This page was not yet optimized for use on mobile devices.

Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.

	TCOS FlexCert Version 2.0 Release 2/SLC52 EUCC-3087-2026-12	TCOS FlexCert Version 2.0 Release 2/SLC52 EUCC-3087-2026-12
name	TCOS FlexCert Version 2.0 Release 2/SLC52	TCOS FlexCert Version 2.0 Release 2/SLC52
category	SMARTCARDS AND SIMILAR DEVICES	SMARTCARDS AND SIMILAR DEVICES
scheme	DE	DE
status	active	active
not_valid_after	03.07.2031	03.07.2031
not_valid_before	03.07.2026	03.07.2026
cert_link	https://certification.enisa.europa.eu/document/download/0e312e99-9cb1-4f06-9ae6-6ea8eb1e27d1_en?filename=EUCC-3087-2026-0012%20Certificate.pdf	https://certification.enisa.europa.eu/document/download/0e312e99-9cb1-4f06-9ae6-6ea8eb1e27d1_en?filename=EUCC-3087-2026-0012%20Certificate.pdf
report_link	https://certification.enisa.europa.eu/document/download/a3b3ac32-c987-405a-aeed-1ae8685f23db_en?filename=EUCC-3087-2026-0012%20Certification%20Report.pdf
st_link	https://certification.enisa.europa.eu/document/download/ac407808-1505-45cc-beb7-bc6a9b935aef_en?filename=EUCC-3087-2026-0012%20Security%20Target.pdf	https://certification.enisa.europa.eu/document/download/ac407808-1505-45cc-beb7-bc6a9b935aef_en?filename=EUCC-3087-2026-0012%20Security%20Target.pdf
manufacturer	Deutsche Telekom Security GmbH	Deutsche Telekom Security GmbH
manufacturer_web	https://www.telekom.com/en/company/data-privacy-and-security/hacking-and-testing	https://www.telekom.com/en/company/data-privacy-and-security/hacking-and-testing
security_level	{}	{}
heuristics/cert_id	EUCC-3087-2026-12	EUCC-3087-2026-12
heuristics/cert_lab	BSI	[]
heuristics/cpe_matches	{}	{}
heuristics/verified_cpe_matches	{}	{}
heuristics/related_cves	{}	{}
heuristics/direct_transitive_cves	{}	{}
heuristics/indirect_transitive_cves	{}	{}
heuristics/extracted_sars	ATE_DPT.2, ALC_CMC.5, ALC_DEL.1, AVA_VAN.5, ALC_FLR.3, ADV_IMP.2, AGD_PRE.1, ALC_LCD.1, ADV_INT.3, ATE_FUN.2, AGD_OPE.1, ALC_DVS.2, ALC_CMS.4, ALC_TAT.3, ADV_FSP.4, ADV_TDS.5, ATE_COV.3, ADV_FUN.1, ADV_ARC.1	ATE_DPT.2, ALC_CMC.5, ALC_DEL.1, AVA_VAN.5, ALC_FLR.3, ADV_IMP.2, AGD_PRE.1, ALC_LCD.1, ADV_INT.3, ATE_FUN.2, AGD_OPE.1, ALC_DVS.2, ALC_CMS.4, ALC_TAT.3, ADV_FSP.4, ADV_TDS.5, ATE_COV.3, ADV_FUN.1, ADV_ARC.1
heuristics/extracted_versions	2.0	2.0
heuristics/prev_certificates	{}	{}
heuristics/next_certificates	{}	{}
heuristics/report_references/directly_referenced_by	{}	{}
heuristics/report_references/directly_referencing	{}	{}
heuristics/report_references/indirectly_referenced_by	{}	{}
heuristics/report_references/indirectly_referencing	{}	{}
heuristics/scheme_data	category: eHealth cert_id: EUCC-3087-2026-0012 certification_date: 03.07.2026 enhanced: applicant: Deutsche Telekom Security GmbH Neue Adresse: Koblenzer Straße 87-93 57072 Siegen Alte Adresse: Untere Industriestraße 20 57250 Netphen assurance_level: EAL4+,ALC_DVS.2,ATE_DPT.2,AVA_VAN.5,ALC_FLR.1 certification_date: 03.07.2026 description: The Target of Evaluation (TOE) is the product TCOS FlexCert 2.0 Release 1/SLE78CLX1440P developed by T-Systems International GmbH. The TOE is a smart card product according to the G2 Card Operating System specification from gematik. The TOE is intended to be used as a card operating system platform for different card types and applications of the card generation G2 in the framework of the German health care system. The TOE implements from the PP-0082-V2 the base part and the packages Crypto Box, Logical Channel and Contactless. entries: [frozendict({'id': 'EUCC-3087-2026-0012 / BSI-DSZ-CC-0904-V3-2026 (Ausstellungsdatum / Certification Date 03.07.2026, gültig bis / valid until 02.07.2031)', 'description': "The focus of this re-certification was on the transfer of the certification procedure to CC/CEM:2022 and to EUCC. Included is the update of the product life-cycle concerning the involved development and production sites, the underlying HW-certificate as well as the vulnerability analysis andvaluation of the TOE's (crypto) implementation. The certified product itself including its related guidance documentation did not change."