{"_id": "b3e89ae9c6d49bc2", "_type": "sec_certs.sample.eucc.EUCCCertificate", "dgst": "b3e89ae9c6d49bc2", "cert_id": "EUCC-3090-2026-02", "category": "SMARTCARDS AND SIMILAR DEVICES", "name": "CombICAO v3.1 on Cosmo X\u00b2 (BAC and CA Configuration)", "status": "active", "manufacturer": "IN Smart Identity", "scheme": "FR", "security_level": {"_type": "Set", "elements": ["EAL4"]}, "not_valid_before": "2026-02-18", "not_valid_after": "2031-02-18", "report_link": "https://certification.enisa.europa.eu/document/download/140fba3d-4d60-4a2c-8802-ca20bfaf5d76_en?filename=EUCC-3090-2026-02-rapport.pdf", "st_link": "https://certification.enisa.europa.eu/document/download/26687566-b310-49aa-8d50-929580d1b692_en?filename=EUCC-3090-2026-02-cible.pdf", "cert_link": "https://certification.enisa.europa.eu/document/download/ac01b933-132c-43c9-992a-2b2e484da80b_en?filename=EUCC-3090-2026-02-certificat.pdf", "manufacturer_web": "https://ingroupe.com/product/combicao/", "protection_profile_links": null, "state": {"_type": "sec_certs.sample.cc_eucc_common.InternalState", "report": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": false, "source_hash": "ea0486f2be0d048943e210269e367b52aa8cac221778ee3debcd3f8452115383", "txt_hash": "8bccb17da87aa2ef84addc5a367cc4afbbb5a4264b27cf237960542bf72a7a12", "json_hash": null}, "st": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "8f06755afc8155722eb3d9c55a5e8af4cd9af46e3c2bf47f57251ea5fb07b167", "txt_hash": "e23da94e6daa290003d85305297d9690df5681c3168a18c70ea789064bd34bd7", "json_hash": "3f0c646c9a3a129f5e0a66967580558599621eaee6be89d605e4e02f4c330810"}, "cert": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": false, "convert_ok": false, "extract_ok": false, "source_hash": null, "txt_hash": null, "json_hash": null}}, "pdf_data": {"_type": "sec_certs.sample.cc_eucc_common.PdfData", "report_metadata": {"pdf_file_size_bytes": 934628, "pdf_is_encrypted": false, "pdf_number_of_pages": 17, "/Creator": "Acrobat PDFMaker 25 pour Word", "/Producer": "Docusign DMv10", "/CreationDate": "D:20260216161305+01'00'", "/ModDate": "D:20260218094159-08'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://www.idemia.com/idemia-product-security-incident-response-team-psirt", "https://cyber.gouv.fr/cybersecurity-act", "mailto:certification@ssi.gouv.fr", "http://www.commoncriteriaportal.org/", "https://www.cyber.gouv.fr/", "https://www.ssi.gouv.fr/", "https://nvd.nist.gov/products/cpe%20/", "mailto:PSIRT@idemia.com", "https://ingroupe.com/product/combicao/"]}}, "st_metadata": {"pdf_file_size_bytes": 2483620, "pdf_is_encrypted": false, "pdf_number_of_pages": 159, "/MSIP_Label_4ac506cd-83f6-47e0-9e0b-d93776b6479c_Enabled": "True", "/MSIP_Label_4ac506cd-83f6-47e0-9e0b-d93776b6479c_SiteId": "7694d41c-5504-43d9-9e40-cb254ad755ec", "/MSIP_Label_4ac506cd-83f6-47e0-9e0b-d93776b6479c_Owner": "g509704@mph.morpho.com", "/MSIP_Label_4ac506cd-83f6-47e0-9e0b-d93776b6479c_SetDate": "2021-09-07T06:44:58.7589612Z", "/MSIP_Label_4ac506cd-83f6-47e0-9e0b-d93776b6479c_Name": "Business