This page was not yet optimized for use on mobile devices.

Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.

	STARCOS 3.7 COS HBA-SMC EUCC-3087-2026-11	STARCOS 3.7 COS HBA-SMC EUCC-3087-2026-11
name	STARCOS 3.7 COS HBA-SMC	STARCOS 3.7 COS HBA-SMC
category	SMARTCARDS AND SIMILAR DEVICES	SMARTCARDS AND SIMILAR DEVICES
scheme	DE	DE
status	active	active
not_valid_after	17.06.2031	17.06.2031
not_valid_before	17.06.2026	17.06.2026
cert_link	https://certification.enisa.europa.eu/document/download/1816b716-b06c-4989-9b42-0a7c915e2aa4_en?filename=EUCC-3087-2026-0011%20Certificate.pdf	https://certification.enisa.europa.eu/document/download/1816b716-b06c-4989-9b42-0a7c915e2aa4_en?filename=EUCC-3087-2026-0011%20Certificate.pdf
report_link	https://certification.enisa.europa.eu/document/download/986b1328-abf8-438f-a553-5805097abdd7_en?filename=EUCC-3087-2026-0011%20Certification%20Report.pdf
st_link	https://certification.enisa.europa.eu/document/download/01f49505-5305-448c-924b-09b8904996ec_en?filename=EUCC-3087-2026-0011%20Security%20Target.pdf	https://certification.enisa.europa.eu/document/download/01f49505-5305-448c-924b-09b8904996ec_en?filename=EUCC-3087-2026-0011%20Security%20Target.pdf
manufacturer	Giesecke+Devrient ePayments GmbH	Giesecke+Devrient ePayments GmbH
manufacturer_web	https://www.gi-de.com/en/cybersecurity-information	https://www.gi-de.com/en/cybersecurity-information
security_level	{}	{}
heuristics/cert_id	EUCC-3087-2026-11	EUCC-3087-2026-11
heuristics/cert_lab	BSI	[]
heuristics/cpe_matches	{}	{}
heuristics/verified_cpe_matches	{}	{}
heuristics/related_cves	{}	{}
heuristics/direct_transitive_cves	{}	{}
heuristics/indirect_transitive_cves	{}	{}
heuristics/extracted_sars	AGD_PRE.1, ALC_CMC.5, ALC_DEL.1, ALC_TAT.3, ALC_LCD.1, ADV_FSP.4, ASE_CCL.1, ASE_OBJ.2, ALC_DVS.2, ASE_ECD.1, ASE_SPD.1, ALC_CMS.4, AVA_VAN.5, ADV_IMP.2, ASE_REQ.2, ADV_ARC.1, ALC_FLR.1, ADV_INT.3, ASE_TSS.1, ATE_DPT.2, ADV_TDS.5, ATE_FUN.2, ATE_IND.2, AGD_OPE.1, ASE_INT.1, ATE_COV.3	AGD_PRE.1, ALC_CMC.5, ALC_DEL.1, ALC_TAT.3, ALC_LCD.1, ADV_FSP.4, ASE_CCL.1, ASE_OBJ.2, ALC_DVS.2, ASE_ECD.1, ASE_SPD.1, ALC_CMS.4, AVA_VAN.5, ADV_IMP.2, ASE_REQ.2, ADV_ARC.1, ALC_FLR.1, ADV_INT.3, ASE_TSS.1, ATE_DPT.2, ADV_TDS.5, ATE_FUN.2, ATE_IND.2, AGD_OPE.1, ASE_INT.1, ATE_COV.3
heuristics/extracted_versions	3.7	3.7
heuristics/prev_certificates	{}	{}
heuristics/next_certificates	{}	{}
heuristics/report_references/directly_referenced_by	{}	{}
heuristics/report_references/directly_referencing	{}	{}
heuristics/report_references/indirectly_referenced_by	{}	{}
heuristics/report_references/indirectly_referencing	{}	{}
heuristics/scheme_data	category: eHealth cert_id: EUCC-3087-2026-0011 certification_date: 17.06.2026 enhanced: applicant: Giesecke & Devrient GmbH seit 1. Juli 2017 Giesecke+Devrient Mobile Security GmbH seit 1. Juli 2023 Giesecke+Devrient ePayments GmbH Prinzregentenstr. 161 81677 München assurance_level: EAL4+,ALC_DVS.2,ATE_DPT.2,AVA_VAN.5,ALC_FLR.1 certification_date: 17.06.2026 description: The Target of Evaluation (TOE) is the product STARCOS 3.6 COSGKV C1 developed by Giesecke & Devrient GmbH. The TOE is a smart card product according to the G2 Card Operating System (G2-COS) specification from gematik. The TOE is intended to be used as a card operating system platform for specific card types and applications of the card generation G2 in the framework of the German health care system, and therefore implements the mandatory part of the G2-COS specification with the base functionality of the operating system platform only. The TOE implements from the PP-0082-V2 the base part without any of the optional packages. entries: [frozendict({'id': 'EUCC-3087-2026-0011 / BSI-DSZ-CC-0976-V5-2026 (Ausstellungsdatum / Certification Date 17.06.2026, gültig bis / valid until 16.06.2031)', 'description': "The focus of this re-certification was on the transfer of the certification procedure to CC/CEM:2022 and to EUCC. Included is the update of the product life-cycle concerning the involved development and production sites, the underlying HW-certificate as well as the vulnerability analysis and valuation of the TOE's (crypto) implementation. The certified product itself including its related guidance documentation did not change."