcards
  • url: https://www.bsi.bund.de/SharedDocs/Zertifikate_CC/CC/Gesundheitswesen_SmartCards/0976.html
  • vendor: Giesecke & Devrient GmbH seit 1. Juli 2017 Giesecke+Devrient Mobile Security GmbH seit 1. Juli 2023 Giesecke+Devrient ePayments GmbH
heuristics/st_references/directly_referenced_by BSI-DSZ-CC-1068-V5-2024, BSI-DSZ-CC-1068-V4-2023, BSI-DSZ-CC-1068-V3-2022, BSI-DSZ-CC-1067-V4-2023, BSI-DSZ-CC-1067-V5-2024, BSI-DSZ-CC-1067-V3-2022 {}
heuristics/st_references/directly_referencing BSI-DSZ-CC-1110-V3-2020 BSI-DSZ-CC-1110-V8-2025
heuristics/st_references/indirectly_referenced_by BSI-DSZ-CC-1068-V5-2024, BSI-DSZ-CC-1068-V4-2023, BSI-DSZ-CC-1068-V3-2022, BSI-DSZ-CC-1067-V4-2023, BSI-DSZ-CC-1067-V5-2024, BSI-DSZ-CC-1067-V3-2022 {}
heuristics/st_references/indirectly_referencing BSI-DSZ-CC-1110-V3-2020 BSI-DSZ-CC-1110-V8-2025
pdf_data/cert_filename 0976V4c_pdf.pdf EUCC-3087-2026-0011 Certificate.pdf
pdf_data/cert_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-0976-V4-2021: 1
pdf_data/cert_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP-0082-V42019: 1
  • BSI:
    • BSI-CCPP-0082-V4-2019: 1
pdf_data/cert_keywords/cc_security_level
  • EAL:
    • EAL 2: 1
    • EAL 4: 1
    • EAL 4 augmented: 1
    • EAL 5: 1
  • EAL:
    • EAL 2: 1
    • EAL 4: 1
pdf_data/cert_keywords/cc_sar
  • ALC:
    • ALC_DVS.2: 1
  • ATE:
    • ATE_DPT.2: 1
  • AVA:
    • AVA_VAN.5: 1
  • ALC:
    • ALC_FLR: 1
    • ALC_FLR.1: 1
  • ATE:
    • ATE_DPT.2: 1
  • AVA:
    • AVA_VAN: 2
pdf_data/cert_keywords/eval_facility
  • SRC:
    • SRC Security Research & Consulting: 1
pdf_data/cert_metadata
  • /Author: Bundesamt für Sicherheit in der Informationstechnik
  • /CreationDate: D:20210629121438+02'00'
  • /Creator: Writer
  • /Keywords: "Common Criteria, Certification, Zertifizierung, G2 COS, eHealth, STARCOS 3.7 COS HBA-SMC, Giesecke+Devrient Mobile Security GmbH"
  • /ModDate: D:20210629121708+02'00'
  • /Producer: LibreOffice 6.3
  • /Subject: STARCOS 3.7 COS HBA-SMC from G+D Mobile Security GmbH, Giesecke+Devrient Mobile Security GmbH
  • /Title: Certificate BSI-DSZ-CC-0976-V4-2021
  • pdf_file_size_bytes: 241574
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
  • /CreationDate: D:20260622060106+01'00'
  • /Creator: KM_C300i
  • /ModDate: D:20260622060106+01'00'
  • /Producer: KONICA MINOLTA bizhub C300i
  • /Title: KM_C300i26062206000
  • pdf_file_size_bytes: 125061
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 2
pdf_data/report_filename 0976V4a_pdf.pdf EUCC-3087-2026-0011 Certification Report.pdf
pdf_data/report_frontpage
  • DE:
