TrustCB B.V.
Registered address:
Van den Berghlaan 48, 2132 AT
Hoofddorp, The Netherlands
eucc@trustcb.com
https://trustcb.com/common-criteria/eucc/
TrustCB B.V. is a registered company at the
Netherlands Chamber of Commerce (KVK),
under number 858360275.
® TrustCB is a registered trademark. Any use or application requires prior approval by TrustCB.
EUCC Certification Report
NXP NSN4XX2M0 Series - Secure Element, version
NSN4XX2M0_SE B1.1.000 J6
Sponsor and developer: NXP Semiconductors Netherlands N.V.
High Tech Campus 60
5656AG Eindhoven
The Netherlands
Evaluation facility: Keysight Technologies Netherlands Riscure B.V.
Delftechpark 49,
2628 XJ Delft,
The Netherlands
Report number: EUCC-3110-2026-2500173-01 Certification Report
Report version: 1.0
Project number: EUCC-2500173-01
Author(s): Jordi Mujal, TrustCB B.V.
contact: eucc@trustcb.com
Date: 12 August 2026
Number of pages: 16
Number of appendices: 0
Reproduction of this report is authorised only if reproduced in its entirety.
Page: 2/16 of EUCC-3110-2026-2500173-01 Certification Report, 12 August 2026
CONTENTS
Foreword 3
International recognition of the certificate 4
1 Executive Summary 5
2 ICT Product details 6
2.1 Identification of the ICT Product 6
2.2 Contact information related to the evaluation of the ICT Product 6
2.3 Security services and policies 7
2.3.1 Security services 7
2.3.2 Vulnerability management 7
2.3.3 Assurance Continuity policies 7
2.3.4 Lifecycle management processes and production facilities 7
2.3.5 Patch management process 7
2.4 Assumptions and Clarification of Scope 7
2.4.1 Assumptions 7
2.4.2 Clarification of scope 7
2.5 Architectural Information 8
2.6 Supplementary Cybersecurity Information 8
3 Evaluation summary 10
3.1 Identification of used assurance components 10
3.2 EUCC State of the Art documents and Protection Profiles 10
3.3 ICT Product testing 10
3.3.1 Testing approach and depth 10
3.3.2 Independent penetration testing 10
3.3.3 Test configuration 10
3.3.4 Test results 10
3.4 ICT Product evaluation 11
3.4.1 Reused evaluation results 11
3.4.2 Evaluated configuration 11
3.4.3 Assessment against each assurance requirement 11
3.5 Results of the evaluation 13
3.6 Certificate information and scheme label 13
3.7 Comments and Recommendations 13
4 Security Target 14
5 Glossary 14
6 Bibliography 15
Page: 3/16 of EUCC-3110-2026-2500173-01 Certification Report, 12 August 2026
Foreword
The Common Criteria-based European Cybersecurity Certification Scheme (EUCC) is a certification
scheme created under the Cybersecurity Act (CSA), Regulation (EU) 2019/881 of 17 April 2019.
The EUCC is described by Commission Implementing Regulation (EU) 2024/482 of 31 January 2024,
laying down rules for the application of Regulation (EU) 2019/881 of the European Parliament and of the
Council as regards the adoption of the European Common Criteria-based cybersecurity certification
scheme (EUCC).
The Dutch implementation of the CSA is regulated in Dutch law in the ‘Uitvoeringswet
cyberbeveiligingsverordening’ (UITVW). In this law the role of NCCA is assigned to the Dutch Authority
for Digital Infrastructure (RDI), which is part of the Ministry of Economic Affairs.
TrustCB B.V. has been licensed by the RDI as a Certification Body (CB) for the task of ISO/IEC 17065
Certification Activities up to and including CSA assurance level high for ICT security products, as well as
for protection profiles. Part of the procedure is the technical examination (evaluation) of the product,
protection profile according to the NP002 EUCC processes published by the Dutch NCCA.
Evaluations of ICT products are performed by an IT Security Evaluation Facility (ITSEF) licensed by the
Dutch NCCA as a CAB for ISO/IEC 17025 Evaluation Activities, with scope aligning to the requested
Evaluation Assurance Level of the Object for the evaluation, referred to as the Target of Evaluation (TOE)
in this report.