}), frozendict({'id': 'BSI', 'description': "The maintenance procedure for BSI-DSZ-CC-0976-V4-2021 covers the update of the product life-cycle concerning the involved development and production sites and additionally addresses the update of the Security Target (ST) and user guidance documentation regards the TOE's random number generation functionality. The certified product itself did not change."}), frozendict({'id': 'BSI', 'description': 'The partial ALC re-evaluation for procedure 0976-V4 covers the update of the product life-cycle concerning the involved development and production sites. The certified product itself did not change.'}), frozendict({'id': 'BSI', 'description': 'The focus of this re-certification was on the adaptation of the Target of Evaluation (TOE) to the current version of the G2.1 COS-specification from gematik and the corresponding Protection Profile PP-0082-V4. This was related to the re-certification of the underlying Integrated Circuit (IC), to adaptations in the life-cycle model, to the integration of the functional packages Crypto Box and Logical Channel, to further specific changes in the Embedded Software as well as a corresponding update of the associated user guidance documentation. In particular, the TOE’s (crypto) implementation was revised, re-evaluated and re-assessed.'}), frozendict({'id': 'BSI', 'description': 'The partial ALC re-evaluation for procedure 0976-V3 covers the update of the product life-cycle concerning the involved development and production sites. The certified product itself did not change.'}), frozendict({'id': 'BSI', 'description': 'The partial ALC re-evaluation for procedure 0976-V3 covers the update of the product life-cycle concerning the involved development and production sites. The certified product itself did not change.'}), frozendict({'id': 'BSI', 'description': 'Software'}), frozendict({'id': 'BSI-DSZ-CC-0976-V2-2018 (Ausstellungsdatum / Certification Date 20.09.2018, gültig bis / valid until 19.09.2023) Zertifizierungsreport / Certification Report Sicherheitsvorgaben / Security Target Zertifikate / Certificate Im Fokus der vorliegenden Re-Zertifizierung stand die Anpassung des Evaluierungsgegenstandes (EVG) an die aktuelle Version der G2.1 COS-Spezifikation der gematik und das zugehörige überarbeitete Schutzprofil PP-0082-V3. Dies war verbunden mit einem Wechsel des unterliegenden Halbleiters, Anpassungen im Lebenszyklusmodell sowie spezifischen Änderungen in der Embedded Software und einer entsprechenden Aktualisierung der zugehörigen Benutzerdokumentation.', 'description': 'Software'}), frozendict({'id': 'BSI', 'description': 'The changes are related to an update and reevaluation of the product life-cycle caused by changes in the development and porduction sites. The certified product itself did not change.'}), frozendict({'id': 'BSI', 'description': 'Security Target'}), frozendict({'id': 'BSI', 'description': 'Security Target'})] evaluation_facility: SRC Security Research & Consulting GmbH expiration_date: 16.06.2031 product: STARCOS 3.7 COS HBA-SMC protection_profile: Card Operating System Generation 2 (PP COS G2), Version 2.1, 10 July 2019, BSI-CC-PP-0082-V4-2019 product: STARCOS 3.7 COS HBA-SMC subcategory: Smartcards url: https://www.bsi.bund.de/SharedDocs/Zertifikate_CC/CC/Gesundheitswesen_SmartCards/0976.html vendor: Giesecke & Devrient GmbH seit 1. Juli 2017 Giesecke+Devrient Mobile Security GmbH seit 1. Juli 2023 Giesecke+Devrient ePayments GmbH	category: eHealth cert_id: EUCC-3087-2026-0011 certification_date: 17.06.2026 enhanced: applicant: Giesecke & Devrient GmbH seit 1. Juli 2017 Giesecke+Devrient Mobile Security GmbH seit 1. Juli 2023 Giesecke+Devrient ePayments GmbH Prinzregentenstr. 