{"_id": "fc5c9f22ac50139f", "_type": "sec_certs.sample.cc.CCCertificate", "dgst": "fc5c9f22ac50139f", "status": "active", "category": "Network and Network-Related Devices and Systems", "name": "Broadcom Layer 7 API Gateway v11.1.3", "manufacturer": "Broadcom Inc.", "scheme": "CA", "security_level": {"_type": "Set", "elements": []}, "not_valid_before": "2026-07-24", "not_valid_after": "2031-07-24", "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/683-LSS%20CR%20v1.0.pdf", "st_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/683-LSS%20ST%20v1.1.pdf", "cert_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/683-LSS%20CT%20v1.0.pdf", "manufacturer_web": "https://www.broadcom.com/", "protection_profile_links": {"_type": "Set", "elements": ["https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/NDcPP_v3_0e.pdf", "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pkg_ssh_v1.0.pdf"]}, "maintenance_updates": {"_type": "Set", "elements": []}, "state": {"_type": "sec_certs.sample.cc_eucc_common.InternalState", "report": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "b27becb29fe0e5be9294f598c4345e6634a1a1d216860868536aca1f829994b8", "txt_hash": "1e31e5de4ab390ea1d1939ee47cfb1d240f80f1677385121f7290a344f1bc5d9", "json_hash": null}, "st": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "14f2ce4d8128d704a742dce77fc713b778b0f7b132bf4b66a394b95263ecf3fa", "txt_hash": "94b6b280d91f6fa925af0a03c5748abf96f4d94ae4228c330ad2aad2ae92daf6", "json_hash": null}, "cert": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "fc895c5d94882d87cb09aeab6571a0a038bea280a97aff5d2e32c25a4e90e944", "txt_hash": "5df3a4674da03bcc55d97fd20f77c28997dc5d3e126644b5210c3581883b7018", "json_hash": null}}, "pdf_data": {"_type": "sec_certs.sample.cc_eucc_common.PdfData", "report_metadata": {"pdf_file_size_bytes": 774602, "pdf_is_encrypted": false, "pdf_number_of_pages": 17, "/Author": "Clark, Cory P.", "/ClassificationContentMarkingHeaderFontProps": "#008000,10,Aptos", "/ClassificationContentMarkingHeaderShapeIds": "d,1b,1d,25,33,a,603a0e79,14b4e046,4fa39b1c", "/ClassificationContentMarkingHeaderText": "UNCLASSIFIED / NON CLASSIFI\u00c9//TLP:CLEAR", "/Comments": "", "/Company": "", "/CreationDate": "D:20260728125408-04'00'", "/Creator": "Acrobat PDFMaker 26 for Word", "/Keywords": "", "/MSIP_Label_48427e67-b62d-4c1e-9e76-d84c9ec9dbc6_ActionId": "155affb7-9433-4e82-917a-0a156467691c", "/MSIP_Label_48427e67-b62d-4c1e-9e76-d84c9ec9dbc6_ContentBits": "1", "/MSIP_Label_48427e67-b62d-4c1e-9e76-d84c9ec9dbc6_Enabled": "true", "/MSIP_Label_48427e67-b62d-4c1e-9e76-d84c9ec9dbc6_Method": "Privileged", "/MSIP_Label_48427e67-b62d-4c1e-9e76-d84c9ec9dbc6_Name": "TLP-WHITE", "/MSIP_Label_48427e67-b62d-4c1e-9e76-d84c9ec9dbc6_SetDate": "2026-01-27T15:16:59Z", "/MSIP_Label_48427e67-b62d-4c1e-9e76-d84c9ec9dbc6_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a", "/MSIP_Label_48427e67-b62d-4c1e-9e76-d84c9ec9dbc6_Tag": "10, 