Extended Package for Authentication Servers Version 1.0

Profile details

Status archived
Valid from 07.08.2015
Valid until 25.07.2023
Scheme 🇺🇸 US
Category Network and Network-Related Devices and Systems
Security level N/A

Certification report

certification report could not be downloaded, no link is available.

Protection profile

Extracted keywords

Symmetric Algorithms
AES
Asymmetric Algorithms
ECDHE, ECDSA
Hash functions
SHA256, MD5
Schemes
Key Exchange, Key Agreement
Protocols
SSH, SSL, SSL 1.0, SSL 2.0, SSL 3.0, TLS, TLS 1.1, TLS 1.2, TLS 1.0, IPsec, VPN
Randomness
RBG
Elliptic Curves
secp256r1, secp384r1, secp521r1
TLS cipher suites
TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_PSK_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_PSK_WITH_AES_256_CBC_SHA, TLS_DHE_PSK_WITH_AES_128_CBC_SHA, TLS_DHE_PSK_WITH_AES_256_CBC_SHA, TLS_RSA_PSK_WITH_AES_128_CBC_SHA, TLS_RSA_PSK_WITH_AES_256_CBC_SHA, TLS_NULL_WITH_NULL_NULL

Claims
O.RADIUSCOMPLIANT, O.TRUSTEDNAS, O.USERAUTH, T.FALSE_ENDPOINTS, T.INVALID_USERS, A.NAS, OE.TRUSTEDNAS, OE.NAS
Security Assurance Requirements (SAR)
AGD_PRE, AGD_OPE
Security Functional Requirements (SFR)
FAU_GEN.1, FAU_STG_EXT.1, FAU_GEN.1.1, FAU_GEN.1.2, FCO_NRO.1, FCO_NRR.1, FCO_NRO.1.1, FCO_NRO.1.2, FCO_NRO.1.3, FCO_NRR.1.1, FCO_NRR.1.2, FCO_NRR.1.3, FCS_RBG_EXT.1, FCS_CKM_EXT.1, FCS_COP.1, FCS_CKM.1, FCS_CKM.2, FIA_UAU.6, FIA_PSK_EXT.1, FIA_AFL.1, FIA_PSK_EXT.1.1, FIA_PSK_EXT.1.2, FIA_AFL.1.1, FIA_AFL.1.2, FIA_PMG_EXT.1, FIA_UAU_EXT.2, FIA_UIA_EXT.1, FIA_UAU.6.1, FMT_SMR, FMT_SMF.1, FMT_MOF.1, FMT_SMR.2, FMT_SMR.2.1, FMT_SMR.2.2, FMT_SMR.2.3, FPT_TUD_EXT.1, FPT_APW_EXT.1, FPT_SKP_EXT.1, FPT_TST_EXT.1, FPT_TST_EXT.1.1, FTA_TSE.1, FTA_TSE.1.1, FTA_TAB.1, FTA_SSL_EXT.1, FTA_SSL, FTP_ITC.1, FTP_ITC.1.1, FTP_ITC.1.2, FTP_ITC.1.3, FTP_TRP.1

Creation date D:20150813093833-04'00'
Modification date D:20150813093833-04'00'
Pages 34

References

No references are available for this protection profile.

Processing updates

  • The protection profile was first processed.

