Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
F5 Networks BIG-IP® Application Delivery Firewall (ADF-Base) version 11.5 HF10
BSI-DSZ-CC-0856-2017 		genuscreen 5.0
BSI-DSZ-CC-0966-2015
name F5 Networks BIG-IP® Application Delivery Firewall (ADF-Base) version 11.5 HF10 genuscreen 5.0
category Network and Network-Related Devices and Systems Boundary Protection Devices and Systems
not_valid_after 02.08.2022 03.12.2020
not_valid_before 03.08.2017 03.12.2015
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0856a_pdf.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0966a_pdf.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0856b_pdf.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0966b_pdf.pdf
manufacturer F5 Networks, Inc. GeNUA mbH
manufacturer_web https://www.f5.com/ https://www.genua.de/
security_level EAL4+, ALC_FLR.3 ASE_TSS.2, AVA_VAN.4, ALC_FLR.2, EAL4+
dgst f34044c28e3c540c f5889e9d79b1762e
heuristics/cert_id BSI-DSZ-CC-0856-2017 BSI-DSZ-CC-0966-2015
heuristics/extracted_sars ASE_INT.1, ALC_CMC.4, ASE_ECD.1, APE_ECD.1, ADV_IMP.1, ATE_COV.2, ASE_TSS.1, ALC_TAT.1, ASE_SPD.1, ALC_DEL.1, ALC_LCD.1, ALC_FLR.3, AGD_OPE.1, AVA_VAN.3, AGD_PRE.1, ALC_CMS.4, ATE_FUN.1, APE_REQ.2, ADV_ARC.1, ASE_OBJ.2, APE_CCL.1, ADV_TDS.3, ATE_DPT.1, ASE_REQ.2, ALC_DVS.1, ADV_INT.3, APE_INT.1, APE_SPD.1, ADV_FSP.4, ATE_IND.2, APE_OBJ.2, ASE_CCL.1, ADV_SPM.1 ASE_INT.1, ALC_CMC.4, ASE_ECD.1, APE_ECD.1, ADV_IMP.1, ATE_COV.2, ALC_TAT.1, ASE_SPD.1, ALC_DEL.1, ALC_LCD.1, AGD_OPE.1, AGD_PRE.1, ALC_CMS.4, ATE_FUN.1, APE_REQ.2, ADV_ARC.1, ASE_OBJ.2, APE_CCL.1, ADV_TDS.3, ATE_DPT.1, ALC_FLR.2, ASE_TSS.2, ASE_REQ.2, ALC_DVS.1, ADV_INT.3, APE_INT.1, APE_SPD.1, ADV_FSP.4, ATE_IND.2, APE_OBJ.2, AVA_VAN.4, ADV_TAT.1, ASE_CCL.1, ADV_SPM.1
heuristics/extracted_versions 11.5 5.0
heuristics/report_references/directly_referenced_by BSI-DSZ-CC-0975-2018 {}
heuristics/report_references/directly_referencing {} BSI-DSZ-CC-0823-2014
heuristics/report_references/indirectly_referenced_by BSI-DSZ-CC-0975-2018 {}
heuristics/report_references/indirectly_referencing {} BSI-DSZ-CC-0382-2007, BSI-DSZ-CC-0565-2009, BSI-DSZ-CC-0823-2014
maintenance_updates
pdf_data/report_filename 0856a_pdf.pdf 0966a_pdf.pdf
pdf_data/report_frontpage
  • DE:
    • cc_security_level: Common Criteria Part 3 conformant EAL 4 augmented by ALC_FLR.3
    • cc_version: Product specific Security Target Common Criteria Part 2 extended
    • cert_id: BSI-DSZ-CC-0856-2017
    • cert_item: F5 Networks BIG-IP® Application Delivery Firewall (ADF-Base), version 11.5.1 HF10
    • cert_lab: BSI
    • developer: F5 Networks, Inc
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
    • ref_protection_profiles: None
  • DE:
    • cc_security_level: Common Criteria Part 3 extended EAL 4 augmented by ALC_FLR.2, ASE_TSS.2 and AVA_VAN.4 SOGIS Recognition Agreement for components up to EAL 4
    • cc_version: Product specific Security Target Common Criteria Part 2 extended
    • cert_id: BSI-DSZ-CC-0966-2015
    • cert_item: genuscreen 5.0
    • cert_lab: BSI
    • developer: genua gmbh
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
    • ref_protection_profiles: None
pdf_data/report_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-0856-2017: 21