161 81677 München assurance_level: EAL4+,ALC_DVS.2,ATE_DPT.2,AVA_VAN.5,ALC_FLR.1 certification_date: 17.06.2026 description: The Target of Evaluation (TOE) is the product STARCOS 3.6 COSGKV C1 developed by Giesecke & Devrient GmbH. The TOE is a smart card product according to the G2 Card Operating System (G2-COS) specification from gematik. The TOE is intended to be used as a card operating system platform for specific card types and applications of the card generation G2 in the framework of the German health care system, and therefore implements the mandatory part of the G2-COS specification with the base functionality of the operating system platform only. The TOE implements from the PP-0082-V2 the base part without any of the optional packages. entries: [frozendict({'id': 'EUCC-3087-2026-0011 / BSI-DSZ-CC-0976-V5-2026 (Ausstellungsdatum / Certification Date 17.06.2026, gültig bis / valid until 16.06.2031)', 'description': "The focus of this re-certification was on the transfer of the certification procedure to CC/CEM:2022 and to EUCC. Included is the update of the product life-cycle concerning the involved development and production sites, the underlying HW-certificate as well as the vulnerability analysis and valuation of the TOE's (crypto) implementation. The certified product itself including its related guidance documentation did not change."}), frozendict({'id': 'BSI', 'description': "The maintenance procedure for BSI-DSZ-CC-0976-V4-2021 covers the update of the product life-cycle concerning the involved development and production sites and additionally addresses the update of the Security Target (ST) and user guidance documentation regards the TOE's random number generation functionality. The certified product itself did not change."}), frozendict({'id': 'BSI', 'description': 'The partial ALC re-evaluation for procedure 0976-V4 covers the update of the product life-cycle concerning the involved development and production sites. The certified product itself did not change.'}), frozendict({'id': 'BSI', 'description': 'The focus of this re-certification was on the adaptation of the Target of Evaluation (TOE) to the current version of the G2.1 COS-specification from gematik and the corresponding Protection Profile PP-0082-V4. This was related to the re-certification of the underlying Integrated Circuit (IC), to adaptations in the life-cycle model, to the integration of the functional packages Crypto Box and Logical Channel, to further specific changes in the Embedded Software as well as a corresponding update of the associated user guidance documentation. In particular, the TOE’s (crypto) implementation was revised, re-evaluated and re-assessed.'}), frozendict({'id': 'BSI', 'description': 'The partial ALC re-evaluation for procedure 0976-V3 covers the update of the product life-cycle concerning the involved development and production sites. The certified product itself did not change.'}), frozendict({'id': 'BSI', 'description': 'The partial ALC re-evaluation for procedure 0976-V3 covers the update of the product life-cycle concerning the involved development and production sites. The certified product itself did not change.'}), frozendict({'id': 'BSI', 'description': 'Software'}), frozendict({'id': 'BSI-DSZ-CC-0976-V2-2018 (Ausstellungsdatum / Certification Date 20.09.2018, gültig bis / valid until 19.09.2023) Zertifizierungsreport / Certification Report Sicherheitsvorgaben / Security Target Zertifikate / Certificate Im Fokus der vorliegenden Re-Zertifizierung stand die Anpassung des Evaluierungsgegenstandes (EVG) an die aktuelle Version der G2.1 COS-Spezifikation der gematik und das zugehörige überarbeitete Schutzprofil PP-0082-V3. Dies war verbunden mit einem Wechsel des unterliegenden Halbleiters, Anpassungen im Lebenszyklusmodell sowie spezifischen Änderungen in der Embedded Software und einer entsprechenden Aktualisierung der zugehörigen Benutzerdokumentation.', 'description': 'Software'}), frozendict({'id': 'BSI', 'description': 'The changes are related to an update and reevaluation of the product life-cycle caused by changes in the development and porduction sites. The certified product itself did not change.'}), frozendict({'id': 'BSI', 'description': 'Security Target'}), frozendict({'id': 'BSI', 'description': 'Security Target'})] evaluation_facility: SRC Security Research & Consulting GmbH expiration_date: 16.06.2031 product: STARCOS 3.7 COS HBA-SMC protection_profile: Card Operating System Generation 2 (PP COS G2), Version 2.1, 10 July 2019, BSI-CC-PP-0082-V4-2019 product: STARCOS 3.7 COS HBA-SMC subcategory: Smartcards url: https://www.bsi.bund.de/SharedDocs/Zertifikate_CC/CC/Gesundheitswesen_SmartCards/0976.html vendor: Giesecke & Devrient GmbH seit 1. Juli 2017 Giesecke+Devrient Mobile Security GmbH seit 1. Juli 2023 Giesecke+Devrient ePayments GmbH