}), frozendict({'id': 'BSI', 'description': 'The Partial ALC Re-Evaluation for BSI-DSZ-CC-0904-V2-2021 covers the update of the product life-cycle concerning the relocation of the involved development and production sites. The certified product itself did not change.'}), frozendict({'id': 'BSI-DSZ-CC-0904-V2-2021 (Ausstellungsdatum / Certification Date 24.06.2021, gültig bis / valid until 23.06.2026) Zertifizierungsreport / Certification Report Sicherheitsvorgaben / Security Target Zertifikat / Certificate Im Fokus der vorliegenden Re-Zertifizierung stand die Anpassung des Evaluierungsgegenstandes (EVG) an die aktuelle Version der G2.1 COS-Spezifikation der gematik und das zugehörige überarbeitete Schutzprofil PP-0082-V4. Dies war verbunden mit dem Wechsel des unterliegenden Halbleiters, Anpassungen im Lebenszyklusmodell, weiteren spezifischen Änderungen in der Embedded Software und einer entsprechenden Aktualisierung der zugehörigen Benutzerdokumentation. Insbesondere wurde die (Krypto-) Implementierung des EVG überarbeitet, re-evaluiert und neu bewertet.', 'description': 'Software'}), frozendict({'id': 'BSI', 'description': 'The maintenance procedure addresses the change of the production site.'}), frozendict({'id': 'BSI', 'description': 'Maintenance Report'}), frozendict({'id': 'BSI', 'description': 'Security Target'})] evaluation_facility: SRC Security Research & Consulting GmbH expiration_date: 02.07.2031 product: TCOS FlexCert Version 2.0 Release 2/SLC52 protection_profile: Card Operating System Generation 2 (PP COS G2), Version 2.1, 10 July 2019, BSI-CC-PP-0082-V4-2019 product: TCOS FlexCert Version 2.0 Release 2/SLC52 subcategory: Smartcards url: https://www.bsi.bund.de/SharedDocs/Zertifikate_CC/CC/Gesundheitswesen_SmartCards/0904.html vendor: Deutsche Telekom Security GmbH	category: eHealth cert_id: EUCC-3087-2026-0012 certification_date: 03.07.2026 enhanced: applicant: Deutsche Telekom Security GmbH Neue Adresse: Koblenzer Straße 87-93 57072 Siegen Alte Adresse: Untere Industriestraße 20 57250 Netphen assurance_level: EAL4+,ALC_DVS.2,ATE_DPT.2,AVA_VAN.5,ALC_FLR.1 certification_date: 03.07.2026 description: The Target of Evaluation (TOE) is the product TCOS FlexCert 2.0 Release 1/SLE78CLX1440P developed by T-Systems International GmbH. The TOE is a smart card product according to the G2 Card Operating System specification from gematik. The TOE is intended to be used as a card operating system platform for different card types and applications of the card generation G2 in the framework of the German health care system. The TOE implements from the PP-0082-V2 the base part and the packages Crypto Box, Logical Channel and Contactless. entries: [frozendict({'id': 'EUCC-3087-2026-0012 / BSI-DSZ-CC-0904-V3-2026 (Ausstellungsdatum / Certification Date 03.07.2026, gültig bis / valid until 02.07.2031)', 'description': "The focus of this re-certification was on the transfer of the certification procedure to CC/CEM:2022 and to EUCC. Included is the update of the product life-cycle concerning the involved development and production sites, the underlying HW-certificate as well as the vulnerability analysis andvaluation of the TOE's (crypto) implementation. The certified product itself including its related guidance documentation did not change."}), frozendict({'id': 'BSI', 'description': 'The Partial ALC Re-Evaluation for BSI-DSZ-CC-0904-V2-2021 covers the update of the product life-cycle concerning the relocation of the involved development and production sites. The certified product itself did not change.'