{
"_type": "sec_certs.sample.cc.CCCertificate",
"category": "ICs, Smart Cards and Smart Card-Related Devices and Systems",
"cert_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1076c_pdf.pdf",
"dgst": "bf65789ff15eff6f",
"heuristics": {
"_type": "sec_certs.sample.cc_eucc_common.Heuristics",
"annotated_references": null,
"cert_id": "BSI-DSZ-CC-1076-2020",
"cert_lab": [
"BSI"
],
"cpe_matches": null,
"direct_transitive_cves": null,
"eal": "EAL4+",
"extracted_sars": {
"_type": "Set",
"elements": [
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ALC_LCD",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ALC_TAT",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ALC_FLR",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ALC_CMC",
"level": 4
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ALC_DEL",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ALC_DVS",
"level": 2
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ADV_ARC",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ALC_CMS",
"level": 4
}
]
},
"extracted_versions": {
"_type": "Set",
"elements": [
"3.7"
]
},
"indirect_transitive_cves": null,
"next_certificates": null,
"prev_certificates": null,
"protection_profiles": {
"_type": "Set",
"elements": [
"60455fc9564e2545"
]
},
"related_cves": null,
"report_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": {
"_type": "Set",
"elements": [
"BSI-DSZ-CC-1110-V3-2020"
]
},
"indirectly_referenced_by": null,
"indirectly_referencing": {
"_type": "Set",
"elements": [
"BSI-DSZ-CC-1110-V2-2019",
"BSI-DSZ-CC-0891-2015",
"BSI-DSZ-CC-0945-2017",
"BSI-DSZ-CC-0891-V2-2016",
"BSI-DSZ-CC-0945-V3-2018",
"BSI-DSZ-CC-1110-V3-2020",
"BSI-DSZ-CC-1110-2019",
"BSI-DSZ-CC-0782-2012",
"BSI-DSZ-CC-0945-V2-2018"
]
}
},
"scheme_data": null,
"st_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": {
"_type": "Set",
"elements": [
"BSI-DSZ-CC-1110-V3-2020"
]
},
"indirectly_referenced_by": null,
"indirectly_referencing": {
"_type": "Set",
"elements": [
"BSI-DSZ-CC-1110-V3-2020"
]
}
},
"verified_cpe_matches": null
},
"maintenance_updates": {
"_type": "Set",
"elements": []
},
"manufacturer": "G+D Mobile Security GmbH",
"manufacturer_web": "https://www.gi-de.com/de/de/mobile-security/",
"name": "STARCOS 3.7 ID eAT BAC C1, STARCOS 3.7 ID ePass BAC C1",
"not_valid_after": "2025-08-18",
"not_valid_before": "2020-08-18",
"pdf_data": {
"_type": "sec_certs.sample.cc_eucc_common.PdfData",
"cert_filename": "1076c_pdf.pdf",
"cert_frontpage": null,
"cert_keywords": {
"asymmetric_crypto": {},
"cc_cert_id": {
"DE": {
"BSI-DSZ-CC-1076-2020": 1
}
},
"cc_claims": {},
"cc_protection_profile_id": {
"BSI": {
"BSI-CC-PP- 0055-2009": 1
}
},
"cc_sar": {
"ALC": {
"ALC_DVS.2": 1
}
},
"cc_security_level": {
"EAL": {
"EAL 2": 1,
"EAL 4": 1,
"EAL 4 augmented": 1,
"EAL 5": 1
}
},
"cc_sfr": {},
"certification_process": {},
"cipher_mode": {},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {},
"crypto_scheme": {},
"device_model": {},
"ecc_curve": {},
"eval_facility": {},
"hash_function": {},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {
"STARCOS": {
"STARCOS 3": 2
}
},
"pq_crypto": {},
"randomness": {},
"side_channel_analysis": {},
"standard_id": {
"ICAO": {
"ICAO": 1
},
"ISO": {
"ISO/IEC 15408": 2,
"ISO/IEC 18045": 2
}
},
"symmetric_crypto": {},
"technical_report_id": {},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {
"GD": {
"Giesecke+Devrient": 1
}
},
"vulnerability": {}
},
"cert_metadata": {
"/Author": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"/CreationDate": "D:20200821064941+02\u002700\u0027",
"/Creator": "Writer",
"/Keywords": "Common Criteria, Certification, Zertifizierung, STARCOS 3.7, BAC, MRTD",
"/ModDate": "D:20200821065058+02\u002700\u0027",
"/Producer": "LibreOffice 6.2",
"/Subject": "STARCOS 3.7 ID eAT BAC C1, STARCOS 3.7 ID ePass BAC C1",
"/Title": "Certificate BSI-DSZ-CC-1076-2020",
"pdf_file_size_bytes": 298425,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 1
},
"report_filename": "1076a_pdf.pdf",
"report_frontpage": {
"DE": {
"cc_security_level": "Common Criteria Part 3 conformant EAL 4 augmented by ALC_DVS.2",
"cc_version": "PP conformant Common Criteria Part 2 extended",
"cert_id": "BSI-DSZ-CC-1076-2020",
"cert_item": "STARCOS 3.7 ID eAT BAC C1, STARCOS 3.7 ID ePass BAC C1",
"cert_lab": "BSI",
"developer": "Giesecke+Devrient Mobile Security GmbH",
"match_rules": [
"(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)"
],
"ref_protection_profiles": "Common Criteria Protection Profile Machine Readable Travel Document with \"ICAO Application\" Basic Access Control, Version 1.10, 25 March 2009, BSI-CC-PP- 0055-2009"
}
},
"report_keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 1
},
"ECDH": {
"ECDH": 1
},
"ECIES": {
"ECIES": 2
}
},
"FF": {
"DH": {
"Diffie-Hellman": 1
}
}
},
"cc_cert_id": {
"DE": {
"BSI-DSZ-CC-1076-2020": 22,
"BSI-DSZ-CC-1077": 5,
"BSI-DSZ-CC-1110-V3-": 3,
"BSI-DSZ-CC-1110-V3-2020": 5,
"BSI-DSZ-CC-S-0132-2019": 1,
"BSI-DSZ-CC-S-0143-2019": 2,
"BSI-DSZ-CC-S-0150-2020": 2,
"BSI-DSZ-CC-S-0152-2020": 1
}
},
"cc_claims": {
"A": {
"A.U": 2
}
},
"cc_protection_profile_id": {
"BSI": {
"BSI-CC-PP- 0055-2009": 1,
"BSI-PP-0055-": 1,
"BSI-PP-0055-2009": 1
}
},
"cc_sar": {
"ADV": {
"ADV_ARC": 1
},
"ALC": {
"ALC_CMC.4": 1,
"ALC_CMS.4": 1,
"ALC_DEL.1": 1,
"ALC_DVS.2": 5,
"ALC_FLR": 2,
"ALC_LCD.1": 1,
"ALC_TAT.1": 1
}
},
"cc_security_level": {
"EAL": {
"EAL 1": 1,
"EAL 2": 2,
"EAL 2+": 1,
"EAL 4": 5,
"EAL 4 augmented": 3,
"EAL 5": 4,
"EAL 5+": 1,
"EAL 6": 1,
"EAL5+": 1,
"EAL6": 1
}
},
"cc_sfr": {
"FCS": {
"FCS_CKM.1": 1,
"FCS_COP": 8,
"FCS_RND.1": 1
},
"FDP": {
"FDP_UIT.1": 1
},
"FIA": {
"FIA_AFL.1": 1,
"FIA_UAU.4": 1
}
},
"certification_process": {
"ConfidentialDocument": {
"3.7 ID ePass BAC C1, Version 0.2, 12 August 2020, Giesecke+Devrient Mobile Security GmbH (confidential document) [11] Guidance Documentation STARCOS 3.7 ID C1 \u2013 Main Document, Version 1.01, 21 July 2020": 1,
"H13, Revision 3.3, 22 April 2020, Infineon Technologies AG, BSI-DSZ-CC-1110-V3- 2020 (confidential document) Security Target Lite of the underlying hardware platform, Common Criteria Public Security Target": 1,