By awarding an EUCC certificate as a Common Criteria certificate, TrustCB B.V. asserts that the ICT
product complies with the security requirements specified in the associated security target, or that the
protection profile (PP) complies with the requirements for PP evaluation specified in the Common Criteria
for Information Security Evaluation. A security target is a requirements specification document that
defines the scope of the evaluation activities.
The consumer should review the security target or protection profile, in addition to this certification report,
to gain an understanding of any assumptions made during the evaluation, the ICT product's intended
environment, its security requirements, and the level of confidence (i.e., the evaluation assurance level)
that the ICT product satisfies the security requirements stated in the security target.
Reproduction of this report is authorised only if it is reproduced in its entirety.
Page: 4/16 of EUCC-3110-2026-2500173-01 Certification Report, 12 August 2026
International recognition of the certificate
The CCRA was signed by the Netherlands in May 2000 and provides mutual recognition of published
certificates based on the Common Criteria (CC). Since September 2014 the CCRA has been updated to
provide mutual recognition of certificates based on cPPs (exact use) or STs with evaluation assurance
components up to and including EAL2+ALC_FLR.
For details of the current list of signatory nations and approved certification schemes, see
http://www.commoncriteriaportal.org.
Page: 5/16 of EUCC-3110-2026-2500173-01 Certification Report, 12 August 2026
1 Executive Summary
This Certification Report states the outcome of the Common Criteria security evaluation of the NXP
NSN4XX2M0 Series - Secure Element, version NSN4XX2M0_SE B1.1.000 J6, identified in this document
as either the ICT Product or as the Target of Evaluation (TOE).
The developer of the ICT Product is NXP Semiconductors Netherlands N.V. located in Eindhoven, The
Netherlands and they also act as the sponsor of the evaluation and certification.
This Certification Report is intended to assist prospective consumers when judging the suitability of the IT
security properties of the ICT product for their particular requirements.
The TOE is defined as the NSN4XX2M0_SE Secure IC hardware platform together with its IC Dedicated
Software and constitutes the only TOE configuration. The TOE claims conformance to the following
Protection Profiles [PP]:
• Security IC Platform Protection Profile with Augmentation Packages version 2.0, 16 December 2025,
registered under the reference BSI-CC-PP-0084-V2-2026
A certification procedure was conducted on the TOE by TrustCB B.V., in accordance with the provisions
of the EUCC as described in Commission implementing regulation (EU) 2024/482 of 31 January 2024,
amended by (EU) 2024/3144 of 18 December 2024 and (EU) 2025/2462 of 8 December 2025.
The successful completion of the certification procedure resulted in TrustCB issuing an EUCC certificate,
The certificate identifier is EUCC-3110-2026-2500173-01, dated 12-08-2026 and with a 5-year validity.
The evaluation of the TOE was performed by Keysight Technologies Netherlands Riscure B.V. located in
Delft, the Netherlands. The evaluation was completed on 11-07-2026 with the issuance of the evaluation
technical report [ETR]. The evaluation was conducted using the Common Methodology for Information
Technology Security Evaluation, CC:2022, R1 [CEM] for conformance to the Common Criteria for
Information Technology Security Evaluation, CC:2022 [CC] (Parts 1, 2, 3, 4, 5).
The scope of the evaluation was defined by the security target [ST], which identifies assumptions made
during the evaluation, the intended environment for the ICT Product, the security requirements, and the
level of confidence (evaluation assurance level) at which the product is intended to satisfy the security
requirements.
The results documented in the evaluation technical report [ETR] 1 for this product provide sufficient
evidence that the TOE meets the EAL5 augmented (EAL5+) assurance requirements for the evaluated
security functionality. This assurance level is augmented with ALC_DVS.2 (Sufficiency of security
measures) ALC_FLR.2 (Flaw Reporting Procedures), AVA_VAN.5 (Advanced methodical vulnerability
analysis) and ASE_TSS.2 (TOE summary specification with architectural design summary). This
assurance level is recognised by article 52 of [CSA] as ‘high’.
Consumers of this ICT Product are advised to verify that their own environment is consistent with the
security target, and to give due consideration to the comments, observations and recommendations in
this certification report.
TrustCB B.V., as Certification Assessment Body licensed by the Dutch Authority for Digital Infrastructure
(RDI) for EUCC high certification activities, declares that the product will be listed on the ENISA EU
Cybersecurity Certificates list and that the evaluation meets all the conditions for international recognition
of Common Criteria Certificates.