}), frozendict({'id': 'BSI-DSZ-CC-0904-V2-2021 (Ausstellungsdatum / Certification Date 24.06.2021, gültig bis / valid until 23.06.2026) Zertifizierungsreport / Certification Report Sicherheitsvorgaben / Security Target Zertifikat / Certificate Im Fokus der vorliegenden Re-Zertifizierung stand die Anpassung des Evaluierungsgegenstandes (EVG) an die aktuelle Version der G2.1 COS-Spezifikation der gematik und das zugehörige überarbeitete Schutzprofil PP-0082-V4. Dies war verbunden mit dem Wechsel des unterliegenden Halbleiters, Anpassungen im Lebenszyklusmodell, weiteren spezifischen Änderungen in der Embedded Software und einer entsprechenden Aktualisierung der zugehörigen Benutzerdokumentation. Insbesondere wurde die (Krypto-) Implementierung des EVG überarbeitet, re-evaluiert und neu bewertet.', 'description': 'Software'}), frozendict({'id': 'BSI', 'description': 'The maintenance procedure addresses the change of the production site.'}), frozendict({'id': 'BSI', 'description': 'Maintenance Report'}), frozendict({'id': 'BSI', 'description': 'Security Target'})] evaluation_facility: SRC Security Research & Consulting GmbH expiration_date: 02.07.2031 product: TCOS FlexCert Version 2.0 Release 2/SLC52 protection_profile: Card Operating System Generation 2 (PP COS G2), Version 2.1, 10 July 2019, BSI-CC-PP-0082-V4-2019 product: TCOS FlexCert Version 2.0 Release 2/SLC52 subcategory: Smartcards url: https://www.bsi.bund.de/SharedDocs/Zertifikate_CC/CC/Gesundheitswesen_SmartCards/0904.html vendor: Deutsche Telekom Security GmbH
heuristics/st_references/directly_referenced_by	{}	{}
heuristics/st_references/directly_referencing	{}	{}
heuristics/st_references/indirectly_referenced_by	{}	{}
heuristics/st_references/indirectly_referencing	{}	{}
heuristics/protection_profiles	{}	{}
protection_profiles
protection_profile_links	{}	{}
pdf_data/cert_filename	0e312e99-9cb1-4f06-9ae6-6ea8eb1e27d1_en	0e312e99-9cb1-4f06-9ae6-6ea8eb1e27d1_en
pdf_data/cert_frontpage
pdf_data/cert_keywords/cc_cert_id	DE: BSI-DSZ-CC-0904-V3-2026: 1 EUCC-3087-2026-0012: 1	DE: BSI-DSZ-CC-0904-V3-2026: 1 EUCC-3087-2026-0012: 1
pdf_data/cert_keywords/cc_protection_profile_id	BSI: BSI-CC-PP-0082-V4-2019: 1	BSI: BSI-CC-PP-0082-V4-2019: 1
pdf_data/cert_keywords/cc_security_level	EAL: EAL 2: 1 EAL 4: 1	EAL: EAL 2: 1 EAL 4: 1
pdf_data/cert_keywords/cc_sar	ALC: ALC_DVS.2: 1 ALC_FLR: 1 ALC_FLR.1: 1 ATE: ATE_DPT.2: 1 AVA: AVA_VAN: 1 AVA_VAN.5: 2	ALC: ALC_DVS.2: 1 ALC_FLR: 1 ALC_FLR.1: 1 ATE: ATE_DPT.2: 1 AVA: AVA_VAN: 1 AVA_VAN.5: 2
pdf_data/cert_keywords/cc_sfr
pdf_data/cert_keywords/cc_claims
pdf_data/cert_keywords/vendor
pdf_data/cert_keywords/eval_facility	DeutscheTelekom: Deutsche Telekom Security: 1 SRC: SRC Security Research & Consulting: 1	DeutscheTelekom: Deutsche Telekom Security: 1 SRC: SRC Security Research & Consulting: 1
pdf_data/cert_keywords/symmetric_crypto
pdf_data/cert_keywords/asymmetric_crypto
pdf_data/cert_keywords/pq_crypto
pdf_data/cert_keywords/hash_function
pdf_data/cert_keywords/crypto_scheme
pdf_data/cert_keywords/crypto_protocol
pdf_data/cert_keywords/randomness
pdf_data/cert_keywords/cipher_mode
pdf_data/cert_keywords/ecc_curve
pdf_data/cert_keywords/crypto_engine
pdf_data/cert_keywords/tls_cipher_suite
pdf_data/cert_keywords/crypto_library
pdf_data/cert_keywords/vulnerability
pdf_data/cert_keywords/side_channel_analysis
pdf_data/cert_keywords/technical_report_id
pdf_data/cert_keywords/device_model
pdf_data/cert_keywords/tee_name
pdf_data/cert_keywords/os_name
pdf_data/cert_keywords/cplc_data
pdf_data/cert_keywords/ic_data_group
pdf_data/cert_keywords/standard_id	ISO: ISO/IEC 15408: 2 ISO/IEC 18045: 2	ISO: ISO/IEC 15408: 2 ISO/IEC 18045: 2
pdf_data/cert_keywords/javacard_version
pdf_data/cert_keywords/javacard_api_const