  • DE:
    • BSI-DSZ-CC-0823-2014: 3
    • BSI-DSZ-CC-0966: 1
    • BSI-DSZ-CC-0966-2015: 18
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 1: 7
    • EAL 2: 4
    • EAL 3: 4
    • EAL 4: 10
    • EAL 4 augmented: 3
    • EAL 5: 6
    • EAL 6: 3
    • EAL 7: 4
    • EAL4: 1
  • ITSEC:
    • ITSEC Evaluation: 1
  • EAL:
    • EAL 1: 7
    • EAL 2: 5
    • EAL 3: 4
    • EAL 4: 16
    • EAL 4 augmented: 3
    • EAL 5: 9
    • EAL 5+: 1
    • EAL 6: 4
    • EAL 7: 4
  • ITSEC:
    • ITSEC Evaluation: 1
pdf_data/report_keywords/cc_sar
  • ADV:
    • ADV_ARC: 1
    • ADV_ARC.1: 1
    • ADV_FSP: 1
    • ADV_FSP.1: 1
    • ADV_FSP.2: 1
    • ADV_FSP.3: 1
    • ADV_FSP.4: 1
    • ADV_FSP.5: 1
    • ADV_FSP.6: 1
    • ADV_IMP: 1
    • ADV_IMP.1: 1
    • ADV_IMP.2: 1
    • ADV_INT: 1
    • ADV_INT.1: 1
    • ADV_INT.2: 1
    • ADV_INT.3: 1
    • ADV_SPM: 1
    • ADV_SPM.1: 1
    • ADV_TDS: 1
    • ADV_TDS.1: 1
    • ADV_TDS.2: 1
    • ADV_TDS.3: 1
    • ADV_TDS.4: 1
    • ADV_TDS.5: 1
    • ADV_TDS.6: 1
  • AGD:
    • AGD_OPE: 4
    • AGD_OPE.1: 1
    • AGD_PRE: 4
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC: 1
    • ALC_CMC.1: 1
    • ALC_CMC.2: 1
    • ALC_CMC.3: 1
    • ALC_CMC.4: 1
    • ALC_CMC.5: 1
    • ALC_CMS: 1
    • ALC_CMS.1: 1
    • ALC_CMS.2: 1
    • ALC_CMS.3: 1
    • ALC_CMS.4: 1
    • ALC_CMS.5: 1
    • ALC_DEL: 1
    • ALC_DEL.1: 1
    • ALC_DVS: 1
    • ALC_DVS.1: 1
    • ALC_DVS.2: 1
    • ALC_FLR: 3
    • ALC_FLR.1: 1
    • ALC_FLR.2: 1
    • ALC_FLR.3: 5
    • ALC_LCD.1: 1
    • ALC_LCD.2: 1
    • ALC_TAT: 1
    • ALC_TAT.1: 1
    • ALC_TAT.2: 1
    • ALC_TAT.3: 1
  • APE:
    • APE_CCL.1: 1
    • APE_ECD.1: 1
    • APE_INT.1: 1
    • APE_OBJ.1: 1
    • APE_OBJ.2: 1
    • APE_REQ.1: 1
    • APE_REQ.2: 1
    • APE_SPD.1: 1
  • ASE:
    • ASE_CCL: 1
    • ASE_CCL.1: 1
    • ASE_ECD: 1
    • ASE_ECD.1: 1
    • ASE_INT: 1
    • ASE_INT.1: 1
    • ASE_OBJ: 1
    • ASE_OBJ.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ: 1
    • ASE_REQ.1: 1
    • ASE_REQ.2: 1
    • ASE_SPD: 1
    • ASE_SPD.1: 1
    • ASE_TSS: 1
    • ASE_TSS.1: 1
    • ASE_TSS.2: 1
  • ATE:
    • ATE_COV: 1
    • ATE_COV.1: 1
    • ATE_COV.2: 1
    • ATE_COV.3: 1
    • ATE_DPT: 1
    • ATE_DPT.1: 1
    • ATE_DPT.2: 1
    • ATE_DPT.3: 1
    • ATE_DPT.4: 1
    • ATE_FUN: 1
    • ATE_FUN.1: 1
    • ATE_FUN.2: 1
    • ATE_IND: 1
    • ATE_IND.1: 1
    • ATE_IND.2: 1
    • ATE_IND.3: 1
  • AVA:
    • AVA_VAN: 2
    • AVA_VAN.1: 1
    • AVA_VAN.2: 1
    • AVA_VAN.3: 1
    • AVA_VAN.4: 1
    • AVA_VAN.5: 1
  • ADV:
    • ADV_ARC: 1
    • ADV_ARC.1: 1
    • ADV_FSP: 1
    • ADV_FSP.1: 1
    • ADV_FSP.2: 1
    • ADV_FSP.3: 1
    • ADV_FSP.4: 1
    • ADV_FSP.5: 1
    • ADV_FSP.6: 1
    • ADV_IMP: 1
    • ADV_IMP.1: 1
    • ADV_IMP.2: 1
    • ADV_INT: 1
    • ADV_INT.1: 1
    • ADV_INT.2: 1
    • ADV_INT.3: 1
    • ADV_SPM: 1
    • ADV_SPM.1: 1
    • ADV_TDS: 1
    • ADV_TDS.1: 1
    • ADV_TDS.2: 1
    • ADV_TDS.3: 1
    • ADV_TDS.4: 1
    • ADV_TDS.5: 1
    • ADV_TDS.6: 1
  • AGD:
    • AGD_OPE: 1
    • AGD_OPE.1: 1
    • AGD_PRE: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC: 1
    • ALC_CMC.1: 1
    • ALC_CMC.2: 1