Note that the certification results apply only to the specific version of the product as evaluated.
1 The Evaluation Technical Report contains information proprietary to the developer and/or the
evaluator, and is not available for public review.
Page: 6/16 of EUCC-3110-2026-2500173-01 Certification Report, 12 August 2026
2 ICT Product details
2.1 Identification of the ICT Product
The Target of Evaluation (TOE) for this evaluation is ICT product NXP NSN4XX2M0 Series - Secure
Element, version NSN4XX2M0_SE B1.1.000 J6 from NXP Semiconductors Netherlands N.V. located in
Eindhoven, The Netherlands.
The TOE is comprised of the following main components:
Delivery item
type
Identifier Version
Hardware NSN4XX2M0_SE B1.1.000
Software
Factory OS 9.8.6
BootOS 9.8.6
Firmware Library 9.14.11
Configuration
Data
Factory Page 250818
System Control Page 250818
System Update Page 250611
System Patch Page v985_s5_v0
Additional requirements for the operational environment of the certified ICT product are described in
section 4.3 of the [ST].
To ensure secure usage a set of guidance documents is provided with the TOE. For details, see section
2.6 of this report, “Supplementary Cybersecurity Information.
2.2 Contact information related to the evaluation of the ICT Product
Holder of the EUCC Certificate and Developer of the certified ICT Product
Organisation name: NXP Semiconductors Netherlands N.V.
Address: High Tech Campus 60, 5656AG Eindhoven, The Netherlands
Certified product contact cybersecurity.certification@nxp.com
Website link for supplementary
cybersecurity information associated
with the TOE, in accordance with
Article 55 of [EU-EUCC]
https://www.nxp.com/products/wireless-connectivity/nfc-hf/nfc-
enabled-digital-wallet:NFC-ENABLED-DIGITAL-WALLET
Identification of CAB
The Certification Assessment Body for this ICT Product is TrustCB B.V. TrustCB is licensed by the Dutch
Authority for Digital Infrastructure (RDI) for EUCC certification activities up to and including EUCC High.
TrustCB point of contact: EUCC@trustcb.com
Identification of ITSEF
Evaluation and testing for this ICT Product was performed by following ITSEF:
Keysight Technologies Netherlands Riscure B.V. located in Delft, the Netherlands.
Page: 7/16 of EUCC-3110-2026-2500173-01 Certification Report, 12 August 2026
2.3 Security services and policies
2.3.1 Security services
As per the [ST] TOE summary specification the TOE provides the following features:
• SS.RNG: Random Number Generator AIS31 PTG.2 [AIS31]
• SF.OPC: Control of Operating Conditions
• SF.PHY: Protection against Physical Manipulation
• SF.LOG: Logical Protection
• SF.FOS-USE: FactoryOS use restrictions
2.3.2 Vulnerability management
The following vulnerability policy has been identified as applicable to the NXP NSN4XX2M0 Series -
Secure Element, version NSN4XX2M0_SE B1.1.000 J6
Document reference: [PSIRT] PSIRT, Product Security Incident Response Process, NXPOMS-
1719007347-4179, 14 March 2024
2.3.3 Assurance Continuity policies
This is a new product certification. An assurance continuity policy was not provided.
2.3.4 Lifecycle management processes and production facilities
For a detailed and precise description of the TOE lifecycle, see the [ST], Chapter 1.9.
2.3.5 Patch management process
Not applicable to this evaluation.
2.4 Assumptions and Clarification of Scope
2.4.1 Assumptions
The assumptions defined in the Security Target are not covered by the TOE itself. These aspects lead to
specific Security Objectives to be fulfilled by the TOE-Environment. For detailed information on the
security objectives that must be fulfilled by the TOE environment, see section 4.3 of the [ST].
The user guidance as outlined in section 2.6 contains necessary information about the usage of the TOE
and its configuration in the environment to fulfil all Assumptions described in the [ST].
Certain aspects of the TOE’s security functionality, in particular the countermeasures against attacks,
depend on accurate conformance to the user guidance of both the software and the hardware part of the
TOE.
There are no particular obligations or recommendations for the user apart from following the user
guidance. Please note that the documents contain relevant details concerning the resistance against
certain attacks.
