Extended Package for MACsec Ethernet Encryption Version 1.0

Profile details

Status archived
Valid from 05.10.2015
Valid until 04.06.2016
Scheme 🇺🇸 US
Category Network and Network-Related Devices and Systems
Security level N/A

Certification report

certification report could not be downloaded, no link is available.

Protection profile

Extracted keywords

Symmetric Algorithms
AES, CMAC
Hash functions
SHA-1, SHA-512, SHA256
Schemes
MAC, Key Agreement
Protocols
SSH, TLS, TLS 1.1, TLS 1.2, IPsec
Randomness
DRBG, RNG, RBG
Block cipher modes
GCM
TLS cipher suites
TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

Claims
O.CRYPTOGRAPHIC_FUNCTIONS, O.AUTHENTICATION, O.PORT_FILTERING, O.SYSTEM_MONITORING, O.AUTHORIZED_ADMINISTRATION, O.TSF_INTEGRITY, O.REPLAY_DETECTION, O.VERIFIABLE_UPDATES, O.VERIFIABLE, T.NETWORK_ACCESS, T.UNTRUSTED_COMMUNICATION_CHANNELS, T.DATA_INTEGRITY, T.UNDETECTED_ACTIVITY, T.UNAUTHORIZED_ADMINISTRATOR_ACCESS, T.SECURITY_FUNCTIONALITY_COMPROMISE, T.SECURITY_FUNCTIONALITY_FAILURE, T.UPDATE_COMPROMISE, A.NO_THRU_TRAFFIC_PROTECTION, OE.NO_THRU_TRAFFIC_PROTECTION
Security Functional Requirements (SFR)
FAU_GEN.1, FCS_COP.1, FCS_MKA_EXT.1, FCS_COP.1.1, FCS_RBG_EXT.1, FCS_MKA_EXT.1.1, FCS_MKA_EXT.1.2, FCS_MKA_EXT.1.4, FCS_MKA_EXT.1.6, FCS_MKA_EXT.1.7, FCS_MKA_EXT.1.8, FCS_SNMP_EXT.1.1, FIA_AFL_EXT.1, FIA_PSK_EXT.1, FIA_AFL.1, FIA_AFL.1.1, FIA_AFL.1.2, FIA_PSK_EXT.1.1, FIA_PSK_EXT.1.2, FIA_PSK_EXT.1.3, FIA_PSK_EXT.1.4, FIA_AFL_EXT.1.1, FIA_PMG_EXT.1, FMT_SNMP_EXT.1, FMT_SMF.1, FMT_SNMP_EXT.1.1, FMT_SNMP_EXT.1.2, FMT_SNMP_EXT.1.3, FPT_CAK_EXT.1, FPT_FLS.1, FPT_RPL.1, FPT_TUD_EXT.1, FPT_CAK_EXT.1.1, FPT_FLS.1.1, FPT_RPL.1.1, FPT_RPL.1.2, FTP_ITC.1, FTP_TRP.1, FTP_ITC.1.1, FTP_TRP.1.1

Creation date D:20151006133946-04'00'
Modification date D:20151006133946-04'00'
Pages 37

References

No references are available for this protection profile.

Processing updates

  • The protection profile was first processed.

