Protection Profile for Enterprise Security Management - Identity and Credential Management Version 2.1

Profile details

Status archived
Valid from 21.11.2013
Valid until 03.06.2025
Scheme 🇺🇸 US
Category Detection Devices and Systems
Security level N/A

Certification report

certification report could not be downloaded, no link is available.

Protection profile

Extracted keywords

Symmetric Algorithms
AES, AES-, DES, HMAC, HMAC-SHA-256, CMAC
Asymmetric Algorithms
ECDSA, DH, DSA
Hash functions
SHA-1, SHA-256, SHA-384, SHA-224, SHA-512
Schemes
MAC, Key Exchange
Protocols
SSH, SSL 2.0, SSL 3.0, TLS, TLS 1.0, TLS 1.1, TLS 1.2, IKEv1, IKEv2, IKE, IPsec, VPN
Randomness
RNG, RBG
Elliptic Curves
P-256, P-384, P-521
Block cipher modes
GCM, CCM
TLS cipher suites
TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

Security level
EAL1, EAL 1, EAL1 augmented, EAL 1 augmented
Claims
O.ACCESSID, O.EAVES, O.AUTH, O.INTEGRITY, O.PROTCOMMS, O.IDENT, O.CRYPTO, O.BANNER, O.MANAGE, O.SELFID, O.AUDIT, O.PROTCRED, O.ROBUST, O.EXPORT, T.FORGE, T.ADMIN_ERROR, T.EAVES, T.UNAUTH, T.FALSIFY, T.MASK, T.INSUFFATR, T.WEAKIA, T.RAWCRED, A.CRYPTO, A.ENROLLMENT, A.ESM, A.FEDERATE, A.MANAGE, A.ROBUST, A.SYSTIME, OE.ROBUST, OE.CRYPTO, OE.ENROLLMENT, OE.MANAGEMENT, OE.FEDERATE, OE.ADMIN, OE.INSTALL, OE.PERSON, OE.SYSTIME
Security Assurance Requirements (SAR)
ADV_FSP.1, AGD_OPE, AGD_OPE.1, AGD_PRE.1, AGD_PRE, ALC_CMC.1, ALC_CMS.1, ATE_IND.1, ATE_IND, AVA_VAN.1, AVA_VAN
Security Functional Requirements (SFR)
FAU_STG_EXT.1, FAU_SEL.1, FAU_GEN.1, FAU_STG_EXT, FAU_STG.1, FAU_STG_EXT.1.1, FAU_STG_EXT.1.2, FAU_STG_EXT.1.3, FAU_GEN.1.1, FAU_GEN.1.2, FAU_GEN, FAU_SEL.1.1, FCS_CKM_EXT.4, FCS_RBG_EXT, FCS_SSH_EXT, FCS_TLS_EXT, FCS_CKM.1, FCS_COP.1, FCS_RBG_EXT.1, FCS_SSH_EXT.1, FCS_TLS_EXT.1, FCS_CKM_EXT, FCS_CKM_EXT.4.1, FCS_RBG_EXT.1.1, FCS_RBG_EXT.1.2, FCS_SSH_EXT.1.1, FCS_SSH_EXT.1.2, FCS_SSH_EXT.1.3, FCS_SSH_EXT.1.4, FCS_COP, FCS_SSH_EXT.1.5, FCS_SSH_EXT.1.6, FCS_SSH_EXT.1.7, FCS_TLS_EXT.1.1, FCS_CKM.1.1, FCS_CKM.2, FCS_CKM.4, FCS_COP.1.1, FDP_ITC.1, FDP_ITC.2, FIA_SOS.1, FIA_AFL.1, FIA_USB.1, FIA_UAU.5, FIA_UAU.6, FIA_UAU.1, FIA_UAU.2, FIA_UID.1, FIA_UID.2, FIA_ATD.1, FIA_USB.1.1, FIA_USB.1.2, FIA_USB.1.3, FIA_SOS.1.1, FIA_AFL.1.1, FIA_AFL.1.2, FMT_MTD.1, FMT_MOF.1, FMT_SMF.1, FMT_SMR.1, FMT_SMR.1.1, FMT_SMR.1.2, FMT_SMF, FMT_MTD.1.1, FPT_APW_EXT, FPT_SKP_EXT, FPT_STM.1, FPT_SKP_EXT.1, FPT_APW_EXT.1, FPT_APW_EXT.1.1, FPT_APW_EXT.1.2, FPT_SKP_EXT.1.1, FPT_STM.1.1, FTA_SSL_EXT.1, FTA_SSL.3, FTA_SSL.4, FTA_TSE.1, FTA_TAB.1, FTA_SSL_EXT.1.1, FTA_TAB.1.1, FTA_SSL.3.1, FTA_SSL.4.1, FTA_TSE.1.1, FTP_ITC.1, FTP_TRP.1, FTP_ITC.1.1, FTP_ITC.1.2, FTP_ITC.1.3, FTP_TRP.1.1, FTP_TRP.1.2, FTP_TRP.1.3

