Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Citrix NetScaler Platinum Edition Load Balancer, Version 9.3, running on MPX 9700-FIPS, MPX 10500-FIPS, MPX 12500-FIPS, MPX 15500-FIPS, MPX 5500, MPX 7500, MPX 9500, MPX 10500, MPX 11500, MPX 12500, MPX 13500, MPX 14500, MPX 15500, MPX 16500, MPX 17500, MPX 17550, MPX 18500, MPX 19500, MPX 19550, MPX 20500, MPX 20550, MPX 21500, MPX 21550, VPX 10, VPX 200, VPX 1000, VPX 3000
CRP267
LANCOM Systems Operating System LCOS 8.70 CC with IPsec VPN
BSI-DSZ-CC-0815-2013
name Citrix NetScaler Platinum Edition Load Balancer, Version 9.3, running on MPX 9700-FIPS, MPX 10500-FIPS, MPX 12500-FIPS, MPX 15500-FIPS, MPX 5500, MPX 7500, MPX 9500, MPX 10500, MPX 11500, MPX 12500, MPX 13500, MPX 14500, MPX 15500, MPX 16500, MPX 17500, MPX 17550, MPX 18500, MPX 19500, MPX 19550, MPX 20500, MPX 20550, MPX 21500, MPX 21550, VPX 10, VPX 200, VPX 1000, VPX 3000 LANCOM Systems Operating System LCOS 8.70 CC with IPsec VPN
scheme UK DE
not_valid_after 04.02.2015 01.09.2019
not_valid_before 12.03.2012 24.05.2013
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/CRP267%20v1.0.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0815a_pdf.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ST267%20v1.0.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0815b_pdf.pdf
manufacturer Citrix Systems, Inc. LANCOM Systems GmbH
manufacturer_web https://www.citrix.com https://www.lancom-systems.de
security_level EAL2+, ALC_FLR.2 EAL4+, ALC_FLR.1
dgst eb375c5d1192d491 c7df9a4de9b9fc5c
heuristics/cert_id CRP267 BSI-DSZ-CC-0815-2013
heuristics/cert_lab [] BSI
heuristics/extracted_sars ASE_INT.1, AVA_VAN.2, ADV_FSP.2, ASE_ECD.1, ASE_TSS.1, ASE_SPD.1, ALC_DEL.1, AGD_OPE.1, AGD_PRE.1, ALC_CMS.2, ADV_TDS.1, ATE_FUN.1, ATE_COV.1, ADV_ARC.1, ASE_OBJ.2, ALC_FLR.2, ASE_REQ.2, ALC_CMC.2, ATE_IND.2, ASE_CCL.1 ASE_INT.1, ALC_CMC.4, ASE_ECD.1, APE_ECD.1, ADV_IMP.1, ATE_COV.2, ALC_FLR.1, ALC_TAT.1, ASE_TSS.1, ASE_SPD.1, ALC_DEL.1, ALC_LCD.1, AGD_OPE.1, AVA_VAN.3, AGD_PRE.1, ALC_CMS.4, ATE_FUN.1, APE_REQ.2, ADV_ARC.1, ASE_OBJ.2, APE_CCL.1, ADV_TDS.3, ATE_DPT.1, ASE_REQ.2, ALC_DVS.1, ADV_INT.3, APE_INT.1, APE_SPD.1, ADV_FSP.4, ATE_IND.2, APE_OBJ.2, ASE_CCL.1, ADV_SPM.1
heuristics/extracted_versions 9.3 8.70
heuristics/report_references/directly_referenced_by CRP274 {}
heuristics/report_references/directly_referencing CRP262 {}
heuristics/report_references/indirectly_referenced_by CRP274 {}
heuristics/report_references/indirectly_referencing CRP253, CRP262, CRP247 {}
pdf_data/report_filename CRP267 v1.0.pdf 0815a_pdf.pdf
pdf_data/report_frontpage
  • DE:
  • DE:
    • cert_id: BSI-DSZ-CC-0815-2013
    • cert_item: LANCOM Systems Operating System LCOS 8.70 CC with IPsec VPN
    • cert_lab: BSI
    • developer: LANCOM Systems GmbH
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