pdf_data/cert_keywords/javacard_packages
pdf_data/cert_keywords/certification_process
pdf_data/cert_metadata	/CreationDate: D:20260713051950+01'00' /Creator: KM_C300i /ModDate: D:20260713051950+01'00' /Producer: KONICA MINOLTA bizhub C300i /Title: KM_C300i26071305190 pdf_file_size_bytes: 118556 pdf_hyperlinks: {} pdf_is_encrypted: False pdf_number_of_pages: 2	/CreationDate: D:20260713051950+01'00' /Creator: KM_C300i /ModDate: D:20260713051950+01'00' /Producer: KONICA MINOLTA bizhub C300i /Title: KM_C300i26071305190 pdf_file_size_bytes: 118556 pdf_hyperlinks: {} pdf_is_encrypted: False pdf_number_of_pages: 2
pdf_data/report_filename	a3b3ac32-c987-405a-aeed-1ae8685f23db_en
pdf_data/report_frontpage	DE: cert_id: BSI-DSZ-CC-0904-V3-2026 cert_item: TCOS FlexCert Version 2.0 Release 2/SLC52 cert_lab: BSI developer: Deutsche Telekom Security GmbH match_rules: *['(BSI-DSZ-CC-.+?) (?:for\|For) (.+?) from (.)']**	DE:
pdf_data/report_keywords/cc_cert_id	DE: BSI-DSZ-CC-0904-V2-: 1 BSI-DSZ-CC-0904-V2-2021: 2 BSI-DSZ-CC-0904-V3-2026: 42 BSI-DSZ-CC-1079-V6-: 1 BSI-DSZ-CC-1079-V6-2025: 3 EUCC-3087- 2025-12-0001: 1 EUCC-3087-2025- 12-0001: 1 EUCC-3087-2025-12-0001: 6 EUCC-3087-2026-0012: 37
pdf_data/report_keywords/cc_protection_profile_id	BSI: BSI-CC-PP-0082-V4-2019: 3
pdf_data/report_keywords/cc_security_level	EAL: EAL 2: 2 EAL 4: 1
pdf_data/report_keywords/cc_sar	ADV: ADV_ARC: 1 ALC: ALC_DVS.2: 1 ALC_FLR: 2 ALC_FLR.1: 1 ATE: ATE_DPT.2: 1 AVA: AVA_VAN.5: 2
pdf_data/report_keywords/cc_sfr	FCS: FCS_CKM: 4 FCS_COP: 28 FCS_RNG: 6 FCS_RNG.1: 1 FIA: FIA_UAU: 2 FIA_USB: 1 FPT: FPT_ITE.1: 1 FTP: FTP_ITC: 2
pdf_data/report_keywords/cc_claims
pdf_data/report_keywords/vendor	Infineon: Infineon: 8 Infineon Technologies AG: 6
pdf_data/report_keywords/eval_facility	DeutscheTelekom: Deutsche Telekom Security: 20 SRC: SRC Security Research & Consulting: 6 TSystems: T-Systems International: 2 TUV: TÜV Informationstechnik: 1
pdf_data/report_keywords/symmetric_crypto	AES_competition: AES: AES: 31 HPC: HPC: 4 constructions: MAC: CMAC: 17
pdf_data/report_keywords/asymmetric_crypto	ECC: ECC: ECC: 5 ECDH: ECDH: 3 ECDSA: ECDSA: 13 FF: DH: DH: 1 Diffie-Hellman: 1 RSA: RSA-OAEP: 2
pdf_data/report_keywords/pq_crypto
pdf_data/report_keywords/hash_function	SHA: SHA2: SHA-256: 4
pdf_data/report_keywords/crypto_scheme	KA: Key Agreement: 2 MAC: MAC: 3
pdf_data/report_keywords/crypto_protocol	PACE: PACE: 13
pdf_data/report_keywords/randomness	PRNG: PRNG: 1 RNG: RNG: 8
pdf_data/report_keywords/cipher_mode	CBC: CBC: 10
pdf_data/report_keywords/ecc_curve
pdf_data/report_keywords/crypto_engine
pdf_data/report_keywords/tls_cipher_suite
pdf_data/report_keywords/crypto_library
pdf_data/report_keywords/vulnerability
pdf_data/report_keywords/side_channel_analysis	FI: DFA: 1 fault injection: 1 malfunction: 1 SCA: DPA: 1 SPA: 1 side channel: 1 other: JIL: 2
pdf_data/report_keywords/technical_report_id	BSI: BSI TR-03116-1: 1 BSI TR-03143: 5 BSI TR-03144: 10
pdf_data/report_keywords/device_model
pdf_data/report_keywords/tee_name
pdf_data/report_keywords/os_name
pdf_data/report_keywords/cplc_data
pdf_data/report_keywords/ic_data_group
pdf_data/report_keywords/standard_id	BSI: AIS 1: 2 AIS 14: 1 AIS 19: 1 AIS 20: 3 AIS 25: 2 AIS 26: 1 AIS 31: 5 AIS 32: 2 AIS 37: 2 AIS 38: 2 AIS 46: 2 AIS20: 2 AIS31: 2 FIPS: FIPS 180-4: 7 FIPS 197: 13 FIPS PUB 180-4: 1 FIPS PUB 197: 1 ISO: ISO/IEC 15408: 2 ISO/IEC 17065: 2 ISO/IEC 18031:2005: 1 ISO/IEC 18045: 2 PKCS: PKCS#1: 5 RFC: RFC 5639: 11
pdf_data/report_keywords/javacard_version
pdf_data/report_keywords/javacard_api_const
pdf_data/report_keywords/javacard_packages
