{"_id": "084a6f26cac1c6b3", "_type": "sec_certs.sample.protection_profile.ProtectionProfile", "dgst": "084a6f26cac1c6b3", "web_data": {"_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData", "category": "Network and Network-Related Devices and Systems", "status": "active", "is_collaborative": false, "name": "PP-Module for Virtual Private Network (VPN) Gateways Version 2.0", "version": "2.0", "security_level": {"_type": "Set", "elements": []}, "not_valid_before": "2026-01-21", "not_valid_after": null, "report_link": null, "pp_link": "https://www.niap-ccevs.org/api/file/get_public_file/?file_id=37068", "scheme": "US", "maintenances": []}, "pdf_data": {"_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData", "report_metadata": null, "pp_metadata": {"pdf_file_size_bytes": 4227160, "pdf_is_encrypted": false, "pdf_number_of_pages": 72, "/Title": "PP-Module for VPN Gateways", "/Creator": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/143.0.0.0 Safari/537.36", "/Producer": "Skia/PDF m143", "/CreationDate": "D:20260121154015+00'00'", "/ModDate": "D:20260121154015+00'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["http://www.commoncriteriaportal.org/files/ccfiles/CC2022PART3R1.pdf", "http://www.commoncriteriaportal.org/files/ccfiles/CC2022PART2R1.pdf", "http://www.commoncriteriaportal.org/files/ccfiles/CC2022PART5R1.pdf", "http://www.commoncriteriaportal.org/files/ccfiles/CC2022PART4R1.pdf", "http://www.commoncriteriaportal.org/files/ccfiles/CEM2022R1.pdf", "https://www.niap-ccevs.org/protectionprofiles/524", "https://www.commoncriteriaportal.org/files/ccfiles/CC2022PART1R1.pdf", "https://www.niap-ccevs.org/protectionprofiles/511"]}}, "report_keywords": null, "pp_keywords": {"cc_cert_id": {}, "cc_protection_profile_id": {}, "cc_security_level": {}, "cc_sar": {"ATE": {"ATE_IND.1": 1}}, "cc_sfr": {"FAU": {"FAU_GEN": 9, "FAU_GEN.1": 3, "FAU_STG_EXT.1": 1}, "FCS": {"FCS_EAP_EXT": 6, "FCS_COP": 14, "FCS_COP.1": 6, "FCS_EAP_EXT.1": 10, "FCS_CKM": 5, "FCS_CKM.1": 3, "FCS_CKM.2": 1, "FCS_EAP_EXT.1.1": 3, "FCS_EAP_EXT.1.2": 2, "FCS_EAP_EXT.1.3": 3, "FCS_RBG.1": 12}, "FIA": {"FIA_HOTP_EXT": 9, "FIA_PSK_EXT": 11, "FIA_TOTP_EXT": 8, "FIA_XCU_EXT.1.1": 2, "FIA_PSK_EXT.1": 17, "FIA_HOTP_EXT.1": 11, "FIA_PSK_EXT.3": 10, "FIA_TOTP_EXT.1": 10, "FIA_PSK_EXT.2": 8, "FIA_PSK_EXT.1.2": 8, "FIA_HOTP_EXT.1.1": 2, "FIA_HOTP_EXT.1.2": 2, "FIA_HOTP_EXT.1.3": 2, "FIA_HOTP_EXT.1.4": 6, "FIA_HOTP_EXT.1.5": 4, "FIA_HOTP_EXT.1.6": 5, "FIA_HOTP_EXT.1.7": 2, "FIA_HOTP_EXT.1.8": 2, "FIA_TOTP_EXT.1.7": 3, "FIA_PSK_EXT.2.1": 4, "FIA_PSK_EXT.1.1": 2, "FIA_PSK_EXT.3.1": 5, "FIA_PSK_EXT.3.2": 5, "FIA_PSK_EXT.3.3": 3, "FIA_PSK_EXT.3.4": 3, "FIA_PSK_EXT.3.5": 2, "FIA_PSK_EXT.3.6": 2, "FIA_PSK_EXT.3.7": 3, "FIA_TOTP_EXT.1.2": 2, "FIA_TOTP_EXT.1.3": 2, "FIA_TOTP_EXT.1.4": 6, "FIA_TOTP_EXT.1.5": 4, "FIA_TOTP_EXT.1.6": 5, "FIA_TOTP_EXT.1.8": 4, "FIA_TOTP_EXT.1.9": 2, "FIA_TOTP_EXT.1.1": 1}, "FMT": {"FMT_MTD": 3, "FMT_SMF.1": 6, "FMT_MTD.1": 2, "FMT_SMF": 8}, "FPT": {"FPT_TST_EXT": 4, "FPT_FLS": 7, "FPT_TST_EXT.3": 13, "FPT_FLS.1": 1, "FPT_TST_EXT.3.1": 2, "FPT_TST_EXT.3.2": 2, "FPT_STM.1": 1}, "FTA": {"FTA_VCM_EXT": 4, "FTA_VCM_EXT.1": 