Gemalto Advanced Whitebox PKI SDK for Android v1.0.1.300

Certificate details

Status archived
Valid from 24.12.2019
Valid until 24.12.2024
Scheme 🇳🇱 NL
Manufacturer Thales
Category Mobility
Security level ADV_IMP.1, EAL3+, ALC_TAT.1, AVA_VAN.3, ADV_FSP.4, ADV_TDS.3

Certificate

Extracted keywords

Vendor
Gemalto, Thales

Security level
EAL2, EAL 3, EAL 3 augmented
Security Assurance Requirements (SAR)
ADV_FSP.4, ADV_TDS.3, ADV_IMP.1, ALC_TAT.1, AVA_VAN.3
Certificates
CC-19-230855
Evaluation facilities
Brightsight

Creation date D:20191224095650+01'00'
Modification date D:20191224103746+01'00'
Pages 1
Creator NL-ARN-SAL-C
Producer KONICA MINOLTA bizhub C300i

Certification report

Extracted keywords

Symmetric Algorithms
AES
Asymmetric Algorithms
ECDSA

Vendor
Samsung, Gemalto, Thales, Huawei

Security level
EAL4, EAL3, EAL 3, EAL3 augmented, EAL 3 augmented
Security Assurance Requirements (SAR)
ADV_FSP.4, ADV_TDS.3, ADV_IMP.1, ADV_IMP, ALC_TAT.1, AVA_VAN.3
Certificates
NSCIB-CC-230855-CR
Evaluation facilities
Brightsight

Side-channel analysis
Reverse engineering, JIL

Frontpage

Certificate ID NSCIB-CC-230855-CR
Certified item Gemalto Advanced Whitebox PKI SDK for Android v1.0.1.300
Certification lab Brightsight
Developer Thales
Title Certification Report NSCIB-CC-230855-CR.docx
Author p647
Creation date D:20191224081010+01'00'
Pages 11
Creator pdfFactory Pro www.pdffactory.com
Producer pdfFactory Pro 5.32 (Windows 7 Ultimate x64 Dutch)

Security target

Extracted keywords

Symmetric Algorithms
AES, Rijndael, CMAC
Asymmetric Algorithms
ECDSA, ECC
Hash functions
PBKDF2
Elliptic Curves
P-256, NIST P-256, secp256r1

Vendor
Gemalto, Thales

Security level
EAL 3, EAL3, EAL3 augmented
Claims
D.XX, D.AR, D.MOB_ID, D.USER_ID, D.APP_ID, D.AWPKI_SDK_, D.AWPKI_SDK_I, D.ACOR, D.ACO, O.ACO_SM, O.ACO, T.ACOR_STOL, T.ACOR_ATT_, A.PKI, OE.PKI
Security Assurance Requirements (SAR)
ADV_FSP.4, ADV_TDS.3, ADV_IMP.1, ADV_ARC.1, AGD_OPE.1, AGD_PRE.1, ALC_TAT.1, ALC_CMC.3, ALC_CMS.3, ALC_DEL.1, ALC_DVS.1, ALC_LCD.1, ATE_COV.2, ATE_DPT.1, ATE_FUN.1, ATE_IND.2, AVA_VAN.3, APE_SPD.1, ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.2, ASE_REQ.2, ASE_SPD.1, ASE_TSS.1
Security Functional Requirements (SFR)
FCS_COP, FCS_COP.1, FCS_CKM.1, FCS_CKM.4, FDP_ACF.1, FDP_ACC, FDP_ACF, FDP_ITC, FDP_RIP, FDP_ITC.1, FDP_ITC.2, FDP_ACC.1, FDP_ACC.2, FDP_IFC.1, FDP_RIP.1, FMT_MSA.3, FPT_MUL, FPT_MUL.1, FPT_MUL.1.1, FPT_MUL.1.2, FPT_FLS.1, FPT_FLS.1.1
Certificates
NSCIB-CC-230855, CC-1, CC-2, CC-3

Side-channel analysis
malfunction, reverse engineering
Certification process
Out of scope, The agent who performs Customer Application and AWPKI SDK initialisation and administration. Out of scope Customer Application Server Administrator The agent who performs Customer server initialisation and, Out of scope User of Authentication service User of Authentication service using Mobile where Customer