heuristics/st_references/directly_referenced_by	{}	{}
heuristics/st_references/directly_referencing	{}	{}
heuristics/st_references/indirectly_referenced_by	{}	{}
heuristics/st_references/indirectly_referencing	{}	{}
heuristics/protection_profiles	{}	{}
protection_profiles
protection_profile_links	{}	{}
pdf_data/cert_filename	1816b716-b06c-4989-9b42-0a7c915e2aa4_en	1816b716-b06c-4989-9b42-0a7c915e2aa4_en
pdf_data/cert_frontpage
pdf_data/cert_keywords/cc_cert_id	DE: BSI-DSZ-CC-0976-V5-2026: 1 EUCC-3087-2026-0011: 1	DE: BSI-DSZ-CC-0976-V5-2026: 1 EUCC-3087-2026-0011: 1
pdf_data/cert_keywords/cc_protection_profile_id
pdf_data/cert_keywords/cc_security_level	EAL: EAL 2: 1 EAL 4: 1	EAL: EAL 2: 1 EAL 4: 1
pdf_data/cert_keywords/cc_sar	ALC: ALC_DVS.2: 1 ALC_FLR: 1 ALC_FLR.1: 1 ATE: ATE_DPT.2: 1 AVA: AVA_VAN: 1 AVA_VAN.5: 2	ALC: ALC_DVS.2: 1 ALC_FLR: 1 ALC_FLR.1: 1 ATE: ATE_DPT.2: 1 AVA: AVA_VAN: 1 AVA_VAN.5: 2
pdf_data/cert_keywords/cc_sfr
pdf_data/cert_keywords/cc_claims
pdf_data/cert_keywords/vendor	GD: Giesecke+Devrient: 1	GD: Giesecke+Devrient: 1
pdf_data/cert_keywords/eval_facility	SRC: SRC Security Research & Consulting: 1	SRC: SRC Security Research & Consulting: 1
pdf_data/cert_keywords/symmetric_crypto
pdf_data/cert_keywords/asymmetric_crypto
pdf_data/cert_keywords/pq_crypto
pdf_data/cert_keywords/hash_function
pdf_data/cert_keywords/crypto_scheme
pdf_data/cert_keywords/crypto_protocol
pdf_data/cert_keywords/randomness
pdf_data/cert_keywords/cipher_mode
pdf_data/cert_keywords/ecc_curve
pdf_data/cert_keywords/crypto_engine
pdf_data/cert_keywords/tls_cipher_suite
pdf_data/cert_keywords/crypto_library
pdf_data/cert_keywords/vulnerability
pdf_data/cert_keywords/side_channel_analysis
pdf_data/cert_keywords/technical_report_id
pdf_data/cert_keywords/device_model
pdf_data/cert_keywords/tee_name
pdf_data/cert_keywords/os_name	STARCOS: STARCOS 3: 1	STARCOS: STARCOS 3: 1
pdf_data/cert_keywords/cplc_data
pdf_data/cert_keywords/ic_data_group
pdf_data/cert_keywords/standard_id	ISO: ISO/IEC 15408: 2 ISO/IEC 18045: 2	ISO: ISO/IEC 15408: 2 ISO/IEC 18045: 2
pdf_data/cert_keywords/javacard_version
pdf_data/cert_keywords/javacard_api_const
pdf_data/cert_keywords/javacard_packages
pdf_data/cert_keywords/certification_process
pdf_data/cert_metadata	/CreationDate: D:20260622060106+01'00' /Creator: KM_C300i /ModDate: D:20260622060106+01'00' /Producer: KONICA MINOLTA bizhub C300i /Title: KM_C300i26062206000 pdf_file_size_bytes: 125061 pdf_hyperlinks: {} pdf_is_encrypted: False pdf_number_of_pages: 2	/CreationDate: D:20260622060106+01'00' /Creator: KM_C300i /ModDate: D:20260622060106+01'00' /Producer: KONICA MINOLTA bizhub C300i /Title: KM_C300i26062206000 pdf_file_size_bytes: 125061 pdf_hyperlinks: {} pdf_is_encrypted: False pdf_number_of_pages: 2
pdf_data/report_filename	986b1328-abf8-438f-a553-5805097abdd7_en
pdf_data/report_frontpage	DE: cert_id: BSI-DSZ-CC-0976-V5-2026 cert_item: STARCOS 3.7 COS HBA-SMC cert_lab: BSI developer: Giesecke+Devrient ePayments GmbH match_rules: *['(BSI-DSZ-CC-.+?) (?:for\|For) (.+?) from (.)']**	DE:
pdf_data/report_keywords/cc_cert_id	DE: BSI-DSZ-CC-0976-V4-2021: 2 BSI-DSZ-CC-0976-V5-2026: 44 BSI-DSZ-CC-1110-: 1 BSI-DSZ-CC-1110-V8-2025: 7 BSI-DSZ-CC-S-0347-2026: 1 EUCC-3087-2026-0011: 39 FR: ANSSI-CC-SITE-2025/03: 2 ANSSI-CC-SITE-2025/05: 2
pdf_data/report_keywords/cc_protection_profile_id	BSI: BSI-CC-PP-0082-V4-2019: 3
pdf_data/report_keywords/cc_security_level	EAL: EAL 2: 2 EAL 4: 1
pdf_data/report_keywords/cc_sar	ADV: ADV_ARC: 1 ALC: ALC_DVS.2: 1 ALC_FLR: 2 ALC_FLR.1: 1 ATE: ATE_DPT.2: 1 AVA: AVA_VAN.5: 2
pdf_data/report_keywords/cc_sfr	FCS: FCS_CKM: 4 FCS_COP: 29 FCS_RNG: 3 FCS_RNG.1: 1 FIA: FIA_UAU: 2 FIA_USB: 1 FPT: FPT_ITE.1: 1 FTP: FTP_ITC: 2
pdf_data/report_keywords/cc_claims
pdf_data/report_keywords/vendor	GD: G+D: 2 Giesecke+Devrient: 31 Infineon: Infineon: 10 Infineon Technologies AG: 6