0, 1, 1", "/ModDate": "D:20260728125417-04'00'", "/Producer": "Adobe PDF Library 26.1.187", "/SourceModified": "", "/Subject": "", "/Title": "", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/validation-search", "https://techdocs.broadcom.com/us/en/ca-enterprise-software/layer7-apimanagement/api-gateway/11-1.html", "https://www.cve.org/", "https://www.cyber.gc.ca/en/tools-services/common-criteria/certified-products", "https://nvd.nist.gov/vuln/search#/nvd/home?resultType=records", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "mailto:contact@cyber.gc.ca", "https://www.commoncriteriaportal.org/products/index.cfm"]}}, "st_metadata": {"pdf_file_size_bytes": 1065169, "pdf_is_encrypted": false, "pdf_number_of_pages": 51, "/Author": "", "/CreationDate": "D:20260724105649-07'00'", "/ModDate": "D:20260804090759-04'00'", "/Producer": "Microsoft: Print To PDF", "/Title": "Microsoft Word - LS_Broadcom Layer 7 API Gateway v11 ST_1.1.docx", "pdf_hyperlinks": {"_type": "Set", "elements": []}}, "cert_metadata": {"pdf_file_size_bytes": 364922, "pdf_is_encrypted": false, "pdf_number_of_pages": 1, "/Author": "Clark, Cory P.", "/Comments": "", "/Company": "CSEC-CSTC", "/CreationDate": "D:20260728130727-04'00'", "/Creator": "Acrobat PDFMaker 26 for Word", "/Keywords": "", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ActionId": "03c3dcc6-6bfd-4194-a625-fb83b8d0389e", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ContentBits": "1", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Enabled": "true", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Method": "Privileged", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Name": "UNCLASSIFIED", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SetDate": "2023-05-16T11:46:20Z", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a", "/ModDate": "D:20260728130733-04'00'", "/Producer": "Adobe PDF Library 26.1.187", "/SourceModified": "", "/Subject": "", "/Title": "", "pdf_hyperlinks": {"_type": "Set", "elements": []}}, "report_frontpage": {"CA": {}}, "st_frontpage": null, "cert_frontpage": null, "report_keywords": {"cc_cert_id": {}, "cc_protection_profile_id": {}, "cc_security_level": {}, "cc_sar": {}, "cc_sfr": {}, "cc_claims": {}, "vendor": {"Broadcom": {"Broadcom": 11, "Broadcom Inc": 2}}, "eval_facility": {"Lightship": {"Lightship Security": 1}}, "symmetric_crypto": {}, "asymmetric_crypto": {}, "pq_crypto": {}, "hash_function": {}, "crypto_scheme": {}, "crypto_protocol": {"SSH": {"SSH": 2}}, "randomness": {}, "cipher_mode": {}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {"OpenSSL": {"OpenSSL": 2}}, "vulnerability": {}, "side_channel_analysis": {}, "technical_report_id": {}, "device_model": {}, "tee_name": {}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"ISO": {"ISO/IEC 17025": 2}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "st_keywords": {"cc_cert_id": {}, "cc_protection_profile_id": {}, "cc_security_level": {}, "cc_sar": {"ADV": {"ADV_FSP.1": 