    • cc_security_level: Giesecke+Devrient Mobile Security GmbH Card Operating System Generation 2 (PP COS G2), Version 2.1, 10 July 2019, BSI-CC-PP-0082-V42019 PP conformant Common Criteria Part 2 extended Common Criteria Part 3 conformant EAL 4 augmented by ALC_DVS.2, ATE_DPT.2 and AVA_VAN.5
    • cc_version:
    • cert_id: BSI-DSZ-CC-0976-V4-2021
    • cert_item: STARCOS 3.7 COS HBA-SMC
    • cert_lab: BSI
    • developer: Giesecke+Devrient Mobile Security GmbH BSI -
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
    • ref_protection_profiles:
  • DE:
    • cert_id: BSI-DSZ-CC-0976-V5-2026
    • cert_item: ## STARCOS 3.7 COS HBA-SMC
    • cert_lab: BSI
    • developer: Giesecke+Devrient ePayments GmbH BSI -
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
pdf_data/report_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-0976-V3-2019: 3
    • BSI-DSZ-CC-0976-V4-2021: 45
    • BSI-DSZ-CC-1110-: 2
    • BSI-DSZ-CC-1110-V3-2020: 7
    • BSI-DSZ-CC-S-0128-2019: 1
    • BSI-DSZ-CC-S-01282019: 1
    • BSI-DSZ-CC-S-0132-2019: 1
    • BSI-DSZ-CC-S-0144-2020: 2
  • DE:
    • BSI-DSZ-CC-0976-V4-2021: 2
    • BSI-DSZ-CC-0976-V5-2026: 44
    • BSI-DSZ-CC-1110-: 1
    • BSI-DSZ-CC-1110-V8-2025: 7
    • BSI-DSZ-CC-S-0347-2026: 1
    • EUCC-3087-2026-0011: 39
  • FR:
    • ANSSI-CC-SITE-2025/03: 2
    • ANSSI-CC-SITE-2025/05: 2
pdf_data/report_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP-0082-V4-2019: 3
    • BSI-CC-PP-0082-V42019: 1
  • BSI:
    • BSI-CC-PP-0082-V4-2019: 3
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 1: 1
    • EAL 2: 2
    • EAL 2+: 1
    • EAL 4: 5
    • EAL 4 augmented: 3
    • EAL 5: 4
    • EAL 5+: 1
    • EAL 6: 1
    • EAL5+: 1
    • EAL6: 1
  • EAL:
    • EAL 2: 2
    • EAL 4: 1
pdf_data/report_keywords/cc_sar
  • ADV:
    • ADV_ARC: 1
  • ALC:
    • ALC_CMC.4: 1
    • ALC_CMS.4: 1
    • ALC_DEL.1: 1
    • ALC_DVS.2: 5
    • ALC_FLR: 2
    • ALC_LCD.1: 1
    • ALC_TAT.1: 1
  • ATE:
    • ATE_DPT.2: 4
  • AVA:
    • AVA_VAN.5: 4
  • ADV:
    • ADV_ARC: 1
  • ALC:
    • ALC_DVS.2: 1
    • ALC_FLR: 2
    • ALC_FLR.1: 1
  • ATE:
    • ATE_DPT.2: 1
  • AVA:
    • AVA_VAN.5: 2
pdf_data/report_keywords/cc_claims
  • A:
    • A.U: 1
pdf_data/report_keywords/vendor
  • GD:
    • G+D: 2
    • Giesecke & Devrient: 3
    • Giesecke+Devrient: 29
  • Infineon:
    • Infineon: 11
    • Infineon Technologies AG: 7
  • GD:
    • G+D: 2
    • Giesecke+Devrient: 31
  • Infineon:
    • Infineon: 10
    • Infineon Technologies AG: 6
pdf_data/report_keywords/eval_facility
  • SRC:
    • SRC Security Research & Consulting: 3
  • TUV:
    • TÜV Informationstechnik: 1
  • SRC:
    • SRC Security Research & Consulting: 6
  • TUV:
    • TÜV Informationstechnik: 1
pdf_data/report_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 30
    • HPC:
      • HPC: 4
  • constructions:
    • MAC:
      • CMAC: 15
  • AES_competition:
    • AES:
      • AES: 29
    • HPC:
      • HPC: 4
  • constructions:
    • MAC:
      • CMAC: 15
pdf_data/report_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 10
    • ECDH:
      • ECDH: 4
    • ECDSA:
      • ECDSA: 14
  • FF:
    • DH:
      • DH: 1
      • Diffie-Hellman: 1
  • RSA:
    • RSA-OAEP: 2
  • ECC:
    • ECC:
      • ECC: 8
    • ECDH:
      • ECDH: 3
    • ECDSA:
      • ECDSA: 14
  • FF:
    • DH:
      • Diffie-Hellman: 1
  • RSA:
    • RSA-OAEP: 2
pdf_data/report_keywords/crypto_protocol
  • PACE:
    • PACE: 15
  • PACE:
    • PACE: 11
pdf_data/report_keywords/randomness
  • PRNG:
    • PRNG: 1
  • RNG:
    • RNG: 5
  • PRNG:
    • PRNG: 1
  • RNG:
    • RNG: 4
pdf_data/report_keywords/side_channel_analysis
  • FI:
    • DFA: 1
    • fault injection: 1
    • malfunction: 1
    • physical tampering: 1
  • SCA:
    • DPA: 1
    • SPA: 1
    • side channel: 1
  • other:
    • JIL: 6
  • FI:
    • DFA: 1
    • fault injection: 1
    • malfunction: 1
  • SCA:
    • DPA: 1
    • SPA: 1
    • side channel: 1
  • other:
    • JIL: 2
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7148: 1
    • BSI TR-03116-1: 1
    • BSI TR-03143: 5
    • BSI TR-03144: 10
  • BSI:
    • BSI TR-03116-1: 1
    • BSI TR-03143: 5
    • BSI TR-03144: 10
pdf_data/report_keywords/os_name
  • STARCOS:
    • STARCOS 3: 38
  • STARCOS:
    • STARCOS 3: 37
pdf_data/report_keywords/standard_id
  • BSI:
    • AIS 1: 1
    • AIS 14: 1
    • AIS 19: 1
    • AIS 20: 6
    • AIS 23: 1
    • AIS 25: 4
    • AIS 26: 4
    • AIS 31: 5
    • AIS 32: 1
    • AIS 34: 4
    • AIS 35: 2
    • AIS 36: 5
    • AIS 37: 2
    • AIS 38: 1
    • AIS 46: 2
  • FIPS:
    • FIPS 180-4: 9
    • FIPS 197: 12
    • FIPS PUB 180-4: 1
    • FIPS PUB 197: 1
  • ISO:
    • ISO/IEC 15408: 4
    • ISO/IEC 17065: 2
    • ISO/IEC 18031:2005: 1
    • ISO/IEC 18045: 4
  • PKCS:
    • PKCS#1: 5
  • RFC:
    • RFC 5639: 12
  • BSI:
    • AIS 1: 2
    • AIS 14: 1
    • AIS 19: 1
    • AIS 20: 5
    • AIS 25: 2
    • AIS 26: 1
    • AIS 31: 4
    • AIS 32: 2
    • AIS 37: 2
    • AIS 38: 2
    • AIS 46: 2
  • FIPS:
    • FIPS 180-4: 9
    • FIPS 197: 12
    • FIPS PUB 180-4: 1
    • FIPS PUB 197: 1
  • ISO:
    • ISO/IEC 15408: 2
    • ISO/IEC 17065: 2
    • ISO/IEC 18031:2005: 1
    • ISO/IEC 18045: 2
  • PKCS:
    • PKCS#1: 5
  • RFC:
    • RFC 5639: 15
pdf_data/report_keywords/certification_process
  • ConfidentialDocument:
    • List STARCOS 3.7 COS HBA-SMC, Version 1.1, 19 May 2021, Giesecke+Devrient Mobile Security GmbH (confidential document: 1
    • Target STARCOS 3.7 COS HBA-SMC, Version 2.0, 22 April 2021, Giesecke+Devrient Mobile Security GmbH (confidential document: 1
    • being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification: 1
    • design step H13, Version 3.3, 22 April 2020, Infineon Technologies AG, BSI-DSZ-CC-1110-V3-2020 (confidential document: 1
    • for STARCOS 3.7 COS HBA-SMC, Version 2.9, 2 June 2021, SRC Security Research & Consulting GmbH (confidential document: 1
    • procedure BSI-DSZ-CC-1110-V3-2020, Version 1, 23 April 2020, TÜV Informationstechnik GmbH (confidential document: 1
  • ConfidentialDocument:
    • List STARCOS 3.7 COS HBA-SMC, Version 1.0, 21 May 2026, Giesecke+Devrient ePayments GmbH (confidential document: 1
    • design step H13, Version 6.2, 26 June 2025, Infineon Technologies AG, BSI-DSZ-CC-1110-V8-2025 (confidential document: 1
    • for STARCOS 3.7 COS HBA-SMC, Version 3.2, 24 May 2026, SRC Security Research & Consulting GmbH (confidential document: 1
    • procedure BSI-DSZ-CC-1110-V8-2025, Version 2, 25 July 2025, TÜV Informationstechnik GmbH (confidential document: 1
pdf_data/report_metadata
pdf_data/st_filename 0976V4b_pdf.pdf EUCC-3087-2026-0011 Security Target.pdf
pdf_data/st_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-1110-V3-2020: 2
  • DE:
    • BSI-DSZ-CC-1110-V8-2025: 1
pdf_data/st_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP- 0084-2014: 1
    • BSI-CC-PP-0035-2007: 1
    • BSI-CC-PP-0082-V3: 1
    • BSI-CC-PP-0082-V4: 27
    • BSI-CC-PP-0084-: 1
    • BSI-CC-PP-0084-2007: 1
    • BSI-CC-PP-0084-2014: 57
    • BSI-CC-PP-00842014: 3
    • BSI-CC-PP0082-V4: 2
    • BSI-CC-PP0084-2014: 5
    • BSI-CCPP-0082-V4: 2
    • BSI-PP-0084-2014: 8
    • BSI-PP-00842014: 2
  • BSI:
    • BSI-CC-PP- 0084-2014: 1
    • BSI-CC-PP-0035-2007: 1
    • BSI-CC-PP-0082-V4: 32
    • BSI-CC-PP-0084-: 1
    • BSI-CC-PP-0084-2007: 1
    • BSI-CC-PP-0084-2014: 51
    • BSI-CC-PP-00842014: 3
    • BSI-CC-PP0082-V4: 1
    • BSI-CC-PP0084-2014: 5
    • BSI-CCPP-0082-V4: 3
    • BSI-CCPP-0084-2014: 1
    • BSI-PP-0084-2014: 8
    • BSI-PP-00842014: 2
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL 4: 2
    • EAL 6: 2
    • EAL4: 16
    • EAL4 augmented: 4
    • EAL6: 1
    • EAL6+: 1
  • EAL:
    • EAL 4: 2
    • EAL 5: 1
    • EAL4: 16
    • EAL4 augmented: 4
    • EAL5: 1
    • EAL5 augmented: 1
    • EAL6: 1
    • EAL6 augmented: 1
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_ARC: 2
    • ADV_ARC.1: 9
    • ADV_FSP: 2
    • ADV_FSP.4: 6
    • ADV_IMP: 2