"STARCOS 3.7 ID ePass BAC C1, Version 1.2, 13 August 2020, SRC Security Research \u0026 Consulting GmbH (confidential document) [10] Configuration List BSI-DSZ-CC-1076-2020, Configuration List STARCOS 3.7 ID eAT BAC C1": 1,
"STARCOS 3.7 ID ePass BAC C1, Version 1.5, 12 August 2020, Giesecke+Devrient Mobile Security GmbH (confidential document) [7] Security Target Lite BSI-DSZ-CC-1076-2020, Security Target Lite STARCOS 3.7 ID eAT BAC C1": 1,
"being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification": 1,
"procedure BSI-DSZ-CC-1110-V3-2020, Version 1, 23 April 2020, T\u00dcV Informationstechnik GmbH (confidential document) [19] Technical Guideline BSI TR-03110: Advanced Security Mechanisms for Machine Readable Travel": 1
}
},
"cipher_mode": {
"CBC": {
"CBC": 5
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"PACE": {
"PACE": 3
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 1
},
"MAC": {
"MAC": 2
}
},
"device_model": {},
"ecc_curve": {},
"eval_facility": {
"SRC": {
"SRC Security Research \u0026 Consulting": 3
},
"TUV": {
"T\u00dcV Informationstechnik": 1
}
},
"hash_function": {
"SHA": {
"SHA1": {
"SHA-1": 3
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {
"STARCOS": {
"STARCOS 3": 56
}
},
"pq_crypto": {},
"randomness": {
"RNG": {
"RNG": 2
}
},
"side_channel_analysis": {
"FI": {
"fault injection": 1,
"malfunction": 1,
"physical tampering": 1
},
"SCA": {
"side channel": 1
},
"other": {
"JIL": 5
}
},
"standard_id": {
"BSI": {
"AIS 1": 1,
"AIS 14": 1,
"AIS 19": 1,
"AIS 20": 3,
"AIS 23": 1,
"AIS 25": 4,
"AIS 26": 4,
"AIS 31": 3,
"AIS 32": 1,
"AIS 34": 4,
"AIS 35": 2,
"AIS 36": 3,
"AIS 37": 2,
"AIS 38": 1,
"AIS 46": 2,
"AIS20": 2,
"AIS31": 2
},
"FIPS": {
"FIPS PUB 180-4": 1,
"FIPS PUB 197": 1,
"FIPS PUB 46-3": 1,
"FIPS180": 3,
"FIPS197": 2,
"FIPS46-3": 4
},
"ICAO": {
"ICAO": 19
},
"ISO": {
"ISO/IEC 15408": 4,
"ISO/IEC 17065": 2,
"ISO/IEC 18031:2005": 1,
"ISO/IEC 18045": 4
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 5
}
},
"DES": {
"3DES": {
"3DES": 4,
"TDES": 2
},
"DES": {
"DES": 4
}
},
"constructions": {
"MAC": {
"CMAC": 1
}
}
},
"technical_report_id": {
"BSI": {
"BSI 7148": 1,
"BSI TR-02102-1": 1,
"BSI TR-03110": 1,
"BSI TR-03116": 4,
"BSI TR-03116-2": 2
}
},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {
"GD": {
"Giesecke+Devrient": 24
},
"Infineon": {
"Infineon": 9,
"Infineon Technologies AG": 7
}
},
"vulnerability": {}
},
"report_metadata": {
"/Author": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"/CreationDate": "D:20200821063851+02\u002700\u0027",
"/Creator": "Writer",
"/Keywords": "\"Common Criteria, Certification, Zertifizierung, STARCOS 3.7, BAC, MRTD\"",
"/ModDate": "D:20200821131000+02\u002700\u0027",
"/Producer": "LibreOffice 6.2",
"/Subject": "STARCOS 3.7 ID eAT BAC C1, STARCOS 3.7 ID ePass BAC C1",
"/Title": "Certification Report BSI-DSZ-CC-1076-2020",
"pdf_file_size_bytes": 476034,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://www.bsi.bund.de/zertifizierung",
