{
"_type": "sec_certs.sample.eucc.EUCCCertificate",
"category": "SMARTCARDS AND SIMILAR DEVICES",
"cert_id": "EUCC-3090-2026-000044-I-00",
"cert_link": "https://certification.enisa.europa.eu/document/download/faf9fb95-8eb6-4bd4-a943-9b87861158ce_en?filename=EUCC-3090-2026-44-certificat.pdf",
"dgst": "1168adbc9a33630e",
"heuristics": {
"_type": "sec_certs.sample.cc_eucc_common.Heuristics",
"annotated_references": null,
"cert_id": "EUCC-3090-2026-44",
"cert_lab": null,
"cpe_matches": null,
"direct_transitive_cves": null,
"eal": "EAL4",
"extracted_sars": {
"_type": "Set",
"elements": [
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ASE_INT",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ASE_CCL",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "AGD_OPE",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ATE_FUN",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ATE_DPT",
"level": 3
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ATE_COV",
"level": 2
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ALC_TAT",
"level": 2
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ADV_ARC",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ADV_FSP",
"level": 5
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ALC_DVS",
"level": 2
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ALC_DEL",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ASE_APD",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ALC_CMC",
"level": 4
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ALC_LCD",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "AVA_VAN",
"level": 5
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ADV_IMP",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ADV_TDS",
"level": 4
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ALC_CMS",
"level": 5
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ATE_IND",
"level": 2
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ASE_OBJ",
"level": 2
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ASE_SPD",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ASE_REQ",
"level": 2
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ASE_ECD",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "AGD_PRE",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ASE_TSS",
"level": 1
},
{
"_type": "sec_certs.sample.sar.SAR",
"family": "ADV_INT",
"level": 2
}
]
},
"extracted_versions": {
"_type": "Set",
"elements": [
"9.2",
"2.2",
"2.1"
]
},
"indirect_transitive_cves": null,
"next_certificates": null,
"prev_certificates": null,
"protection_profiles": null,
"related_cves": null,
"report_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"scheme_data": null,
"st_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"verified_cpe_matches": null
},
"manufacturer": "IN Smart Identity",