2.4.2 Clarification of scope
Threats addressed by the TOE and the IT environment are presented in Section 3.1.2 of [ST] and include
the threats as presented in the [PP], no items have been added, removed or modified for the TOE.
The Organizational Security Polices (OSPs) are the same as in [PP]. No OSPs have been added,
removed or modified.
Page: 8/16 of EUCC-3110-2026-2500173-01 Certification Report, 12 August 2026
2.5 Architectural Information
According to the [ST] the following figure depicts the TOE architecture. Further details can be found in the
[ST] section 1.
2.6 Supplementary Cybersecurity Information
The following website link was provided for the NXP NSN4XX2M0 Series - Secure Element, version
NSN4XX2M0_SE B1.1.000 J6 for the supplementary cybersecurity information referred to in Article 55 of
Regulation (EU) 2019/881:
https://www.nxp.com/products/wireless-connectivity/nfc-hf/nfc-enabled-digital-wallet:NFC-ENABLED-
DIGITAL-WALLET
This link provides further details and links on:
- Guidance and recommendations to assist end users with the secure configuration, installation,
deployment, operation and maintenance of the NXP NSN4XX2M0 Series - Secure Element,
version NSN4XX2M0_SE B1.1.000 J6.
- The period during which the NXP NSN4XX2M0 Series - Secure Element, version
NSN4XX2M0_SE B1.1.000 J6 security support will be offered to end users, in particular as
regards the availability of cybersecurity related updates, is stated as 5 years aligned with the
validity of the issued EUCC certificate.
- Contact information and accepted method for receiving vulnerability information from end users
and security researchers for the NXP NSN4XX2M0 Series - Secure Element, version
NSN4XX2M0_SE B1.1.000 J6.
- the online repository listing publicly disclosed vulnerabilities related to the NXP NSN4XX2M0
Series - Secure Element, version NSN4XX2M0_SE B1.1.000 J6 and to any relevant
cybersecurity advisories.
Note: The following documentation, guidance and recommendations, is provided with the product by the
developer to the customer to assist end users with the secure configuration, installation, deployment,
operation and maintenance of the NXP NSN4XX2M0 Series - Secure Element, version NSN4XX2M0_SE
B1.1.000 J6:
Page: 9/16 of EUCC-3110-2026-2500173-01 Certification Report, 12 August 2026
Identifier Version
NSN4XX2M0_SE Information on Guidance and Operation Revision 1.0
NSN4XX2M0 Integration manual, UM10955 Revision 1.1
NSN4XX2M0_SE TOE Identification, Data sheet addendum, AD00091 Revision 1.3
NSN4XX2M0_SE Programmer's Manual (for revision B1), Application Note
RM00308
Revision 1.02
ARM® Cortex®-M33 Processor Technical Reference Manual Revision r1p0
Page: 10/16 of EUCC-3110-2026-2500173-01 Certification Report, 12 August 2026
3 Evaluation summary
3.1 Identification of used assurance components
The assurance components used in the product testing were:
• EAL 5 augmented with ALC_DVS.2, ALC_FLR.2, AVA_VAN.5 and ASE_TSS.2
as defined by, and detailed in, [CC] and [CEM].
3.2 EUCC State of the Art documents and Protection Profiles
EUCC state-of-the-art documents [SotA Documents] were applied as referenced in the Bibliography.
The following Protection Profiles were applied:
Security IC Platform Protection Profile with Augmentation Packages version 2.0, 16 December 2025, as
certified under the reference BSI-CC-PP-0084-V2-2026 by BSI.
3.3 ICT Product testing
Testing (depth, coverage, functional tests, independent testing): The evaluators examined the developer’s
testing activities documentation and verified that the developer has met their testing responsibilities.
3.3.1 Testing approach and depth
The developer performed extensive testing on functional specification, subsystem and SFR-enforcing
module level. All parameter choices were addressed at least once. All boundary cases identified were
tested explicitly, and additionally the near-boundary conditions were covered probabilistically. The testing
was largely automated using industry standard and proprietary test suites. Test scripts were used
extensively to verify that the functions return the expected values.
The underlying hardware and crypto-library test results are extendable to composite evaluations, because
the underlying platform is operated according to its guidance and the composite evaluation requirements
are met.
For the testing performed by the evaluators, the developer provided samples and a test environment. The
evaluators reproduced a selection of the developer tests, as well as a small number of test cases
designed by the evaluator.