pdf_data/report_keywords/certification_process	ConfidentialDocument: 2.0 Release 2/SLC52, Version 0.94, 10 June 2026, Deutsche Telekom Security GmbH (confidential document) [Guide ADM] TCOS FlexCert Version 2.0 Release 2, Administrator’s Guidance, Guidance Documentation: 1 ID BSI-DSZ-CC-1079-V6- 2025), Version 4, 18 December 2025, TÜV Informationstechnik GmbH (confidential document) [Spec G2 COS] Einführung der Gesundheitskarte, Spezifikation des Card Operating System (COS: 1 Infineon Technologies AG, EUCC-3087-2025-12-0001 (Administration ID BSI- DSZ-CC-1079-V6-2025) (confidential document) Security Target Lite of the underlying hardware platform, Security Target IFX_CCI_00000Fh: 1 RNG] Zufallszahlengenerierung in TCOS, Version 0.7, 3 November 2020, T-Systems International GmbH (confidential document) [AIS 20] see chapter 14, [4] of this report [AIS 31] see chapter 14, [4] of this report Note: End: 1 Version 2.0 Release 2/SLC52, Version 1.1, 19 June 2026, SRC Security Research & Consulting GmbH (confidential document) [ConfList] Configuration List BSI-DSZ-CC-0904-V3-2026, Konfigurationsliste von TCOS FlexCert: 1
pdf_data/report_metadata	/CreationDate: D:20260713102018+02'00' /Creator: Writer /Keywords: Common Criteria, Certification, Zertifizierung, G2 COS, eHealth, gematik /Producer: LibreOffice 24.8.7.2 (X86_64) / LibreOffice Community /Subject: TCOS FlexCert Version 2.0 Release 2/SLC52 from Deutsche Telekom Security GmbH /Title: Certification Report EUCC-3087-2026-0012; BSI-DSZ-CC-0904-V3 pdf_file_size_bytes: 618472 pdf_hyperlinks: https://www.bsi.bund.de/zertifizierung, https://www.iso.org/standard/72892.html, https://www.iso.org/standard/72889.html, https://eur-lex.europa.eu/eli/reg_impl/2025/2462/oj, https://certification.enisa.europa.eu/, https://www.bsi.bund.de/zertifizierungsreporte, https://www.bsi.bund.de/AIS, https://www.iso.org/standard/72906.html, https://www.telekom.com/en/company/data-privacy-and-security/hacking-and-testing, https://www.iso.org/standard/72891.html, https://www.iso.org/standard/72913.html, http://www.commoncriteriaportal.org/, https://www.iso.org/standard/72917.html, https://www.commoncriteriaportal.org/, https://certification.enisa.europa.eu/publications/eucc-state-art-documents_en pdf_is_encrypted: False pdf_number_of_pages: 37
pdf_data/st_filename	ac407808-1505-45cc-beb7-bc6a9b935aef_en	ac407808-1505-45cc-beb7-bc6a9b935aef_en
pdf_data/st_frontpage
pdf_data/st_keywords/cc_cert_id
pdf_data/st_keywords/cc_protection_profile_id	BSI: BSI-CC-PP- 0035-2007: 1 BSI-CC-PP- 0082-V4: 1 BSI-CC-PP-0082-V4-2019: 2 BSI-CC-PP-0084-: 1 BSI-CC-PP-0084-2014: 21 BSI-CC-PP0082: 4 BSI-CC-PP0084: 2 BSI-PP-0082: 1	BSI: BSI-CC-PP- 0035-2007: 1 BSI-CC-PP- 0082-V4: 1 BSI-CC-PP-0082-V4-2019: 2 BSI-CC-PP-0084-: 1 BSI-CC-PP-0084-2014: 21 BSI-CC-PP0082: 4 BSI-CC-PP0084: 2 BSI-PP-0082: 1
pdf_data/st_keywords/cc_security_level	EAL: EAL 4: 1 EAL 4 augmented: 1 EAL4: 10 EAL4 augmented: 2 EAL5: 2 EAL5 augmented: 2 EAL6: 2 EAL6 augmented: 2	EAL: EAL 4: 1 EAL 4 augmented: 1 EAL4: 10 EAL4 augmented: 2 EAL5: 2 EAL5 augmented: 2 EAL6: 2 EAL6 augmented: 2
pdf_data/st_keywords/cc_sar	ADV: ADV_ARC: 1 ADV_ARC.1: 4 ADV_FSP: 1 ADV_FSP.4: 2 ADV_FUN.1: 1 ADV_IMP.1: 2 ADV_IMP.2: 2 ADV_INT.3: 2 ADV_TDS.3: 3 ADV_TDS.5: 2 AGD: AGD_OPE: 1 AGD_OPE.1: 2 AGD_PRE.1: 2 ALC: ALC_CMC.4: 1 ALC_CMC.5: 2 ALC_CMS: 1 ALC_CMS.4: 1 ALC_DEL: 1 ALC_DEL.1: 1 ALC_DVS: 1 ALC_DVS.2: 9 ALC_FLR.1: 6 ALC_FLR.3: 4 ALC_LCD.1: 1 ALC_TAT.1: 1 ALC_TAT.3: 2 ATE: ATE_COV: 1 ATE_COV.2: 1 ATE_COV.3: 2 ATE_DPT.1: 1 ATE_DPT.2: 7 ATE_FUN: 1 ATE_FUN.1: 1 ATE_FUN.2: 2 AVA: AVA_VAN: 1 AVA_VAN.5: 10	ADV: ADV_ARC: 1 ADV_ARC.1: 4 ADV_FSP: 1 ADV_FSP.4: 2 ADV_FUN.1: 1 ADV_IMP.1: 2 ADV_IMP.2: 2 ADV_INT.3: 2 ADV_TDS.3: 3 ADV_TDS.5: 2 AGD: AGD_OPE: 1 AGD_OPE.1: 2 AGD_PRE.1: 2 ALC: ALC_CMC.4: 1 ALC_CMC.5: 2 ALC_CMS: 1 ALC_CMS.4: 1 ALC_DEL: 1 ALC_DEL.1: 1 ALC_DVS: 1 ALC_DVS.2: 9 ALC_FLR.1: 6 ALC_FLR.3: 4 ALC_LCD.1: 1 ALC_TAT.1: 1 ALC_TAT.3: 2 ATE: ATE_COV: 1 ATE_COV.2: 1 ATE_COV.3: 2 ATE_DPT.1: 1 ATE_DPT.2: 7 ATE_FUN: 1 ATE_FUN.1: 1 ATE_FUN.2: 2 AVA: AVA_VAN: 1 AVA_VAN.5: 10