"manufacturer_web": "https://ingroupe.com/product/combicao/",
"name": "CombICAO Applet v2.1 and v2.2 in BAC and CA configuration on ID-ONE Cosmo V9.2",
"not_valid_after": "2031-05-26",
"not_valid_before": "2026-05-26",
"other_metadata": {
"_type": "sec_certs.sample.eucc.EUCCCertificate.EnisaMetadata",
"assurance_level": "High",
"ava_van_level": "5",
"cc_version": "CC 3.1 Revision 5",
"cem_version": null,
"certificate_id": "EUCC-3090-2026-000044-I-00",
"certificate_yearly_number": null,
"certification_body": "ANSSI",
"certification_body_address": "Tour Mercure 31 Quai de Grenelle, 75015 Paris",
"certification_body_contact": "[email protected] Phone: +33 (0)1 71 75 82 82",
"holder_address": "2 place Samuel de Champlain, 92400 Courbevoie",
"holder_contact": null,
"holder_name": "IN Smart Identity",
"holder_website": "https://ingroupe.com/product/combicao/",
"issuance_date_full": "26/05/2026",
"issuance_month": "5",
"issuance_year": "2026",
"itsef": "CEA-LETI",
"modification_or_reassurance": null,
"nando_id": "3090",
"package": {
"EAL4": [
"ALC_DVS.2",
"ADV_FSP.5",
"ADV_INT.2",
"ADV_TDS.4",
"ALC_CMS.5",
"ALC_TAT.2",
"ATE_DPT.3"
]
},
"product_description": "The product evaluated is a smart card that can be used in both contact and contactless modes. It implements electronic travel document functions in accordance with the specifications of the International Civil Aviation Organization (ICAO). This product is designed to verify the authenticity of the travel document and identify its bearer during border control using an inspection system. This microcontroller and its embedded software are designed to be inserted into the cover of traditional passports, into an eCover, or into an eDatapage. The final product can take various forms, such as a card or a module.",
"product_name": "CombICAO Applet v2.1 and v2.2 in BAC and CA configuration on ID-ONE Cosmo V9.2",
"product_type": "Smartcards and similar devices",
"product_version": "ref. v2.1 : 203523 + CodeOP 096091, ref. v2.2 : 203731",
"protection_profile": "[PP-BAC] : BSI-CC-PP-0055-2009",
"report_reference": null,
"responsible_ncca": "Agence nationale de la s\u00e9curit\u00e9 des syst\u00e8mes d\u2019information",
"scheme": "(UE) 2024/482 - EUCC",
"validity_period_years": "5 years"
},
"pdf_data": {
"_type": "sec_certs.sample.cc_eucc_common.PdfData",
"cert_filename": "faf9fb95-8eb6-4bd4-a943-9b87861158ce_en",
"cert_frontpage": null,
"cert_keywords": {
"asymmetric_crypto": {},
"cc_cert_id": {
"FR": {
"EUCC-3090-2026-44": 2
}
},
"cc_claims": {},
"cc_protection_profile_id": {
"BSI": {
"BSI-CC-PP-0055-2009": 1
}
},
"cc_sar": {
"ADV": {
"ADV_FSP.5": 1,
"ADV_INT.2": 1,
"ADV_TDS.4": 1
},
"ALC": {
"ALC_CMS.5": 1,
"ALC_DVS.2": 1,
"ALC_TAT.2": 1
},
"ATE": {
"ATE_DPT.3": 1
}
},
"cc_security_level": {
"EAL": {
"EAL2": 1,
"EAL4": 1
}