3.3.2 Independent penetration testing
The independent vulnerability analysis performed was conducted along the steps described in section
3.4.3, AVA part.
3.3.3 Test configuration
The configuration of the sample used for independent evaluator testing and penetration testing was the
same as described in the [ST].
Some of the independent and penetration testing was performed on a different version of the platform
(NSN4XX2M0_SE B0.1.000 J6). The ITSEF assessed the differences between this version and
concluded that do not negatively impact security, the test results obtained on the different versions are
fully applicable to the TOE version in the [ST].
3.3.4 Test results
The testing activities, including configurations, procedures, test cases, expected results and observed
results are summarised in the [ETR], with references to the documents containing the full details.
The developer’s tests and the independent functional tests produced the expected results, giving
assurance that the TOE behaves as specified in its [ST] and functional specification.
No exploitable vulnerabilities were found with the independent penetration tests.
Page: 11/16 of EUCC-3110-2026-2500173-01 Certification Report, 12 August 2026
The algorithmic security level of cryptographic functionality has not been rated in this certification process,
but the current consensus on the algorithmic security level in the open domain, i.e., from the current best
cryptanalytic attacks published, has been taken into account [ACM].
The algorithmic security level exceeds 100 bits for all evaluated cryptographic functionality as required for
high attack potential (AVA_VAN.5).
For composite evaluations, please consult the [ETRfC] for details.
3.4 ICT Product evaluation
The evaluation was performed referencing ISO/IEC 18045, Common Evaluation Methodology, and the
EUCC State of the Art documents listed in section 6 of this report.
3.4.1 Reused evaluation results
There is no reuse of evaluation results in this certification.
There has been extensive reuse of the ALC aspects for the sites involved in the development and
production of the TOE, by use of multiple site certificates and Site Technical Audit Reports.
No sites have been visited as part of this evaluation.
3.4.2 Evaluated configuration
The TOE is defined uniquely by its name and version number NXP NSN4XX2M0 Series - Secure
Element, version NSN4XX2M0_SE B1.1.000 J6.
3.4.3 Assessment against each assurance requirement
ASE
ASE
ST introduction ASE_INT.1
Conformance claims ASE_CCL.1
Security problem definition ASE_SPD.1
Security objectives ASE_OBJ.2
Extended components definition ASE_ECD.1
Security requirements ASE.REQ.2
TOE summary specification ASE.TSS.2
In detail, the security target (ASE) highlights important aspects for understanding the precise evaluation
and certification scope. The security target provides a good overview of the security services offered by
the product and the intended usage.
ADV
ADV
Security architecture ADV_ARC.1
Functional specification ADV_FSP.5
Implementation representation ADV_IMP.1
Well-structured internals ADV_INT.2
TOE design ADV_TDS.4
The evaluation of the assurance class development (ADV), demonstrated a structured approach to the
specifications, architecture and design of the product.
Page: 12/16 of EUCC-3110-2026-2500173-01 Certification Report, 12 August 2026
AGD
AGD
Operational user guidance AGD_OPE.1
Preparative procedures AGD_PRE.1
The evaluation of the user guidance (AGD) showed that the provided user guidance gives clear
instructions on how to set up and use the TOE such that its security claims are maintained. Overall, the
evaluator concludes that the requirements of the assurance class AGD are met by the TOE.
ALC
ALC
CM capabilities ALC_CMC.4
CM Scope ALC_CMS.5
Delivery ALC_DEL.1
Development security ALC_DVS.2
Life cycle definition ALC_LCD.1
Flaw remediation ALC_FLR.2
Tools and techniques ALC_TAT.2
The evaluation of the lifecycle related aspects (ALC) successfully verified the TOE development and
production lifecycle. The verification of proper application of the procedures involved spot-checks
conducted by the evaluator, but also relied on the reuse of other evidence such as site certifications and
site technical audit reports. The assessment of the ALC_DVS requirements completely relied on these
existing evidences so that no site audits needed to be conducted. Overall, the evaluator concludes that
the requirements of the assurance class ALC are met by the TOE.