1}, "AGD": {"AGD_OPE.1": 1, "AGD_PRE.1": 1}, "ALC": {"ALC_CMC.1": 1, "ALC_CMS.1": 1}, "ATE": {"ATE_IND.1": 1}, "AVA": {"AVA_VAN.1": 1}, "ASE": {"ASE_CCL.1": 1, "ASE_ECD.1": 1, "ASE_INT.1": 1, "ASE_OBJ.1": 1, "ASE_REQ.1": 1, "ASE_SPD.1": 1, "ASE_TSS.1": 2}}, "cc_sfr": {"FAU": {"FAU_STG_EXT.1": 12, "FAU_GEN.1.2": 2, "FAU_GEN.1": 6, "FAU_GEN.2": 5, "FAU_GEN.1.1": 1, "FAU_GEN.2.1": 1, "FAU_STG_EXT.1.1": 1, "FAU_STG_EXT.1.2": 1, "FAU_STG_EXT.1.3": 1, "FAU_STG_EXT.1.4": 1, "FAU_STG_EXT.1.5": 1, "FAU_STG_EXT.1.6": 1, "FAU_STG.1": 1, "FAU_STG_EXT.2": 1, "FAU_STG_EXT.3": 1}, "FCO": {"FCO_CPC_EXT.1": 1}, "FCS": {"FCS_SSHS_EXT.1": 9, "FCS_SSHS_EXT.1.3": 1, "FCS_SSH_EXT.1": 9, "FCS_SSH_EXT.1.1": 2, "FCS_SSH_EXT.1.5": 2, "FCS_RBG_EXT.1.2": 2, "FCS_RBG_EXT.1": 6, "FCS_NTP_EXT.1": 6, "FCS_SSHC_EXT.1": 9, "FCS_TLSS_EXT.1": 10, "FCS_CKM.1": 5, "FCS_CKM.2": 5, "FCS_CKM.4": 5, "FCS_COP": 21, "FCS_CKM.1.1": 1, "FCS_CKM.2.1": 1, "FCS_CKM.4.1": 1, "FCS_COP.1": 4, "FCS_NTP_EXT.1.1": 1, "FCS_NTP_EXT.1.2": 1, "FCS_NTP_EXT.1.3": 1, "FCS_NTP_EXT.1.4": 1, "FCS_RBG_EXT.1.1": 1, "FCS_SSH_EXT.1.2": 1, "FCS_SSH_EXT.1.3": 1, "FCS_SSH_EXT.1.4": 1, "FCS_SSH_EXT.1.6": 1, "FCS_SSH_EXT.1.7": 1, "FCS_SSH_EXT.1.8": 1, "FCS_SSHC_EXT.1.1": 1, "FCS_SSHS_EXT.1.1": 1, "FCS_TLSS_EXT.1.1": 2, "FCS_TLSS_EXT.1.2": 1, "FCS_TLSS_EXT.1.3": 1, "FCS_TLSS_EXT.1.4": 1, "FCS_TLSS_EXT.1.5": 1, "FCS_TLSS_EXT.1.6": 1, "FCS_TLSS_EXT.1.7": 1, "FCS_TLSS_EXT.1.8": 1, "FCS_TLSC_EXT.1": 1, "FCS_TLSC_EXT.2": 1, "FCS_TLSS_EXT.2": 1}, "FIA": {"FIA_UIA_EXT.1.3": 3, "FIA_PMG_EXT.1": 6, "FIA_UIA_EXT.1": 7, "FIA_AFL.1": 8, "FIA_UAU.7": 5, "FIA_AFL.1.1": 1, "FIA_AFL.1.2": 1, "FIA_PMG_EXT.1.1": 1, "FIA_UIA_EXT.1.1": 1, "FIA_UIA_EXT.1.2": 1, "FIA_UIA_EXT.1.4": 1, "FIA_UAU.7.1": 1}, "FMT": {"FMT_SMF.1.1": 2, "FMT_MOF": 10, "FMT_MTD": 10, "FMT_SMF.1": 8, "FMT_SMR.2": 5, "FMT_MOF.1": 2, "FMT_MTD.1": 2, "FMT_SMR.2.1": 1, "FMT_SMR.2.2": 1, "FMT_SMR.2.3": 1}, "FPT": {"FPT_TST_EXT.1": 7, "FPT_SKP_EXT.1": 6, "FPT_APW_EXT.1": 6, "FPT_TUD_EXT.1": 6, "FPT_STM_EXT.1": 7, "FPT_SKP_EXT.1.1": 1, "FPT_APW_EXT.1.1": 1, "FPT_APW_EXT.1.2": 1, "FPT_TST_EXT.1.1": 1, "FPT_TST_EXT.1.2": 1, "FPT_TUD_EXT.1.1": 1, "FPT_TUD_EXT.1.2": 1, "FPT_TUD_EXT.1.3": 1, "FPT_STM_EXT.1.1": 1, "FPT_STM_EXT.1.2": 1, "FPT_ITT.1": 2, "FPT_TUD_EXT.2": 1}, "FTA": {"FTA_SSL_EXT.1": 6, "FTA_SSL.3": 5, "FTA_SSL.4": 5, "FTA_TAB.1": 7, "FTA_SSL_EXT.1.1": 1, "FTA_SSL.3.1": 1, "FTA_SSL.4.1": 1, "FTA_TAB.1.1": 1}, "FTP": {"FTP_ITC.1": 7, "FTP_TRP": 7, "FTP_ITC.1.1": 1, "FTP_ITC.1.2": 1, "FTP_ITC.1.3": 1, "FTP_TRP.1": 2, "FTP_TRP.1.2": 1, "FTP_TRP.1.3": 1}}, "cc_claims": {"T": {"T.UNAUTHORIZED_": 1, "T.WEAK_": 2, "T.UNTRUSTED_": 1, "T.UPDATE_": 1, "T.UNDETECTED_": 1, "T.SECURITY_": 2, "T.UNAUTHORIZED_ADMINIS": 1, "T.UNDETECTED_ACTIVITY": 2, "T.WEAK_CRYPTOGRAPHY": 1, "T.UNTRUSTED_COMMUNICATION_CHANNELS": 2, "T.UNTRUSTED_COMMUNI": 