Extended Package for MACsec Ethernet Encryption Version 1.2

Profile details

Status archived
Valid from 10.05.2016
Valid until 02.09.2023
Scheme 🇺🇸 US
Category Network and Network-Related Devices and Systems
Security level N/A

Certification report

certification report could not be downloaded, no link is available.

Protection profile

Extracted keywords

Symmetric Algorithms
AES, CMAC
Hash functions
SHA256
Schemes
MAC, Key Agreement
Protocols
SSH, TLS, TLS 1.1, TLS 1.2, IPsec
Randomness
DRBG, RNG, RBG
Block cipher modes
GCM
TLS cipher suites
TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

Claims
O.CRYPTOGRAPHIC_FUNCTIONS, O.AUTHENTICATION, O.PORT_FILTERING, O.SYSTEM_MONITORING, O.AUTHORIZED_ADMINISTRATION, O.TSF_INTEGRITY, O.REPLAY_DETECTION, O.VERIFIABLE_UPDATES, O.VERIFIABLE, T.NETWORK_ACCESS, T.UNTRUSTED_COMMUNICATION_CHANNELS, T.DATA_INTEGRITY, T.UNDETECTED_ACTIVITY, T.UNAUTHORIZED_ADMINISTRATOR_ACCESS, T.SECURITY_FUNCTIONALITY_COMPROMISE, T.SECURITY_FUNCTIONALITY_FAILURE, T.UPDATE_COMPROMISE, A.NO_THRU_TRAFFIC_PROTECTION, OE.NO_THRU_TRAFFIC_PROTECTION
Security Functional Requirements (SFR)
FAU_GEN.1, FCS_COP.1, FCS_MKA_EXT.1, FCS_COP.1.1, FCS_RBG_EXT.1, FCS_MKA_EXT.1.1, FCS_MKA_EXT.1.2, FCS_MKA_EXT.1.4, FCS_MKA_EXT.1.6, FCS_MKA_EXT.1.7, FCS_MKA_EXT.1.8, FCS_SNMP_EXT.1.1, FIA_AFL_EXT.1, FIA_PSK_EXT.1, FIA_AFL.1, FIA_AFL.1.1, FIA_AFL.1.2, FIA_PSK_EXT.1.1, FIA_PSK_EXT.1.2, FIA_PSK_EXT, FIA_AFL_EXT.1.1, FIA_PMG_EXT.1, FMT_SNMP_EXT.1, FMT_SMF.1, FMT_SNMP_EXT.1.1, FMT_SNMP_EXT.1.2, FMT_SNMP_EXT.1.3, FPT_RPL_EXT.1, FPT_CAK_EXT.1, FPT_FLS.1, FPT_RPL.1, FPT_TUD_EXT.1, FPT_CAK_EXT.1.1, FPT_FLS.1.1, FPT_RPL.1.1, FPT_RPL.1.2, FPT_RPL_EXT.1.1, FTP_ITC.1, FTP_TRP.1, FTP_ITC.1.1, FTP_TRP.1.1

Creation date D:20160510101215-04'00'
Modification date D:20160510113123-04'00'
Pages 38

References

No references are available for this protection profile.

Processing updates

  • The protection profile was first processed.

