U.S. Government Protection Profile for Separation Kernels in Environments Requiring High Robustness, Version 1.03

Web information

Status archived
Valid from 29.06.2007
Valid until 01.09.2011
Scheme 🇺🇸 US
Category Operating Systems
Security level EAL6

Certification report

Extracted keywords

Claims
T.ADMIN_ERROR, T.ALTERED_DELIVERY, T.CONFIGURATION_CHANGE, T.CONFIGURATION_INTEGRITY, T.COVERT_CHANNEL_EXPLOIT, T.DENIAL_OF_SERVICE, T.INCORRECT_CONFIG, T.INCORRECT_LOAD, T.INSECURE_STATE, T.LEAST_PRIVILEGE, T.POOR_DESIGN, T.POOR_IMPLEMENTATION, T.POOR_TEST, T.TSF_COMPROMISE, T.UNAUTHORIZED_ACCESS, A.PHYSICAL, A.SUBJECT_ALLOCATION, A.COVERT_CHANNELS, A.TRUSTED_FLOWS
Security Assurance Requirements (SAR)
ADV_CTD, ADV_INI, ADV_LTD
Security Functional Requirements (SFR)
FAU_GEN.1
Certificates
CCEVS-VR-07-0055

Standards
CCIMB-2004-01-001, CCIMB-2004-01-002, CCIMB-2004-01-003, CCIMB-2004-01-004

File metadata

Title Validation Report
Author Franklin Haskell
Creation date D:20070720081003-04'00'
Modification date D:20070720081309-04'00'
Pages 11
Creator Acrobat PDFMaker 7.0 for Word
Producer Acrobat Distiller 7.0 (Windows)