12, "FTA_SSL": 8, "FTA_TSE.1": 6, "FTA_SSL.3": 1, "FTA_TSE.1.1": 1, "FTA_TSE": 4, "FTA_VCM_EXT.1.1": 2}, "FTP": {"FTP_ITC": 5, "FTP_ITC.1": 9}}, "cc_claims": {"T": {"T.DATA_INTEGRITY": 2, "T.NETWORK_ACCESS": 2, "T.NETWORK_DISCLOSURE": 2, "T.NETWORK_MISUSE": 2, "T.REPLAY_ATTACK": 2, "T.WEAK_CRYPTOGRAPHY": 1, "T.UNTRUSTED_COMMUNICATION_CHANNELS": 4, "T.WEAK_AUTHENTICATION_ENDPOINTS": 1}, "A": {"A.NO_THRU_TRAFFIC_PROTECTION": 1, "A.CONNECTIONS": 4}, "OE": {"OE.NO_THRU_TRAFFIC_PROTECTION": 1, "OE.CONNECTIONS": 3}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-": 2, "AES": 8}}, "constructions": {"MAC": {"HMAC": 8, "HMAC-SHA-384": 1}}}, "asymmetric_crypto": {"ECC": {"ECDSA": {"ECDSA": 4}}, "FF": {"DH": {"Diffie-Hellman": 1, "DH": 4}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 4}, "SHA2": {"SHA-512": 5, "SHA-384": 6, "SHA-256": 4}}, "PBKDF": {"PBKDF": 2, "PBKDF2": 1}}, "crypto_scheme": {"KEX": {"Key Exchange": 1}}, "crypto_protocol": {"SSH": {"SSH": 1}, "TLS": {"TLS": {"TLS": 9}}, "IKE": {"IKE": 12, "IKEv2": 25}, "IPsec": {"IPsec": 36}, "VPN": {"VPN": 128}}, "randomness": {"RNG": {"RBG": 4}}, "cipher_mode": {"CBC": {"CBC": 1}, "CTR": {"CTR": 1}, "GCM": {"GCM": 6}, "CCM": {"CCM": 4}, "XTS": {"XTS": 1}}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "technical_report_id": {}, "device_model": {}, "tee_name": {}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS PUB 197": 2, "FIPS PUB 186-5": 3}, "NIST": {"NIST SP 800-38C": 1, "NIST SP 800-38D": 1, "NIST SP 800-132": 1, "NIST SP 800-63b": 1}, "RFC": {"RFC 8603": 1, "RFC 4303": 1, "RFC 4106": 1, "RFC 4868": 2, "RFC 7296": 2, "RFC 5282": 2, "RFC 5114": 1, "RFC 3526": 2, "RFC 4945": 1, "RFC 8784": 6, "RFC 7919": 1, "RFC 791": 3, "RFC 8200": 3, "RFC 793": 3, "RFC 768": 3, "RFC 792": 1, "RFC 5216": 2, "RFC 8996": 4, "RFC 5281": 2, "RFC 4226": 2, "RFC 6238": 2}, "ISO": {"ISO/IEC 15408": 2, "ISO/IEC 18033-": 2, "ISO/IEC 19772:2020": 2}, "X509": {"X.509": 8}, "CC": {"CCMB-2022-11-001": 1, "CCMB-2022-11-002": 1, "CCMB-2022-11-003": 1, "CCMB-2022-11-005": 1, "CCMB-2022-11-006": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {"OutOfScope": {"out of scope": 1, "rather than in an external device, is covered under the Authentication Server PP-Module, and is out of scope for this PP-Module. The MSK derived from EAP is distinct from the PSK. The MSK is substituted in": 1}}}, "report_filename": null, "pp_filename": ""}, "heuristics": {"_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"}, "state": {"_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState", "pp": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "98a309e09d0ac473c8e23c872991faa0004f3ef0e34d6bade195346d3fb60d8e", "txt_hash": "019d8f6fd020925fdb0f8e580811d059c52872c1c9b3cf52857a8d4612d15c3f", "json_hash": null}, "report": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": false, "convert_ok": false, "extract_ok": false, "source_hash": null, "txt_hash": null, "json_hash": null}}, "scheme_metadata": {"source_scheme": "US", "pp_short_name": "MOD_VPNGW_v2.0", "pp_sponsor_id": "NIAP", "pp_transition": null, "cc_version": "CC:2022", "predecessor": "MOD_VPNGW_v1.3", "successor": null}}