    • ALC_CMC.3: 1
    • ALC_CMC.4: 1
    • ALC_CMC.5: 1
    • ALC_CMS: 1
    • ALC_CMS.1: 1
    • ALC_CMS.2: 1
    • ALC_CMS.3: 1
    • ALC_CMS.4: 1
    • ALC_CMS.5: 1
    • ALC_DEL: 1
    • ALC_DEL.1: 1
    • ALC_DVS: 1
    • ALC_DVS.1: 1
    • ALC_DVS.2: 1
    • ALC_FLR: 3
    • ALC_FLR.1: 1
    • ALC_FLR.2: 6
    • ALC_FLR.3: 1
    • ALC_LCD.1: 1
    • ALC_LCD.2: 1
    • ALC_TAT: 1
    • ALC_TAT.1: 1
    • ALC_TAT.2: 1
    • ALC_TAT.3: 1
  • APE:
    • APE_CCL.1: 1
    • APE_ECD.1: 1
    • APE_INT.1: 1
    • APE_OBJ.1: 1
    • APE_OBJ.2: 1
    • APE_REQ.1: 1
    • APE_REQ.2: 1
    • APE_SPD.1: 1
  • ASE:
    • ASE_CCL: 1
    • ASE_CCL.1: 1
    • ASE_ECD: 1
    • ASE_ECD.1: 1
    • ASE_INT: 1
    • ASE_INT.1: 1
    • ASE_OBJ: 1
    • ASE_OBJ.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.1: 1
    • ASE_REQ.2: 1
    • ASE_SPD: 1
    • ASE_SPD.1: 1
    • ASE_TSS: 1
    • ASE_TSS.1: 1
    • ASE_TSS.2: 6
  • ATE:
    • ATE_COV: 1
    • ATE_COV.1: 1
    • ATE_COV.2: 1
    • ATE_COV.3: 1
    • ATE_DPT: 1
    • ATE_DPT.1: 1
    • ATE_DPT.2: 1
    • ATE_DPT.3: 1
    • ATE_DPT.4: 1
    • ATE_FUN: 1
    • ATE_FUN.1: 1
    • ATE_FUN.2: 1
    • ATE_IND: 1
    • ATE_IND.1: 1
    • ATE_IND.2: 1
    • ATE_IND.3: 1
  • AVA:
    • AVA_VAN: 2
    • AVA_VAN.1: 1
    • AVA_VAN.2: 1
    • AVA_VAN.3: 1
    • AVA_VAN.4: 6
    • AVA_VAN.5: 1
pdf_data/report_keywords/cc_sfr
  • FCS:
    • FCS_CKM.1: 1
  • FIA:
    • FIA_AFL: 1
    • FIA_SOS: 1
  • FTP:
    • FTP_ITC.1: 1
    • FTP_TRP.1: 1
  • FCS:
    • FCS_RNG: 1
pdf_data/report_keywords/cc_claims
  • A:
    • A.ADMIN: 3
    • A.HANET: 3
    • A.INIT: 3
    • A.NOEVIL: 3
    • A.PHYSEC: 4
    • A.SINGEN: 3
    • A.TIMESTMP: 2
  • OE:
    • OE.ADMIN: 1
    • OE.HANET: 1
    • OE.INIT: 1
    • OE.NOEVIL: 1
    • OE.PHYSEC: 1
    • OE.SINGEN: 1
    • OE.TIMESTMP: 1
pdf_data/report_keywords/eval_facility
  • atsec:
    • atsec: 3
  • secuvera:
    • secuvera: 3
pdf_data/report_keywords/symmetric_crypto
  • constructions:
    • MAC:
      • HMAC: 9
  • constructions:
    • MAC:
      • HMAC: 1
pdf_data/report_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 10
    • ECDH:
      • ECDH: 7
      • ECDHE: 1
    • ECDSA:
      • ECDSA: 13
  • FF:
    • DH:
      • DH: 7
  • FF:
    • DH:
      • DH: 1
pdf_data/report_keywords/hash_function
  • MD:
    • MD5:
      • MD5: 5
  • SHA:
    • SHA1:
      • SHA-1: 11
    • SHA2:
      • SHA-256: 5
      • SHA-384: 7
      • SHA256: 2
      • SHA384: 1
  • SHA:
    • SHA2:
      • SHA256: 2
pdf_data/report_keywords/crypto_scheme
  • KA:
    • Key agreement: 2
  • MAC:
    • MAC: 4
  • KEX:
    • Key Exchange: 1
pdf_data/report_keywords/crypto_protocol
  • IKE:
    • IKE: 1
  • SSH:
    • SSH: 8
  • TLS:
    • SSL:
      • SSL: 1
    • TLS:
      • TLS: 14
      • TLS v1.1: 2
      • TLSv1.1: 6
      • TLSv1.2: 7
  • VPN:
    • VPN: 1
  • IKE:
    • IKE: 2
  • IPsec:
    • IPsec: 9
  • SSH:
    • SSH: 15
  • VPN:
    • VPN: 6
pdf_data/report_keywords/randomness
  • RNG:
    • RNG: 1
  • RNG:
    • RNG: 2
pdf_data/report_keywords/cipher_mode
  • CBC:
    • CBC: 2
  • CBC:
    • CBC: 1
pdf_data/report_keywords/ecc_curve
  • NIST:
    • NIST P-256: 1
    • P-256: 1