pdf_data/report_keywords/eval_facility	SRC: SRC Security Research & Consulting: 6 TUV: TÜV Informationstechnik: 1
pdf_data/report_keywords/symmetric_crypto	AES_competition: AES: AES: 29 HPC: HPC: 4 constructions: MAC: CMAC: 15
pdf_data/report_keywords/asymmetric_crypto	ECC: ECC: ECC: 8 ECDH: ECDH: 3 ECDSA: ECDSA: 14 FF: DH: Diffie-Hellman: 1 RSA: RSA-OAEP: 2
pdf_data/report_keywords/pq_crypto
pdf_data/report_keywords/hash_function	SHA: SHA2: SHA-256: 3
pdf_data/report_keywords/crypto_scheme	KA: Key Agreement: 1 MAC: MAC: 3
pdf_data/report_keywords/crypto_protocol	PACE: PACE: 11
pdf_data/report_keywords/randomness	PRNG: PRNG: 1 RNG: RNG: 4
pdf_data/report_keywords/cipher_mode	CBC: CBC: 10
pdf_data/report_keywords/ecc_curve
pdf_data/report_keywords/crypto_engine
pdf_data/report_keywords/tls_cipher_suite
pdf_data/report_keywords/crypto_library
pdf_data/report_keywords/vulnerability
pdf_data/report_keywords/side_channel_analysis	FI: DFA: 1 fault injection: 1 malfunction: 1 SCA: DPA: 1 SPA: 1 side channel: 1 other: JIL: 2
pdf_data/report_keywords/technical_report_id	BSI: BSI TR-03116-1: 1 BSI TR-03143: 5 BSI TR-03144: 10
pdf_data/report_keywords/device_model
pdf_data/report_keywords/tee_name
pdf_data/report_keywords/os_name	STARCOS: STARCOS 3: 37
pdf_data/report_keywords/cplc_data
pdf_data/report_keywords/ic_data_group
pdf_data/report_keywords/standard_id	BSI: AIS 1: 2 AIS 14: 1 AIS 19: 1 AIS 20: 5 AIS 25: 2 AIS 26: 1 AIS 31: 4 AIS 32: 2 AIS 37: 2 AIS 38: 2 AIS 46: 2 FIPS: FIPS 180-4: 9 FIPS 197: 12 FIPS PUB 180-4: 1 FIPS PUB 197: 1 ISO: ISO/IEC 15408: 2 ISO/IEC 17065: 2 ISO/IEC 18031:2005: 1 ISO/IEC 18045: 2 PKCS: PKCS#1: 5 RFC: RFC 5639: 15
pdf_data/report_keywords/javacard_version
pdf_data/report_keywords/javacard_api_const
pdf_data/report_keywords/javacard_packages
pdf_data/report_keywords/certification_process	ConfidentialDocument: 1.0, 21 May 2026, Giesecke+Devrient ePayments GmbH (confidential document) 6 specifically • AIS 1, Version 14, Durchführung der Ortsbesichtigung in der Entwicklungsumgebung: 1 design step H13, Version 6.2, 26 June 2025, Infineon Technologies AG, BSI-DSZ-CC-1110-V8-2025 (confidential document) Security Target Lite of the underlying hardware platform, Security Target IFX_CCI_000003h: 1 for STARCOS 3.7 COS HBA-SMC, Version 3.2, 24 May 2026, SRC Security Research & Consulting GmbH (confidential document) [ConfList] Configuration List BSI-DSZ-CC-0976-V5-2026, Configuration List STARCOS 3.7 COS HBA-SMC: 1 procedure BSI-DSZ-CC-1110-V8-2025, Version 2, 25 July 2025, TÜV Informationstechnik GmbH (confidential document) [Spec G2 COS] Einführung der Gesundheitskarte, Spezifikation des Card Operating System (COS: 1
pdf_data/report_metadata	/CreationDate: D:20260702102033+02'00' /Creator: Writer /Keywords: Common Criteria, Certification, Zertifizierung, G2 COS, eHealth, gematik /Producer: LibreOffice 5.3 /Subject: STARCOS 3.7 COS HBA-SMC from G+D ePayments GmbH /Title: Certification Report EUCC-3087-jjjj-mm-nnnn; BSI-DSZ-CC-0976-V5 pdf_file_size_bytes: 708967 pdf_hyperlinks: https://www.iso.org/standard/72889.html, https://www.bsi.bund.de/zertifizierung, https://www.iso.org/standard/72891.html, https://www.iso.org/standard/72906.html, https://www.iso.org/standard/72892.html, https://certification.enisa.europa.eu/publications/eucc-state-art-documents_en, https://www.commoncriteriaportal.org/, https://www.iso.org/standard/72913.html, https://certification.enisa.europa.eu/, https://eur-lex.europa.eu/eli/reg_impl/2025/2462/oj, https://www.bsi.bund.de/AIS, https://www.bsi.bund.de/zertifizierungsreporte, https://www.gi-de.com/en/cybersecurity-information, https://www.iso.org/standard/72917.html, http://www.commoncriteriaportal.org/ pdf_is_encrypted: False pdf_number_of_pages: 39
pdf_data/st_filename	01f49505-5305-448c-924b-09b8904996ec_en	01f49505-5305-448c-924b-09b8904996ec_en
pdf_data/st_frontpage
pdf_data/st_keywords/cc_cert_id	DE: BSI-DSZ-CC-1110-V8-2025: 1	DE: BSI-DSZ-CC-1110-V8-2025: 1
pdf_data/st_keywords/cc_protection_profile_id	BSI: BSI-CC-PP- 0082-V4: 1 BSI-CC-PP- 0084-2014: 6 BSI-CC-PP-0035-2007: 1 BSI-CC-PP-0082-V4: 32 BSI-CC-PP-0084-: 4 BSI-CC-PP-0084-2007: 1 BSI-CC-PP-0084-2014: 51 BSI-PP-0084-: 2 BSI-PP-0084-2014: 8	BSI: BSI-CC-PP- 0082-V4: 1 BSI-CC-PP- 0084-2014: 6 BSI-CC-PP-0035-2007: 1 BSI-CC-PP-0082-V4: 32 BSI-CC-PP-0084-: 4 BSI-CC-PP-0084-2007: 1 BSI-CC-PP-0084-2014: 51 BSI-PP-0084-: 2 BSI-PP-0084-2014: 8