},
"cc_sfr": {},
"certification_process": {},
"cipher_mode": {},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {},
"crypto_scheme": {},
"device_model": {},
"ecc_curve": {},
"eval_facility": {},
"hash_function": {},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {},
"side_channel_analysis": {},
"standard_id": {
"ISO": {
"ISO/IEC 18045:2008": 2
}
},
"symmetric_crypto": {},
"technical_report_id": {},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"cert_metadata": {
"/CreationDate": "D:20260522151653+02\u002700\u0027",
"/Creator": "Acrobat PDFMaker 26 pour Word",
"/ModDate": "D:20260527070955+00\u002700\u0027",
"/Producer": "Docusign DMv10",
"pdf_file_size_bytes": 354565,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://ingroupe.com/psirt/",
"https://cyber.gouv.fr/",
"https://cyber.gouv.fr/cybersecurity-act",
"https://ingroupe.com/product/combicao/",
"mailto:[email protected]"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 2
},
"report_filename": null,
"report_frontpage": null,
"report_keywords": null,
"report_metadata": null,
"st_filename": "2debd5c5-5162-4cfd-b325-1f41ea65a05d_en",
"st_frontpage": null,
"st_keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDH": {
"ECDH": 2
},
"ECDSA": {
"ECDSA": 2
}
},
"FF": {
"DH": {
"Diffie-Hellman": 4
}
}
},
"cc_cert_id": {
"FR": {
"ANSSI-CC-2020/08-R01": 1
}
},
"cc_claims": {},
"cc_protection_profile_id": {
"BSI": {
"BSI-CC-PP-0055": 1,
"BSI-PP-0002-2001": 1,
"BSI-PP-0035-2007": 1,
"BSI-PP-0055": 1,
"BSI-PP-0056": 1
}
},
"cc_sar": {
"ADV": {
"ADV_ARC": 1,
"ADV_ARC.1": 15,
"ADV_FSP": 1,
"ADV_FSP.1": 3,
"ADV_FSP.2": 2,
"ADV_FSP.4": 1,
"ADV_FSP.5": 27,
"ADV_IMP": 1,
"ADV_IMP.1": 15,
"ADV_INT": 1,
"ADV_INT.2": 12,
"ADV_TDS": 1,
"ADV_TDS.1": 2,
"ADV_TDS.3": 3,
"ADV_TDS.4": 28
},
"AGD": {
"AGD_OPE": 1,
"AGD_OPE.1": 15,
"AGD_PRE": 1,
"AGD_PRE.1": 11
},
"ALC": {
"ALC_CMC": 1,
"ALC_CMC.4": 16,
"ALC_CMS": 1,
"ALC_CMS.1": 1,
"ALC_CMS.5": 12,
"ALC_DEL": 1,
"ALC_DEL.1": 6,
"ALC_DVS": 1,
"ALC_DVS.1": 1,
"ALC_DVS.2": 22,
"ALC_LCD": 1,
"ALC_LCD.1": 9,
"ALC_SCT": 1,
"ALC_STM": 1,
"ALC_TAT": 1,
"ALC_TAT.1": 2,
"ALC_TAT.2": 17
},
"APE": {
"APE_SRE": 1
},
"ASE": {
"ASE_APD.1": 1,
"ASE_CCL": 1,
"ASE_CCL.1": 15,
"ASE_ECD": 1,
"ASE_ECD.1": 14,
"ASE_INT": 1,
"ASE_INT.1": 17,
"ASE_OBJ": 1,
"ASE_OBJ.2": 13,
"ASE_REQ": 1,
"ASE_REQ.1": 2,
"ASE_REQ.2": 15,
"ASE_SPD": 1,
"ASE_SPD.1": 8,
"ASE_TSS": 1,
"ASE_TSS.1": 6
},
"ATE": {
"ATE_COV": 1,
"ATE_COV.1": 2,
"ATE_COV.2": 8,
"ATE_DPT": 1,
"ATE_DPT.1": 1,
"ATE_DPT.3": 12,
"ATE_FUN": 1,
"ATE_FUN.1": 15,
"ATE_IND": 1,
"ATE_IND.2": 7
},
"AVA": {
"AVA_VAN": 8,
"AVA_VAN.3": 10,
"AVA_VAN.5": 6
}
},
"cc_security_level": {
"EAL": {
"EAL4": 8,
"EAL4 augmented": 2,
"EAL4+": 6,
"EAL5": 7,
"EAL5+": 12
}
},
"cc_sfr": {
"FAU": {
"FAU_GEN": 1,
"FAU_SAS": 4,
"FAU_SAS.1": 11,
"FAU_SAS.1.1": 3