    • secp256r1: 8
pdf_data/report_keywords/vulnerability
  • CVE:
    • CVE-2013-0169: 1
pdf_data/report_keywords/side_channel_analysis
  • SCA:
    • side channels: 1
pdf_data/report_keywords/standard_id
  • BSI:
    • AIS 20: 2
    • AIS 32: 1
  • FIPS:
    • FIPS180-3: 16
    • FIPS180-310: 1
    • FIPS180-4: 1
    • FIPS186-3: 6
    • FIPS186-39: 1
    • FIPS186-4: 1
    • FIPS198-1: 3
  • ISO:
    • ISO/IEC 15408: 4
    • ISO/IEC 17065: 2
    • ISO/IEC 18045: 4
  • PKCS:
    • PKCS#1: 10
  • RFC:
    • RFC1321: 1
    • RFC2104: 1
    • RFC3447: 10
    • RFC3526: 1
    • RFC4251: 1
    • RFC4252: 2
    • RFC4253: 4
    • RFC4346: 5
    • RFC4492: 6
    • RFC5246: 6
    • RFC6151: 1
  • BSI:
    • AIS 20: 2
    • AIS 34: 1
    • AIS 38: 1
    • AIS20: 3
  • ISO:
    • ISO/IEC 15408: 4
    • ISO/IEC 17065: 2
    • ISO/IEC 18045: 4
pdf_data/report_keywords/certification_process
  • ConfidentialDocument:
    • Version 5.1, 2017-07-28, Final Evaluation Technical Report, atsec information security GmbH, (confidential document) [8] Configuration list for the TOE, 2017-07-05, CI list for documentation in Perforce: 1
    • being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification: 1
  • ConfidentialDocument:
    • Evaluation Technical Report BSI-DSZ-CC-0966 for genuscreen 5.0 from genua gmbh of secuvera GmbH (confidential document) [8] Guidance documentation for the TOE, genucenter Installations- und Konfigurationshandbuch: 1
    • being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification: 1
  • OutOfScope:
    • The genucenter must be operated on real hardware. Running the genucenter in a virtual machine is out of scope for this TOE. The Security Target [6] is the basis for this certification. It is not based on a: 1
    • or Mobile Clients, L2TP VPN, LDAP Authentication, Dynamic Routing, and virtual genucenter are out of scope of the evaluated configuration. In general, all information contained in the Security Target [6: 1
    • out of scope: 2
pdf_data/report_metadata
pdf_data/st_filename 0856b_pdf.pdf 0966b_pdf.pdf
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL4: 3
    • EAL4 augmented: 1
  • EAL:
    • EAL4: 4
    • EAL4 augmented: 1
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.4: 1
    • ADV_IMP.1: 1
    • ADV_TDS.3: 1
  • AGD:
    • AGD_OPE: 2
    • AGD_OPE.1: 1
    • AGD_PRE: 2
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.4: 1
    • ALC_CMS.4: 1
    • ALC_DEL.1: 1
    • ALC_DVS.1: 1
    • ALC_FLR.3: 5
    • ALC_LCD.1: 1
    • ALC_TAT.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.2: 1
    • ATE_DPT.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.3: 1
  • ADV:
    • ADV_ARC: 1
    • ADV_ARC.1: 4
    • ADV_FSP: 1
    • ADV_FSP.1: 1
    • ADV_FSP.2: 2
    • ADV_FSP.4: 2
    • ADV_IMP: 1
    • ADV_IMP.1: 3
    • ADV_INT: 2
    • ADV_SPM: 2
    • ADV_TAT.1: 1
    • ADV_TDS: 1
    • ADV_TDS.1: 1
    • ADV_TDS.2: 1
    • ADV_TDS.3: 2
  • AGD:
    • AGD_OPE: 1
    • AGD_OPE.1: 3
    • AGD_PRE: 1
    • AGD_PRE.1: 3
  • ALC:
    • ALC_CMC: 1
    • ALC_CMC.4: 1
    • ALC_CMS: 1
    • ALC_CMS.4: 1
    • ALC_DEL: 1
    • ALC_DEL.1: 1
    • ALC_DVS: 1
    • ALC_DVS.1: 2
    • ALC_FLR: 1
    • ALC_FLR.2: 3