Standards
FIPS186, FIPS PUB 186-4, FIPS197, RFC2898, CCMB-2017-04-001, CCMB-2017-04-002, CCMB-2017-04-003, CCMB-2017-04-004
Title Security Target for
Subject AWPKI SDK
Author F.GUERIN
Creation date D:20191113150209+01'00'
Modification date D:20191113150209+01'00'
Pages 45
Creator Microsoft® Word 2016
Producer Microsoft® Word 2016

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

Certificate ID

NSCIB-CC-230855-CR

Extracted SARs

ADV_ARC.1, ADV_FSP.4, ADV_IMP.1, ADV_TDS.3, AGD_OPE.1, AGD_PRE.1, ALC_CMC.3, ALC_CMS.3, ALC_DEL.1, ALC_DVS.1, ALC_LCD.1, ALC_TAT.1, APE_SPD.1, ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.2, ASE_REQ.2, ASE_SPD.1, ASE_TSS.1, ATE_COV.2, ATE_DPT.1, ATE_FUN.1, ATE_IND.2, AVA_VAN.3

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.cc.CCCertificate",
  "category": "Mobility",
  "cert_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/cert%2019-230855.pdf",
  "dgst": "e9d6e407cf4641c8",
  "heuristics": {
    "_type": "sec_certs.sample.cc_eucc_common.Heuristics",
    "annotated_references": null,
    "cert_id": "NSCIB-CC-230855-CR",
    "cert_lab": [
      ""
    ],
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "eal": "EAL3+",
    "extracted_sars": {
      "_type": "Set",
      "elements": [
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_LCD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_CCL",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AGD_PRE",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_CMC",
          "level": 3
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_COV",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_TSS",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_FUN",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_DEL",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_ECD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_IMP",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_OBJ",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_FSP",
          "level": 4
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AVA_VAN",
          "level": 3
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_DPT",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_TAT",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "APE_SPD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_TDS",
          "level": 3
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_ARC",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_CMS",
          "level": 3
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AGD_OPE",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_INT",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_IND",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_DVS",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_SPD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_REQ",
          "level": 2
        }
      ]
    },
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "1.0.1.300"
      ]
    },
    "indirect_transitive_cves": null,
    "next_certificates": null,
    "prev_certificates": null,
    "protection_profiles": null,
    "related_cves": null,
    "report_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "scheme_data": null,
    "st_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "verified_cpe_matches": null
  },
  "maintenance_updates": {
    "_type": "Set",
    "elements": []
  },
  "manufacturer": "Thales",
  "manufacturer_web": null,
  "name": "Gemalto Advanced Whitebox PKI SDK for Android v1.0.1.300",
  "not_valid_after": "2024-12-24",
  "not_valid_before": "2019-12-24",
  "pdf_data": {
    "_type": "sec_certs.sample.cc_eucc_common.PdfData",
    "cert_filename": "cert 19-230855.pdf",
    "cert_frontpage": null,
    "cert_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {
        "NL": {
          "CC-19-230855": 1
        }
      },
      "cc_claims": {},
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ADV": {
          "ADV_FSP.4": 1,
          "ADV_IMP.1": 1,
          "ADV_TDS.3": 1
        },
        "ALC": {
          "ALC_TAT.1": 1
        },
        "AVA": {
          "AVA_VAN.3": 1
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 3": 1,
          "EAL 3 augmented": 1,
          "EAL2": 1
        }
      },
      "cc_sfr": {},
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "BrightSight": {
          "Brightsight": 1
        }
      },