pdf_data/st_keywords/cc_security_level	EAL: EAL 4: 2 EAL 5: 1 EAL4: 14 EAL4 augmented: 4 EAL5: 1 EAL5 augmented: 1 EAL6: 1 EAL6 augmented: 1	EAL: EAL 4: 2 EAL 5: 1 EAL4: 14 EAL4 augmented: 4 EAL5: 1 EAL5 augmented: 1 EAL6: 1 EAL6 augmented: 1
pdf_data/st_keywords/cc_sar	ADV: ADV_ARC: 2 ADV_ARC.1: 9 ADV_FSP: 2 ADV_FSP.4: 6 ADV_IMP: 2 ADV_IMP.1: 6 ADV_IMP.2: 1 ADV_INT.3: 1 ADV_TDS.3: 3 ADV_TDS.5: 1 AGD: AGD_OPE: 2 AGD_OPE.1: 6 AGD_PRE: 2 AGD_PRE.1: 2 ALC: ALC_CMC: 2 ALC_CMC.4: 1 ALC_CMC.5: 1 ALC_CMS: 2 ALC_CMS.4: 1 ALC_DEL: 2 ALC_DEL.1: 1 ALC_DVS: 2 ALC_DVS.2: 13 ALC_FLR.1: 11 ALC_LCD.1: 1 ALC_TAT.1: 1 ALC_TAT.3: 1 ASE: ASE_CCL.1: 1 ASE_ECD: 1 ASE_ECD.1: 1 ASE_INT.1: 1 ASE_OBJ.2: 1 ASE_REQ.2: 1 ASE_SPD.1: 1 ASE_TSS.1: 1 ATE: ATE_COV: 2 ATE_COV.2: 1 ATE_COV.3: 1 ATE_DPT.1: 1 ATE_DPT.2: 11 ATE_FUN.1: 6 ATE_FUN.2: 1 ATE_IND.2: 5 AVA: AVA_VAN: 2 AVA_VAN.5: 11	ADV: ADV_ARC: 2 ADV_ARC.1: 9 ADV_FSP: 2 ADV_FSP.4: 6 ADV_IMP: 2 ADV_IMP.1: 6 ADV_IMP.2: 1 ADV_INT.3: 1 ADV_TDS.3: 3 ADV_TDS.5: 1 AGD: AGD_OPE: 2 AGD_OPE.1: 6 AGD_PRE: 2 AGD_PRE.1: 2 ALC: ALC_CMC: 2 ALC_CMC.4: 1 ALC_CMC.5: 1 ALC_CMS: 2 ALC_CMS.4: 1 ALC_DEL: 2 ALC_DEL.1: 1 ALC_DVS: 2 ALC_DVS.2: 13 ALC_FLR.1: 11 ALC_LCD.1: 1 ALC_TAT.1: 1 ALC_TAT.3: 1 ASE: ASE_CCL.1: 1 ASE_ECD: 1 ASE_ECD.1: 1 ASE_INT.1: 1 ASE_OBJ.2: 1 ASE_REQ.2: 1 ASE_SPD.1: 1 ASE_TSS.1: 1 ATE: ATE_COV: 2 ATE_COV.2: 1 ATE_COV.3: 1 ATE_DPT.1: 1 ATE_DPT.2: 11 ATE_FUN.1: 6 ATE_FUN.2: 1 ATE_IND.2: 5 AVA: AVA_VAN: 2 AVA_VAN.5: 11
pdf_data/st_keywords/cc_sfr	FAU: FAU_SAS: 8 FAU_SAS.1: 3 FCS: FCS_CKM: 84 FCS_CKM.1: 40 FCS_CKM.2: 9 FCS_CKM.3: 1 FCS_CKM.5: 42 FCS_CKM.6: 65 FCS_CKM.6.1: 2 FCS_CKM.6.2: 1 FCS_COP: 191 FCS_COP.1: 23 FCS_COP.1.1: 1 FCS_RBG.1: 9 FCS_RNG: 35 FCS_RNG.1: 32 FCS_RNG.1.1: 3 FCS_RNG.1.2: 2 FDP: FDP_ACC: 123 FDP_ACC.1: 44 FDP_ACF: 110 FDP_ACF.1: 41 FDP_IFC: 7 FDP_IFC.1: 16 FDP_ITC.1: 35 FDP_ITC.2: 35 FDP_ITT: 7 FDP_ITT.1: 3 FDP_RIP: 9 FDP_RIP.1: 14 FDP_RIP.1.1: 1 FDP_SDC: 8 FDP_SDC.1: 3 FDP_SDI: 7 FDP_SDI.1: 1 FDP_SDI.2: 11 FDP_SDI.2.1: 1 FDP_SDI.2.2: 1 FDP_UCT: 7 FDP_UCT.1: 1 FDP_UIT: 8 FDP_UIT.1: 2 FIA: FIA_ACC: 1 FIA_ACF: 1 FIA_AFL: 22 FIA_AFL.1: 4 FIA_API: 10 FIA_API.1: 16 FIA_API.1.1: 1 FIA_ATD: 10 FIA_ATD.1: 20 FIA_ATD.1.1: 1 FIA_SOS.1: 8 FIA_SOS.1.1: 1 FIA_UAU: 50 FIA_UAU.1: 20 FIA_UAU.1.1: 1 FIA_UAU.1.2: 1 FIA_UAU.4: 12 FIA_UAU.4.1: 1 FIA_UAU.5: 17 FIA_UAU.5.1: 1 FIA_UAU.5.2: 1 FIA_UAU.6: 12 FIA_UAU.6.1: 1 FIA_UID: 14 FIA_UID.1: 19 FIA_UID.1.1: 1 FIA_UID.1.2: 1 FIA_USB: 32 FIA_USB.1: 30 FIA_USB.1.1: 1 FIA_USB.1.2: 1 FIA_USB.1.3: 2 FMT: FMT_LIM: 15 FMT_LIM.1: 3 FMT_LIM.2: 2 FMT_MSA: 68 FMT_MSA.1: 8 FMT_MSA.3: 39 FMT_MSA.3.1: 1 FMT_MSA.3.2: 1 FMT_MTD: 38 FMT_MTD.1: 4 FMT_SMF.1: 51 FMT_SMF.1.1: 1 FMT_SMR: 9 FMT_SMR.1: 41 FMT_SMR.1.1: 1 FMT_SMR.1.2: 1 FMT_SRM: 1 FPT: FPT_EMS: 15 FPT_EMS.1: 12 FPT_EMS.1.1: 1 FPT_FLS: 7 FPT_FLS.1: 18 FPT_FLS.1.1: 1 FPT_ITE: 11 FPT_ITE.1: 11 FPT_ITE.1.1: 1 FPT_ITE.1.2: 1 FPT_ITE.2: 13 FPT_ITE.2.1: 5 FPT_ITE.2.2: 1 FPT_ITT: 7 FPT_ITT.1: 3 FPT_PHP: 7 FPT_PHP.3: 4 FPT_TDC.1: 10 FPT_TDC.1.1: 1 FPT_TDC.1.2: 1 FPT_TST: 2 FPT_TST.1: 11 FPT_TST.1.1: 1 FPT_TST.1.2: 1 FPT_TST.1.3: 1 FRU: FRU_FLT: 7 FRU_FLT.2: 3 FTP: FTP_ITC: 22 FTP_ITC.1: 12 FTP_ITE: 1 FTP_TRP.1: 5	FAU: FAU_SAS: 8 FAU_SAS.1: 3 FCS: FCS_CKM: 84 FCS_CKM.1: 40 FCS_CKM.2: 9 FCS_CKM.3: 1 FCS_CKM.5: 42 FCS_CKM.6: 65 FCS_CKM.6.1: 2 FCS_CKM.6.2: 1 FCS_COP: 191 FCS_COP.1: 23 FCS_COP.1.1: 1 FCS_RBG.1: 9 FCS_RNG: 35 FCS_RNG.1: 32 FCS_RNG.1.1: 3 FCS_RNG.1.2: 2 FDP: FDP_ACC: 123 FDP_ACC.1: 44 FDP_ACF: 110 FDP_ACF.1: 41 FDP_IFC: 7 FDP_IFC.1: 16 FDP_ITC.1: 35 FDP_ITC.2: 35 FDP_ITT: 7 FDP_ITT.1: 3 FDP_RIP: 9 FDP_RIP.1: 14 FDP_RIP.1.1: 1 FDP_SDC: 8 FDP_SDC.1: 3 FDP_SDI: 7 FDP_SDI.1: 1 FDP_SDI.2: 11 FDP_SDI.2.1: 1 FDP_SDI.2.2: 1 FDP_UCT: 7 FDP_UCT.1: 1 FDP_UIT: 8 FDP_UIT.1: 2 FIA: FIA_ACC: 1 FIA_ACF: 1 FIA_AFL: 22 FIA_AFL.1: 4 FIA_API: 10 FIA_API.1: 16 FIA_API.1.1: 1 FIA_ATD: 10 FIA_ATD.1: 20 FIA_ATD.1.1: 1 FIA_SOS.1: 8 FIA_SOS.1.1: 1 FIA_UAU: 50 FIA_UAU.1: 20 FIA_UAU.1.1: 1 FIA_UAU.1.2: 1 FIA_UAU.4: 12 FIA_UAU.4.1: 1 FIA_UAU.5: 17 FIA_UAU.5.1: 