pdf_data/st_keywords/cc_sfr	FAU: FAU_SAS: 10 FAU_SAS.1: 7 FAU_SAS.1.1: 1 FCS: FCS_CKM: 61 FCS_CKM.1: 29 FCS_CKM.2: 4 FCS_CKM.4: 26 FCS_CKM.5: 6 FCS_CKM.6: 42 FCS_CKM.6.1: 3 FCS_CKM.6.2: 2 FCS_COP: 141 FCS_COP.1: 20 FCS_RBG.1: 4 FCS_RNG: 32 FCS_RNG.1: 31 FCS_RNG.1.1: 3 FCS_RNG.1.2: 2 FDP: FDP_ACC: 64 FDP_ACC.1: 39 FDP_ACF: 76 FDP_ACF.1: 38 FDP_IFC: 5 FDP_IFC.1: 10 FDP_IFF.1: 1 FDP_ITC.1: 19 FDP_ITC.2: 17 FDP_ITT: 5 FDP_ITT.1: 3 FDP_RIP: 6 FDP_RIP.1: 9 FDP_RIP.1.1: 1 FDP_SDC: 9 FDP_SDC.1: 1 FDP_SDI: 8 FDP_SDI.1: 2 FDP_SDI.2: 6 FDP_SDI.2.1: 1 FDP_SDI.2.2: 1 FDP_UCT: 6 FDP_UCT.1: 1 FDP_UIT: 6 FDP_UIT.1: 2 FIA: FIA_AFL: 19 FIA_AFL.1: 4 FIA_API: 9 FIA_API.1: 13 FIA_API.1.1: 1 FIA_ATD: 6 FIA_ATD.1: 12 FIA_ATD.1.1: 1 FIA_SOS: 1 FIA_SOS.1: 6 FIA_SOS.1.1: 1 FIA_UAU: 38 FIA_UAU.1: 12 FIA_UAU.1.1: 1 FIA_UAU.1.2: 1 FIA_UAU.4: 12 FIA_UAU.4.1: 1 FIA_UAU.5: 15 FIA_UAU.5.1: 1 FIA_UAU.5.2: 1 FIA_UAU.6: 9 FIA_UAU.6.1: 1 FIA_UID: 7 FIA_UID.1: 14 FIA_UID.1.1: 1 FIA_UID.1.2: 1 FIA_USB: 29 FIA_USB.1: 29 FIA_USB.1.1: 1 FIA_USB.1.2: 1 FIA_USB.1.3: 2 FMT: FMT_LIM: 14 FMT_LIM.1: 8 FMT_LIM.2: 8 FMT_MSA: 52 FMT_MSA.1: 7 FMT_MSA.3: 25 FMT_MSA.3.1: 1 FMT_MSA.3.2: 1 FMT_MTD: 27 FMT_MTD.1: 4 FMT_SMF: 1 FMT_SMF.1: 34 FMT_SMF.1.1: 1 FMT_SMR: 6 FMT_SMR.1: 22 FMT_SMR.1.1: 1 FMT_SMR.1.2: 1 FPT: FPT_EMS: 8 FPT_EMS.1: 10 FPT_EMS.1.1: 1 FPT_FLS: 7 FPT_FLS.1: 17 FPT_FLS.1.1: 2 FPT_ITE: 16 FPT_ITE.1: 12 FPT_ITE.1.1: 2 FPT_ITE.1.2: 2 FPT_ITE.2: 12 FPT_ITE.2.1: 6 FPT_ITE.2.2: 2 FPT_ITT: 5 FPT_ITT.1: 2 FPT_PHP: 5 FPT_PHP.3: 7 FPT_TDC: 1 FPT_TDC.1: 5 FPT_TDC.1.1: 1 FPT_TDC.1.2: 1 FPT_TST: 3 FPT_TST.1: 7 FPT_TST.1.1: 1 FPT_TST.1.2: 1 FPT_TST.1.3: 1 FPT_TST.2: 1 FRU: FRU_FLT: 6 FRU_FLT.2: 3 FTP: FTP_ITC: 12 FTP_ITC.1: 6 FTP_TRP.1: 2	FAU: FAU_SAS: 10 FAU_SAS.1: 7 FAU_SAS.1.1: 1 FCS: FCS_CKM: 61 FCS_CKM.1: 29 FCS_CKM.2: 4 FCS_CKM.4: 26 FCS_CKM.5: 6 FCS_CKM.6: 42 FCS_CKM.6.1: 3 FCS_CKM.6.2: 2 FCS_COP: 141 FCS_COP.1: 20 FCS_RBG.1: 4 FCS_RNG: 32 FCS_RNG.1: 31 FCS_RNG.1.1: 3 FCS_RNG.1.2: 2 FDP: FDP_ACC: 64 FDP_ACC.1: 39 FDP_ACF: 76 FDP_ACF.1: 38 FDP_IFC: 5 FDP_IFC.1: 10 FDP_IFF.1: 1 FDP_ITC.1: 19 FDP_ITC.2: 17 FDP_ITT: 5 FDP_ITT.1: 3 FDP_RIP: 6 FDP_RIP.1: 9 FDP_RIP.1.1: 1 FDP_SDC: 9 FDP_SDC.1: 1 FDP_SDI: 8 FDP_SDI.1: 2 FDP_SDI.2: 6 FDP_SDI.2.1: 1 FDP_SDI.2.2: 1 FDP_UCT: 6 FDP_UCT.1: 1 FDP_UIT: 6 FDP_UIT.1: 2 FIA: FIA_AFL: 19 FIA_AFL.1: 4 FIA_API: 9 FIA_API.1: 13 FIA_API.1.1: 1 FIA_ATD: 6 FIA_ATD.1: 12 FIA_ATD.1.1: 1 FIA_SOS: 1 FIA_SOS.1: 6 FIA_SOS.1.1: 1 FIA_UAU: 38 FIA_UAU.1: 12 FIA_UAU.1.1: 1 FIA_UAU.1.2: 1 FIA_UAU.4: 12 FIA_UAU.4.1: 1 FIA_UAU.5: 15 FIA_UAU.5.1: 1 FIA_UAU.5.2: 1 FIA_UAU.6: 9 FIA_UAU.6.1: 1 FIA_UID: 7 FIA_UID.1: 14 FIA_UID.1.1: 1 FIA_UID.1.2: 1 FIA_USB: 29 FIA_USB.1: 29 FIA_USB.1.1: 1 FIA_USB.1.2: 1 FIA_USB.1.3: 2 FMT: FMT_LIM: 14 FMT_LIM.1: 8 FMT_LIM.2: 8 FMT_MSA: 52 FMT_MSA.1: 7 FMT_MSA.3: 25 FMT_MSA.3.1: 1 FMT_MSA.3.2: 1 FMT_MTD: 27 FMT_MTD.1: 4 FMT_SMF: 1 FMT_SMF.1: 34 FMT_SMF.1.1: 1 FMT_SMR: 6 FMT_SMR.1: 22 FMT_SMR.1.1: 1 FMT_SMR.1.2: 1 FPT: FPT_EMS: 8 FPT_EMS.1: 10 FPT_EMS.1.1: 1 FPT_FLS: 7 FPT_FLS.1: 17 FPT_FLS.1.1: 2 FPT_ITE: 16 FPT_ITE.1: 12 FPT_ITE.1.1: 2 FPT_ITE.1.2: 2 FPT_ITE.2: 12 FPT_ITE.2.1: 6 FPT_ITE.2.2: 2 FPT_ITT: 5 FPT_ITT.1: 2 FPT_PHP: 5 FPT_PHP.3: 7 FPT_TDC: 1 FPT_TDC.1: 5 FPT_TDC.1.1: 1 FPT_TDC.1.2: 1 FPT_TST: 3 FPT_TST.1: 7 FPT_TST.1.1: 1 FPT_TST.1.2: 1 FPT_TST.1.3: 1 FPT_TST.2: 1 FRU: FRU_FLT: 6 FRU_FLT.2: 3 FTP: FTP_ITC: 12 FTP_ITC.1: 6 FTP_TRP.1: 2
pdf_data/st_keywords/cc_claims	O: O.AES: 1 O.PACE_CHIP: 9 O.RND: 3 T: T.RND: 4	O: O.AES: 1 O.PACE_CHIP: 9 O.RND: 3 T: T.RND: 4
pdf_data/st_keywords/vendor	Infineon: Infineon: 1 Infineon Technologies AG: 2 NXP: NXP Semiconductors: 1 STMicroelectronics: STMicroelectronics: 1	Infineon: Infineon: 1 Infineon Technologies AG: 2 NXP: NXP Semiconductors: 1 STMicroelectronics: STMicroelectronics: 1
