{"_id": "fdeeee7fc6a881e9", "_type": "sec_certs.sample.cc.CCCertificate", "dgst": "fdeeee7fc6a881e9", "status": "active", "category": "Other Devices and Systems", "name": "XOmail 23.0.1", "manufacturer": "Thales Norway AS", "scheme": "NO", "security_level": {"_type": "Set", "elements": ["ALC_FLR.3", "EAL4+"]}, "not_valid_before": "2026-02-18", "not_valid_after": "2031-02-18", "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/SERTIT-128%20Certification%20Report.pdf", "st_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/739_20859_aaaa_sc_ed4-public.pdf", "cert_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/SERTIT-128%20Certificate.pdf", "manufacturer_web": "https://www.thales.no/", "protection_profile_links": {"_type": "Set", "elements": []}, "maintenance_updates": {"_type": "Set", "elements": []}, "state": {"_type": "sec_certs.sample.cc_eucc_common.InternalState", "report": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "txt_hash": "be9583b3dc001e1bb2607ab82a8664f491961bddff1bbb36f8633f9edd4242bb", "json_hash": null, "source_hash": "e32a70998da6e888dcab9aeb9115eb2d92be3d5c26582ae9f831018cdad01594"}, "st": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "txt_hash": "70e1e92bf07f751f9f057aac3e838567d477b6422d932bcc430a214ddc08f12f", "json_hash": null, "source_hash": "5a12d3159c2b0ddb634ac9e1282576777617737cf086b59342544b32ee502ff8"}, "cert": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": false, "txt_hash": "819c3ca2be935b927a4ec669cfedaf82ffb953b57a933f8611b6898d7cf54130", "json_hash": null, "source_hash": "0277aa96c8f2bb0ffaf600b1defbebf9236c7b6b1b0e619582f4a0cfc0ba7c81"}}, "pdf_data": {"_type": "sec_certs.sample.cc_eucc_common.PdfData", "report_metadata": {"pdf_file_size_bytes": 487558, "pdf_is_encrypted": false, "pdf_number_of_pages": 22, "/CreationDate": "D:20260217133700+01'00'", "/ModDate": "D:20260217133700+01'00'", "pdf_hyperlinks": {"_type": "Set", "elements": []}}, "st_metadata": {"pdf_file_size_bytes": 2509690, "pdf_is_encrypted": false, "pdf_number_of_pages": 104, "/Title": "XOmail 23 Security Target", "/Author": "Thales Norway AS", "/Creator": "Microsoft\u00ae Word 2021", "/CreationDate": "D:20260210072951+01'00'", "/ModDate": "D:20260210072951+01'00'", "/Producer": "Microsoft\u00ae Word 2021", "pdf_hyperlinks": {"_type": "Set", "elements": ["file://///tnor-project.bnett.thales/Projects/XOmail/arbeidspakker/TIL-ARKIV/739_20859_aaaa_sc_ed4-public.docx%23_Toc219321255"]}}, "cert_metadata": null, "report_frontpage": {}, "st_frontpage": null, "cert_frontpage": null, "report_keywords": {"cc_cert_id": {"NO": {"SERTIT-128": 22}}, "cc_protection_profile_id": {}, "cc_security_level": {"EAL": {"EAL 4": 26, "EAL 2": 1, "EAL4": 1, "EAL 4 augmented": 24}}, "cc_sar": {"ADV": {"ADV_ARC.1": 1, "ADV_FSP.4": 1, "ADV_IMP.1": 1, "ADV_TDS.3": 1}, "AGD": {"AGD_OPE.1": 1, "AGD_PRE.1": 1}, "ALC": {"ALC_FLR.3": 26, "ALC_FLR": 1, "ALC_CMC.4": 1, "ALC_CMS.4": 1, "ALC_DEL.1": 1, "ALC_DVS.1": 1, "ALC_LCD.1": 1, "ALC_TAT.1": 1}, "ATE": {"ATE_COV.2": 1, "ATE_DPT.1": 1, "ATE_FUN.1": 1, "ATE_IND.2": 1}, "AVA": {"AVA_VAN.3": 1}, "ASE": {"ASE_CCL.1": 1, "ASE_ECD.1": 1, "ASE_INT.1": 1, "ASE_OBJ.2": 1, "ASE_REQ.2": 1, "ASE_SPD.1": 1, "ASE_TSS.1": 1}}, "cc_sfr": {}, "cc_claims": {}, "vendor": {"Thales": {"Thales": 3}}, "eval_facility": {"Norconsult": {"Norconsult