    • ADV_IMP.1: 6
    • ADV_TDS.3: 3
  • AGD:
    • AGD_OPE: 2
    • AGD_OPE.1: 6
    • AGD_PRE: 2
    • AGD_PRE.1: 2
  • ALC:
    • ALC_CMC: 2
    • ALC_CMC.4: 1
    • ALC_CMS: 2
    • ALC_CMS.4: 1
    • ALC_DEL: 2
    • ALC_DEL.1: 1
    • ALC_DVS: 2
    • ALC_DVS.2: 12
    • ALC_FLR.1: 1
    • ALC_LCD.1: 1
    • ALC_TAT.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD: 2
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV: 2
    • ATE_COV.2: 1
    • ATE_DPT.1: 1
    • ATE_DPT.2: 13
    • ATE_FUN.1: 6
    • ATE_IND.2: 5
  • AVA:
    • AVA_VAN: 2
    • AVA_VAN.5: 16
  • ADV:
    • ADV_ARC: 2
    • ADV_ARC.1: 9
    • ADV_FSP: 2
    • ADV_FSP.4: 6
    • ADV_IMP: 2
    • ADV_IMP.1: 6
    • ADV_IMP.2: 1
    • ADV_INT.3: 1
    • ADV_TDS.3: 3
    • ADV_TDS.5: 1
  • AGD:
    • AGD_OPE: 2
    • AGD_OPE.1: 6
    • AGD_PRE: 2
    • AGD_PRE.1: 2
  • ALC:
    • ALC_CMC: 2
    • ALC_CMC.4: 1
    • ALC_CMC.5: 1
    • ALC_CMS: 2
    • ALC_CMS.4: 1
    • ALC_DEL: 2
    • ALC_DEL.1: 1
    • ALC_DVS: 2
    • ALC_DVS.2: 13
    • ALC_FLR.1: 11
    • ALC_LCD.1: 1
    • ALC_TAT.1: 1
    • ALC_TAT.3: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV: 2
    • ATE_COV.2: 1
    • ATE_COV.3: 1
    • ATE_DPT.1: 1
    • ATE_DPT.2: 13
    • ATE_FUN.1: 6
    • ATE_FUN.2: 1
    • ATE_IND.2: 5
  • AVA:
    • AVA_VAN: 2
    • AVA_VAN.5: 17
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_SAS: 8
    • FAU_SAS.1: 3
  • FCS:
    • FCS_CKM: 86
    • FCS_CKM.1: 39
    • FCS_CKM.2: 9
    • FCS_CKM.4: 65
    • FCS_CKM.4.1: 1
    • FCS_COP: 196
    • FCS_COP.1: 27
    • FCS_COP.1.1: 1
    • FCS_RNG: 34
    • FCS_RNG.1: 20
    • FCS_RNG.1.1: 3
    • FCS_RNG.1.2: 2
  • FDP:
    • FDP_ACC: 123
    • FDP_ACC.1: 43
    • FDP_ACF: 110
    • FDP_ACF.1: 41
    • FDP_IFC: 7
    • FDP_IFC.1: 16
    • FDP_ITC.1: 35
    • FDP_ITC.2: 35
    • FDP_ITT: 7
    • FDP_ITT.1: 3
    • FDP_RIP: 8
    • FDP_RIP.1: 12
    • FDP_RIP.1.1: 1
    • FDP_SDC: 8
    • FDP_SDC.1: 3
    • FDP_SDI: 7
    • FDP_SDI.1: 1
    • FDP_SDI.2: 11
    • FDP_SDI.2.1: 1
    • FDP_SDI.2.2: 1
    • FDP_UCT: 7
    • FDP_UCT.1: 1
    • FDP_UIT: 8
    • FDP_UIT.1: 2
  • FIA:
    • FIA_ACC: 1
    • FIA_ACF: 1
    • FIA_AFL: 23
    • FIA_AFL.1: 4
    • FIA_API: 10
    • FIA_API.1: 16
    • FIA_API.1.1: 1
    • FIA_ATD: 10
    • FIA_ATD.1: 20
    • FIA_ATD.1.1: 1
    • FIA_SOS.1: 8
    • FIA_SOS.1.1: 1
    • FIA_UAU: 50
    • FIA_UAU.1: 20
    • FIA_UAU.1.1: 1
    • FIA_UAU.1.2: 1
    • FIA_UAU.4: 13
    • FIA_UAU.4.1: 1
    • FIA_UAU.5: 17
    • FIA_UAU.5.1: 1
    • FIA_UAU.5.2: 1
    • FIA_UAU.6: 12
    • FIA_UAU.6.1: 1
    • FIA_UID: 14
    • FIA_UID.1: 19