1, "T.WEAK_AUTHENTICATIO": 1, "T.UPDATE_COMPROMISE": 1, "T.SECURITY_FUNCTIONAL": 2}, "A": {"A.PHYSICAL_": 1, "A.LIMITED_": 1, "A.NO_THRU_": 1, "A.TRUSTED_": 1, "A.REGULAR_": 1, "A.ADMIN_": 1, "A.RESIDUAL_": 1, "A.VS_TRUSTED_AD": 1, "A.VS_REGULAR_UP": 1, "A.VS_ISOLATION": 1, "A.VS_CORRECT_CO": 1}, "OE": {"OE.PHYSICAL": 1, "OE.NO_GENERAL_": 1, "OE.NO_THRU_": 1, "OE.TRUSTED_ADMIN": 1, "OE.UPDATES": 1, "OE.ADMIN_": 1, "OE.RESIDUAL_": 1, "OE.VM_CONFIGURA": 1}}, "vendor": {"Broadcom": {"Broadcom": 2}}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 8, "AES-256": 2}}, "constructions": {"MAC": {"HMAC": 4, "HMAC-SHA-256": 2, "HMAC-SHA-512": 4}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDHE": 2, "ECDH": 1}, "ECDSA": {"ECDSA": 8}, "ECC": {"ECC": 4}}, "FF": {"DH": {"DHE": 2, "Diffie-Hellman": 2, "DH": 1}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 3}, "SHA2": {"SHA-256": 7, "SHA-384": 3, "SHA-512": 5, "SHA256": 7}}}, "crypto_scheme": {"KA": {"Key Agreement": 2}}, "crypto_protocol": {"SSH": {"SSH": 88}, "TLS": {"SSL": {"SSL": 2}, "TLS": {"TLS 1.2": 8, "TLS": 38, "TLS 1.3": 5}}}, "randomness": {"PRNG": {"DRBG": 3}, "RNG": {"RNG": 1, "RBG": 1}}, "cipher_mode": {"CBC": {"CBC": 5}, "CTR": {"CTR": 3}, "GCM": {"GCM": 3}}, "ecc_curve": {"NIST": {"P-256": 10, "P-384": 6, "P-521": 6, "secp256r1": 3, "secp384r1": 3, "secp521r1": 3}}, "crypto_engine": {}, "tls_cipher_suite": {"TLS": {"TLS_RSA_WITH_AES_128_CBC_SHA": 2, "TLS_RSA_WITH_AES_256_CBC_SHA": 2, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 2, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 2, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 2, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 2, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 2, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 2, "TLS_RSA_WITH_AES_128_CBC_SHA256": 2, "TLS_RSA_WITH_AES_128_GCM_SHA256": 2, "TLS_RSA_WITH_AES_256_GCM_SHA384": 2, "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256": 2, "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384": 2, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 2, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 2, "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 2, "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 2, "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 2, "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 2, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256": 2, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384": 2}}, "crypto_library": {"OpenSSL": {"OpenSSL": 6}}, "vulnerability": {}, "side_channel_analysis": {}, "technical_report_id": {}, "device_model": {}, "tee_name": {}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS PUB 186-5": 5, "FIPS 140-2": 1, "FIPS PUB 186-4": 4}, "NIST": {"NIST SP 800-186": 1}, "PKCS": {"PKCS #1": 2, "PKCS#12": 2}, "RFC": {"RFC 7919": 2, "RFC 8017": 1, "RFC 5905": 1, "RFC 4252": 