Protection Profile

Extracted keywords

Symmetric Algorithms
HMAC
Asymmetric Algorithms
ECDSA, DSA
Randomness
RNG

Security level
EAL6, EAL7, EAL4, EAL 4, EAL48, EAL5, EAL6+
Claims
O.ACCESS, O.ADMIN_GUIDANCE, O.AUDIT_GENERATION, O.AUTHORIZED_SUBJECT, O.BOUNDED_EXECUTION, O.CHANGE_MANAGEMENT, O.CONFIGURATION_CHANGE, O.CORRECT_CONFIG, O.CORRECT_INIT, O.CORRECT_LOAD, O.CORRECT_TSF_OPERATION, O.COVERT_CHANNEL_ANALYSIS, O.CRYPTOGRAPHY, O.FUNCTIONAL_TESTING, O.INIT_SECURE_STATE, O.INSTALL_GUIDANCE, O.INTERNAL_LEAST_PRIVILEGE, O.MANAGE, O.RATINGS_MAINTENANCE, O.RECOVERY_SECURE_STATE, O.REFERENCE_MONITOR, O.RESIDUAL_INFORMATION, O.RESOURCE_ALLOCATION, O.SECURE_STATE, O.SOUND_DESIGN, O.SOUND_IMPLEMENTATION, O.SUBJECT_ISOLATION, O.TRANSITION, O.TRUSTED_DELIVERY, O.TSF_INTEGRITY, O.USER_GUIDANCE, O.VULNERABILITY_ANALYSIS_TEST, O.VULNERABILITY_ANALYSIS_T, O.VULNERABILITY_ANALYSIS_, O.AUTHORIZED_SUBJE, O.BOUNDED_EXECUT, O.CHANGE_MANAGE, O.CONFIGURATION_C, O.CORRECT_TSF_OPE, O.COVERT_CHANNEL, O.FUNCTIONAL_TESTI, O.INIT_SECURE_STAT, O.INSTALL_GUIDANC, O.INTERNAL_LEAST_, O.RATING_MAINTENA, O.RECOVERY_SECUR, O.REFERENCE_MONIT, O.RESIDUAL_INFORM, O.RESOURCE_ALLOC, O.SOUND_IMPLEMEN, O.SUBJECT_ISOLATIO, O.TRUSTED_DELIVER, O.VULNERABILITY_A, T.ADMIN_ERROR, T.ALTERED_DELIVERY, T.CONFIGURATION_CHANGE, T.CONFIGURATION_INTEGRITY, T.COVERT_CHANNEL_EXPLOIT, T.DENIAL_OF_SERVICE, T.INCORRECT_CONFIG, T.INCORRECT_LOAD, T.INSECURE_STATE, T.LEAST_PRIVILEGE, T.POOR_DESIGN, T.POOR_IMPLEMENTATION, T.POOR_TEST, T.TSF_COMPROMISE, T.UNAUTHORIZED_ACCESS, T.ALTERED_DELIVE, T.CONFIGURATION_, T.CONFIGURATION_I, T.COVERT_CHANNEL, T.POOR, T.UNAUTHORIZED, A.PHYSICAL, A.SUBJECT_ALLOCATION, A.COVERT_CHANNELS, A.TRUSTED_FLOWS, A.TRUSTED_INDIVIDUAL, R.P, OE.TRUSTED_FLOWS, OE.TRUSTED_INDIVIDUAL, OE.PHYSICAL, OE.SUBJECT_ALLOCATION, OE.COVERT_CHANNELS, OE.SUBJECT_ALLOCATIO
Security Assurance Requirements (SAR)
ACM_AUT, ACM_CAP, ACM_SCP, ACM_AUT.2, ACM_CAP.5, ACM_SCP.3, ADO_DEL, ADO_IGS, ADO_DEL_EXP.2, ADO_DEL_EXP, ADO_IGS.1, ADO_DEL.2, ADV_ARC, ADV_CTD, ADV_FSP, ADV_HLD, ADV_IMP, ADV_INI, ADV_INT, ADV_LLD, ADV_LTD, ADV_RCR, ADV_SPM, ADV_ARC_EXP, ADV_INT_EXP.3, ADV_ARC_EXP.1, ADV_CTD_EXP.1, ADV_FSP_EXP.4, ADV_HLD_EXP.4, ADV_IMP_EXP.3, ADV_INI_EXP.1, ADV_LLD_EXP.2, ADV_LTD_EXP.1, ADV_CTD_EXP, ADV_FSP_EXP, ADV_HLD_EXP, ADV_IMP_EXP, ADV_INI_EXP, ADV_INT_EXP, ADV_LLD_EXP, ADV_LTD_EXP, ADV_RCR_EXP, ADV_SPM_EXP, ADV_RCR.3, ADV_SPM.3, ADV_INT.3, ADV_DEL.2, ADV_FSP.4, ADV_HLD.4, ADV_IMP.3, ADV_LLD.2, AGD_ADM, AGD_USR, AGD_ADM_EXP.1, AGD_ADM_EXP, AGD_USR.1, ALC_DVS, ALC_FLR, ALC_LCD, ALC_TAT, ALC_DVS.2, ALC_FLR.3, ALC_LCD.2, ALC_TAT.3, ATE_COV, ATE_DPT, ATE_FUN, ATE_IND, ATE_COV.3, ATE_DPT.3, ATE_FUN.2, ATE_IND.3, AVA_CCA, AVA_MSU, AVA_SOF, AVA_VLA, AVA_VLA_EXP.4, AVA_CCA_EXP.2, AVA_CCA_EXP, AVA_VLA_EXP, AVA_MSU.3, AVA_SOF.1, AVA_VLA.4, AMA_AMP, AMA_AMP_EXP.1, AMA_AMP_EXP, APE_SRE
Security Functional Requirements (SFR)
FAU_ARP, FAU_GEN, FAU_SAR, FAU_SEL, FAU_GEN.1.1, FAU_ARP.1.1, FAU_SEL.1.1, FAU_SAA.1.2, FAU_SAR_EXP.1, FAU_SEL_EXP.1, FAU_ARP.1, FAU_GEN.1, FAU_SAR_EXP.1.1, FAU_SAR_EXP.1.2, FAU_SEL_EXP.1.1, FAU_SAR.1, FAU_SEL.1, FAU_SAA.1, FDP_IFC, FDP_IFF, FDP_RIP, FDP_IFC.2.1, FDP_RIP.2.1, FDP_IFF.1, FDP_IFC.2, FDP_IFF.3, FDP_RIP.2, FDP_ATD_EXP.1, FDP_IFC.2.2, FDP_IFF.3.1, FDP_IFF.1.1, FDP_IFF.1.2, FIA_ATD, FIA_USB, FIA_ATD_EXP.1, FIA_USB_EXP.1, FIA_ATD_EXP.1.1, FIA_USB_EXP.1.1, FIA_USB_EXP.1.2, FIA_USB_EXP.1.3, FIA_ATD.1, FIA_USB.1, FMT_MCD_EXP, FMT_MOF, FMT_MSA, FMT_MTD, FMT_SMF, FMT_MTD_EXP.1, FMT_MTD_EXP.1.1, FMT_MOF_EXP.1, FMT_MOF_EXP.1.1, FMT_MCD_EXP.1, FMT_MSA_EXP.1, FMT_MSA_EXP.3, FMT_MOF.1, FMT_MSA.3, FMT_MTD.1, FMT_MTD.3, FMT_SMF.1, FMT_TST.1, FMT_MCD_EXP.1.1, FMT_MOF.1.1, FMT_MSA_EXP, FMT_MSA_EXP.1.1, FMT_MSA_EXP.1.2, FMT_MSA_EXP.3.1, FMT_MTD.1.1, FMT_MTD.3.1, FMT_SMF.1.1, FMT_MSA.1, FMT_MSA.3.1, FMT_MTN_EXP.1.1, FPT_AMT, FPT_CFG_EXP, FPT_ESS_EXP, FPT_FLS, FPT_HLT_EXP, FPT_MTN_EXP, FPT_PLP_EXP, FPT_RCV_EXP, FPT_RST_EXP, FPT_RVM, FPT_SEP, FPT_STM, FPT_TST_EXP, FPT_FLS.1, FPT_CFG_EXP.1, FPT_ESS_EXP.1, FPT_HLT_EXP.1, FPT_MTN_EXP.1, FPT_MTN_EXP.2, FPT_PLP_EXP.1, FPT_RCV_EXP.2, FPT_RST_EXP.1, FPT_TST_EXP.1, FPT_AMT.1, FPT_TST.1, FPT_AMT.1.1, FPT_CHG_EXP.1, FPT_RCV.4, FPT_RVM.1, FPT_SEP.3, FPT_STM.1, FPT_ESS_EXP.1.2, FPT_TST, FPT_CFG_EXP.1.1, FPT_CFG_EXP.1.2, FPT_CFG.1.3, FPT_CFG_EXP.1.3, FPT_CFG_EXP.1.4, FPT_ESS_EXP.1.1, FPT_ESS_EXP.1.3, FPT_ESS, FPT_FLS.1.1, FPT_HLT_EXP.1.1, FPT_HLT_EXP.1.2, FPT_MTN_EXP.1.1, FPT_MTN_EXP.1.2, FPT_MTN_EXP.1.3, FPT_MTN_EXP.2.1, FPT_PLP_EXP.1.1, FPT_RCV_EXP.2.1, FPT_RCV_EXP.2.2, FPT_RCV_EXP.2.3, FPT_RCV_EXP.2.4, FPT_RCV_EXP.2.5, FPT_RCV.4.1, FPT_RST_EXP.1.1, FPT_RST_EXP.1.2, FPT_RVM.1.1, FPT_SEP.3.1, FPT_SEP.3.2, FPT_SEP.3.3, FPT_STM.1.1, FPT_TST_EXP.1.1, FPT_TST_EXP.1.2, FPT_TST_EXP.1.3, FPT_TST_EXP.1.4, FPT_MNT_EXP.2, FPT_RCV.2, FPT_PRU_EXP.1, FPT_PHP, FRU_RSA, FRU_PRU_EXP.1, FRU_RSA.2, FRU_RSA.2.1, FRU_RSA.2.2, FRU_PRU_EXP.1.1, FTP_AMT, FTP_TST.1

