CombICAO v3.1 on Cosmo X² (EAC Configuration)

Certificate details

Certificate ID EUCC-3090-2026-03
Product name CombICAO v3.1 on Cosmo X² (EAC Configuration)
Scheme 🇫🇷 FR
Assurance level high
Status active

Product Specification

Type Smartcards and similar devices
Description
The evaluated product is a "smart card" type device that can be used in two modes: contact and contactless. It is intended for use as a secure signatu...
The evaluated product is a "smart card" type device that can be used in two modes: contact and contactless. It is intended for use as a secure signature creation device (SSCD).
Version Applet Code Versions : ’20 38 21 FF’;Applet Internal Version : ’01 03 04 11’
Package EAL5 augmented with ALC_DVS.2 , ALC_FLR.3 , AVA_VAN.5

Certificate holder

Name IN Smart Identity
Address 2 place Samuel de Champlain, 92400 Courbevoie
Contact information N/A
Website https://ingroupe.com/product/combicao/

Certification body

Name ANSSI
NANDO ID 3090
Address Tour Mercure 31 Quai de Grenelle, 75015 Paris
Contact information [email protected] Phone: +33 (0)1 71 75 82 82

Standards & Compliance

CC Version ISO/IEC 15408-1:2009 ISO/IEC 15408-2:2008 ISO/IEC 15408-3:2008
CEM Version N/A
AVA_VAN level 5
Certification report reference N/A

Other

ITSEF Serma Safety and Security SAS
Responsible NCCA Agence nationale de la sécurité des systèmes d’information
Protection profile [PP-EAC] : BSI-CC-PP-0056-2009
Certification date 18.02.2026
Archived date 18.02.2031
Certificate webpage

Certificate

certificate file processing did not finish successfully.
Download pdf: ERROR
Convert pdf to text: ERROR
Extract keywords: ERROR

Certification report

Extracted keywords

Symmetric Algorithms
DES

Vendor
IDEMIA

Security level
EAL5, EAL2
Security Assurance Requirements (SAR)
AGD_PRE, AGD_OPE, ALC_DVS.2, ALC_FLR.3, ALC_FLR, AVA_VAN.5, AVA_VAN
Protection profiles
BSI-CC-PP-0056-2009, BSI-PP-0084-2014
Certificates
ANSSI-CC-2023/37-R01, EUCC-3090-2026-03, NSCIB-CC-2400104-01
Evaluation facilities
SERMA, CESTI

Side-channel analysis
Malfunction

Standards
ICAO, CCMB-2017-04-001, CCMB-2017-04-002, CCMB-2017-04-003, CCMB-2017-04-004
Creation date D:20260216162124+01'00'
Modification date D:20260218094159-08'00'
Pages 17
Creator Acrobat PDFMaker 25 pour Word
Producer Docusign DMv10

Security target

security target file processing did not finish successfully.
Download pdf: ERROR
Convert pdf to text: ERROR
Extract keywords: ERROR