Restricted", "/MSIP_Label_4ac506cd-83f6-47e0-9e0b-d93776b6479c_Application": "Microsoft Azure Information Protection", "/MSIP_Label_4ac506cd-83f6-47e0-9e0b-d93776b6479c_ActionId": "e8deb8a0-7593-4d04-a3aa-b8fab1be9600", "/MSIP_Label_4ac506cd-83f6-47e0-9e0b-d93776b6479c_Extended_MSFT_Method": "Manual", "/MSIP_Label_e717118a-fcd0-4df0-8c97-c318df0a0f55_Enabled": "true", "/MSIP_Label_e717118a-fcd0-4df0-8c97-c318df0a0f55_Method": "Privileged", "/MSIP_Label_e717118a-fcd0-4df0-8c97-c318df0a0f55_SiteId": "76eb9ac3-0a27-417b-9e7d-e8eb81f82b62", "/Title": "Title", "/Author": "Said BOUKYOUD", "/Creator": "Microsoft\u00ae Word pour Microsoft\u00a0365", "/CreationDate": "D:20260130123247+01'00'", "/ModDate": "D:20260130123247+01'00'", "/Producer": "Microsoft\u00ae Word pour Microsoft\u00a0365", "pdf_hyperlinks": {"_type": "Set", "elements": []}}, "cert_metadata": null, "report_frontpage": {"FR": {}}, "st_frontpage": null, "cert_frontpage": null, "report_keywords": {"cc_cert_id": {"FR": {"ANSSI-CC-2023/37-R01": 1, "EUCC-3090-2026-02": 4}, "NL": {"NSCIB-CC-2400104-01": 1}}, "cc_protection_profile_id": {"BSI": {"BSI-CC-PP-0055-2009": 2, "BSI-PP-0084-2014": 1}}, "cc_security_level": {"EAL": {"EAL4": 1, "EAL2": 4}}, "cc_sar": {"ADV": {"ADV_FSP.5": 1, "ADV_INT.2": 1, "ADV_TDS.4": 1}, "AGD": {"AGD_PRE": 1, "AGD_OPE": 1}, "ALC": {"ALC_CMS.5": 1, "ALC_DVS.2": 1, "ALC_TAT.2": 1, "ALC_FLR.3": 3, "ALC_FLR": 2}, "ATE": {"ATE_DPT.3": 1}, "AVA": {"AVA_VAN": 2}}, "cc_sfr": {}, "cc_claims": {}, "vendor": {"Idemia": {"IDEMIA": 1}}, "eval_facility": {"Serma": {"SERMA": 1}, "CESTI": {"CESTI": 2}}, "symmetric_crypto": {"DES": {"DES": {"DES": 1}}}, "asymmetric_crypto": {}, "pq_crypto": {}, "hash_function": {}, "crypto_scheme": {}, "crypto_protocol": {}, "randomness": {}, "cipher_mode": {}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {"FI": {"Malfunction": 1}}, "technical_report_id": {}, "device_model": {}, "tee_name": {}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"ICAO": {"ICAO": 3}, "CC": {"CCMB-2017-04-001": 2, "CCMB-2017-04-002": 1, "CCMB-2017-04-003": 1, "CCMB-2017-04-004": 2}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "st_keywords": {"cc_cert_id": {"NL": {"NSCIB-2400104-01": 1}}, "cc_protection_profile_id": {"BSI": {"BSI-CC-PP- 0055-2009": 1, "BSI-PP-0056": 1, "BSI-CC-PP0056-V2-2012-MA-02": 1, "BSI-CC-PP-0084-": 1, "BSI-CC-PP-0068-V2-2011-MA-01": 1, "BSI-CC-PP-0071-2012-MA-01": 1, "BSI-CC-PP-0072-2012-MA-01": 1, "BSI-CC-PP-0076-2013-MA-01": 1, "BSI-CC-PP-0099-2017": 1, "BSI-CC-PP-0055-2009": 1}, "other": {"PP-SSCD2": 4, "PP-SSCD3": 4, "PP-SSCD4": 3, "PP-SSCD5": 2, "PP-SSCD6": 2}}, "cc_security_level": {"EAL": {"EAL4": 10, "EAL5": 12, "EAL4+": 12, "EAL5+": 24, "EAL4 augmented": 2}}, "cc_sar": {"ADV": {"ADV_FSP.5": 30, "ADV_INT.2": 15, "ADV_TDS.4": 29, "ADV_ARC": 1, "ADV_ARC.1": 15, "ADV_FSP": 1, "ADV_IMP": 1, "ADV_IMP.1": 