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "ISO": {
          "ISO/IEC 15408": 2,
          "ISO/IEC 18045": 2
        }
      },
      "symmetric_crypto": {},
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Gemalto": {
          "Gemalto": 1
        },
        "Thales": {
          "Thales": 1
        }
      },
      "vulnerability": {}
    },
    "cert_metadata": {
      "/CreationDate": "D:20191224095650+01\u002700\u0027",
      "/Creator": "NL-ARN-SAL-C",
      "/ModDate": "D:20191224103746+01\u002700\u0027",
      "/Producer": "KONICA MINOLTA bizhub C300i",
      "pdf_file_size_bytes": 74925,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 1
    },
    "report_filename": "Certification Report NSCIB-CC-230855-CR.pdf",
    "report_frontpage": {
      "NL": {
        "cert_id": "NSCIB-CC-230855-CR",
        "cert_item": "Gemalto Advanced Whitebox PKI SDK for Android v1.0.1.300",
        "cert_lab": " Brightsight",
        "developer": "Thales"
      }
    },
    "report_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDSA": {
            "ECDSA": 3
          }
        }
      },
      "cc_cert_id": {
        "NL": {
          "NSCIB-CC-230855-CR": 11
        }
      },
      "cc_claims": {},
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ADV": {
          "ADV_FSP.4": 2,
          "ADV_IMP": 1,
          "ADV_IMP.1": 2,
          "ADV_TDS.3": 2
        },
        "ALC": {
          "ALC_TAT.1": 2
        },
        "AVA": {
          "AVA_VAN.3": 2
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 3": 1,
          "EAL 3 augmented": 1,
          "EAL3": 2,
          "EAL3 augmented": 1,
          "EAL4": 1
        }
      },
      "cc_sfr": {},
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "BrightSight": {
          "Brightsight": 2
        }
      },
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {
        "other": {
          "JIL": 1,
          "Reverse engineering": 1
        }
      },
      "standard_id": {},
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 2
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Gemalto": {
          "Gemalto": 19
        },
        "Huawei": {
          "Huawei": 2
        },
        "Samsung": {
          "Samsung": 4
        },
        "Thales": {
          "Thales": 4
        }
      },
      "vulnerability": {}
    },
    "report_metadata": {
      "/Author": "p647",
      "/CreationDate": "D:20191224081010+01\u002700\u0027",
      "/Creator": "pdfFactory Pro www.pdffactory.com",
      "/Producer": "pdfFactory Pro 5.32 (Windows 7 Ultimate x64 Dutch)",
      "/Title": "Certification Report NSCIB-CC-230855-CR.docx",
      "pdf_file_size_bytes": 108242,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.tuv.com/nl",
          "http://www.sogisportal.eu",
          "mailto:[email protected]",
          "http://www.commoncriteriaportal.org"
        ]
      },
      "pdf_is_encrypted": true,
      "pdf_number_of_pages": 11
    },
    "st_filename": "R0R28657_AWPKI_SDK_ST_V17p.pdf",
    "st_frontpage": null,
    "st_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 2
          },
          "ECDSA": {
            "ECDSA": 27
          }
        }
      },
      "cc_cert_id": {
        "NL": {
          "CC-1": 6,
          "CC-2": 2,
          "CC-3": 4,
          "NSCIB-CC-230855": 1
        }
      },
      "cc_claims": {
        "A": {
          "A.PKI": 1
        },
        "D": {
          "D.ACO": 3,
          "D.ACOR": 14,
          "D.APP_ID": 2,
          "D.AR": 13,
          "D.AWPKI_SDK_": 2,
          "D.AWPKI_SDK_I": 1,
          "D.MOB_ID": 2,
          "D.USER_ID": 2,
          "D.XX": 1
        },
        "O": {
          "O.ACO": 1,
          "O.ACO_SM": 1
        },
        "OE": {
          "OE.PKI": 1
        },
        "T": {
          "T.ACOR_ATT_": 3,
          "T.ACOR_STOL": 1
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ADV": {
          "ADV_ARC.1": 1,
          "ADV_FSP.4": 4,
          "ADV_IMP.1": 4,
          "ADV_TDS.3": 4
        },
        "AGD": {
          "AGD_OPE.1": 1,
          "AGD_PRE.1": 1
        },
        "ALC": {
          "ALC_CMC.3": 1,
          "ALC_CMS.3": 1,
          "ALC_DEL.1": 1,
          "ALC_DVS.1": 1,
          "ALC_LCD.1": 1,
          "ALC_TAT.1": 4
        },
        "APE": {
          "APE_SPD.1": 1
        },
        "ASE": {
          "ASE_CCL.1": 1,