1 FIA_UAU.5.2: 1 FIA_UAU.6: 12 FIA_UAU.6.1: 1 FIA_UID: 14 FIA_UID.1: 19 FIA_UID.1.1: 1 FIA_UID.1.2: 1 FIA_USB: 32 FIA_USB.1: 30 FIA_USB.1.1: 1 FIA_USB.1.2: 1 FIA_USB.1.3: 2 FMT: FMT_LIM: 15 FMT_LIM.1: 3 FMT_LIM.2: 2 FMT_MSA: 68 FMT_MSA.1: 8 FMT_MSA.3: 39 FMT_MSA.3.1: 1 FMT_MSA.3.2: 1 FMT_MTD: 38 FMT_MTD.1: 4 FMT_SMF.1: 51 FMT_SMF.1.1: 1 FMT_SMR: 9 FMT_SMR.1: 41 FMT_SMR.1.1: 1 FMT_SMR.1.2: 1 FMT_SRM: 1 FPT: FPT_EMS: 15 FPT_EMS.1: 12 FPT_EMS.1.1: 1 FPT_FLS: 7 FPT_FLS.1: 18 FPT_FLS.1.1: 1 FPT_ITE: 11 FPT_ITE.1: 11 FPT_ITE.1.1: 1 FPT_ITE.1.2: 1 FPT_ITE.2: 13 FPT_ITE.2.1: 5 FPT_ITE.2.2: 1 FPT_ITT: 7 FPT_ITT.1: 3 FPT_PHP: 7 FPT_PHP.3: 4 FPT_TDC.1: 10 FPT_TDC.1.1: 1 FPT_TDC.1.2: 1 FPT_TST: 2 FPT_TST.1: 11 FPT_TST.1.1: 1 FPT_TST.1.2: 1 FPT_TST.1.3: 1 FRU: FRU_FLT: 7 FRU_FLT.2: 3 FTP: FTP_ITC: 22 FTP_ITC.1: 12 FTP_ITE: 1 FTP_TRP.1: 5
pdf_data/st_keywords/cc_claims	O: O.AES: 7 O.PACE_CHIP: 2 O.RND: 8 T: T.RND: 5	O: O.AES: 7 O.PACE_CHIP: 2 O.RND: 8 T: T.RND: 5
pdf_data/st_keywords/vendor	GD: G+D: 1 Giesecke+Devrient: 10 Infineon: Infineon: 2 Infineon Technologies AG: 2 NXP: NXP Semiconductors: 1 STMicroelectronics: STMicroelectronics: 1	GD: G+D: 1 Giesecke+Devrient: 10 Infineon: Infineon: 2 Infineon Technologies AG: 2 NXP: NXP Semiconductors: 1 STMicroelectronics: STMicroelectronics: 1
pdf_data/st_keywords/eval_facility
pdf_data/st_keywords/symmetric_crypto	AES_competition: AES: AES: 81 HPC: HPC: 1 constructions: MAC: CMAC: 43	AES_competition: AES: AES: 81 HPC: HPC: 1 constructions: MAC: CMAC: 43
pdf_data/st_keywords/asymmetric_crypto	ECC: ECC: ECC: 16 ECDH: ECDH: 6 ECDSA: ECDSA: 38 FF: DH: DH: 13 Diffie-Hellman: 1 DSA: DSA: 1	ECC: ECC: ECC: 16 ECDH: ECDH: 6 ECDSA: ECDSA: 38 FF: DH: DH: 13 Diffie-Hellman: 1 DSA: DSA: 1
pdf_data/st_keywords/pq_crypto
pdf_data/st_keywords/hash_function	SHA: SHA1: SHA-1: 3 SHA2: SHA-224: 2 SHA-256: 11 SHA-384: 6 SHA-512: 3	SHA: SHA1: SHA-1: 3 SHA2: SHA-224: 2 SHA-256: 11 SHA-384: 6 SHA-512: 3
pdf_data/st_keywords/crypto_scheme	KA: Key Agreement: 1 Key agreement: 1 MAC: MAC: 33	KA: Key Agreement: 1 Key agreement: 1 MAC: MAC: 33
pdf_data/st_keywords/crypto_protocol	PACE: PACE: 125 TLS: SSL: SSL: 1	PACE: PACE: 125 TLS: SSL: SSL: 1
pdf_data/st_keywords/randomness	RNG: RND: 15 RNG: 36	RNG: RND: 15 RNG: 36
pdf_data/st_keywords/cipher_mode	CBC: CBC: 4	CBC: CBC: 4
pdf_data/st_keywords/ecc_curve	Brainpool: brainpoolP256r1: 4 brainpoolP384r1: 4 brainpoolP512r1: 4	Brainpool: brainpoolP256r1: 4 brainpoolP384r1: 4 brainpoolP512r1: 4
pdf_data/st_keywords/crypto_engine
pdf_data/st_keywords/tls_cipher_suite
pdf_data/st_keywords/crypto_library
pdf_data/st_keywords/vulnerability
pdf_data/st_keywords/side_channel_analysis	FI: DFA: 1 Malfunction: 17 malfunction: 1 physical tampering: 3 SCA: DPA: 1 Leak-Inherent: 15 Physical Probing: 2 SPA: 1 side channel: 1 other: Bleichenbacher attack: 1 JIL: 1	FI: DFA: 1 Malfunction: 17 malfunction: 1 physical tampering: 3 SCA: DPA: 1 Leak-Inherent: 15 Physical Probing: 2 SPA: 1 side channel: 1 other: Bleichenbacher attack: 1 JIL: 1
pdf_data/st_keywords/technical_report_id	BSI: BSI TR-03111: 3 BSI TR-03143: 2	BSI: BSI TR-03111: 3 BSI TR-03143: 2
pdf_data/st_keywords/device_model
pdf_data/st_keywords/tee_name	IBM: SE: 1	IBM: SE: 1
pdf_data/st_keywords/os_name	STARCOS: STARCOS 3: 181	STARCOS: STARCOS 3: 181
pdf_data/st_keywords/cplc_data
pdf_data/st_keywords/ic_data_group
pdf_data/st_keywords/standard_id	BSI: AIS20: 2 AIS31: 1 CC: CCMB-2022-11-001: 1 CCMB-2022-11-002: 1 CCMB-2022-11-003: 2 CCMB-2022-11-004: 2 FIPS: FIPS 180-4: 1 FIPS 197: 4 FIPS PUB 180-4: 1 FIPS PUB 197: 1 ISO: ISO/IEC 7816: 2 NIST: NIST SP 800-38B: 1 PKCS: PKCS #1: 2 RFC: RFC 5639: 1 RFC5639: 3	BSI: AIS20: 2 AIS31: 1 CC: CCMB-2022-11-001: 1 CCMB-2022-11-002: 1 CCMB-2022-11-003: 2 CCMB-2022-11-004: 2 FIPS: FIPS 180-4: 1 FIPS 197: 4 FIPS PUB 180-4: 1 FIPS PUB 197: 1 ISO: ISO/IEC 7816: 2 NIST: NIST SP 800-38B: 1 PKCS: PKCS #1: 2 RFC: RFC 5639: 1 RFC5639: 3
pdf_data/st_keywords/javacard_version
pdf_data/st_keywords/javacard_api_const
pdf_data/st_keywords/javacard_packages