},
"FCS": {
"FCS_CKM": 54,
"FCS_CKM.1": 23,
"FCS_CKM.1.1": 1,
"FCS_CKM.2": 3,
"FCS_CKM.4": 49,
"FCS_CKM.4.1": 2,
"FCS_COP": 153,
"FCS_COP.1": 30,
"FCS_RND": 2,
"FCS_RND.1": 34,
"FCS_RND.1.1": 3
},
"FDP": {
"FDP_ACC": 35,
"FDP_ACC.1": 12,
"FDP_ACC.1.1": 1,
"FDP_ACF": 35,
"FDP_ACF.1": 21,
"FDP_ACF.1.1": 1,
"FDP_ACF.1.2": 1,
"FDP_ACF.1.3": 1,
"FDP_ACF.1.4": 1,
"FDP_DAU": 10,
"FDP_DAU.1": 2,
"FDP_IFC.1": 5,
"FDP_ITC": 16,
"FDP_ITC.1": 18,
"FDP_ITC.2": 15,
"FDP_UCT": 26,
"FDP_UCT.1": 5,
"FDP_UCT.1.1": 1,
"FDP_UIT": 26,
"FDP_UIT.1": 10,
"FDP_UIT.1.1": 1,
"FDP_UIT.1.2": 1
},
"FIA": {
"FIA_AFL": 22,
"FIA_AFL.1": 8,
"FIA_AFL.1.1": 1,
"FIA_AFL.1.2": 1,
"FIA_API": 11,
"FIA_API.1": 6,
"FIA_API.1.1": 1,
"FIA_UAU": 75,
"FIA_UAU.1": 16,
"FIA_UAU.1.1": 2,
"FIA_UAU.1.2": 2,
"FIA_UAU.4": 19,
"FIA_UAU.4.1": 2,
"FIA_UAU.5": 13,
"FIA_UAU.5.1": 1,
"FIA_UAU.5.2": 1,
"FIA_UAU.6": 7,
"FIA_UAU.6.1": 1,
"FIA_UID.1": 14,
"FIA_UID.1.1": 2,
"FIA_UID.1.2": 2
},
"FMT": {
"FMT_LIM": 4,
"FMT_LIM.1": 17,
"FMT_LIM.1.1": 3,
"FMT_LIM.2": 15,
"FMT_LIM.2.1": 3,
"FMT_MOF": 18,
"FMT_MOF.1": 4,
"FMT_MSA.1": 3,
"FMT_MSA.3": 9,
"FMT_MTD": 99,
"FMT_MTD.1": 21,
"FMT_SMF.1": 38,
"FMT_SMF.1.1": 2,
"FMT_SMR.1": 40,
"FMT_SMR.1.1": 2,
"FMT_SMR.1.2": 2
},
"FPT": {
"FPT_EMS": 4,
"FPT_EMS.1": 19,
"FPT_EMS.1.1": 4,
"FPT_EMS.1.2": 4,
"FPT_FLS.1": 16,
"FPT_FLS.1.1": 2,
"FPT_PHP.3": 16,
"FPT_PHP.3.1": 2,
"FPT_TST.1": 11,
"FPT_TST.1.1": 2,
"FPT_TST.1.2": 2,
"FPT_TST.1.3": 2
},
"FTP": {
"FTP_ITC": 12,
"FTP_ITC.1": 18,
"FTP_TRP.1": 12
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 9
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"PACE": {
"PACE": 3
}
},
"crypto_scheme": {
"KA": {
"Key agreement": 1
},
"MAC": {
"MAC": 7
}
},
"device_model": {},
"ecc_curve": {},
"eval_facility": {},
"hash_function": {
"SHA": {
"SHA1": {
"SHA-1": 5,
"SHA1": 4
},
"SHA2": {
"SHA-224": 1,
"SHA-256": 2,
"SHA2": 2
}
}
},
"ic_data_group": {
"EF": {
"EF.COM": 13,
"EF.DG1": 29,
"EF.DG13": 2,
"EF.DG14": 5,
"EF.DG15": 1,
"EF.DG16": 29,
"EF.DG2": 8,
"EF.DG3": 8,
"EF.DG4": 8,
"EF.DG5": 8,
"EF.SOD": 12
}
},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {},
"side_channel_analysis": {
"FI": {
"Malfunction": 7,
"Physical Tampering": 6,
"Physical tampering": 1,
"fault injection": 1,
"malfunction": 6,
"physical tampering": 2
},
"SCA": {
"DPA": 2,
"SPA": 1,
"physical probing": 3,
"timing attacks": 1
},
"other": {
"reverse engineering": 1
}
},
"standard_id": {
"CC": {
"CCMB-2017-04-004": 1
},
"FIPS": {
"FIPS 186-3": 1,
"FIPS 197": 1,
"FIPS 46-3": 1,
"FIPS PUB 180-3": 1,
"FIPS PUB 197": 1
},
"ICAO": {
"ICAO": 13
},
"ISO": {
"ISO/IEC 11770-2": 1,
"ISO/IEC 14443": 2,
"ISO/IEC 18013": 6,
"ISO/IEC 7816-4": 1,
"ISO/IEC 9796-2": 1,
"ISO/IEC 9797-1": 1
},
"PKCS": {
"PKCS#3": 2
},
"RFC": {
"RFC3369": 1
},
"SCP": {
"SCP02": 1,