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

Extracted SARs

ALC_DVS.2, ALC_FLR.3, AVA_VAN.5

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate became unavailable — it disappeared from the upstream listing.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.eucc.EUCCCertificate",
  "category": "SMARTCARDS AND SIMILAR DEVICES",
  "cert_id": "EUCC-3090-2026-03",
  "cert_link": "https://certification.enisa.europa.eu/document/download/2316ebb4-55c3-4a0f-8d2f-c400fc740826_en?filename=EUCC-3090-2026-03-certificat.pdf",
  "dgst": "7754cb98e917875f",
  "heuristics": {
    "_type": "sec_certs.sample.cc_eucc_common.Heuristics",
    "annotated_references": null,
    "cert_id": "EUCC-3090-2026-3",
    "cert_lab": null,
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "eal": "EAL5",
    "extracted_sars": {
      "_type": "Set",
      "elements": [
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AVA_VAN",
          "level": 5
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_FLR",
          "level": 3
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_DVS",
          "level": 2
        }
      ]
    },
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "3.1"
      ]
    },
    "indirect_transitive_cves": null,
    "next_certificates": null,
    "prev_certificates": null,
    "protection_profiles": null,
    "related_cves": null,
    "report_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "scheme_data": null,
    "st_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "verified_cpe_matches": null
  },
  "manufacturer": "IN Smart Identity",
  "manufacturer_web": "https://ingroupe.com/product/combicao/",
  "name": "CombICAO v3.1 on Cosmo X\u00b2 (EAC Configuration)",
  "not_valid_after": "2031-02-18",
  "not_valid_before": "2026-02-18",
  "other_metadata": {
    "_type": "sec_certs.sample.eucc.EUCCCertificate.EnisaMetadata",
    "assurance_level": "High",
    "ava_van_level": "5",
    "cc_version": "ISO/IEC 15408-1:2009 ISO/IEC 15408-2:2008 ISO/IEC 15408-3:2008",
    "cem_version": null,
    "certificate_id": "EUCC-3090-2026-03",
    "certificate_yearly_number": null,
    "certification_body": "ANSSI",
    "certification_body_address": "Tour Mercure 31 Quai de Grenelle, 75015 Paris",
    "certification_body_contact": "[email protected] Phone: +33 (0)1 71 75 82 82",
    "holder_address": "2 place Samuel de Champlain, 92400 Courbevoie",
    "holder_contact": null,
    "holder_name": "IN Smart Identity",
    "holder_website": "https://ingroupe.com/product/combicao/",
    "issuance_date_full": "18/02/2026",
    "issuance_month": "2",
    "issuance_year": "2026",
    "itsef": "Serma Safety and Security SAS",
    "modification_or_reassurance": null,
    "nando_id": "3090",
    "package": {
      "EAL5": [
        "ALC_DVS.2",
        "ALC_FLR.3",
        "AVA_VAN.5"
      ]
    },
    "product_description": "The evaluated product is a \"smart card\" type device that can be used in two modes: contact and contactless. It is intended for use as a secure signature creation device (SSCD).",
    "product_name": "CombICAO v3.1 on Cosmo X\u00b2 (EAC Configuration)",
    "product_type": "Smartcards and similar devices",
    "product_version": "Applet Code Versions : \u201920 38 21 FF\u2019;Applet Internal Version : \u201901 03 04 11\u2019",
    "protection_profile": "[PP-EAC] : BSI-CC-PP-0056-2009",
    "report_reference": null,
    "responsible_ncca": "Agence nationale de la s\u00e9curit\u00e9 des syst\u00e8mes d\u2019information",
    "scheme": "(UE) 2024/482 - EUCC",
    "validity_period_years": "5 years"
  },
  "pdf_data": {
    "_type": "sec_certs.sample.cc_eucc_common.PdfData",
    "cert_filename": null,
    "cert_frontpage": null,
    "cert_keywords": null,
    "cert_metadata": null,
    "report_filename": "1c7278ab-73a9-4068-8bd8-068f11020333_en",
    "report_frontpage": {
      "FR": {}
    },
    "report_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {
        "FR": {
          "ANSSI-CC-2023/37-R01": 1,
          "EUCC-3090-2026-03": 4
        },
        "NL": {
          "NSCIB-CC-2400104-01": 1
        }
      },
      "cc_claims": {},
      "cc_protection_profile_id": {
        "BSI": {
          "BSI-CC-PP-0056-2009": 2,
          "BSI-PP-0084-2014": 1
        }
      },
      "cc_sar": {
        "AGD": {
          "AGD_OPE": 1,
          "AGD_PRE": 1
        },
        "ALC": {
          "ALC_DVS.2": 1,
          "ALC_FLR": 2,
          "ALC_FLR.3": 3
        },
        "AVA": {
          "AVA_VAN": 2,
          "AVA_VAN.5": 1
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL2": 4,
          "EAL5": 1
        }
      },
      "cc_sfr": {},
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "CESTI": {
          "CESTI": 2
        },
        "Serma": {
          "SERMA": 1
        }
      },
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {
        "FI": {
          "Malfunction": 1
        }
      },
      "standard_id": {
        "CC": {
          "CCMB-2017-04-001": 2,
          "CCMB-2017-04-002": 1,
          "CCMB-2017-04-003": 1,
          "CCMB-2017-04-004": 2
        },
        "ICAO": {
          "ICAO": 4
        }
      },
      "symmetric_crypto": {
        "DES": {
          "DES": {
            "DES": 1
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Idemia": {
          "IDEMIA": 1
        }
      },
      "vulnerability": {}
    },
    "report_metadata": {
      "/CreationDate": "D:20260216162124+01\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 25 pour Word",
      "/ModDate": "D:20260218094159-08\u002700\u0027",
      "/Producer": "Docusign DMv10",
      "pdf_file_size_bytes": 935153,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://nvd.nist.gov/products/cpe%20/",
          "mailto:[email protected]",
          "https://www.cyber.gouv.fr/",
          "http://www.commoncriteriaportal.org/",
          "https://ingroupe.com/product/combicao/",
          "https://www.idemia.com/idemia-product-security-incident-response-team-psirt",
          "https://www.ssi.gouv.fr/",
          "mailto:[email protected]",
          "https://cyber.gouv.fr/cybersecurity-act"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 17
    },
    "st_filename": null,
    "st_frontpage": null,
    "st_keywords": null,
    "st_metadata": null
  },
  "protection_profile_links": null,
  "report_link": "https://certification.enisa.europa.eu/document/download/1c7278ab-73a9-4068-8bd8-068f11020333_en?filename=EUCC-3090-2026-03-rapport.pdf",
  "scheme": "FR",
  "security_level": {
    "_type": "Set",
    "elements": [
      "EAL5"
    ]
  },
  "st_link": "https://certification.enisa.europa.eu/document/download/629e91eb-dc8f-4b22-aca0-3391fc39d541_en?filename=EUCC-3090-2026-03-cible.pdf",
  "state": {
    "_type": "sec_certs.sample.cc_eucc_common.InternalState",
    "cert": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": false,
      "download_ok": false,
      "extract_ok": false,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "0b2fbef5471bce125639afedb79ff04d9817da2957165fe62ca73007ae776dd5",
      "source_hash": "099632ab1cc793403eb5232b529c3105fc098ad41a8865b0264ad530759f274a",
      "txt_hash": "36f6fa1b319889fb8122523fdfd4df08b017b6a7b5de35e204018b412d4ffa23"
    },
    "st": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": false,
      "download_ok": false,
      "extract_ok": false,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    }
  },
  "status": "active"
}