16, "ADV_TDS": 1, "ADV_INT": 1, "ADV_FSP.1": 3, "ADV_TDS.1": 2, "ADV_TDS.3": 3, "ADV_FSP.2": 2, "ADV_FSP.4": 1}, "AGD": {"AGD_PRE": 9, "AGD_OPE": 8, "AGD_OPE.1": 15, "AGD_PRE.1": 11}, "ALC": {"ALC_CMS.5": 15, "ALC_DVS.2": 31, "ALC_TAT.2": 19, "ALC_FLR": 1, "ALC_FLR.3": 1, "ALC_CMC": 1, "ALC_CMC.4": 16, "ALC_CMS": 1, "ALC_DEL": 1, "ALC_DEL.1": 6, "ALC_DVS": 1, "ALC_LCD": 1, "ALC_LCD.1": 9, "ALC_TAT": 1, "ALC_TAT.1": 2, "ALC_CMS.1": 1, "ALC_DVS.1": 1}, "ATE": {"ATE_DPT.3": 15, "ATE_COV": 1, "ATE_COV.2": 8, "ATE_DPT": 1, "ATE_FUN": 1, "ATE_FUN.1": 15, "ATE_IND": 1, "ATE_IND.2": 8, "ATE_COV.1": 2, "ATE_DPT.1": 1}, "AVA": {"AVA_VAN.3": 9, "AVA_VAN.5": 12, "AVA_VAN": 13}, "APE": {"APE_SRE": 1}, "ASE": {"ASE_CCL": 1, "ASE_CCL.1": 15, "ASE_ECD": 1, "ASE_ECD.1": 15, "ASE_INT": 1, "ASE_INT.1": 17, "ASE_OBJ": 1, "ASE_OBJ.2": 13, "ASE_REQ": 1, "ASE_REQ.2": 16, "ASE_SPD": 1, "ASE_SPD.1": 9, "ASE_APD.1": 1, "ASE_TSS": 1, "ASE_TSS.1": 6, "ASE_REQ.1": 2}}, "cc_sfr": {"FAU": {"FAU_SAS": 5, "FAU_SAS.1": 16, "FAU_GEN": 2, "FAU_SAS.1.1": 1}, "FCS": {"FCS_RND": 2, "FCS_RND.1": 32, "FCS_CKM": 55, "FCS_COP": 174, "FCS_RNG": 1, "FCS_RND.1.1": 2, "FCS_CKM.1": 20, "FCS_CKM.4": 50, "FCS_CKM.4.1": 1, "FCS_COP.1": 15, "FCS_CKM.2": 3}, "FDP": {"FDP_ACC": 33, "FDP_ACF": 34, "FDP_UCT": 27, "FDP_UIT": 27, "FDP_DAU": 12, "FDP_ITC": 17, "FDP_ACC.1": 10, "FDP_ACF.1": 13, "FDP_UCT.1": 3, "FDP_UIT.1": 6, "FDP_DAU.1": 2, "FDP_ITC.1": 18, "FDP_ITC.2": 15, "FDP_IFC.1": 5}, "FIA": {"FIA_API": 13, "FIA_API.1": 8, "FIA_UAU": 79, "FIA_AFL": 25, "FIA_API.1.1": 1, "FIA_UID.1": 15, "FIA_UID.1.1": 1, "FIA_UID.1.2": 1, "FIA_UAU.1": 17, "FIA_UAU.1.1": 1, "FIA_UAU.1.2": 1, "FIA_UAU.4": 19, "FIA_UAU.4.1": 1, "FIA_UAU.5": 7, "FIA_UAU.6": 4, "FIA_AFL.1": 4}, "FMT": {"FMT_LIM": 3, "FMT_LIM.1": 21, "FMT_LIM.2": 20, "FMT_MOF": 23, "FMT_MTD": 143, "FMT_MTD.1": 14, "FMT_LIM.1.1": 2, "FMT_LIM.2.1": 2, "FMT_SMF.1": 46, "FMT_SMF.1.1": 1, "FMT_SMR.1": 47, "FMT_SMR.1.1": 1, "FMT_SMR.1.2": 1, "FMT_MOF.1": 3, "FMT_MSA.3": 9, "FMT_MSA.1": 3}, "FPT": {"FPT_EMS": 4, "FPT_EMS.1": 25, "FPT_EMS.1.1": 3, "FPT_EMS.1.2": 3, "FPT_FLS.1": 17, "FPT_FLS.1.1": 1, "FPT_TST.1": 12, "FPT_TST.1.1": 1, "FPT_TST.1.2": 1, "FPT_TST.1.3": 1, "FPT_PHP.3": 17, "FPT_PHP.3.1": 1}, "FTP": {"FTP_ITC": 12, "FTP_ITC.1": 15, "FTP_TRP.1": 12}}, "cc_claims": {"OE": {"OE.MRTD_": 1}}, "vendor": {"Idemia": {"IDEMIA": 47}}, "eval_facility": {"Serma": {"SERMA": 1}}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 15, "AES128": 3, "AES192": 3, "AES256": 3}}, "DES": {"DES": {"DES": 8}, "3DES": {"Triple-DES": 11, "3DES": 6, "TripleDES": 1, "TDES": 1}}, "constructions": {"MAC": {"KMAC": 2, "CMAC": 3}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDH": 2}, "ECDSA": {"ECDSA": 2}}, "FF": {"DH": {"Diffie-Hellman": 5, "DH": 1}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA1": 5, "SHA-1": 4}, "SHA2": {"SHA256": 2, "SHA384": 2, "SHA512": 2, "SHA-256": 2, "SHA2": 2}}}, "crypto_scheme": {"MAC": {"MAC": 