pdf_data/st_keywords/certification_process	OutOfScope: and cryptographic key sizes 2048 bits and 3072 bits modulus length for RSA private key operation is out of scope for the TOE. 378 The TOE shall meet the requirement “Cryptographic operation – CB ECC (FCS_COP.1/CB: 1 out of scope: 1	OutOfScope: and cryptographic key sizes 2048 bits and 3072 bits modulus length for RSA private key operation is out of scope for the TOE. 378 The TOE shall meet the requirement “Cryptographic operation – CB ECC (FCS_COP.1/CB: 1 out of scope: 1
pdf_data/st_metadata	/Author: Giesecke+Devrient ePayments GmbH /CreationDate: D:20260423134806+02'00' /Creator: Microsoft® Word für Microsoft 365 /Keywords: Version 2.2/23.04.2026 /ModDate: D:20260423134806+02'00' /Producer: Microsoft® Word für Microsoft 365 /Subject: Security Target STARCOS 3.7 COS HBA-SMC /Title: G+D Security Target to BSI-PP-0082-V4 pdf_file_size_bytes: 4100307 pdf_hyperlinks: {} pdf_is_encrypted: False pdf_number_of_pages: 168	/Author: Giesecke+Devrient ePayments GmbH /CreationDate: D:20260423134806+02'00' /Creator: Microsoft® Word für Microsoft 365 /Keywords: Version 2.2/23.04.2026 /ModDate: D:20260423134806+02'00' /Producer: Microsoft® Word für Microsoft 365 /Subject: Security Target STARCOS 3.7 COS HBA-SMC /Title: G+D Security Target to BSI-PP-0082-V4 pdf_file_size_bytes: 4100307 pdf_hyperlinks: {} pdf_is_encrypted: False pdf_number_of_pages: 168
state/cert/convert_garbage	None	None
state/cert/convert_ok	True	True
state/cert/download_ok	True	True
state/cert/extract_ok	True	True
state/cert/source_hash	Equal	Equal
state/cert/txt_hash	Equal	Equal
state/report/convert_garbage	None	None
state/report/convert_ok	True	False
state/report/download_ok	True	False
state/report/extract_ok	True	False
state/report/source_hash	Different	Different
state/report/txt_hash	Different	Different
state/report/json_hash	Equal	Equal
state/st/convert_garbage	None	None
state/st/convert_ok	True	True
state/st/download_ok	True	True
state/st/extract_ok	True	True
state/st/source_hash	Equal	Equal
state/st/txt_hash	Equal	Equal
state/st/json_hash	Equal	Equal
dgst	88e3c1202ae0f0fd	a14072864025893b
other_metadata/certificate_id	EUCC-3087-2026-0011	EUCC-3087-2026-0011
other_metadata/product_name	STARCOS 3.7 COS HBA-SMC	STARCOS 3.7 COS HBA-SMC
other_metadata/product_type	Smartcards and similar devices	Smartcards and similar devices
other_metadata/product_version	47 44 00 B7 04 01 01	47 44 00 B7 04 01 01
other_metadata/holder_name	Giesecke+Devrient ePayments GmbH	Giesecke+Devrient ePayments GmbH
other_metadata/holder_address	Prinzregentenstraße 161, 81677 München	Prinzregentenstraße 161, 81677 München
other_metadata/holder_contact	None	None
other_metadata/holder_website	https://www.gi-de.com/en/cybersecurity-information	https://www.gi-de.com/en/cybersecurity-information
other_metadata/certification_body	BSI	BSI
other_metadata/nando_id	3087	3087
other_metadata/certification_body_address	Postfach 200363\n53133 Bonn, Bonn	Postfach 200363\n53133 Bonn, Bonn
other_metadata/certification_body_contact	[email protected] Phone: +49 228 99 9582-0	[email protected] Phone: +49 228 99 9582-0
other_metadata/itsef	SRC Security Research & Consulting GmbH	SRC Security Research & Consulting GmbH
other_metadata/responsible_ncca	Bundesamt für Sicherheit in der Informationstechnik	Bundesamt für Sicherheit in der Informationstechnik
other_metadata/scheme	(UE) 2024/482 - EUCC	(UE) 2024/482 - EUCC
other_metadata/report_reference	EUCC-3087-2026-0011 Certificate Report
other_metadata/assurance_level	High	High
other_metadata/cc_version	CC:2022 Revision 1	CC:2022 Revision 1
other_metadata/cem_version	CEM:2022 Revision 1
other_metadata/ava_van_level	5	5
other_metadata/protection_profile	Common Criteria Protection Profile Card Operating System Generation 2 (PP COS G2), Version 2.1, 10 July 2019, BSI-CC-PP-0082-V4-2019, Bundesamt für Sicherheit in der Informationstechnik (BSI)	Common Criteria Protection Profile Card Operating System Generation 2 (PP COS G2), Version 2.1, 10 July 2019, BSI-CC-PP-0082-V4-2019, Bundesamt für Sicherheit in der Informationstechnik (BSI)
other_metadata/issuance_year	2026	2026
other_metadata/issuance_month	6	6
other_metadata/issuance_date_full	17/06/2026	17/06/2026
other_metadata/modification_or_reassurance	None	None
other_metadata/validity_period_years	5 years	5 years