ATE
ATE
Coverage ATE_COV.2
Depth ATE_DPT.3
Functional tests ATE_FUN.1
Independent testing ATE_IND.2
The evaluation of the developer test campaign (ATE) consisted of independent tests by the evaluator and
sampling of the developer test campaign. The developer test campaign is found to be very structured and
complete, consisting of production and verification tests. The evaluator witnessed successful execution of
a sample set of test functions. The independent evaluator tests for some security functionalities
demonstrated that the test campaign of the developer is complete and accurate. Overall, the evaluator
concludes that all requirements of the assurance class ATE are met.
AVA
AVA
Vulnerability analysis AVA_VAN.5
The vulnerability analysis (AVA) and review of the implementation representation resulted in a number of
penetration tests to be performed. These tests were aimed at perturbation, side channel analysis and
logical attacks. Both the vulnerability analysis and penetration testing campaign confirmed to the
evaluator that the TOE is resistant to attacks with a High attack potential. Overall, the product and all
Page: 13/16 of EUCC-3110-2026-2500173-01 Certification Report, 12 August 2026
related evidence are very mature and consistent with only limited room for further improvements. For this
analysis it was performed according to the [SotA_AAPS].
3.5 Results of the evaluation
The evaluation lab documented their evaluation results in the [ETR], which references an ASE
Intermediate Report, other evaluator documents and developer documentation [DEV_DOCS].
To support composite evaluations according to [COMP] a derived document [ETRfC] was provided and
approved. This document provides details of the TOE evaluation that must be considered when this TOE
is used as platform in a composite evaluation.
The verdict of each claimed assurance requirement is “Pass”.
Based on the evaluation results the evaluation lab concluded the NXP NSN4XX2M0 Series - Secure
Element, version NSN4XX2M0_SE B1.1.000 J6, to be CC:2022 R1 1 Part 2 extended, CC:2022 R1 Part
3 conformant, at an assurance level recognised by article 52 of [CSA] as ‘High’, with AVA_VAN 5 and to
meet the requirements of EAL 5 augmented with ALC_FLR.2, ALC_DVS.2, AVA_VAN.5 and
ASE_TSS.2. This implies that the product satisfies the security requirements specified in Security Target
[ST].
The Security Target claims ’strict’ conformance to the Protection Profile [PP].
3.6 Certificate information and scheme label
A Certificate has been issued recognising this evaluation result as follows:
Unique identifier: EUCC-3110-2026-2500173-01
Date of issuance: 12-08-2026 and with a validity period of 5 years.
3.7 Comments and Recommendations
The user guidance as outlined in section 2.6 contains necessary information about the usage of the TOE.
Certain aspects of the TOE’s security functionality, in particular the countermeasures against attacks,
depend on accurate conformance to the user guidance of both the software and the hardware part of the
TOE. There are no particular obligations or recommendations for the user apart from following the user
guidance. Please note that the documents contain relevant details concerning the resistance against
certain attacks.
In addition, all aspects of assumptions, threats and policies as outlined in the Security Target not covered
by the TOE itself must be fulfilled by the operational environment of the TOE.
The customer or user of the product shall consider the results of the certification within his system risk
management process. For the evolution of attack methods and techniques to be covered, the customer
should define the period of time until a re-assessment for the TOE is required and thus requested from
the sponsor of the certificate.
The strength of the cryptographic algorithms and protocols was not rated in the course of this evaluation.
This specifically applies to the following proprietary or non-standard algorithms, protocols and
implementations: none.
Page: 14/16 of EUCC-3110-2026-2500173-01 Certification Report, 12 August 2026
4 Security Target
The certification references the following security target:
NXP NSN4XX2M0 Series - Secure Element, Security Target, Revision 1.4, 27 April 2026. [ST].
Please note that, to satisfy the need for publication, a public version [ST-lite] has been created and
verified according to [ST-SAN].
5 Glossary
This list of acronyms and definitions contains elements that are not already defined by the CC or CEM:
CAB Conformity Assessment Body
IC Integrated Circuit
IT Information Technology
ITSEF IT Security Evaluation Facility
JIL Joint Interpretation Library
NFC Near-Field Communication
PP Protection Profile
SMB Secure Mailbox
SPD Security Problem Definition
SotA State of the Art document for EUCC
TOE Target of Evaluation
TRNG True Random Number Generator
Page: 15/16 of EUCC-3110-2026-2500173-01 Certification Report, 12 August 2026
6 Bibliography
This section lists all referenced documentation used as source material in the compilation of this report.