pdf_data/report_keywords/cc_cert_id
  • UK:
    • CRP262: 2
    • CRP267: 1
  • DE:
    • BSI-DSZ-CC-0815: 1
    • BSI-DSZ-CC-0815-2013: 19
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL2: 3
    • EAL2 augmented: 2
  • EAL:
    • EAL 4: 6
    • EAL 4 augmented: 3
    • EAL1: 7
    • EAL2: 3
    • EAL3: 4
    • EAL4: 6
    • EAL5: 6
    • EAL6: 3
    • EAL7: 4
  • ITSEC:
    • ITSEC Evaluation: 1
pdf_data/report_keywords/cc_sar
  • ALC:
    • ALC_FLR.2: 3
  • ADV:
    • ADV_ARC: 1
    • ADV_ARC.1: 1
    • ADV_FSP: 1
    • ADV_FSP.1: 1
    • ADV_FSP.2: 1
    • ADV_FSP.3: 1
    • ADV_FSP.4: 1
    • ADV_FSP.5: 1
    • ADV_FSP.6: 1
    • ADV_IMP: 1
    • ADV_IMP.1: 1
    • ADV_IMP.2: 1
    • ADV_INT: 1
    • ADV_INT.1: 1
    • ADV_INT.2: 1
    • ADV_INT.3: 1
    • ADV_SPM: 1
    • ADV_SPM.1: 1
    • ADV_TDS: 1
    • ADV_TDS.1: 1
    • ADV_TDS.2: 1
    • ADV_TDS.3: 1
    • ADV_TDS.4: 1
    • ADV_TDS.5: 1
    • ADV_TDS.6: 1
  • AGD:
    • AGD_OPE: 2
    • AGD_OPE.1: 1
    • AGD_PRE: 2
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC: 1
    • ALC_CMC.1: 1
    • ALC_CMC.2: 1
    • ALC_CMC.3: 1
    • ALC_CMC.4: 1
    • ALC_CMC.5: 1
    • ALC_CMS: 1
    • ALC_CMS.1: 1
    • ALC_CMS.2: 1
    • ALC_CMS.3: 1
    • ALC_CMS.4: 1
    • ALC_CMS.5: 1
    • ALC_DEL: 1
    • ALC_DEL.1: 1
    • ALC_DVS: 1
    • ALC_DVS.1: 1
    • ALC_DVS.2: 1
    • ALC_FLR: 1
    • ALC_FLR.1: 5
    • ALC_FLR.2: 1
    • ALC_FLR.3: 1
    • ALC_LCD.1: 1
    • ALC_LCD.2: 1
    • ALC_TAT: 1
    • ALC_TAT.1: 1
    • ALC_TAT.2: 1
    • ALC_TAT.3: 1
  • APE:
    • APE_CCL.1: 1
    • APE_ECD.1: 1
    • APE_INT.1: 1
    • APE_OBJ.1: 1
    • APE_OBJ.2: 1
    • APE_REQ.1: 1
    • APE_REQ.2: 1
    • APE_SPD.1: 1
  • ASE:
    • ASE_CCL: 1
    • ASE_CCL.1: 1
    • ASE_ECD: 1
    • ASE_ECD.1: 1
    • ASE_INT: 1
    • ASE_INT.1: 1
    • ASE_OBJ: 1
    • ASE_OBJ.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.1: 1
    • ASE_REQ.2: 1
    • ASE_SPD: 1
    • ASE_SPD.1: 1
    • ASE_TSS: 1
    • ASE_TSS.1: 1
    • ASE_TSS.2: 1
  • ATE:
    • ATE_COV: 1
    • ATE_COV.1: 1
    • ATE_COV.2: 1
    • ATE_COV.3: 1
    • ATE_DPT: 1
    • ATE_DPT.1: 1
    • ATE_DPT.2: 1
    • ATE_DPT.3: 1
    • ATE_DPT.4: 1
    • ATE_FUN: 1
    • ATE_FUN.1: 1
    • ATE_FUN.2: 1
    • ATE_IND: 1
    • ATE_IND.1: 1
    • ATE_IND.2: 1
    • ATE_IND.3: 1
  • AVA:
    • AVA_VAN: 2
    • AVA_VAN.1: 1
    • AVA_VAN.2: 1
    • AVA_VAN.3: 1
    • AVA_VAN.4: 1
    • AVA_VAN.5: 1
pdf_data/report_keywords/cc_sfr
  • FCS:
    • FCS_CKM.1: 4
    • FCS_CKM.2: 8
    • FCS_COP.1: 2
pdf_data/report_keywords/cc_claims
  • OE:
    • OE.VPN: 1
pdf_data/report_keywords/eval_facility
  • SRC:
    • SRC Security Research & Consulting: 3
pdf_data/report_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 3
  • constructions:
    • MAC:
      • HMAC: 1