2, "RFC 4253": 4, "RFC 8332": 6, "RFC 5656": 8, "RFC 4344": 2, "RFC 5647": 2, "RFC 6668": 2, "RFC 8268": 3, "RFC 4251": 1, "RFC 8446": 3, "RFC 5246": 11, "RFC 3268": 8, "RFC 4492": 8, "RFC 5288": 8, "RFC 5289": 16, "RFC 5077": 2, "RFC 5746": 2, "RFC 5280": 3, "RFC 5759": 1, "RFC 2986": 1, "RFC 3526": 3}, "ISO": {"ISO/IEC 14888-3": 2, "ISO/IEC 9796-2": 1, "ISO/IEC 18031:2011": 2}, "X509": {"X.509": 18}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "cert_keywords": {"cc_cert_id": {}, "cc_protection_profile_id": {}, "cc_security_level": {}, "cc_sar": {}, "cc_sfr": {}, "cc_claims": {}, "vendor": {"Broadcom": {"Broadcom Inc": 1, "Broadcom": 1}}, "eval_facility": {"Lightship": {"Lightship Security": 1}}, "symmetric_crypto": {}, "asymmetric_crypto": {}, "pq_crypto": {}, "hash_function": {}, "crypto_scheme": {}, "crypto_protocol": {"SSH": {"SSH": 1}}, "randomness": {}, "cipher_mode": {}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "technical_report_id": {}, "device_model": {}, "tee_name": {}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "report_filename": "683-LSS CR v1.0.pdf", "st_filename": "683-LSS ST v1.1.pdf", "cert_filename": "683-LSS CT v1.0.pdf"}, "heuristics": {"_type": "sec_certs.sample.cc_eucc_common.Heuristics", "extracted_versions": {"_type": "Set", "elements": ["11.1.3"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "cert_lab": null, "cert_id": "683-LSS", "prev_certificates": null, "next_certificates": null, "st_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "report_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "annotated_references": null, "extracted_sars": {"_type": "Set", "elements": [{"_type": "sec_certs.sample.sar.SAR", "family": "ASE_TSS", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ADV_FSP", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_ECD", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_OBJ", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "AGD_OPE", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_SPD", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_CMC", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ATE_IND", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_INT", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "AGD_PRE", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_REQ", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_CCL", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_CMS", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "AVA_VAN", "level": 1}]}, "direct_transitive_cves": null, "indirect_transitive_cves": null, "scheme_data": {"product": "Broadcom Layer 7 API Gateway v11.1.3", "vendor": "Broadcom Inc.", "level": "collaborative Protection Profile for Network Devices, v3.0e Functional Package for SSH, v1.0", "certification_date": "2026-07-24"}, "protection_profiles": {"_type": "Set", "elements": ["ed9c9d74c3710878", "4704bfbdf61ca066"]}, "eal": "EAL1"}}