"http://www.commoncriteriaportal.org/",
"https://www.bsi.bund.de/",
"https://www.sogis.eu/",
"https://www.bsi.bund.de/zertifizierungsreporte",
"https://www.bsi.bund.de/AIS",
"http://www.commoncriteriaportal.org/cc/"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 33
},
"st_filename": "1076b_pdf.pdf",
"st_frontpage": null,
"st_keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDSA": {
"ECDSA": 1
}
}
},
"cc_cert_id": {
"DE": {
"BSI-DSZ-CC-1110-V3-2020": 1
}
},
"cc_claims": {
"O": {
"O.MEM_ACCESS": 1,
"O.RND": 3
},
"T": {
"T.RND": 3
}
},
"cc_protection_profile_id": {
"BSI": {
"BSI-CC-PP-0056-2009": 1,
"BSI-PP- 0035-2007": 1,
"BSI-PP-0002-2001": 1
}
},
"cc_sar": {
"ADV": {
"ADV_ARC.1": 2
},
"ALC": {
"ALC_DVS": 1,
"ALC_DVS.2": 6,
"ALC_FLR.1": 1
}
},
"cc_security_level": {
"EAL": {
"EAL 4": 2,
"EAL 6": 2,
"EAL4": 8,
"EAL4 augmented": 2,
"EAL6": 1
}
},
"cc_sfr": {
"FAU": {
"FAU_GEN": 1,
"FAU_SAS": 5,
"FAU_SAS.1": 16,
"FAU_SAS.1.1": 2,
"FAU_UAU.4": 1
},
"FCS": {
"FCS_CKM.1": 25,
"FCS_CKM.1.1": 1,
"FCS_CKM.2": 1,
"FCS_CKM.4": 21,
"FCS_CKM.4.1": 1,
"FCS_COP": 36,
"FCS_COP.1": 18,
"FCS_FLS.1": 1,
"FCS_RND": 5,
"FCS_RND.1": 16,
"FCS_RND.1.1": 2,
"FCS_RNG.1": 3
},
"FDP": {
"FDP_ACC": 1,
"FDP_ACC.1": 19,
"FDP_ACC.1.1": 1,
"FDP_ACF": 2,
"FDP_ACF.1": 12,
"FDP_ACF.1.1": 1,
"FDP_ACF.1.2": 2,
"FDP_ACF.1.3": 1,
"FDP_ACF.1.4": 2,
"FDP_IFC.1": 5,
"FDP_ITC": 2,
"FDP_ITC.1": 10,
"FDP_ITC.2": 10,
"FDP_ITT.1": 1,
"FDP_SDI.1": 1,
"FDP_SDI.2": 1,
"FDP_UCT.1": 10,
"FDP_UCT.1.1": 1,
"FDP_UIT.1": 8,
"FDP_UIT.1.1": 1,
"FDP_UIT.1.2": 1
},
"FIA": {
"FIA_AFL.1": 7,
"FIA_AFL.1.1": 1,
"FIA_AFL.1.2": 1,
"FIA_API.1": 1,
"FIA_SOS.2": 1,
"FIA_UAU.1": 9,
"FIA_UAU.1.1": 1,
"FIA_UAU.1.2": 1,
"FIA_UAU.4": 14,
"FIA_UAU.4.1": 1,
"FIA_UAU.5": 10,
"FIA_UAU.5.1": 1,
"FIA_UAU.5.2": 4,
"FIA_UAU.6": 10,
"FIA_UAU.6.1": 1,
"FIA_UID.1": 11,
"FIA_UID.1.1": 1,
"FIA_UID.1.2": 1
},
"FMT": {
"FMT_LIM": 12,
"FMT_LIM.1": 26,
"FMT_LIM.1.1": 3,
"FMT_LIM.2": 22,
"FMT_LIM.2.1": 4,
"FMT_MSA.1": 2,
"FMT_MSA.3": 4,
"FMT_MTD": 22,
"FMT_MTD.1": 7,
"FMT_SMF.1": 22,
"FMT_SMF.1.1": 1,
"FMT_SMR.1": 21,
"FMT_SMR.1.1": 1,
"FMT_SMR.1.2": 1
},
"FPT": {
"FPT_FLS.1": 17,
"FPT_FLS.1.1": 1,
"FPT_ITT.1": 1,
"FPT_PHP.3": 15,
"FPT_PHP.3.1": 1,
"FPT_RVM.1": 1,
"FPT_SEP.1": 1,
"FPT_TST": 1,
"FPT_TST.1": 12,
"FPT_TST.1.1": 1,
"FPT_TST.1.2": 1,
"FPT_TST.1.3": 2,
"FPT_TST.2": 4
},
"FRU": {
"FRU_FLT.2": 3
},
"FTP": {
"FTP_ITC.1": 6,
"FTP_TRP.1": 5
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 1
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {},
"crypto_scheme": {
"MAC": {
"MAC": 4
}
},
"device_model": {},
"ecc_curve": {},
"eval_facility": {},
"hash_function": {
"SHA": {
"SHA1": {
"SHA-1": 3
}
}
},
"ic_data_group": {
"EF": {
"EF.COM": 12,
"EF.DG1": 33,
"EF.DG13": 3,
"EF.DG14": 3,
"EF.DG15": 1,
"EF.DG16": 32,
"EF.DG2": 11,
"EF.DG3": 11,
"EF.DG4": 10,
"EF.DG5": 9,
"EF.SOD": 12
}
},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {
"STARCOS": {
"STARCOS 3": 190
}
},
"pq_crypto": {},
"randomness": {
"RNG": {
"RND": 7,
"RNG": 8
}
},
"side_channel_analysis": {