pdf_data/report_keywords/asymmetric_crypto
  • FF:
    • DH:
      • DH: 3
      • Diffie-Hellman: 1
  • RSA:
    • RSA 2048: 1
pdf_data/report_keywords/hash_function
  • MD:
    • MD5:
      • MD5: 4
  • SHA:
    • SHA1:
      • SHA-1: 1
    • SHA2:
      • SHA-256: 11
pdf_data/report_keywords/crypto_scheme
  • KEX:
    • Key Exchange: 7
pdf_data/report_keywords/crypto_protocol
  • SSH:
    • SSH: 2
  • TLS:
    • SSL:
      • SSL: 7
  • VPN:
    • VPN: 8
  • IKE:
    • IKE: 9
  • IPsec:
    • IPsec: 31
  • SSH:
    • SSH: 10
  • VPN:
    • VPN: 28
pdf_data/report_keywords/randomness
  • RNG:
    • RNG: 1
pdf_data/report_keywords/cipher_mode
  • CBC:
    • CBC: 1
pdf_data/report_keywords/side_channel_analysis
  • SCA:
    • Timing Attack: 1
    • Timing attack: 1
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7125: 2
    • BSI 7148: 1
    • BSI TR-02102: 3
pdf_data/report_keywords/standard_id
  • CC:
    • CCMB-2009-07-001: 1
    • CCMB-2009-07-002: 1
    • CCMB-2009-07-003: 1
    • CCMB-2009-07-004: 1
  • BSI:
    • AIS 20: 2
    • AIS 31: 1
    • AIS 32: 1
  • FIPS:
    • FIPS 198-1: 1
  • PKCS:
    • PKCS#1: 1
    • PKCS#3: 1
  • RFC:
    • RFC 2104: 2
    • RFC 2313: 1
    • RFC 2409: 3
    • RFC 3447: 1
    • RFC 3526: 1
    • RFC 3602: 1
    • RFC 4253: 1
    • RFC 4868: 1
pdf_data/report_keywords/certification_process
  • OutOfScope:
    • below. March 2012 Issue 1.0 Page 11 of 23 Figure 1 TOE Configuration 3 Layer 3 routing (L3 mode) is out of scope as this enables IP forwarding, allowing traffic to be routed according to static routes in the: 1
    • out of scope: 1
  • ConfidentialDocument:
    • LCOS 8.70 CC with IPsec VPN, Version 1.2, 10.05.2013, SRC Security Research & Consulting GmbH, (confidential document) [8] Preparative Procedures (AGD_PRE) for LANCOM Systems Operating System LCOS 8.70 CC with IPsec: 1
pdf_data/report_metadata
  • /Author: Mike Brown, Nigel Whittaker-Axon, Bhavin Desai
  • /Company: Certification Body, CESG
  • /CreationDate: D:20120315141538Z
  • /Creator: Acrobat PDFMaker 8.1 for Word
  • /ModDate: D:20120315141627Z
  • /Producer: Acrobat Distiller 8.1.0 (Windows)
  • /SourceModified: D:20120315141356
  • /Title: Certification Report template v3.0
  • pdf_file_size_bytes: 467310
  • pdf_hyperlinks: http://support.citrix.com/, https://www.citrix.com/
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 23
  • /Author: Bundesamt für Sicherheit in der Informationstechnik
  • /CreationDate: D:20130527122523+02'00'
  • /Creator: Writer
  • /Keywords: "Common Criteria, Certification, Zertifizierung, LANCOM Systems Operating SystemLCOS 8.70 CC with IPsec VPN, LANCOM Systems GmbH"
  • /ModDate: D:20130527123047+02'00'
  • /Producer: LibreOffice 3.6
  • /Subject: Common Criteria Certification
  • /Title: Certification Report BSI-DSZ-CC-0815-2013