[ACM] EUCC Scheme Guidelines on cryptography Agreed Cryptographic Mechanisms,
version 2.0, May 2025, published by ENISA
[AIS31] A Proposal for: Functionality Classes for Random Number Generators, version
3.0, 10 September 2024.
[CC] Common Criteria for Information Technology Security Evaluation, CC:2022 Parts
1, 2, 3, 4 and 5, R1, November 2022
[CEM] Common Methodology for Information Technology Security Evaluation, CEM:2022
R1, November 2022
[CCMB-2024-002] Errata and Interpretation for CC:2022 (Release 1) and CEM:2022 (Release 1),
Version 1.2
[DEV_DOCS] CI_List_NSN4XX2M0_B1_SE_CertificationEvidence_v1.0.xlsx, v1.0, version 1.0,
22 July 2026
NSN4XX2M0_SE Information on Guidance and Operation, Revision 1.0, 23
March 2026
NSN4XX2M0 Integration manual, UM10955, Revision 1.1, 18 December 2025
NSN4XX2M0_SE TOE Identification, Data sheet addendum, AD00091, Revision
1.3, 24 March 2026
NSN4XX2M0_SE Programmer's Manual (for revision B1), Application Note,
RM00308, Revision 1.02, 24 March 2026
ARM® Cortex®-M33 Processor Technical Reference Manual, Revision r1p0
For other developer documentation used in the evaluation effort, see [ETRfc] and
[ETR].
[ETR] NSN4XX2M0 Series Secure Element Evaluation Technical Report, version 1.4, 11
August 2026
[ETRfC] ETR for Composite Evaluation for NSN4XX2M0 Series Secure Element, v1.4, 11
August 2026
[EU-CSA] REGULATION (EU) 2019/881 OF THE EUROPEAN PARLIAMENT AND OF THE
COUNCIL of 17 April 2019 on ENISA (the European Union Agency for
Cybersecurity) and on information and communications technology cybersecurity
certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act)
[EU-EUCC] COMMISSION IMPLEMENTING REGULATION (EU) 2024/482 of 31 January
2024 laying down rules for the application of Regulation (EU) 2019/881 of the
European Parliament and of the Council as regards the adoption of the European
Common Criteria-based cybersecurity certification scheme (EUCC)
[EU-EUCC-
amdt.1]
Commission Implementing Regulation (EU) 2024/3144 of 18 December 2024
amending Implementing Regulation (EU) 2024/482 as regards applicable
international standards and correcting that Implementing Regulation
[EU-EUCC-
amdt.2]
Commission Implementing Regulation (EU) 2025/2462 of 8 December 2025
amending Implementing Regulation (EU) 2024/482 as regards definitions, ICT
product series certification, assurance continuity and state-of-the-art documents
Page: 16/16 of EUCC-3110-2026-2500173-01 Certification Report, 12 August 2026
[PP] Security IC Platform Protection Profile with Augmentation Packages, Version 2.0,
16 December 2026, registered under the reference BSI-CC-PP-0084-V2-2026
[SotA_AAPS] EUCC SCHEME STATE-OF-THE-ART DOCUMENT Application of Attack
Potential to Smartcards and Similar Devices, Version 2, February 2025
[SotA_COMP] EUCC SCHEME STATE-OF-THE-ART DOCUMENT Composite product
evaluation and certification for CC: 2022 Version 1, February 2025
[SotA_CC_IC] EUCC SCHEME STATE-OF-THE-ART DOCUMENT Application of Common
Criteria to integrated circuits Version 2.0, December 2024
[SotA_SARC] EUCC SCHEME STATE-OF-THE-ART DOCUMENT Security Architecture
requirements (ADV_ARC) for smart cards and similar devices extended to Secure
Sub Systems in SoCs, version 1.1, October 2023.
[SotA_STAR] EUCC SCHEME STATE-OF-THE-ART DOCUMENT, STAR methodology, version
1, February 2025.
[ST] NXP NSN4XX2M0 Series - Secure Element, Security Target, Revision 1.4, 27
April 2026.
[ST-lite] NXP NSN4XX2M0 Series Secure Element Security Target Lite, Revision 1.4, 27
April 2026.
[ST-SAN] Sanitization of a security target for publication, [EUCC] Annex V section V.2
ST sanitising for publication, CC Supporting Document CCDB-2006-04-004, April
2006
(This is the end of this report.)