Raw data

{
  "_id": "09d7e74ec0134d19",
  "_type": "sec_certs.sample.protection_profile.ProtectionProfile",
  "dgst": "09d7e74ec0134d19",
  "heuristics": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"
  },
  "pdf_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData",
    "pp_filename": "",
    "pp_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDH": {
            "ECDHE": 1
          },
          "ECDSA": {
            "ECDSA": 2
          }
        }
      },
      "cc_cert_id": {},
      "cc_claims": {
        "A": {
          "A.NAS": 2
        },
        "O": {
          "O.RADIUSCOMPLIANT": 3,
          "O.TRUSTEDNAS": 2,
          "O.USERAUTH": 3
        },
        "OE": {
          "OE.NAS": 2,
          "OE.TRUSTEDNAS": 1
        },
        "T": {
          "T.FALSE_ENDPOINTS": 3,
          "T.INVALID_USERS": 3
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "AGD": {
          "AGD_OPE": 3,
          "AGD_PRE": 2
        }
      },
      "cc_security_level": {},
      "cc_sfr": {
        "FAU": {
          "FAU_GEN.1": 4,
          "FAU_GEN.1.1": 1,
          "FAU_GEN.1.2": 2,
          "FAU_STG_EXT.1": 1
        },
        "FCO": {
          "FCO_NRO.1": 6,
          "FCO_NRO.1.1": 1,
          "FCO_NRO.1.2": 1,
          "FCO_NRO.1.3": 1,
          "FCO_NRR.1": 6,
          "FCO_NRR.1.1": 1,
          "FCO_NRR.1.2": 1,
          "FCO_NRR.1.3": 1
        },
        "FCS": {
          "FCS_CKM.1": 1,
          "FCS_CKM.2": 1,
          "FCS_CKM_EXT.1": 1,
          "FCS_COP.1": 1,
          "FCS_RBG_EXT.1": 3
        },
        "FIA": {
          "FIA_AFL.1": 5,
          "FIA_AFL.1.1": 1,
          "FIA_AFL.1.2": 1,
          "FIA_PMG_EXT.1": 1,
          "FIA_PSK_EXT.1": 8,
          "FIA_PSK_EXT.1.1": 1,
          "FIA_PSK_EXT.1.2": 2,
          "FIA_UAU.6": 6,
          "FIA_UAU.6.1": 1,
          "FIA_UAU_EXT.2": 2,
          "FIA_UIA_EXT.1": 1
        },
        "FMT": {
          "FMT_MOF.1": 1,
          "FMT_SMF.1": 4,
          "FMT_SMR": 1,
          "FMT_SMR.2": 2,
          "FMT_SMR.2.1": 1,
          "FMT_SMR.2.2": 1,
          "FMT_SMR.2.3": 1
        },
        "FPT": {
          "FPT_APW_EXT.1": 1,
          "FPT_SKP_EXT.1": 1,
          "FPT_TST_EXT.1": 2,
          "FPT_TST_EXT.1.1": 1,
          "FPT_TUD_EXT.1": 1
        },
        "FTA": {
          "FTA_SSL": 1,
          "FTA_SSL_EXT.1": 1,
          "FTA_TAB.1": 1,
          "FTA_TSE.1": 6,
          "FTA_TSE.1.1": 1
        },
        "FTP": {
          "FTP_ITC.1": 11,
          "FTP_ITC.1.1": 2,
          "FTP_ITC.1.2": 1,
          "FTP_ITC.1.3": 1,
          "FTP_TRP.1": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IPsec": {
          "IPsec": 7
        },
        "SSH": {
          "SSH": 3
        },
        "TLS": {
          "SSL": {
            "SSL": 1,
            "SSL 1.0": 1,
            "SSL 2.0": 1,
            "SSL 3.0": 1
          },
          "TLS": {
            "TLS": 24,
            "TLS 1.0": 1,
            "TLS 1.1": 2,
            "TLS 1.2": 3
          }
        },
        "VPN": {
          "VPN": 4
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2
        },
        "KEX": {
          "Key Exchange": 1
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "secp256r1": 1,
          "secp384r1": 1,
          "secp521r1": 1
        }
      },
      "eval_facility": {},
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 1
          }
        },
        "SHA": {
          "SHA2": {
            "SHA256": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 2
        },
        "RFC": {
          "RFC 2865": 8,
          "RFC 2869": 3,
          "RFC 3579": 4,
          "RFC 4301": 1,
          "RFC 4346": 1,
          "RFC 5216": 3,
          "RFC 5246": 7,
          "RFC 5280": 1,
          "RFC 5289": 2,
          "RFC 5430": 2,
          "RFC 6460": 2,
          "RFC 6614": 4
        },
        "X509": {
          "X.509": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 4
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {
        "TLS": {
          "TLS_DHE_PSK_WITH_AES_128_CBC_SHA": 1,
          "TLS_DHE_PSK_WITH_AES_256_CBC_SHA": 1,
          "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 2,
          "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 2,
          "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 2,
          "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 2,
          "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_NULL_WITH_NULL_NULL": 1,
          "TLS_PSK_WITH_AES_128_CBC_SHA": 1,
          "TLS_PSK_WITH_AES_256_CBC_SHA": 1,
          "TLS_RSA_PSK_WITH_AES_128_CBC_SHA": 1,
          "TLS_RSA_PSK_WITH_AES_256_CBC_SHA": 1,
          "TLS_RSA_WITH_AES_128_CBC_SHA": 5,
          "TLS_RSA_WITH_AES_128_CBC_SHA256": 2,
          "TLS_RSA_WITH_AES_256_CBC_SHA": 2,
          "TLS_RSA_WITH_AES_256_CBC_SHA256": 1
        }
      },
      "vendor": {},
      "vulnerability": {}
    },
    "pp_metadata": {
      "/CreationDate": "D:20150813093833-04\u002700\u0027",
      "/ModDate": "D:20150813093833-04\u002700\u0027",
      "pdf_file_size_bytes": 1043005,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 34
    },
    "report_filename": null,
    "report_keywords": null,
    "report_metadata": null
  },
  "scheme_metadata": {
    "cc_version": "3.1",
    "pp_short_name": "PP_NDCPP_APP_AUTHSVR_EP_V1.0",
    "pp_sponsor_id": "NIAP",
    "pp_transition": null,
    "predecessor": null,
    "source_scheme": "US",
    "successor": "MOD_AUTHSVR_V1.0"
  },
  "state": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState",
    "pp": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "3fb7b1bf6405f1133ab34ddebfa99b1ca032f7e69d187152281aa2c01b30d5da",
      "txt_hash": "eaa004ce370ebce62b1e0cff88a0bd59d88fdb684890fd42fc1d5aa2bbe30439"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": false,
      "download_ok": false,
      "extract_ok": false,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData",
    "category": "Network and Network-Related Devices and Systems",
    "is_collaborative": false,
    "maintenances": [],
    "name": "Extended Package for Authentication Servers Version 1.0",
    "not_valid_after": "2023-07-25",
    "not_valid_before": "2015-08-07",
    "pp_link": "https://www.niap-ccevs.org/api/file/get_public_file/?file_id=10082",
    "report_link": null,
    "scheme": "US",
    "security_level": {
      "_type": "Set",
      "elements": []
    },
    "status": "archived",
    "version": "1.0"
  }
}