"SCP03": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 13
}
},
"DES": {
"3DES": {
"3DES": 2,
"TDES": 1,
"Triple-DES": 11
},
"DES": {
"DES": 6
}
},
"constructions": {
"MAC": {
"CMAC": 3,
"KMAC": 2
}
}
},
"technical_report_id": {},
"tee_name": {
"IBM": {
"SSC": 1
}
},
"tls_cipher_suite": {},
"vendor": {
"Idemia": {
"IDEMIA": 5
},
"Infineon": {
"Infineon": 2
}
},
"vulnerability": {}
},
"st_metadata": {
"/Author": "Shubham SAGAR",
"/CreationDate": "D:20260119150404+01\u002700\u0027",
"/Creator": "Microsoft\u00ae Word pour Microsoft 365",
"/MSIP_Label_431684b1-a5da-4051-9fb4-5631703e02d5_ActionId": "981bcf45-1d81-4b65-9621-14ba15310317",
"/MSIP_Label_431684b1-a5da-4051-9fb4-5631703e02d5_Application": "Microsoft Azure Information Protection",
"/MSIP_Label_431684b1-a5da-4051-9fb4-5631703e02d5_Enabled": "True",
"/MSIP_Label_431684b1-a5da-4051-9fb4-5631703e02d5_Extended_MSFT_Method": "Automatic",
"/MSIP_Label_431684b1-a5da-4051-9fb4-5631703e02d5_Name": "Public",
"/MSIP_Label_431684b1-a5da-4051-9fb4-5631703e02d5_Owner": "[email protected]",
"/MSIP_Label_431684b1-a5da-4051-9fb4-5631703e02d5_SetDate": "2019-10-17T08:28:25.0038689Z",
"/MSIP_Label_431684b1-a5da-4051-9fb4-5631703e02d5_SiteId": "7694d41c-5504-43d9-9e40-cb254ad755ec",
"/MSIP_Label_9d900cae-8562-48ba-b9f0-7d683a8ec459_ActionId": "cce2b725-4571-4ab1-9646-1a967a4f16a0",
"/MSIP_Label_9d900cae-8562-48ba-b9f0-7d683a8ec459_ContentBits": "0",
"/MSIP_Label_9d900cae-8562-48ba-b9f0-7d683a8ec459_Enabled": "true",
"/MSIP_Label_9d900cae-8562-48ba-b9f0-7d683a8ec459_Method": "Privileged",
"/MSIP_Label_9d900cae-8562-48ba-b9f0-7d683a8ec459_SiteId": "76eb9ac3-0a27-417b-9e7d-e8eb81f82b62",
"/ModDate": "D:20260505161408+02\u002700\u0027",
"/Producer": "Microsoft\u00ae Word pour Microsoft 365",
"/Title": "Title",
"pdf_file_size_bytes": 2060161,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 121
}
},
"protection_profile_links": null,
"report_link": null,
"scheme": "",
"security_level": {
"_type": "Set",
"elements": [
"EAL4"
]
},
"st_link": "https://certification.enisa.europa.eu/document/download/2debd5c5-5162-4cfd-b325-1f41ea65a05d_en?filename=EUCC-3090-2026-44-cible.pdf",
"state": {
"_type": "sec_certs.sample.cc_eucc_common.InternalState",
"cert": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": "0c7d204ebaaa251411c2b4ca241ecf4d3bbfacc2436aa6ed50ee6b58b1885c8d",
"txt_hash": "f687f1a1ef3b5a507e64d06ab000b7c3a8143eb867dbb7dafb09513ce37b1de4"
},
"report": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": false,
"download_ok": false,
"extract_ok": false,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"st": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": "063ec04c6feff21d7122191760619aec2cf0fc17f8b27a8ef04566e4d82d51c5",
"txt_hash": "235f00b3b7cf980ac27b9d740c2825b578d7b0f50904e994638aaf89c1d58eba"
}
},
"status": "active"
}