Raw data

{
  "_id": "837a30f1efa9132a",
  "_type": "sec_certs.sample.protection_profile.ProtectionProfile",
  "dgst": "837a30f1efa9132a",
  "heuristics": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"
  },
  "pdf_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData",
    "pp_filename": "",
    "pp_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {},
      "cc_claims": {
        "A": {
          "A.NO_THRU_TRAFFIC_PROTECTION": 1
        },
        "O": {
          "O.AUTHENTICATION": 3,
          "O.AUTHORIZED_ADMINISTRATION": 3,
          "O.CRYPTOGRAPHIC_FUNCTIONS": 4,
          "O.PORT_FILTERING": 3,
          "O.REPLAY_DETECTION": 3,
          "O.SYSTEM_MONITORING": 3,
          "O.TSF_INTEGRITY": 3,
          "O.VERIFIABLE": 1,
          "O.VERIFIABLE_UPDATES": 2
        },
        "OE": {
          "OE.NO_THRU_TRAFFIC_PROTECTION": 1
        },
        "T": {
          "T.DATA_INTEGRITY": 3,
          "T.NETWORK_ACCESS": 3,
          "T.SECURITY_FUNCTIONALITY_COMPROMISE": 1,
          "T.SECURITY_FUNCTIONALITY_FAILURE": 1,
          "T.UNAUTHORIZED_ADMINISTRATOR_ACCESS": 1,
          "T.UNDETECTED_ACTIVITY": 1,
          "T.UNTRUSTED_COMMUNICATION_CHANNELS": 3,
          "T.UPDATE_COMPROMISE": 1
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {},
      "cc_security_level": {},
      "cc_sfr": {
        "FAU": {
          "FAU_GEN.1": 4
        },
        "FCS": {
          "FCS_COP.1": 3,
          "FCS_COP.1.1": 1,
          "FCS_MKA_EXT.1": 2,
          "FCS_MKA_EXT.1.1": 1,
          "FCS_MKA_EXT.1.2": 1,
          "FCS_MKA_EXT.1.4": 1,
          "FCS_MKA_EXT.1.6": 1,
          "FCS_MKA_EXT.1.7": 1,
          "FCS_MKA_EXT.1.8": 1,
          "FCS_RBG_EXT.1": 6,
          "FCS_SNMP_EXT.1.1": 1
        },
        "FIA": {
          "FIA_AFL.1": 3,
          "FIA_AFL.1.1": 1,
          "FIA_AFL.1.2": 1,
          "FIA_AFL_EXT.1": 2,
          "FIA_AFL_EXT.1.1": 1,
          "FIA_PMG_EXT.1": 4,
          "FIA_PSK_EXT.1": 3,
          "FIA_PSK_EXT.1.1": 2,
          "FIA_PSK_EXT.1.2": 2,
          "FIA_PSK_EXT.1.3": 2,
          "FIA_PSK_EXT.1.4": 2
        },
        "FMT": {
          "FMT_SMF.1": 4,
          "FMT_SNMP_EXT.1": 3,
          "FMT_SNMP_EXT.1.1": 1,
          "FMT_SNMP_EXT.1.2": 1,
          "FMT_SNMP_EXT.1.3": 1
        },
        "FPT": {
          "FPT_CAK_EXT.1": 2,
          "FPT_CAK_EXT.1.1": 1,
          "FPT_FLS.1": 2,
          "FPT_FLS.1.1": 1,
          "FPT_RPL.1": 3,
          "FPT_RPL.1.1": 1,
          "FPT_RPL.1.2": 1,
          "FPT_TUD_EXT.1": 1
        },
        "FTP": {
          "FTP_ITC.1": 5,
          "FTP_ITC.1.1": 1,
          "FTP_TRP.1": 6,
          "FTP_TRP.1.1": 2
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "GCM": {
          "GCM": 4
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IPsec": {
          "IPsec": 2
        },
        "SSH": {
          "SSH": 2
        },
        "TLS": {
          "TLS": {
            "TLS": 6,
            "TLS 1.1": 1,
            "TLS 1.2": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 8
        },
        "MAC": {
          "MAC": 19
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 1
          },
          "SHA2": {
            "SHA-512": 1,
            "SHA256": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 1
        },
        "RNG": {
          "RBG": 3,
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "NIST": {
          "NIST SP 800-38F": 2
        },
        "RFC": {
          "RFC 3748": 1,
          "RFC 4492": 4,
          "RFC 5216": 1,
          "RFC 5246": 9,
          "RFC 5289": 4,
          "RFC 6353": 1,
          "RFC4346": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 13
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 6
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {
        "TLS": {
          "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_RSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_RSA_WITH_AES_128_CBC_SHA256": 1,
          "TLS_RSA_WITH_AES_256_CBC_SHA": 1
        }
      },
      "vendor": {},
      "vulnerability": {}
    },
    "pp_metadata": {
      "/CreationDate": "D:20151006133946-04\u002700\u0027",
      "/ModDate": "D:20151006133946-04\u002700\u0027",
      "pdf_file_size_bytes": 802218,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://standards.ieee.org/develop/regauth/ethertype/eth.txt"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 37
    },
    "report_filename": null,
    "report_keywords": null,
    "report_metadata": null
  },
  "scheme_metadata": {
    "cc_version": "3.1",
    "pp_short_name": "PP_NDCPP_MACSEC_EP_V1.0",
    "pp_sponsor_id": "NSA",
    "pp_transition": null,
    "predecessor": null,
    "source_scheme": "US",
    "successor": "PP_NDCPP_MACSEC_EP_V1.1"
  },
  "state": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState",
    "pp": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "761d937c31bbd6289f8032570a6a3f134846435e59000f3aad9304a3c356843f",
      "txt_hash": "510e5f0912b89baea98fe6be69c3386d355d6c8d5c2b254f38d3dffad9685193"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": false,
      "download_ok": false,
      "extract_ok": false,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData",
    "category": "Network and Network-Related Devices and Systems",
    "is_collaborative": false,
    "maintenances": [],
    "name": "Extended Package for MACsec Ethernet Encryption Version 1.0",
    "not_valid_after": "2016-06-04",
    "not_valid_before": "2015-10-05",
    "pp_link": "https://www.niap-ccevs.org/api/file/get_public_file/?file_id=10168",
    "report_link": null,
    "scheme": "US",
    "security_level": {
      "_type": "Set",
      "elements": []
    },
    "status": "archived",
    "version": "1.0"
  }
}