  • pdf_file_size_bytes: 965552
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 36
pdf_data/st_filename ST267 v1.0.pdf 0815b_pdf.pdf
pdf_data/st_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-0815: 1
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL2: 5
    • EAL2 augmented: 2
  • EAL:
    • EAL4: 7
    • EAL4 augmented: 3
    • EAL4+: 1
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_CMS.2: 1
    • ALC_DEL.1: 1
    • ALC_FLR.2: 6
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.2: 2
  • ADV:
    • ADV_ARC: 1
    • ADV_ARC.1: 1
    • ADV_FSP.4: 1
    • ADV_IMP.1: 1
    • ADV_TDS.3: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.4: 1
    • ALC_CMS.4: 1
    • ALC_DEL.1: 1
    • ALC_DVS.1: 1
    • ALC_FLR.1: 8
    • ALC_LCD.1: 1
    • ALC_TAT.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.2: 1
    • ATE_DPT.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.3: 1
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN.1: 11
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_SAR.1: 9
    • FAU_SAR.1.1: 1
    • FAU_SAR.1.2: 1
    • FAU_SAR.3: 5
    • FAU_SAR.3.1: 1
    • FAU_STG.1: 5
    • FAU_STG.1.1: 1
    • FAU_STG.1.2: 1
  • FDP:
    • FDP_ACC: 15
    • FDP_ACC.1: 8
    • FDP_ACF: 16
    • FDP_ACF.1: 13
    • FDP_IFC: 22
    • FDP_IFC.1: 10
    • FDP_IFF: 22
    • FDP_IFF.1: 21
  • FIA:
    • FIA_UAU.1: 1
    • FIA_UAU.2: 10
    • FIA_UAU.2.1: 1
    • FIA_UID.1: 6
    • FIA_UID.2: 11
    • FIA_UID.2.1: 1
  • FMT:
    • FMT_MOF.1: 6
    • FMT_MOF.1.1: 1
    • FMT_MSA: 32
    • FMT_MSA.1: 20
    • FMT_MSA.1.1: 1
    • FMT_MSA.3: 21
    • FMT_MTD.1: 7
    • FMT_MTD.1.1: 1
    • FMT_SMF.1: 14
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 24
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_STM.1: 9
    • FPT_STM.1.1: 1
  • FAU:
    • FAU_GEN.1: 10
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_SAR.1: 6
    • FAU_SAR.1.1: 1
    • FAU_SAR.1.2: 1
  • FCS:
    • FCS_CKM.1: 12
    • FCS_CKM.1.1: 1
    • FCS_CKM.2: 17
    • FCS_CKM.4: 13
    • FCS_CKM.4.1: 1
    • FCS_COP.1: 9
    • FCS_COP.1.1: 1
    • FCS_RNG: 2
    • FCS_RNG.1: 9
    • FCS_RNG.1.1: 1
    • FCS_RNG.1.2: 1
  • FDP:
    • FDP_ACC.1: 14
    • FDP_ACC.1.1: 1
    • FDP_ACF.1: 7
    • FDP_ACF.1.1: 1
    • FDP_ACF.1.2: 1
    • FDP_ACF.1.3: 1
    • FDP_ACF.1.4: 1
    • FDP_IFC.1: 26
    • FDP_IFF.1: 30
    • FDP_ITC.1: 14
    • FDP_ITC.1.1: 1
    • FDP_ITC.1.2: 1
    • FDP_ITC.1.3: 1
    • FDP_ITC.2: 4
  • FIA:
    • FIA_UAU.2: 6
    • FIA_UAU.2.1: 1
    • FIA_UAU.5: 15
    • FIA_UID.1: 3
    • FIA_UID.2: 8
    • FIA_UID.2.1: 1
  • FMT:
    • FMT_MOF.1: 6
    • FMT_MOF.1.1: 1
    • FMT_MSA.1: 26
    • FMT_MSA.3: 30
    • FMT_MTD.1: 22
    • FMT_SMF.1: 9
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 21
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_STM.1: 1