9}, "KA": {"Key agreement": 1}}, "crypto_protocol": {"PACE": {"PACE": 24}}, "randomness": {}, "cipher_mode": {"CBC": {"CBC": 9}}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {"SCA": {"physical probing": 3, "DPA": 2, "SPA": 1, "timing attacks": 1}, "FI": {"Physical Tampering": 6, "physical tampering": 2, "Physical tampering": 1, "Malfunction": 8, "malfunction": 6, "fault injection": 1}, "other": {"reverse engineering": 1}}, "technical_report_id": {}, "device_model": {}, "tee_name": {"IBM": {"SSC": 1}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {"EF": {"EF.DG1": 29, "EF.DG13": 3, "EF.DG16": 30, "EF.DG2": 8, "EF.DG3": 7, "EF.DG4": 7, "EF.DG5": 8, "EF.DG14": 4, "EF.DG15": 1, "EF.COM": 13, "EF.SOD": 12}}, "standard_id": {"FIPS": {"FIPS 180-4": 1, "FIPS 186-3": 1, "FIPS 197": 1, "FIPS PUB 197": 1, "FIPS 46-3": 1}, "PKCS": {"PKCS#3": 2}, "RFC": {"RFC3369": 1}, "ISO": {"ISO/IEC 14443": 6, "ISO/IEC 7816-4": 1, "ISO/IEC 18013": 2, "ISO/IEC 9797-1": 1, "ISO/IEC 11770-2": 1, "ISO/IEC 11770-3": 1, "ISO/IEC 9796-2": 1}, "ICAO": {"ICAO": 20}, "SCP": {"SCP02": 1, "SCP03": 1}, "CC": {"CCMB-2017-04-001": 1, "CCMB-2017-04-002": 1, "CCMB-2017-04-003": 1, "CCMB-2017-04-004": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "cert_keywords": null, "report_filename": "140fba3d-4d60-4a2c-8802-ca20bfaf5d76_en", "st_filename": "26687566-b310-49aa-8d50-929580d1b692_en", "cert_filename": null}, "heuristics": {"_type": "sec_certs.sample.cc_eucc_common.Heuristics", "extracted_versions": {"_type": "Set", "elements": ["3.1"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "cert_lab": null, "cert_id": "EUCC-3090-2026-2", "prev_certificates": null, "next_certificates": null, "st_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "report_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "annotated_references": null, "extracted_sars": {"_type": "Set", "elements": [{"_type": "sec_certs.sample.sar.SAR", "family": "ADV_IMP", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ADV_TDS", "level": 4}, {"_type": "sec_certs.sample.sar.SAR", "family": "ATE_FUN", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ATE_DPT", "level": 3}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_OBJ", "level": 2}, {"_type": "sec_certs.sample.sar.SAR", "family": "AGD_OPE", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_CMC", "level": 4}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_TSS", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_TAT", "level": 2}, {"_type": "sec_certs.sample.sar.SAR", "family": "ATE_IND", "level": 2}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_ECD", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ADV_ARC", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_CCL", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_INT", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_SPD", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_APD", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_CMS", "level": 