    • FIA_UID.1.1: 1
    • FIA_UID.1.2: 1
    • FIA_USB: 30
    • FIA_USB.1: 33
    • FIA_USB.1.1: 1
    • FIA_USB.1.2: 1
    • FIA_USB.1.3: 2
  • FMT:
    • FMT_LIM: 15
    • FMT_LIM.1: 3
    • FMT_LIM.2: 2
    • FMT_MSA: 72
    • FMT_MSA.1: 7
    • FMT_MSA.3: 40
    • FMT_MSA.3.1: 1
    • FMT_MSA.3.2: 1
    • FMT_MTD: 41
    • FMT_MTD.1: 4
    • FMT_SMF.1: 52
    • FMT_SMF.1.1: 1
    • FMT_SMR: 10
    • FMT_SMR.1: 41
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
    • FMT_SRM: 1
  • FPT:
    • FPT_EMS: 10
    • FPT_EMS.1: 16
    • FPT_EMS.1.1: 1
    • FPT_EMS.1.2: 1
    • FPT_FLS: 7
    • FPT_FLS.1: 16
    • FPT_FLS.1.1: 1
    • FPT_ITE: 10
    • FPT_ITE.1: 11
    • FPT_ITE.1.1: 1
    • FPT_ITE.1.2: 1
    • FPT_ITE.2: 14
    • FPT_ITE.2.1: 5
    • FPT_ITE.2.2: 1
    • FPT_ITT: 7
    • FPT_ITT.1: 3
    • FPT_PHP: 7
    • FPT_PHP.3: 4
    • FPT_TDC.1: 10
    • FPT_TDC.1.1: 1
    • FPT_TDC.1.2: 1
    • FPT_TST: 1
    • FPT_TST.1: 12
    • FPT_TST.1.1: 1
    • FPT_TST.1.2: 1
    • FPT_TST.1.3: 1
  • FRU:
    • FRU_FLT: 7
    • FRU_FLT.2: 3
  • FTP:
    • FTP_ITC: 22
    • FTP_ITC.1: 12
    • FTP_ITE.2: 1
    • FTP_TRP.1: 5
  • FAU:
    • FAU_SAS: 8
    • FAU_SAS.1: 3
  • FCS:
    • FCS_CKM: 85
    • FCS_CKM.1: 39
    • FCS_CKM.2: 9
    • FCS_CKM.3: 1
    • FCS_CKM.5: 42
    • FCS_CKM.6: 67
    • FCS_CKM.6.1: 2
    • FCS_CKM.6.2: 1
    • FCS_COP: 198
    • FCS_COP.1: 23
    • FCS_COP.1.1: 1
    • FCS_RBG.1: 9
    • FCS_RNG: 35
    • FCS_RNG.1: 32
    • FCS_RNG.1.1: 3
    • FCS_RNG.1.2: 2
  • FDP:
    • FDP_ACC: 123
    • FDP_ACC.1: 43
    • FDP_ACF: 110
    • FDP_ACF.1: 41
    • FDP_IFC: 7
    • FDP_IFC.1: 16
    • FDP_ITC.1: 35
    • FDP_ITC.2: 35
    • FDP_ITT: 7
    • FDP_ITT.1: 3
    • FDP_RIP: 9
    • FDP_RIP.1: 13
    • FDP_RIP.1.1: 1
    • FDP_SDC: 8
    • FDP_SDC.1: 3
    • FDP_SDI: 7
    • FDP_SDI.1: 1
    • FDP_SDI.2: 11
    • FDP_SDI.2.1: 1
    • FDP_SDI.2.2: 1
    • FDP_UCT: 7
    • FDP_UCT.1: 1
    • FDP_UIT: 8
    • FDP_UIT.1: 2
  • FIA:
    • FIA_ACC: 1
    • FIA_ACF: 1
    • FIA_AFL: 23
    • FIA_AFL.1: 6
    • FIA_API: 10
    • FIA_API.1: 16
    • FIA_API.1.1: 1
    • FIA_ATD: 10
    • FIA_ATD.1: 20
    • FIA_ATD.1.1: 1
    • FIA_SOS.1: 8
    • FIA_SOS.1.1: 1
    • FIA_UAU: 50
    • FIA_UAU.1: 20
    • FIA_UAU.1.1: 1
    • FIA_UAU.1.2: 1
    • FIA_UAU.4: 13
    • FIA_UAU.4.1: 1
    • FIA_UAU.5: 17
    • FIA_UAU.5.1: 1
    • FIA_UAU.5.2: 1
    • FIA_UAU.6: 12
    • FIA_UAU.6.1: 1
    • FIA_UID: 14
    • FIA_UID.1: 19
    • FIA_UID.1.1: 1
    • FIA_UID.1.2: 1
    • FIA_USB: 30
    • FIA_USB.1: 33
    • FIA_USB.1.1: 1
    • FIA_USB.1.2: 1
    • FIA_USB.1.3: 2
  • FMT:
    • FMT_LIM: 15