Side-channel analysis
malfunction

Title Identity and Credential Management PP
Subject ESM PP
Author Booz Allen Hamilton
Creation date D:20131121124112-05'00'
Modification date D:20131121124133-05'00'
Pages 158
Creator Acrobat PDFMaker 10.1 for Word
Producer Adobe PDF Library 10.0

References

No references are available for this protection profile.

Processing updates

  • The protection profile was first processed.

Raw data

{
  "_id": "5f8743536b144832",
  "_type": "sec_certs.sample.protection_profile.ProtectionProfile",
  "dgst": "5f8743536b144832",
  "heuristics": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"
  },
  "pdf_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData",
    "pp_filename": "",
    "pp_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDSA": {
            "ECDSA": 4
          }
        },
        "FF": {
          "DH": {
            "DH": 18
          },
          "DSA": {
            "DSA": 4
          }
        }
      },
      "cc_cert_id": {},
      "cc_claims": {
        "A": {
          "A.CRYPTO": 6,
          "A.ENROLLMENT": 2,
          "A.ESM": 2,
          "A.FEDERATE": 2,
          "A.MANAGE": 2,
          "A.ROBUST": 3,
          "A.SYSTIME": 3
        },
        "O": {
          "O.ACCESSID": 4,
          "O.AUDIT": 2,
          "O.AUTH": 4,
          "O.BANNER": 2,
          "O.CRYPTO": 10,
          "O.EAVES": 2,
          "O.EXPORT": 1,
          "O.IDENT": 3,
          "O.INTEGRITY": 3,
          "O.MANAGE": 3,
          "O.PROTCOMMS": 6,
          "O.PROTCRED": 2,
          "O.ROBUST": 2,
          "O.SELFID": 2
        },
        "OE": {
          "OE.ADMIN": 3,
          "OE.CRYPTO": 11,
          "OE.ENROLLMENT": 2,
          "OE.FEDERATE": 3,
          "OE.INSTALL": 3,
          "OE.MANAGEMENT": 2,
          "OE.PERSON": 3,
          "OE.ROBUST": 5,
          "OE.SYSTIME": 3
        },
        "T": {
          "T.ADMIN_ERROR": 3,
          "T.EAVES": 3,
          "T.FALSIFY": 3,
          "T.FORGE": 4,
          "T.INSUFFATR": 1,
          "T.MASK": 3,
          "T.RAWCRED": 3,
          "T.UNAUTH": 3,
          "T.WEAKIA": 3
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ADV": {
          "ADV_FSP.1": 9
        },
        "AGD": {
          "AGD_OPE": 8,
          "AGD_OPE.1": 11,
          "AGD_PRE": 1,
          "AGD_PRE.1": 3
        },
        "ALC": {
          "ALC_CMC.1": 7,
          "ALC_CMS.1": 6
        },
        "ATE": {
          "ATE_IND": 4,
          "ATE_IND.1": 6
        },
        "AVA": {
          "AVA_VAN": 1,
          "AVA_VAN.1": 7
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 1": 1,
          "EAL 1 augmented": 1,
          "EAL1": 2,
          "EAL1 augmented": 1
        }
      },
      "cc_sfr": {
        "FAU": {
          "FAU_GEN": 1,
          "FAU_GEN.1": 13,
          "FAU_GEN.1.1": 1,
          "FAU_GEN.1.2": 1,
          "FAU_SEL.1": 6,
          "FAU_SEL.1.1": 1,
          "FAU_STG.1": 1,
          "FAU_STG_EXT": 1,
          "FAU_STG_EXT.1": 14,
          "FAU_STG_EXT.1.1": 2,
          "FAU_STG_EXT.1.2": 2,
          "FAU_STG_EXT.1.3": 2
        },
        "FCS": {
          "FCS_CKM.1": 15,
          "FCS_CKM.1.1": 1,
          "FCS_CKM.2": 1,
          "FCS_CKM.4": 5,
          "FCS_CKM_EXT": 1,
          "FCS_CKM_EXT.4": 16,
          "FCS_CKM_EXT.4.1": 2,
          "FCS_COP": 2,
          "FCS_COP.1": 50,
          "FCS_COP.1.1": 4,
          "FCS_RBG_EXT": 2,
          "FCS_RBG_EXT.1": 16,
          "FCS_RBG_EXT.1.1": 2,