"FI": {
"Malfunction": 13,
"Physical Tampering": 5,
"Physical tampering": 1,
"fault injection": 1,
"malfunction": 6,
"physical tampering": 6
},
"SCA": {
"DPA": 2,
"Leak-Inherent": 6,
"SPA": 1,
"physical probing": 3,
"timing attacks": 1
},
"other": {
"reverse engineering": 1
}
},
"standard_id": {
"BSI": {
"AIS 20": 1,
"AIS 31": 1,
"AIS 32": 1,
"AIS20": 1
},
"CC": {
"CCMB-2017-04-001": 2,
"CCMB-2017-04-002": 2,
"CCMB-2017-04-003": 2,
"CCMB-2017-04-004": 2
},
"FIPS": {
"FIPS 180-2": 1,
"FIPS 180-415": 1,
"FIPS 197": 2,
"FIPS 46-3": 2,
"FIPS PUB 186-2": 1,
"FIPS PUB 46-3": 1
},
"ICAO": {
"ICAO": 14
},
"ISO": {
"ISO/IEC 14443": 2,
"ISO/IEC 7816-2": 1,
"ISO/IEC 7816-4": 1
},
"RFC": {
"RFC3369": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 8
}
},
"DES": {
"3DES": {
"Triple-DES": 10
},
"DES": {
"DES": 5
}
},
"constructions": {
"MAC": {
"KMAC": 1
}
}
},
"technical_report_id": {},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {
"GD": {
"Giesecke+Devrient": 8
},
"Infineon": {
"Infineon": 2,
"Infineon Technologies AG": 1
}
},
"vulnerability": {}
},
"st_metadata": {
"/Author": "Ulrich Stutenb\u00e4umer, Giesecke + Devrient Mobile Security GmbH",
"/CreationDate": "D:20200813110600+02\u002700\u0027",
"/Creator": "Microsoft\u00ae Word f\u00fcr Office 365",
"/Keywords": "smartcard programmed on a contactless chip for machine readable travel documents (MRTD) based on the requirements and recommendations of the International Civil Aviation Organization (ICAO). It addresses the advanced security methods Basic Access Control in the \u2018ICAO Doc 9303\u2019. Version 1.5/Status 12.08.2020",
"/ModDate": "D:20200813111747+02\u002700\u0027",
"/Producer": "Microsoft\u00ae Word f\u00fcr Office 365",
"/Subject": "Target of Evaluation = STARCOS 3.7 ID eAT BAC C1, STARCOS 3.7 ID ePass BAC C1",
"/Title": "Security Target Lite",
"pdf_file_size_bytes": 976160,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 88
}
},
"protection_profile_links": {
"_type": "Set",
"elements": [
"https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0055b.pdf"
]
},
"report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1076a_pdf.pdf",
"scheme": "DE",
"security_level": {
"_type": "Set",
"elements": [
"ALC_DVS.2",
"EAL4+"
]
},
"st_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1076b_pdf.pdf",
"state": {
"_type": "sec_certs.sample.cc_eucc_common.InternalState",
"cert": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": "720a97a349d8c6cac309ad5b10cd1fce597a84202f082647a119608330642c16",
"txt_hash": "5a05b94f237b46707fcbec4948fe9aab8285f6476185941f036b6df918df9921"
},
"report": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": "7f12b09dee42fb29a9cfb85f6619b1992e689767a5e1f983f875c3dade6ccb85",
"txt_hash": "79b30fa5296033604c81414b86fbb22f48a1ca6f0a8f42c8aeca87800942afee"
},
"st": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": "970d564f830c6d0266fa2d16e6d89a8f74d69ed3a9f057bd70d14e3e61d4a454",
"txt_hash": "5e76dfce19dbdb02ed52b63a9dedd9dcbc3162893ef9b9194f56ccc4c3f48e01"
}
},
"status": "archived"
}