    • FMT_LIM.1: 3
    • FMT_LIM.2: 2
    • FMT_MSA: 72
    • FMT_MSA.1: 7
    • FMT_MSA.3: 40
    • FMT_MSA.3.1: 1
    • FMT_MSA.3.2: 1
    • FMT_MTD: 41
    • FMT_MTD.1: 4
    • FMT_SMF.1: 52
    • FMT_SMF.1.1: 1
    • FMT_SMR: 10
    • FMT_SMR.1: 41
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
    • FMT_SRM: 1
  • FPT:
    • FPT_EMS: 12
    • FPT_EMS.1: 16
    • FPT_EMS.1.1: 1
    • FPT_FLS: 7
    • FPT_FLS.1: 18
    • FPT_FLS.1.1: 1
    • FPT_ITE: 10
    • FPT_ITE.1: 11
    • FPT_ITE.1.1: 1
    • FPT_ITE.1.2: 1
    • FPT_ITE.2: 14
    • FPT_ITE.2.1: 5
    • FPT_ITE.2.2: 1
    • FPT_ITT: 7
    • FPT_ITT.1: 3
    • FPT_PHP: 7
    • FPT_PHP.3: 4
    • FPT_TDC.1: 10
    • FPT_TDC.1.1: 1
    • FPT_TDC.1.2: 1
    • FPT_TST: 1
    • FPT_TST.1: 12
    • FPT_TST.1.1: 1
    • FPT_TST.1.2: 1
    • FPT_TST.1.3: 1
  • FRU:
    • FRU_FLT: 7
    • FRU_FLT.2: 3
  • FTP:
    • FTP_ITC: 22
    • FTP_ITC.1: 12
    • FTP_ITE.2: 1
    • FTP_TRP.1: 5
pdf_data/st_keywords/vendor
  • GD:
    • G+D: 4
    • Giesecke+Devrient: 14
  • Infineon:
    • Infineon: 2
    • Infineon Technologies AG: 2
  • NXP:
    • NXP Semiconductors: 1
  • STMicroelectronics:
    • STMicroelectronics: 1
  • GD:
    • G+D: 1
    • Giesecke+Devrient: 14
  • Infineon:
    • Infineon: 2
    • Infineon Technologies AG: 2
  • NXP:
    • NXP Semiconductors: 1
  • STMicroelectronics:
    • STMicroelectronics: 1
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 84
    • HPC:
      • HPC: 1
  • constructions:
    • MAC:
      • CMAC: 45
  • AES_competition:
    • AES:
      • AES: 83
    • HPC:
      • HPC: 1
  • constructions:
    • MAC:
      • CMAC: 45
pdf_data/st_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 16
    • ECDH:
      • ECDH: 6
    • ECDSA:
      • ECDSA: 38
  • FF:
    • DH:
      • DH: 12
      • Diffie-Hellman: 1
    • DSA:
      • DSA: 1
  • ECC:
    • ECC:
      • ECC: 16
    • ECDH:
      • ECDH: 6
    • ECDSA:
      • ECDSA: 38
  • FF:
    • DH:
      • DH: 13
      • Diffie-Hellman: 1
    • DSA:
      • DSA: 1
pdf_data/st_keywords/crypto_protocol
  • PACE:
    • PACE: 125
  • TLS:
    • SSL:
      • SSL: 1
  • PACE:
    • PACE: 127
  • TLS:
    • SSL:
      • SSL: 1
pdf_data/st_keywords/randomness
  • RNG:
    • RND: 15
    • RNG: 38
  • RNG:
    • RND: 15
    • RNG: 34
pdf_data/st_keywords/side_channel_analysis
  • FI:
    • DFA: 1
    • Malfunction: 17
    • malfunction: 1
    • physical tampering: 3
  • SCA:
    • DPA: 1
    • Leak-Inherent: 15
    • Physical Probing: 2
    • SPA: 1
    • side channel: 1
  • other:
    • Bleichenbacher attack: 1
    • JIL: 3
  • FI:
    • DFA: 1
    • Malfunction: 17