Raw data

{
  "_id": "471b83a5fe03c645",
  "_type": "sec_certs.sample.protection_profile.ProtectionProfile",
  "dgst": "471b83a5fe03c645",
  "heuristics": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"
  },
  "pdf_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData",
    "pp_filename": "",
    "pp_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {},
      "cc_claims": {
        "A": {
          "A.NO_THRU_TRAFFIC_PROTECTION": 1
        },
        "O": {
          "O.AUTHENTICATION": 3,
          "O.AUTHORIZED_ADMINISTRATION": 3,
          "O.CRYPTOGRAPHIC_FUNCTIONS": 4,
          "O.PORT_FILTERING": 3,
          "O.REPLAY_DETECTION": 3,
          "O.SYSTEM_MONITORING": 3,
          "O.TSF_INTEGRITY": 3,
          "O.VERIFIABLE": 1,
          "O.VERIFIABLE_UPDATES": 2
        },
        "OE": {
          "OE.NO_THRU_TRAFFIC_PROTECTION": 1
        },
        "T": {
          "T.DATA_INTEGRITY": 3,
          "T.NETWORK_ACCESS": 3,
          "T.SECURITY_FUNCTIONALITY_COMPROMISE": 1,
          "T.SECURITY_FUNCTIONALITY_FAILURE": 1,
          "T.UNAUTHORIZED_ADMINISTRATOR_ACCESS": 1,
          "T.UNDETECTED_ACTIVITY": 1,
          "T.UNTRUSTED_COMMUNICATION_CHANNELS": 3,
          "T.UPDATE_COMPROMISE": 1
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {},
      "cc_security_level": {},
      "cc_sfr": {
        "FAU": {
          "FAU_GEN.1": 4
        },
        "FCS": {
          "FCS_COP.1": 3,
          "FCS_COP.1.1": 1,
          "FCS_MKA_EXT.1": 2,
          "FCS_MKA_EXT.1.1": 1,
          "FCS_MKA_EXT.1.2": 1,
          "FCS_MKA_EXT.1.4": 1,
          "FCS_MKA_EXT.1.6": 2,
          "FCS_MKA_EXT.1.7": 1,
          "FCS_MKA_EXT.1.8": 1,
          "FCS_RBG_EXT.1": 6,
          "FCS_SNMP_EXT.1.1": 1
        },
        "FIA": {
          "FIA_AFL.1": 3,
          "FIA_AFL.1.1": 1,
          "FIA_AFL.1.2": 1,
          "FIA_AFL_EXT.1": 3,
          "FIA_AFL_EXT.1.1": 1,
          "FIA_PMG_EXT.1": 4,
          "FIA_PSK_EXT": 1,
          "FIA_PSK_EXT.1": 3,
          "FIA_PSK_EXT.1.1": 2,
          "FIA_PSK_EXT.1.2": 1
        },
        "FMT": {
          "FMT_SMF.1": 4,
          "FMT_SNMP_EXT.1": 3,
          "FMT_SNMP_EXT.1.1": 1,
          "FMT_SNMP_EXT.1.2": 1,
          "FMT_SNMP_EXT.1.3": 1
        },
        "FPT": {
          "FPT_CAK_EXT.1": 2,
          "FPT_CAK_EXT.1.1": 1,
          "FPT_FLS.1": 2,
          "FPT_FLS.1.1": 1,
          "FPT_RPL.1": 3,
          "FPT_RPL.1.1": 1,
          "FPT_RPL.1.2": 1,
          "FPT_RPL_EXT.1": 3,
          "FPT_RPL_EXT.1.1": 1,
          "FPT_TUD_EXT.1": 1
        },
        "FTP": {
          "FTP_ITC.1": 5,
          "FTP_ITC.1.1": 1,
          "FTP_TRP.1": 6,
          "FTP_TRP.1.1": 2
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "GCM": {
          "GCM": 4
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IPsec": {
          "IPsec": 2
        },
        "SSH": {
          "SSH": 2
        },
        "TLS": {
          "TLS": {
            "TLS": 9,
            "TLS 1.1": 1,
            "TLS 1.2": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 8
        },
        "MAC": {
          "MAC": 19
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {
        "SHA": {
          "SHA2": {
            "SHA256": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 1
        },
        "RNG": {
          "RBG": 3,
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "NIST": {
          "NIST SP 800-38F": 2
        },
        "RFC": {
          "RFC 3748": 1,
          "RFC 4492": 4,
          "RFC 5216": 1,
          "RFC 5246": 9,
          "RFC 5289": 4,
          "RFC 6353": 1,
          "RFC4346": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 13
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 6
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {
        "TLS": {
          "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_RSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_RSA_WITH_AES_128_CBC_SHA256": 1,
          "TLS_RSA_WITH_AES_256_CBC_SHA": 1
        }
      },
      "vendor": {},
      "vulnerability": {}
    },
    "pp_metadata": {
      "/CreationDate": "D:20160510101215-04\u002700\u0027",
      "/ModDate": "D:20160510113123-04\u002700\u0027",
      "pdf_file_size_bytes": 761588,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://standards.ieee.org/develop/regauth/ethertype/eth.txt"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 38
    },
    "report_filename": null,
    "report_keywords": null,
    "report_metadata": null
  },
  "scheme_metadata": {
    "cc_version": "3.1",
    "pp_short_name": "PP_NDCPP_MACSEC_EP_V1.2",
    "pp_sponsor_id": "NIAP",
    "pp_transition": null,
    "predecessor": "PP_NDCPP_MACSEC_EP_V1.1",
    "source_scheme": "US",
    "successor": "MOD_MACSEC_V1.0"
  },
  "state": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState",
    "pp": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "bca649bd50bbeed0ae6c82945448f1a29555311a94635947d1d78e9780404815",
      "txt_hash": "1118edb90434e21d5cdc37ad3c076c738504cccf23c5dc21156b8b5c798b1183"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": false,
      "download_ok": false,
      "extract_ok": false,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData",
    "category": "Network and Network-Related Devices and Systems",
    "is_collaborative": false,
    "maintenances": [],
    "name": "Extended Package for MACsec Ethernet Encryption Version 1.2",
    "not_valid_after": "2023-09-02",
    "not_valid_before": "2016-05-10",
    "pp_link": "https://www.niap-ccevs.org/api/file/get_public_file/?file_id=10111",
    "report_link": null,
    "scheme": "US",
    "security_level": {
      "_type": "Set",
      "elements": []
    },
    "status": "archived",
    "version": "1.2"
  }
}