AS": 3}}, "symmetric_crypto": {}, "asymmetric_crypto": {}, "pq_crypto": {}, "hash_function": {}, "crypto_scheme": {"MAC": {"MAC": 1}}, "crypto_protocol": {}, "randomness": {}, "cipher_mode": {}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "technical_report_id": {}, "device_model": {}, "tee_name": {}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"ISO": {"ISO/IEC 15408": 8, "ISO/IEC 17025": 2}, "X509": {"X.509": 2}, "CC": {"CCMB-2017-04-004": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "st_keywords": {"cc_cert_id": {}, "cc_protection_profile_id": {}, "cc_security_level": {"EAL": {"EAL4": 8, "EAL 4": 1, "EAL4 augmented": 5, "EAL 4 augmented": 1}}, "cc_sar": {"ADV": {"ADV_ARC.1": 1, "ADV_FSP.4": 1, "ADV_IMP.1": 1, "ADV_TDS.3": 1}, "AGD": {"AGD_OPE.1": 3, "AGD_PRE.1": 1}, "ALC": {"ALC_FLR.3": 8, "ALC_CMC.4": 1, "ALC_CMS.4": 1, "ALC_DEL.1": 1, "ALC_DVS.1": 1, "ALC_LCD.1": 1, "ALC_TAT.1": 1}, "ATE": {"ATE_COV.2": 1, "ATE_DPT.1": 1, "ATE_FUN.1": 1, "ATE_IND.2": 1}, "AVA": {"AVA_VAN.3": 1}, "ASE": {"ASE_INT": 2, "ASE_CCL": 2, "ASE_SPD": 2, "ASE_ECD": 2, "ASE_OBJ": 2, "ASE_REQ": 2, "ASE_TSS": 2, "ASE_CCL.1": 1, "ASE_ECD.1": 1, "ASE_INT.1": 1, "ASE_OBJ.2": 1, "ASE_REQ.2": 1, "ASE_SPD.1": 1, "ASE_TSS.1": 1}}, "cc_sfr": {"FAU": {"FAU_ARP.1": 8, "FAU_ARP.1.1": 1, "FAU_GEN.1": 10, "FAU_GEN.1.1": 1, "FAU_GEN.1.2": 1, "FAU_GEN.2": 8, "FAU_GEN.2.1": 1, "FAU_SAA.1": 7, "FAU_SAR.1": 7, "FAU_SAR.2": 7, "FAU_STG.1": 7, "FAU_STG.3": 7, "FAU_STG.4": 7, "FAU_SAA.1.1": 1, "FAU_SAA.1.2": 1, "FAU_SAR.1.1": 1, "FAU_SAR.1.2": 1, "FAU_SAR.2.1": 1, "FAU_STG.1.1": 1, "FAU_STG.1.2": 1, "FAU_STG.3.1": 1, "FAU_STG.4.1": 1}, "FCO": {"FCO_NRO.1": 4, "FCO_NRO.1.1": 1, "FCO_NRO.1.3": 1, "FCO_NRR.1": 5, "FCO_NRR.1.1": 1, "FCO_NRR.1.2": 1, "FCO_NRR.1.3": 1}, "FCS": {"FCS_NRO.1.2": 1, "FCS_COP.1": 5, "FCS_COP.1.1": 1}, "FDP": {"FDP_ACC.2": 8, "FDP_ACF.1": 9, "FDP_ETC.2": 9, "FDP_IFC.2": 8, "FDP_IFF.2": 9, "FDP_ITC.2": 9, "FDP_RIP.2": 8, "FDP_UIT.1": 7, "FDP_ACC.2.1": 1, "FDP_ACC.2.2": 1, "FDP_ACF.1.1": 1, "FDP_ACF.1.2": 1, "FDP_ACF.1.3": 1, "FDP_ACF.1.4": 1, "FDP_ETC.2.1": 1, "FDP_ETC.2.2": 1, "FDP_ETC.2.3": 1, "FDP_ETC.2.4": 1, "FDP_IFC.2.1": 1, "FDP_IFC.2.2": 1, "FDP_IFF.2.1": 1, "FDP_IFF.2.2": 2, "FDP_IFF.2.3": 1, "FDP_IFF.2.4": 1, "FDP_IFF.2.5": 1, "FDP_IFF.2.6": 1, "FDP_IFF.2.7": 1, "FDP_ITC.2.1": 1, "FDP_ITC.2.2": 1, "FDP_ITC.2.3": 1, "FDP_ITC.2.4": 1, "FDP_ITC.2.5": 1, "FDP_RIP.2.1": 1, "FDP_UIT.1.1": 1, "FDP_UIT.1.2": 1, "FDP_ACC.1": 2, "FDP_IFC.1": 4}, "FIA": {"FIA_AFL.1": 8, "FIA_ATD.1": 10, "FIA_UAU.2": 11, "FIA_UAU.5": 8, "FIA_UAU.6": 10, "FIA_UID.2": 13, "FIA_USB.1": 12, "FIA_AFL.1.1": 1, "FIA_AFL.1.2": 1, "FIA_ATD.1.1": 1, "FIA_UAU.2.1": 1, "FIA_UAU.5.1": 1, "FIA_UAU.5.2": 1, "FIA_UAU.6.1": 1, "FIA_UID.2.1": 1, "FIA_USB.1.1": 1, "FIA_USB.1.2": 1, "FIA_USB.1.3": 1, "FIA_UID.1": 3}, "FMT": {"FMT_MSA.1": 9, "FMT_MSA.3": 11, "FMT_MTD.1": 7, "FMT_SMF.1": 9, "FMT_SMR.1": 11, "FMT_MSA.1.1": 1, "FMT_MSA.3.1": 1, "FMT_MSA.3.2": 1, "FMT_MTD.1.1": 1, "FMT_SMF.1.1": 1, "FMT_SMR.1.1": 1, "FMT_SMR.1.2": 1, "FMT_MTS": 1, "FMT_MTD": 1}, "FPT": {"FPT_FLS.1": 8, "FPT_RCV.1": 7, "FPT_RCV.2": 10, "FPT_RCV.4": 8, "FPT_TDC.1": 13, "FPT_TST.1": 9, "FPT_FLS.1.1": 1, "FPT_RCV.1.1": 1, "FPT_RCV.2.1": 1, "FPT_RCV.2.2": 1, "FPT_RCV.4.1": 1, "FPT_TDC.1.1": 1, "FPT_TDC.1.2": 1, "FPT_TST.1.1": 