          "FCS_RBG_EXT.1.2": 4,
          "FCS_SSH_EXT": 2,
          "FCS_SSH_EXT.1": 16,
          "FCS_SSH_EXT.1.1": 2,
          "FCS_SSH_EXT.1.2": 2,
          "FCS_SSH_EXT.1.3": 3,
          "FCS_SSH_EXT.1.4": 3,
          "FCS_SSH_EXT.1.5": 3,
          "FCS_SSH_EXT.1.6": 3,
          "FCS_SSH_EXT.1.7": 2,
          "FCS_TLS_EXT": 2,
          "FCS_TLS_EXT.1": 21,
          "FCS_TLS_EXT.1.1": 2
        },
        "FDP": {
          "FDP_ITC.1": 4,
          "FDP_ITC.2": 4
        },
        "FIA": {
          "FIA_AFL.1": 11,
          "FIA_AFL.1.1": 1,
          "FIA_AFL.1.2": 1,
          "FIA_ATD.1": 3,
          "FIA_SOS.1": 11,
          "FIA_SOS.1.1": 1,
          "FIA_UAU.1": 3,
          "FIA_UAU.2": 1,
          "FIA_UAU.5": 1,
          "FIA_UAU.6": 1,
          "FIA_UID.1": 3,
          "FIA_UID.2": 1,
          "FIA_USB.1": 8,
          "FIA_USB.1.1": 1,
          "FIA_USB.1.2": 1,
          "FIA_USB.1.3": 1
        },
        "FMT": {
          "FMT_MOF.1": 9,
          "FMT_MTD.1": 6,
          "FMT_MTD.1.1": 1,
          "FMT_SMF": 1,
          "FMT_SMF.1": 11,
          "FMT_SMR.1": 10,
          "FMT_SMR.1.1": 1,
          "FMT_SMR.1.2": 1
        },
        "FPT": {
          "FPT_APW_EXT": 2,
          "FPT_APW_EXT.1": 11,
          "FPT_APW_EXT.1.1": 2,
          "FPT_APW_EXT.1.2": 2,
          "FPT_SKP_EXT": 2,
          "FPT_SKP_EXT.1": 13,
          "FPT_SKP_EXT.1.1": 2,
          "FPT_STM.1": 11,
          "FPT_STM.1.1": 1
        },
        "FTA": {
          "FTA_SSL.3": 7,
          "FTA_SSL.3.1": 1,
          "FTA_SSL.4": 6,
          "FTA_SSL.4.1": 1,
          "FTA_SSL_EXT.1": 15,
          "FTA_SSL_EXT.1.1": 2,
          "FTA_TAB.1": 5,
          "FTA_TAB.1.1": 1,
          "FTA_TSE.1": 10,
          "FTA_TSE.1.1": 1
        },
        "FTP": {
          "FTP_ITC.1": 24,
          "FTP_ITC.1.1": 1,
          "FTP_ITC.1.2": 1,
          "FTP_ITC.1.3": 1,
          "FTP_TRP.1": 7,
          "FTP_TRP.1.1": 1,
          "FTP_TRP.1.2": 1,
          "FTP_TRP.1.3": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CCM": {
          "CCM": 3
        },
        "GCM": {
          "GCM": 3
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 8,
          "IKEv1": 23,
          "IKEv2": 12
        },
        "IPsec": {
          "IPsec": 23
        },
        "SSH": {
          "SSH": 34
        },
        "TLS": {
          "SSL": {
            "SSL 2.0": 2,
            "SSL 3.0": 2
          },
          "TLS": {
            "TLS": 28,
            "TLS 1.0": 2,
            "TLS 1.1": 2,
            "TLS 1.2": 8
          }
        },
        "VPN": {
          "VPN": 2
        }
      },
      "crypto_scheme": {
        "KEX": {
          "Key Exchange": 1
        },
        "MAC": {
          "MAC": 3
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 4,
          "P-384": 2,
          "P-521": 4
        }
      },
      "eval_facility": {},
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 8
          },
          "SHA2": {
            "SHA-224": 1,
            "SHA-256": 3,
            "SHA-384": 3,
            "SHA-512": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RBG": 11,
          "RNG": 5
        }
      },
      "side_channel_analysis": {
        "FI": {
          "malfunction": 1
        }
      },
      "standard_id": {
        "CC": {
          "CCMB-2012-09-001": 1
        },
        "FIPS": {
          "FIPS 140-2": 3,
          "FIPS 186-3": 6,
          "FIPS PUB 140-2": 1,