    • malfunction: 1
    • physical tampering: 3
  • SCA:
    • DPA: 1
    • Leak-Inherent: 15
    • Physical Probing: 2
    • SPA: 1
    • side channel: 1
  • other:
    • Bleichenbacher attack: 1
    • JIL: 1
pdf_data/st_keywords/technical_report_id
  • BSI:
    • BSI TR-03111: 3
    • BSI TR-03143: 2
  • BSI:
    • BSI TR-03111: 3
    • BSI TR-03143: 1
pdf_data/st_keywords/os_name
  • STARCOS:
    • STARCOS 3: 181
  • STARCOS:
    • STARCOS 3: 183
pdf_data/st_keywords/standard_id
  • BSI:
    • AIS20: 2
    • AIS31: 1
  • CC:
    • CCMB-2017-04-001: 1
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
    • CCMB-2017-04-004: 1
    • CCMB-2017-05-001: 1
  • FIPS:
    • FIPS 180-4: 1
    • FIPS 197: 4
    • FIPS PUB 180-4: 1
    • FIPS PUB 197: 1
  • ISO:
    • ISO/IEC 7816: 2
    • ISO/IEC 7816-8: 1
  • NIST:
    • NIST SP 800-38B: 1
  • PKCS:
    • PKCS #1: 2
  • RFC:
    • RFC 5639: 1
    • RFC5639: 3
  • BSI:
    • AIS20: 2
    • AIS31: 1
  • CC:
    • CCMB-2022-11-001: 1
    • CCMB-2022-11-002: 1
    • CCMB-2022-11-003: 2
    • CCMB-2022-11-004: 2
  • FIPS:
    • FIPS 180-4: 1
    • FIPS 197: 4
    • FIPS PUB 180-4: 1
    • FIPS PUB 197: 1
  • ISO:
    • ISO/IEC 7816: 4
  • NIST:
    • NIST SP 800-38B: 1
  • PKCS:
    • PKCS #1: 2
  • RFC:
    • RFC 5639: 1
    • RFC5639: 3
pdf_data/st_metadata
  • /Author: Giesecke+Devrient Mobile Security GmbH
  • /CreationDate: D:20210617104602+02'00'
  • /Creator: Microsoft® Word für Microsoft 365
  • /Keywords: Version 1.0/18.05.2021
  • /ModDate: D:20210617104602+02'00'
  • /Producer: Microsoft® Word für Microsoft 365
  • /Subject: Security Target STARCOS 3.7 COS HBA-SMC
  • /Title: G+D MS Security Target to BSI-PP-0082-V4
  • pdf_file_size_bytes: 2539468
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 166
  • /Author: Giesecke+Devrient ePayments GmbH
  • /CreationDate: D:20260423134806+02'00'
  • /Creator: Microsoft® Word für Microsoft 365
  • /Keywords: Version 2.2/23.04.2026
  • /ModDate: D:20260423134806+02'00'
  • /Producer: Microsoft® Word für Microsoft 365
  • /Subject: Security Target STARCOS 3.7 COS HBA-SMC
  • /Title: G+D Security Target to BSI-PP-0082-V4
  • pdf_file_size_bytes: 4100307
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 168
state/cert/source_hash Different Different
state/cert/txt_hash Different Different
state/report/source_hash Different Different
state/report/txt_hash Different Different
state/report/json_hash Different Different
state/st/source_hash Different Different
state/st/txt_hash Different Different
state/st/json_hash Different Different
maintenance_updates
dgst e86ac89b4f665c58 decef58ee90319cc