1, "FPT_TST.1.2": 1, "FPT_TST.1.3": 1, "FPT_STM.1": 2, "FPT_AMT.1": 2}, "FRU": {"FRU_FLT.2": 7, "FRU_PRS.1": 9, "FRU_FLT.2.1": 1, "FRU_PRS.1.1": 1, "FRU_PRS.1.2": 1}, "FTA": {"FTA_SSL.3": 7, "FTA_TSE.1": 10, "FTA_SSL.3.1": 1, "FTA_TSE.1.1": 1}, "FTP": {"FTP_ITC.1": 3, "FTP_TRP.1": 2}}, "cc_claims": {"O": {"O.ACCESS_HIST": 13, "O.AUDIT": 11, "O.AUTO_LOGOUT": 10, "O.CMD_ACL": 5, "O.CMD_LOG": 15, "O.DAC": 8, "O.FLASH": 9, "O.ID_AUTH": 8, "O.LABELLING": 10, "O.LOCK": 5, "O.MANAGE": 8, "O.MAC": 12, "O.MAC_INTEGRITY": 7, "O.MESSAGING": 5, "O.MSG_INTEGRITY": 10, "O.RECOVER": 9, "O.REUSE": 10, "O.ROLE_MNG": 5, "O.ROLES": 11, "O.SCHEDULING": 7, "O.SELF_TEST": 7}, "A": {"A.PHYSICAL": 2, "A.PHYSICAL_LOC": 4, "A.ADM_TRAINING": 4, "A.AUDIT_REVIEW": 4, "A.CONFIDENCE": 2, "A.INVALIDATE": 4, "A.NOTIFY": 4, "A.USR_TRAINING": 2, "A.TIME_SOURCE": 4, "A.DB": 2, "A.NETWORK": 2, "A.OS": 3, "A.IAM": 5}, "OE": {"OE.ACCOUNTABLE": 10, "OE.AUDIT": 12, "OE.DB": 7, "OE.ID_AUTH": 5, "OE.NETWORK": 18, "OE.PLATFORM": 8, "OE.PKI": 7, "OE.TRAF_SEPARATION": 9, "OE.TIME_SOURCE": 6}}, "vendor": {"Thales": {"Thales": 104}, "Microsoft": {"Microsoft": 4}}, "eval_facility": {}, "symmetric_crypto": {}, "asymmetric_crypto": {}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 1}, "SHA2": {"SHA-2": 1}}}, "crypto_scheme": {"MAC": {"MAC": 70}}, "crypto_protocol": {}, "randomness": {}, "cipher_mode": {}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "technical_report_id": {}, "device_model": {}, "tee_name": {"IBM": {"SE": 1}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS PUB 180-4": 2}, "RFC": {"RFC 6477": 3, "RFC 5321": 1}, "ISO": {"ISO/IEC 15408": 6}, "X509": {"X.509": 3}, "CC": {"CCMB-2017-04-001": 1, "CCMB-2017-04-002": 1, "CCMB-2017-04-003": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "cert_keywords": {"cc_cert_id": {}, "cc_protection_profile_id": {}, "cc_security_level": {}, "cc_sar": {}, "cc_sfr": {}, "cc_claims": {}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {}, "asymmetric_crypto": {}, "pq_crypto": {}, "hash_function": {}, "crypto_scheme": {}, "crypto_protocol": {}, "randomness": {}, "cipher_mode": {}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "technical_report_id": {}, "device_model": {}, "tee_name": {}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "report_filename": "SERTIT-128 Certification Report.pdf", "st_filename": "739_20859_aaaa_sc_ed4-public.pdf", "cert_filename": "SERTIT-128 Certificate.pdf"}, "heuristics": {"_type": "sec_certs.sample.cc_eucc_common.Heuristics", "extracted_versions": {"_type": "Set", "elements": ["23.0.1"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "cert_lab": null, "cert_id": "SERTIT-128", "prev_certificates": null, "next_certificates": null, "st_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "report_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "annotated_references": null, "extracted_sars": {"_type": "Set", "elements": [{"_type": "sec_certs.sample.sar.SAR", "family": "ASE_SPD", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_ECD", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_INT", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_DVS", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ATE_IND", "level": 2}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_CMS", "level": 