    • ALC_LCD: 1
    • ALC_LCD.1: 2
    • ALC_TAT: 1
    • ALC_TAT.1: 1
  • ASE:
    • ASE_CCL: 1
    • ASE_CCL.1: 1
    • ASE_ECD: 1
    • ASE_ECD.1: 3
    • ASE_INT: 1
    • ASE_INT.1: 1
    • ASE_OBJ: 1
    • ASE_OBJ.2: 1
    • ASE_REQ: 1
    • ASE_REQ.1: 2
    • ASE_REQ.2: 1
    • ASE_SPD: 1
    • ASE_SPD.1: 1
    • ASE_TSS: 1
    • ASE_TSS.2: 4
  • ATE:
    • ATE_COV: 1
    • ATE_COV.1: 1
    • ATE_COV.2: 1
    • ATE_DPT: 1
    • ATE_DPT.1: 2
    • ATE_FUN: 1
    • ATE_FUN.1: 4
    • ATE_IND: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN: 1
    • AVA_VAN.4: 4
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN: 2
    • FAU_GEN.1: 12
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_GEN.2: 9
    • FAU_GEN.2.1: 1
    • FAU_STG: 1
    • FAU_STG_EXT.1: 14
    • FAU_STG_EXT.1.1: 2
  • FCS:
    • FCS_CKM: 9
    • FCS_CKM.1: 16
    • FCS_CKM.1.1: 1
    • FCS_CKM.2: 4
    • FCS_CKM.4: 3
    • FCS_CKM_EXT.4: 19
    • FCS_CKM_EXT.4.1: 2
    • FCS_COP.1: 33
    • FCS_COP.1.1: 3
    • FCS_RBG_EXT.1: 15
    • FCS_RBG_EXT.1.1: 2
    • FCS_RBG_EXT.1.2: 2
    • FCS_RNG.1.1: 1
    • FCS_RNG.1.2: 1
    • FCS_SSH_EXT.1: 15
    • FCS_SSH_EXT.1.1: 2
    • FCS_SSH_EXT.1.2: 2
    • FCS_SSH_EXT.1.3: 2
    • FCS_SSH_EXT.1.4: 2
    • FCS_SSH_EXT.1.5: 2
    • FCS_SSH_EXT.1.6: 2
    • FCS_SSH_EXT.1.7: 2
    • FCS_TLS_EXT.1: 21
    • FCS_TLS_EXT.1.1: 2
    • FCS_TLS_EXT.1.2: 2
  • FDP:
    • FDP_ACC.1: 17
    • FDP_ACC.1.1: 1
    • FDP_ACF.1: 9
    • FDP_ACF.1.1: 1
    • FDP_ACF.1.2: 1
    • FDP_ACF.1.3: 1
    • FDP_ACF.1.4: 1
    • FDP_IFC.1: 4
    • FDP_ITC.1: 14
    • FDP_ITC.1.1: 1
    • FDP_ITC.1.2: 1
    • FDP_ITC.1.3: 1
    • FDP_ITC.2: 5
    • FDP_RIP.2: 11
    • FDP_RIP.2.1: 1
    • FDP_UCT.1: 8
    • FDP_UCT.1.1: 1
    • FDP_UIT.1: 8
    • FDP_UIT.1.1: 1
    • FDP_UIT.1.2: 1
  • FIA:
    • FIA_AFL: 1
    • FIA_AFL.1: 10
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_ATD.1: 11
    • FIA_ATD.1.1: 1
    • FIA_PMG_EXT.1: 14
    • FIA_PMG_EXT.1.1: 1
    • FIA_SOS: 1
    • FIA_UAU.1: 2
    • FIA_UAU.5: 9
    • FIA_UAU.5.1: 1
    • FIA_UAU.5.2: 1
    • FIA_UAU.7: 9
    • FIA_UAU.7.1: 1
    • FIA_UAU_EXT.2: 14
    • FIA_UAU_EXT.2.1: 2
    • FIA_UIA_EXT.1: 21
    • FIA_UIA_EXT.1.1: 2
    • FIA_UIA_EXT.1.2: 2
    • FIA_UID.1: 3
    • FIA_UIU_EXT.1: 1
  • FMT:
    • FMT_MSA.1: 11
    • FMT_MSA.1.1: 1
    • FMT_MSA.3: 11
    • FMT_MSA.3.1: 1
    • FMT_MSA.3.2: 1
    • FMT_MTD.1: 9
    • FMT_MTD.1.1: 1
    • FMT_SMF.1: 12
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 13
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_APW: 1
    • FPT_APW_EXT.1: 13
    • FPT_APW_EXT.1.1: 2
    • FPT_APW_EXT.1.2: 2
    • FPT_FLS.1: 9
    • FPT_FLS.1.1: 1
    • FPT_SKP: 1
    • FPT_SKP_EXT.1: 13
    • FPT_SKP_EXT.1.1: 2
    • FPT_STM.1: 2
    • FPT_TST_EXT: 1
    • FPT_TST_EXT.1: 13
    • FPT_TST_EXT.1.1: 2
    • FPT_TUD: 1
    • FPT_TUD_EXT.1: 14
    • FPT_TUD_EXT.1.1: 2
    • FPT_TUD_EXT.1.2: 2
    • FPT_TUD_EXT.1.3: 2
  • FRU:
    • FRU_RSA.1: 9
    • FRU_RSA.1.1: 1
  • FTA:
    • FTA_SSL.3: 10
    • FTA_SSL.3.1: 1
    • FTA_SSL.4: 10
    • FTA_SSL.4.1: 1
    • FTA_TAB.1: 13
    • FTA_TAB.1.1: 1
  • FTP:
    • FTP_ITC.1: 21
    • FTP_ITC.1.1: 1