5}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_LCD", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_DVS", "level": 2}, {"_type": "sec_certs.sample.sar.SAR", "family": "AGD_PRE", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_REQ", "level": 2}, {"_type": "sec_certs.sample.sar.SAR", "family": "AVA_VAN", "level": 5}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_DEL", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ADV_INT", "level": 2}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_FLR", "level": 3}, {"_type": "sec_certs.sample.sar.SAR", "family": "ADV_FSP", "level": 5}, {"_type": "sec_certs.sample.sar.SAR", "family": "ATE_COV", "level": 2}]}, "direct_transitive_cves": null, "indirect_transitive_cves": null, "scheme_data": null, "protection_profiles": null, "eal": "EAL4"}, "other_metadata": {"_type": "sec_certs.sample.eucc.EUCCCertificate.EnisaMetadata", "certificate_id": "EUCC-3090-2026-02", "product_name": "CombICAO v3.1 on Cosmo X\u00b2 (BAC and CA Configuration)", "product_type": "Smartcards and similar devices", "product_version": "Applet Code Versions : \u201920 38 21 FF\u2019;Applet Internal Version : \u201901 03 04 11\u2019", "product_description": "\"The evaluated product is a \"smart card\" type device that can be used in two modes: contact and contactless. It implements electronic travel document functions in accordance with the specifications of the International Civil Aviation Organization (ICAO). This product is designed to verify the authenticity of the travel document and identify its holder during border control, using an inspection system. This microcontroller and its embedded software are intended to be inserted into the cover of traditional passports, into an eCover, or into an eDatapage. The final product can take various forms, such as a card or a module.", "holder_name": "IN Smart Identity", "holder_address": "2 place Samuel de Champlain, 92400 Courbevoie", "holder_contact": null, "holder_website": "https://ingroupe.com/product/combicao/", "certification_body": "ANSSI", "nando_id": "3090", "certification_body_address": "Tour Mercure 31 Quai de Grenelle, 75015 Paris", "certification_body_contact": "certification@ssi.gouv.fr Phone: +33 (0)1 71 75 82 82", "itsef": "Serma Safety and Security SAS", "responsible_ncca": "Agence nationale de la s\u00e9curit\u00e9 des syst\u00e8mes d\u2019information", "scheme": "(UE) 2024/482 - EUCC", "report_reference": null, "assurance_level": "High", "cc_version": "CC:2022 Revision 1", "cem_version": null, "ava_van_level": "5", "package": {"EAL4": ["ADV_FSP.5", "ADV_INT.2", "ADV_TDS.4", "ALC_CMS.5", "ALC_DVS.2", "ALC_TAT.2", "ATE_DPT.3", "ALC_FLR.3"]}, "protection_profile": "[PP-BAC] : BSI-CC-PP-0055-2009", "issuance_year": "2026", "issuance_month": "2", "issuance_date_full": "18/02/2026", "certificate_yearly_number": null, "modification_or_reassurance": null, "validity_period_years": "5 years"}}