4}, {"_type": "sec_certs.sample.sar.SAR", "family": "ATE_FUN", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ADV_TDS", "level": 3}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_TSS", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_CMC", "level": 4}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_REQ", "level": 2}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_OBJ", "level": 2}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_DEL", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_LCD", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "AGD_PRE", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_TAT", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_CCL", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "AVA_VAN", "level": 3}, {"_type": "sec_certs.sample.sar.SAR", "family": "ATE_DPT", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "AGD_OPE", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_FLR", "level": 3}, {"_type": "sec_certs.sample.sar.SAR", "family": "ADV_ARC", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ATE_COV", "level": 2}, {"_type": "sec_certs.sample.sar.SAR", "family": "ADV_IMP", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ADV_FSP", "level": 4}]}, "direct_transitive_cves": null, "indirect_transitive_cves": null, "scheme_data": {"product": "XOmail 23.0.1", "url": "https://sertit.no/certified-products/xomail-23-0-1-article3656-1919.html", "category": "Messaging system", "developer": "Thales Norway AS", "certification_date": "2026-02-18", "enhanced": {"description": "Thales XOmail software (TOE) is a family of turn-key products tailored for formal military messaging, information handling and transfer in modern C4ISR solutions. The XOmail Server softwareenforces controlled message and information flow according to military requirements with integrated multi-level security and mandatory access control. The TOE provides priority handling for messaging, ensuring flash message traffic is delivered with minimal delay even with heavy traffic or congestion. The TOE preserves message security through consistent interpretation of security labels across all supported messaging protocols, and supports use of digital signatures to ensure message integrity. The TOE ensures all users are authenticated, and provides user management functions such as automated logout, lockout, and verification. The TOE provides fine grained access control for messaging operations and administrative commands, with complete accountability of all operations.", "cert_id": "SERTIT-128", "mutual_recognition": "CCRA, SOG-IS", "product": "XOmail 23.0.1 software", "category": "Messaging system", "sponsor": "Thales Norway AS", "developer": "Thales Norway AS", "evaluation_facility": "Norconsult AS", "certification_date": "2026-02-18", "expiration_date": "2031-02-18", "level": "EAL 4, ALC_FLR.3", "documents": {"cert": [{"href": "https://sertit.no/getfile.php/1314985-1771424227/SERTIT/Sertifikater/2026/128/SERTIT-128%20Certificate.pdf"}], "target": [{"href": "https://sertit.no/getfile.php/1314988-1771424333/SERTIT/Sertifikater/2026/128/739_20859_aaaa_sc_ed4-public.pdf"}], "report": [{"href": "https://sertit.no/getfile.php/1314991-1771424360/SERTIT/Sertifikater/2026/128/SERTIT-128%20Certification%20Report.pdf"}]}}}, "protection_profiles": null, "eal": "EAL4+"}}