    • FTP_ITC.1.2: 1
    • FTP_ITC.1.3: 1
    • FTP_TRP.1: 15
    • FTP_TRP.1.1: 1
    • FTP_TRP.1.2: 1
    • FTP_TRP.1.3: 1
  • FAU:
    • FAU_GEN: 20
    • FAU_GEN.1: 5
    • FAU_GEN.2: 1
    • FAU_SAR: 12
    • FAU_SAR.1: 3
    • FAU_SAR.3: 1
  • FCS:
    • FCS_CKM: 143
    • FCS_CKM.1: 29
    • FCS_CKM.4: 31
    • FCS_COP: 100
    • FCS_COP.1: 29
    • FCS_RNG: 1
    • FCS_RNG.1: 14
    • FCS_RNG.1.1: 2
    • FCS_RNG.1.2: 2
  • FDP:
    • FDP_IFC: 53
    • FDP_IFC.1: 33
    • FDP_IFF: 43
    • FDP_IFF.1: 37
    • FDP_ITT: 32
    • FDP_ITT.1: 4
  • FIA:
    • FIA_ATD: 6
    • FIA_ATD.1: 1
    • FIA_SOS: 6
    • FIA_SOS.1: 1
    • FIA_UAU: 12
    • FIA_UAU.2: 1
    • FIA_UAU.6: 1
    • FIA_UID: 6
    • FIA_UID.1: 3
    • FIA_UID.2: 2
  • FMT:
    • FMT_IFC.2: 2
    • FMT_MOF: 6
    • FMT_MOF.1: 1
    • FMT_MSA: 166
    • FMT_MSA.1: 26
    • FMT_MSA.2: 4
    • FMT_MSA.3: 18
    • FMT_SMF: 49
    • FMT_SMF.1: 22
    • FMT_SMR: 8
    • FMT_SMR.1: 26
  • FPT:
    • FPT_ITT: 8
    • FPT_ITT.1: 3
    • FPT_STM.1: 3
    • FPT_TEE: 8
    • FPT_TEE.1: 2
    • FPT_TRC: 6
    • FPT_TRC.1: 1
    • FPT_TRC.1.1: 1
    • FPT_TRC.1.2: 1
  • FTP:
    • FTP_STM.1: 1
pdf_data/st_keywords/cc_claims
  • A:
    • A.CONNECTIONS: 3
    • A.KEYS: 2
    • A.LDAP: 3
    • A.LOGSERVER: 3
    • A.MGMTNET: 3
    • A.NO_GENERAL_PURPOSE: 3
    • A.PEERTRUST: 3
    • A.PHYSICAL: 3
    • A.TIME: 3
    • A.TRAINED_ADMIN: 3
    • A.TRUSTED_ADMIN: 3
  • O:
    • O.ADDRESS_FILTERING: 9
    • O.DISPLAY_BANNER: 5
    • O.FAILOVER: 5
    • O.LTM-TRAFFICMGMT: 13
    • O.PORT_FILTERING: 9
    • O.PROTECTED_COMMUNICATIONS: 19
    • O.RELATED_CONNECTION_FILTERING: 6
    • O.RESIDUAL_INFORMATION_CLEARING: 5
    • O.RESOURCE_AVAILABILITY: 5
    • O.SESSION_LOCK: 6
    • O.STATEFUL_INSPECTION: 4
    • O.SYSTEM_MONITORING: 9
    • O.TOE_ADMINISTRATION: 19
    • O.TSF_SELF_TEST: 5
    • O.VERIFIABLE_UPDATES: 5
  • OE:
    • OE.CONNECTIONS: 3
    • OE.KEYS: 2
    • OE.LDAP: 4
    • OE.LOGSERVER: 3
    • OE.MGMTNET: 3
    • OE.NO_GENERAL_PURPOSE: 3
    • OE.PEERTRUST: 3
    • OE.PHYSICAL: 3
    • OE.TIME: 5
    • OE.TRAINED_ADMIN: 4
    • OE.TRUSTED_ADMIN: 4
  • T:
    • T.ADMIN_ERROR: 5
    • T.NETWORK_ACCESS: 5
    • T.NETWORK_DISCLOSURE: 2
    • T.NETWORK_DOS: 4
    • T.NETWORK_MISUSE: 2
    • T.PUBLIC_NETWORKS: 3
    • T.RESOURCE_EXHAUSTION: 3
    • T.TSF_FAILURE: 3
    • T.UNAUTHORIZED_ACCESS: 4
    • T.UNAUTHORIZED_UPDATE: 3
    • T.UNDETECTED_ACTIONS: 3
    • T.USER_DATA_REUSE: 3
  • A:
    • A.ADMIN: 4
    • A.HANET: 5
    • A.INIT: 4
    • A.NOEVIL: 4
    • A.PHYSEC: 4
    • A.SINGEN: 5
    • A.TIMESTMP: 4
  • O:
    • O.AUDREC: 5
    • O.AUTH: 11
    • O.AVAIL: 5
    • O.CONFID: 12
    • O.INTEG: 9
    • O.MEDIAT: 4
    • O.NOREPLAY: 12
    • O.RS: 10
  • OE:
    • OE.ADMIN: 2
    • OE.HANET: 6
    • OE.INIT: 7
    • OE.NOEVIL: 3
    • OE.PHYSEC: 4
    • OE.SINGEN: 4
    • OE.TIMESTMP: 5
  • T:
    • T.MEDIAT: 4
    • T.MMODIFY: 4
    • T.MODIFY: 4
    • T.MSNIFF: 4
    • T.NOAUTH: 4
    • T.SELPRO: 4
    • T.SNIFF: 4
pdf_data/st_keywords/eval_facility
  • atsec:
    • atsec: 102
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 14
  • constructions:
    • MAC:
      • HMAC: 11