    • FPT_TDC.1: 16
  • FTA:
    • FTA_TSE.1: 6
    • FTA_TSE.1.1: 1
  • FTP:
    • FTP_ITC.1: 7
    • FTP_ITC.1.1: 1
    • FTP_ITC.1.2: 1
    • FTP_ITC.1.3: 1
pdf_data/st_keywords/cc_claims
  • O:
    • O.ESP: 8
  • OE:
    • OE.VPN: 3
pdf_data/st_keywords/vendor
  • Microsoft:
    • Microsoft: 2
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 10
  • DES:
    • 3DES:
      • 3DES: 1
    • DES:
      • DES: 1
  • constructions:
    • MAC:
      • HMAC: 6
      • HMAC-SHA-256: 5
pdf_data/st_keywords/asymmetric_crypto
  • FF:
    • DH:
      • DH: 1
      • Diffie-Hellman: 6
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 11
    • SHA2:
      • SHA-2: 3
      • SHA-256: 5
pdf_data/st_keywords/crypto_scheme
  • KEX:
    • Key Exchange: 7
pdf_data/st_keywords/crypto_protocol
  • SSH:
    • SSH: 3
  • TLS:
    • SSL:
      • SSL: 20
  • VPN:
    • VPN: 66
  • IKE:
    • IKE: 44
  • IPsec:
    • IPsec: 116
  • SSH:
    • SSH: 66
  • VPN:
    • VPN: 124
pdf_data/st_keywords/randomness
  • RNG:
    • RNG: 5
pdf_data/st_keywords/cipher_mode
  • CBC:
    • CBC: 1
pdf_data/st_keywords/side_channel_analysis
  • FI:
    • physical tampering: 3
pdf_data/st_keywords/standard_id
  • CC:
    • CCMB-2009-07-001: 1
    • CCMB-2009-07-002: 1
    • CCMB-2009-07-003: 1
    • CCMB-2009-07-004: 1
  • FIPS:
    • FIPS 140-2: 2
    • FIPS140: 1
  • FIPS:
    • FIPS 197: 2
  • PKCS:
    • PKCS #1: 1
    • PKCS#1: 1
    • PKCS#12: 1
    • PKCS12: 2
  • RFC:
    • RFC 2104: 4
    • RFC 2313: 2
    • RFC 2404: 1
    • RFC 2406: 3
    • RFC 2409: 8
    • RFC 2631: 2
    • RFC 3447: 1
    • RFC 3526: 2
    • RFC 3602: 1
    • RFC 4251: 2
    • RFC 4252: 1
    • RFC 4253: 5
    • RFC 4868: 5
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • devices, such as LANCOM routers. LCMS is not necessarily needed to manage a LANCOM device and out of scope within this ST; it may be used in a trusted environment to prepare configurations or commit changes: 1
    • out of scope: 1
pdf_data/st_metadata
  • /Author: Tony Boswell
  • /CreationDate: D:20120222221755
  • /Creator: Microsoft® Office Word 2007
  • /ModDate: D:20120222221755
  • /Producer: Microsoft® Office Word 2007
  • pdf_file_size_bytes: 869566
  • pdf_hyperlinks: http://www.commoncriteriaportal.org/
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 55
  • /Author: LANCOM Systems GmbH
  • /CreationDate: D:20130508171705+02'00'
  • /Creator: Microsoft® Office Word 2007
  • /Keywords: VPN, IPsec
  • /ModDate: D:20130508171705+02'00'
  • /Producer: Microsoft® Office Word 2007
  • /Subject: for LANCOM Systems Operating System LCOS 8.70 CC with IPSec VPN
  • /Title: Security Target
  • pdf_file_size_bytes: 729514
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 45
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different