          "ASE_ECD.1": 1,
          "ASE_INT.1": 1,
          "ASE_OBJ.2": 1,
          "ASE_REQ.2": 1,
          "ASE_SPD.1": 1,
          "ASE_TSS.1": 1
        },
        "ATE": {
          "ATE_COV.2": 1,
          "ATE_DPT.1": 1,
          "ATE_FUN.1": 1,
          "ATE_IND.2": 1
        },
        "AVA": {
          "AVA_VAN.3": 5
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 3": 1,
          "EAL3": 2,
          "EAL3 augmented": 1
        }
      },
      "cc_sfr": {
        "FCS": {
          "FCS_CKM.1": 3,
          "FCS_CKM.4": 3,
          "FCS_COP": 9,
          "FCS_COP.1": 4
        },
        "FDP": {
          "FDP_ACC": 4,
          "FDP_ACC.1": 8,
          "FDP_ACC.2": 3,
          "FDP_ACF": 3,
          "FDP_ACF.1": 12,
          "FDP_IFC.1": 3,
          "FDP_ITC": 9,
          "FDP_ITC.1": 12,
          "FDP_ITC.2": 3,
          "FDP_RIP": 2,
          "FDP_RIP.1": 1
        },
        "FMT": {
          "FMT_MSA.3": 8
        },
        "FPT": {
          "FPT_FLS.1": 3,
          "FPT_FLS.1.1": 1,
          "FPT_MUL": 5,
          "FPT_MUL.1": 6,
          "FPT_MUL.1.1": 2,
          "FPT_MUL.1.2": 2
        }
      },
      "certification_process": {
        "OutOfScope": {
          "Out of scope": 2,
          "Out of scope User of Authentication service User of Authentication service using Mobile where Customer": 1,
          "The agent who performs Customer Application and AWPKI SDK initialisation and administration. Out of scope Customer Application Server Administrator The agent who performs Customer server initialisation and": 1
        }
      },
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "NIST P-256": 1,
          "P-256": 1,
          "secp256r1": 1
        }
      },
      "eval_facility": {},
      "hash_function": {
        "PBKDF": {
          "PBKDF2": 2
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {
        "FI": {
          "malfunction": 1
        },
        "other": {
          "reverse engineering": 3
        }
      },
      "standard_id": {
        "CC": {
          "CCMB-2017-04-001": 1,
          "CCMB-2017-04-002": 1,
          "CCMB-2017-04-003": 1,
          "CCMB-2017-04-004": 1
        },
        "FIPS": {
          "FIPS PUB 186-4": 1,
          "FIPS186": 4,
          "FIPS197": 1
        },
        "RFC": {
          "RFC2898": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 5
          },
          "Rijndael": {
            "Rijndael": 1
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 1
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Gemalto": {
          "Gemalto": 79
        },
        "Thales": {
          "Thales": 221
        }
      },
      "vulnerability": {}
    },
    "st_metadata": {
      "/Author": "F.GUERIN",
      "/CreationDate": "D:20191113150209+01\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word 2016",
      "/ModDate": "D:20191113150209+01\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word 2016",
      "/Subject": "AWPKI SDK",
      "/Title": "Security Target for",
      "pdf_file_size_bytes": 1940693,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 45
    }
  },
  "protection_profile_links": {
    "_type": "Set",
    "elements": []
  },
  "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/Certification%20Report%20NSCIB-CC-230855-CR.pdf",
  "scheme": "NL",
  "security_level": {
    "_type": "Set",
    "elements": [
      "ADV_FSP.4",
      "AVA_VAN.3",
      "EAL3+",
      "ALC_TAT.1",
      "ADV_IMP.1",
      "ADV_TDS.3"
    ]
  },
  "st_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/R0R28657_AWPKI_SDK_ST_V17p.pdf",
  "state": {
    "_type": "sec_certs.sample.cc_eucc_common.InternalState",
    "cert": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "d61e7dc4c773adfae62438a23829e3e4ccc2227c406f98d690ba93448dae9857",
      "txt_hash": "5dc86597ca54021e6f368982987beafbaa1b47140f3a334a748503717534ba98"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "9ba25500c70bff03b8ca6970d0746ceea1187e232555f86822b365b0c985ec1a",
      "txt_hash": "1ae19bc15ecac7919c5e6c83c293aa7b9841a4e01bed71c8e8e846f0423c085b"
    },
    "st": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "4c2a65e086fc9a8d2cbc58b2e899539f42d649656664a86447f77ca75d1996bb",
      "txt_hash": "f272e37b621a5ff7f909604c8a9dc9fd381af3a986598a42f94974e2c496fa72"
    }
  },
  "status": "archived"
}