pdf_data/st_keywords/eval_facility	DeutscheTelekom: Deutsche Telekom Security: 135	DeutscheTelekom: Deutsche Telekom Security: 135
pdf_data/st_keywords/symmetric_crypto	AES_competition: AES: AES: 50 AES-192: 1 AES-256: 1 AES128: 2 DES: 3DES: TDEA: 1 TDES: 1 DES: DES: 2 constructions: MAC: CBC-MAC: 1 CMAC: 36	AES_competition: AES: AES: 50 AES-192: 1 AES-256: 1 AES128: 2 DES: 3DES: TDEA: 1 TDES: 1 DES: DES: 2 constructions: MAC: CBC-MAC: 1 CMAC: 36
pdf_data/st_keywords/asymmetric_crypto	ECC: ECC: ECC: 10 ECDH: ECDH: 5 ECDSA: ECDSA: 26 FF: DH: DH: 4 Diffie-Hellman: 2	ECC: ECC: ECC: 10 ECDH: ECDH: 5 ECDSA: ECDSA: 26 FF: DH: DH: 4 Diffie-Hellman: 2
pdf_data/st_keywords/pq_crypto
pdf_data/st_keywords/hash_function	SHA: SHA1: SHA-1: 5 SHA2: SHA-2: 2 SHA-256: 12 SHA-384: 7 SHA-512: 5 SHA512: 1	SHA: SHA1: SHA-1: 5 SHA2: SHA-2: 2 SHA-256: 12 SHA-384: 7 SHA-512: 5 SHA512: 1
pdf_data/st_keywords/crypto_scheme	KA: Key Agreement: 1 Key agreement: 1 MAC: MAC: 27	KA: Key Agreement: 1 Key agreement: 1 MAC: MAC: 27
pdf_data/st_keywords/crypto_protocol	PACE: PACE: 99 TLS: SSL: SSL: 1	PACE: PACE: 99 TLS: SSL: SSL: 1
pdf_data/st_keywords/randomness	RNG: RND: 7 RNG: 46 TRNG: TRNG: 1	RNG: RND: 7 RNG: 46 TRNG: TRNG: 1
pdf_data/st_keywords/cipher_mode	CBC: CBC: 5 ECB: ECB: 2	CBC: CBC: 5 ECB: ECB: 2
pdf_data/st_keywords/ecc_curve	Brainpool: brainpoolP256r1: 3 brainpoolP384r1: 3 brainpoolP512r1: 2 NIST: NIST P-256: 1 P-256: 3 P-384: 2	Brainpool: brainpoolP256r1: 3 brainpoolP384r1: 3 brainpoolP512r1: 2 NIST: NIST P-256: 1 P-256: 3 P-384: 2
pdf_data/st_keywords/crypto_engine
pdf_data/st_keywords/tls_cipher_suite
pdf_data/st_keywords/crypto_library
pdf_data/st_keywords/vulnerability
pdf_data/st_keywords/side_channel_analysis	FI: DFA: 1 Malfunction: 7 malfunction: 6 physical tampering: 1 SCA: DPA: 1 Leak-Inherent: 8 Physical Probing: 2 Physical probing: 1 SPA: 1 physical probing: 1 other: Bleichenbacher attack: 1	FI: DFA: 1 Malfunction: 7 malfunction: 6 physical tampering: 1 SCA: DPA: 1 Leak-Inherent: 8 Physical Probing: 2 Physical probing: 1 SPA: 1 physical probing: 1 other: Bleichenbacher attack: 1
pdf_data/st_keywords/technical_report_id
pdf_data/st_keywords/device_model
pdf_data/st_keywords/tee_name
pdf_data/st_keywords/os_name
pdf_data/st_keywords/cplc_data
pdf_data/st_keywords/ic_data_group
pdf_data/st_keywords/standard_id	BSI: AIS 31: 1 AIS 36: 1 AIS31: 5 AIS36: 4 CC: CCMB-2022-11-006: 2 FIPS: FIPS 180-4: 1 FIPS 197: 4 FIPS PUB 180-4: 1 FIPS PUB 186-4: 1 FIPS180: 2 FIPS186: 5 FIPS197: 8 ICAO: ICAO: 2 ISO: ISO/IEC 18033-3: 3 ISO/IEC 9797-1: 2 NIST: NIST SP 800-38B: 1 SP 800-38A: 3 PKCS: PKCS#3: 3 PKCS1: 3 RFC: RFC 3447: 1 RFC 5639: 1 RFC3447: 7 RFC5639: 8	BSI: AIS 31: 1 AIS 36: 1 AIS31: 5 AIS36: 4 CC: CCMB-2022-11-006: 2 FIPS: FIPS 180-4: 1 FIPS 197: 4 FIPS PUB 180-4: 1 FIPS PUB 186-4: 1 FIPS180: 2 FIPS186: 5 FIPS197: 8 ICAO: ICAO: 2 ISO: ISO/IEC 18033-3: 3 ISO/IEC 9797-1: 2 NIST: NIST SP 800-38B: 1 SP 800-38A: 3 PKCS: PKCS#3: 3 PKCS1: 3 RFC: RFC 3447: 1 RFC 5639: 1 RFC3447: 7 RFC5639: 8
pdf_data/st_keywords/javacard_version
pdf_data/st_keywords/javacard_api_const
pdf_data/st_keywords/javacard_packages
pdf_data/st_keywords/certification_process