          "FIPS PUB 180-3": 1,
          "FIPS PUB 186-3": 6,
          "FIPS PUB 197": 2
        },
        "NIST": {
          "NIST SP 800-38A": 1,
          "NIST SP 800-38B": 1,
          "NIST SP 800-38C": 1,
          "NIST SP 800-38D": 1,
          "NIST SP 800-53": 5,
          "NIST SP 800-57A": 1,
          "NIST SP 800-63": 1,
          "NIST SP 800-90": 1,
          "SP 800-90": 1
        },
        "RFC": {
          "RFC 2246": 2,
          "RFC 2409": 2,
          "RFC 2818": 2,
          "RFC 3602": 2,
          "RFC 4106": 2,
          "RFC 4109": 4,
          "RFC 4253": 7,
          "RFC 4303": 2,
          "RFC 4346": 2,
          "RFC 4868": 6,
          "RFC 5246": 4,
          "RFC 5430": 2
        },
        "X509": {
          "X.509": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 18,
            "AES-": 1
          }
        },
        "DES": {
          "DES": {
            "DES": 3
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 3,
            "HMAC": 4,
            "HMAC-SHA-256": 1
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {
        "TLS": {
          "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 2,
          "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256": 2,
          "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 2,
          "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 2,
          "TLS_RSA_WITH_AES_128_CBC_SHA": 2,
          "TLS_RSA_WITH_AES_256_CBC_SHA": 2,
          "TLS_RSA_WITH_AES_256_CBC_SHA256": 2
        }
      },
      "vendor": {},
      "vulnerability": {}
    },
    "pp_metadata": {
      "/Author": "Booz Allen Hamilton",
      "/Company": "Booz Allen Hamilton",
      "/CreationDate": "D:20131121124112-05\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 10.1 for Word",
      "/ModDate": "D:20131121124133-05\u002700\u0027",
      "/Producer": "Adobe PDF Library 10.0",
      "/SourceModified": "D:20131121174058",
      "/Subject": "ESM PP",
      "/Title": "Identity and Credential Management PP",
      "pdf_file_size_bytes": 696640,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 158
    },
    "report_filename": null,
    "report_keywords": null,
    "report_metadata": null
  },
  "scheme_metadata": {
    "cc_version": "3.1",
    "pp_short_name": "PP_ESM_ICM_V2.1",
    "pp_sponsor_id": "NIAP",
    "pp_transition": null,
    "predecessor": "PP_ESM_ICM_V1.0",
    "source_scheme": "US",
    "successor": null
  },
  "state": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState",
    "pp": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "6c82ac642b9b0e99130ff80532693962eca88aadfdfd6b7f17d0197add1b7531",
      "txt_hash": "ace9adb1810b00a97987f7c0075cc9bb7c2ed8918ef97ee9fbff6d4d731a2c77"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": false,
      "download_ok": false,
      "extract_ok": false,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData",
    "category": "Detection Devices and Systems",
    "is_collaborative": false,
    "maintenances": [],
    "name": "Protection Profile for Enterprise Security Management - Identity and Credential Management Version 2.1",
    "not_valid_after": "2025-06-03",
    "not_valid_before": "2013-11-21",
    "pp_link": "https://www.niap-ccevs.org/api/file/get_public_file/?file_id=10080",
    "report_link": null,
    "scheme": "US",
    "security_level": {
      "_type": "Set",
      "elements": []
    },
    "status": "archived",
    "version": "2.1"
  }
}