      • HMAC-SHA-256: 1
      • HMAC-SHA-384: 1
  • AES_competition:
    • AES:
      • AES: 18
  • constructions:
    • MAC:
      • HMAC: 3
pdf_data/st_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 11
    • ECDH:
      • ECDH: 7
      • ECDHE: 1
    • ECDSA:
      • ECDSA: 15
  • FF:
    • DH:
      • DH: 6
      • DHE: 2
      • Diffie-Hellman: 2
  • RSA:
    • RSASSAPKCS1-v1_5: 1
  • ECC:
    • ECC:
      • ECC: 3
    • ECDH:
      • ECDH: 2
  • FF:
    • DH:
      • DH: 2
      • Diffie-Hellman: 5
pdf_data/st_keywords/hash_function
  • MD:
    • MD5:
      • MD5: 5
  • SHA:
    • SHA1:
      • SHA-1: 15
    • SHA2:
      • SHA-256: 10
      • SHA-384: 9
      • SHA256: 1
      • SHA384: 1
  • SHA:
    • SHA1:
      • SHA1: 1
    • SHA2:
      • SHA-256: 1
      • SHA256: 1
pdf_data/st_keywords/crypto_scheme
  • KA:
    • Key agreement: 2
  • KEX:
    • Key Exchange: 1
  • MAC:
    • MAC: 2
  • KA:
    • Key Agreement: 2
  • KEX:
    • Key Exchange: 4
  • MAC:
    • MAC: 1
pdf_data/st_keywords/crypto_protocol
  • IKE:
    • IKE: 2
  • SSH:
    • SSH: 81
  • TLS:
    • DTLS:
      • DTLS: 1
    • SSL:
      • SSL: 12
    • TLS:
      • TLS: 83
      • TLS 1.0: 4
      • TLS 1.1: 4
      • TLS 1.2: 2
      • TLS v1.1: 1
      • TLSv1.1: 4
      • TLSv1.2: 7
  • VPN:
    • VPN: 1
  • IKE:
    • IKE: 90
    • IKEv1: 3
  • IPsec:
    • IPsec: 34
  • SSH:
    • SSH: 137
  • VPN:
    • VPN: 17
pdf_data/st_keywords/randomness
  • RNG:
    • RBG: 6
    • RNG: 17
  • RNG:
    • RNG: 5
pdf_data/st_keywords/cipher_mode
  • CBC:
    • CBC: 5
  • GCM:
    • GCM: 2
  • CBC:
    • CBC: 6
  • CTR:
    • CTR: 6
pdf_data/st_keywords/ecc_curve
  • NIST:
    • NIST P-256: 10
    • P-256: 13
    • curve P-256: 1
    • secp256r1: 8
pdf_data/st_keywords/tls_cipher_suite
  • TLS:
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: 1
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: 1
    • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: 1
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: 1
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384: 1
    • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: 1
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: 1
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: 1
    • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: 1
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: 1
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384: 1
    • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: 1
    • TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA: 1
    • TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256: 1
    • TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256: 1
    • TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA: 1
    • TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384: 1
    • TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384: 1
    • TLS_ECDH_RSA_WITH_AES_128_CBC_SHA: 1
    • TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256: 1
    • TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256: 1
    • TLS_ECDH_RSA_WITH_AES_256_CBC_SHA: 1
    • TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384: 1
    • TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384: 1
    • TLS_RSA_WITH_AES_128_CBC_SHA: 1
    • TLS_RSA_WITH_AES_128_CBC_SHA256: 1
    • TLS_RSA_WITH_AES_128_GCM_SHA256: 1
    • TLS_RSA_WITH_AES_256_CBC_SHA: 1
    • TLS_RSA_WITH_AES_256_CBC_SHA256: 1
    • TLS_RSA_WITH_AES_256_GCM_SHA384: 1
pdf_data/st_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 14
pdf_data/st_keywords/standard_id
  • BSI:
    • AIS20: 1
  • FIPS:
    • FIPS 140-2: 6
    • FIPS 186-2: 1
    • FIPS PUB 186-3: 3
    • FIPS197: 2
    • FIPS198-1: 2
  • PKCS:
    • PKCS#1: 10
  • RFC:
    • RFC 2246: 1
    • RFC 2460: 1
    • RFC 2818: 1
    • RFC 3513: 1
    • RFC 4253: 2
    • RFC 4346: 1
    • RFC 4443: 1
    • RFC 5246: 1
    • RFC 768: 1
    • RFC 791: 1
    • RFC 792: 1
    • RFC 793: 1
    • RFC1321: 2
    • RFC2104: 2
    • RFC2326: 2
    • RFC2460: 4
    • RFC2818: 2
    • RFC3261: 2
    • RFC3447: 11
    • RFC3526: 2
    • RFC4251: 4
    • RFC4252: 5
    • RFC4253: 9
    • RFC4254: 2
    • RFC4291: 3
    • RFC4346: 9
    • RFC4443: 4
    • RFC4492: 7
    • RFC5228: 2
    • RFC5246: 8
    • RFC5280: 3
    • RFC5722: 2
    • RFC5735: 4
    • RFC6151: 1
    • RFC768: 4
    • RFC791: 4
    • RFC792: 4
    • RFC793: 4
    • RFC959: 4
  • X509:
    • X.509: 6
  • BSI:
    • AIS20: 3
    • AIS31: 2
  • FIPS:
    • FIPS180-4: 2
  • PKCS:
    • PKCS #1: 7
    • PKCS#1: 6
  • RFC:
    • RFC2104: 7
    • RFC2409: 9
    • RFC2460: 2
    • RFC2617: 1
    • RFC2965: 1
    • RFC3502: 1
    • RFC3526: 5
    • RFC3602: 1
    • RFC4253: 6
    • RFC4301: 1
    • RFC4344: 1
    • RFC4418: 7
    • RFC4432: 1
    • RFC5639: 6
    • RFC5656: 2
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • TOE, including the fipscardsync utility provided with BIG-IP for convenience, are considered to be out of scope for this evaluation. 7.1.3.3 Certificate validation For TLS sessions, the TOE implements: 1
    • out of scope: 1
  • OutOfScope:
    • 1.4.8.7 No Dynamic Routing The dynamic routing feature which uses OSPF only works with IPv4 and is out of scope for this TOE. 1.4.8.8 No virtual genucenter The genucenter must be operated on real hardware: 1
    • out of scope: 4
    • the genucenter in a virtual machine is out of scope for this TOE. 1.4.9 Physical Scope The physical scope of TOE consists only of software and: 1
    • to perform cryptographic operations for IPsec operations. However, usage of the cryptocard is out of scope for this TOE. 1.4.8.2 No USB update The management system genucenter can write configuration: 1
    • when the USB stick is plug into the firewall component. However, usage of the USB update is out of scope for this TOE. 1.4.8.3 No FTP and SIP Relays The product allows the configuration of FTP and SIP: 1
pdf_data/st_metadata
  • /Author: Roland Meister
  • /CreationDate: D:20150814121632+02'00'
  • /Creator: Writer
  • /Keywords: CC 3.1
  • /Producer: LibreOffice 4.1
  • /Subject: Common Criteria
  • /Title: genucreen 5.0 Security Target
  • pdf_file_size_bytes: 802825
  • pdf_hyperlinks: http://www.ecc-brainpool.org/download/Domain-parameters.pdf
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 75
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different