pdf_data/st_metadata	/Author: Deutsche Telekom Security GmbH /CreationDate: D:20260611093646+02'00' /Creator: Microsoft® Word für Microsoft 365 /Keywords: "TCOS FlexCert, Generation 2", Gesundheitskarte, electronic health card, TCOS /ModDate: D:20260611093646+02'00' /Producer: Microsoft® Word für Microsoft 365 /Subject: TCOS FlexCert Version 2.0 Release 2 /Title: Security Target TCOS FlexCert Version 2.0 Release 2 pdf_file_size_bytes: 3188796 pdf_hyperlinks: http://csrc.nist.gov/groups/ST/toolkit/rng/documents/sts-2.1.1.zip, http://www.phy.duke.edu/~rgb/General/dieharder/dieharder-3.31.0.tgz pdf_is_encrypted: False pdf_number_of_pages: 129	/Author: Deutsche Telekom Security GmbH /CreationDate: D:20260611093646+02'00' /Creator: Microsoft® Word für Microsoft 365 /Keywords: "TCOS FlexCert, Generation 2", Gesundheitskarte, electronic health card, TCOS /ModDate: D:20260611093646+02'00' /Producer: Microsoft® Word für Microsoft 365 /Subject: TCOS FlexCert Version 2.0 Release 2 /Title: Security Target TCOS FlexCert Version 2.0 Release 2 pdf_file_size_bytes: 3188796 pdf_hyperlinks: http://csrc.nist.gov/groups/ST/toolkit/rng/documents/sts-2.1.1.zip, http://www.phy.duke.edu/~rgb/General/dieharder/dieharder-3.31.0.tgz pdf_is_encrypted: False pdf_number_of_pages: 129
state/cert/convert_garbage	None	None
state/cert/convert_ok	True	True
state/cert/download_ok	True	True
state/cert/extract_ok	True	True
state/cert/source_hash	Equal	Equal
state/cert/txt_hash	Equal	Equal
state/report/convert_garbage	None	None
state/report/convert_ok	True	False
state/report/download_ok	True	False
state/report/extract_ok	True	False
state/report/source_hash	Different	Different
state/report/txt_hash	Different	Different
state/report/json_hash	Equal	Equal
state/st/convert_garbage	None	None
state/st/convert_ok	True	True
state/st/download_ok	True	True
state/st/extract_ok	True	True
state/st/source_hash	Equal	Equal
state/st/txt_hash	Equal	Equal
state/st/json_hash	Equal	Equal
dgst	122fa718060e7cdd	d64e39fcf832abcb
other_metadata/certificate_id	EUCC-3087-2026-0012	EUCC-3087-2026-0012
other_metadata/product_name	TCOS FlexCert Version 2.0 Release 2/SLC52	TCOS FlexCert Version 2.0 Release 2/SLC52
other_metadata/product_type	Smartcards and similar devices	Smartcards and similar devices
other_metadata/product_version	Refer to Table 1 in the Certification Report	Refer to Table 1 in the Certification Report
other_metadata/holder_name	Deutsche Telekom Security GmbH	Deutsche Telekom Security GmbH
other_metadata/holder_address	Koblenzer Straße 87-93, 57072 Siegen	Koblenzer Straße 87-93, 57072 Siegen
other_metadata/holder_contact	None	None
other_metadata/holder_website	https://www.telekom.com/en/company/data-privacy-and-security/hacking-and-testing	https://www.telekom.com/en/company/data-privacy-and-security/hacking-and-testing
other_metadata/certification_body	BSI	BSI
other_metadata/nando_id	3087	3087
other_metadata/certification_body_address	Postfach 200363\n53133 Bonn, Bonn	Postfach 200363\n53133 Bonn, Bonn
other_metadata/certification_body_contact	[email protected] Phone: +49 228 99 9582-0	[email protected] Phone: +49 228 99 9582-0
other_metadata/itsef	SRC Security Research & Consulting GmbH	SRC Security Research & Consulting GmbH
other_metadata/responsible_ncca	Bundesamt für Sicherheit in der Informationstechnik	Bundesamt für Sicherheit in der Informationstechnik
other_metadata/scheme	(UE) 2024/482 - EUCC	(UE) 2024/482 - EUCC
other_metadata/report_reference	EUCC-3087-2026-0012 Certificate Report
other_metadata/assurance_level	High	High
other_metadata/cc_version	CC:2022 Revision 1	CC:2022 Revision 1
other_metadata/cem_version	CEM:2022 Revision 1
other_metadata/ava_van_level	5	5
other_metadata/protection_profile	Common Criteria Protection Profile Card Operating System Generation 2 (PP COS G2), Version 2.1, 10 July 2019, BSI-CC-PP-0082-V4-2019, Bundesamt für Sicherheit in der Informationstechnik (BSI)	Common Criteria Protection Profile Card Operating System Generation 2 (PP COS G2), Version 2.1, 10 July 2019, BSI-CC-PP-0082-V4-2019, Bundesamt für Sicherheit in der Informationstechnik (BSI)
other_metadata/issuance_year	2026	2026
other_metadata/issuance_month	7	7
other_metadata/issuance_date_full	03/07/2026	03/07/2026
other_metadata/modification_or_reassurance	None	None
other_metadata/validity_period_years	5 years	5 years