Standards
FIPS PUB 186-29, FIPS PUB 198, FIPS PUB 186-3, FIPS PUB 186-2, FIPS 140-2, FIPS PUB 180-2, CCIMB-2003-02-001, CCIMB-2005-08-001, CCIMB-2005-08-002, CCIMB-2005-08-003, CCIMB-2005-08-004

File metadata

Title US Government Protection Profile for Separation Kernels In Environments Requiring High Robustness
Subject High Robustness Separation Kernel Protection Profile
Keywords separation kernel, SK, SKPP, partitioning kernel, high robustness, data isolation, information flow control, partition, COTS
Author NSA
Creation date D:20070720081813-04'00'
Modification date D:20070720083527-04'00'
Pages 182
Creator Acrobat PDFMaker 7.0 for Word
Producer Acrobat Distiller 7.0 (Windows)

References

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. For details on our data sources and inference methods, see our methodology. If you believe any information here is inaccurate or harmful, please submit feedback.

Updates Feed

  • The protection profile data changed.
  • The protection profile data changed.
  • The protection profile was first processed.

Raw data

{
  "_id": "84252b8a63cdb62b",
  "_type": "sec_certs.sample.protection_profile.ProtectionProfile",
  "dgst": "84252b8a63cdb62b",
  "heuristics": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"
  },
  "pdf_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData",
    "pp_filename": "pp_skpp_hr_v1.03.pdf",
    "pp_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDSA": {
            "ECDSA": 3
          }
        },
        "FF": {
          "DSA": {
            "DSA": 1
          }
        }
      },
      "cc_cert_id": {},
      "cc_claims": {
        "A": {
          "A.COVERT_CHANNELS": 3,
          "A.PHYSICAL": 2,
          "A.SUBJECT_ALLOCATION": 3,
          "A.TRUSTED_FLOWS": 3,
          "A.TRUSTED_INDIVIDUAL": 3
        },
        "O": {
          "O.ACCESS": 4,
          "O.ADMIN_GUIDANCE": 4,
          "O.AUDIT_GENERATION": 4,
          "O.AUTHORIZED_SUBJE": 1,
          "O.AUTHORIZED_SUBJECT": 3,
          "O.BOUNDED_EXECUT": 1,
          "O.BOUNDED_EXECUTION": 3,
          "O.CHANGE_MANAGE": 1,
          "O.CHANGE_MANAGEMENT": 5,
          "O.CONFIGURATION_C": 1,
          "O.CONFIGURATION_CHANGE": 5,
          "O.CORRECT_CONFIG": 5,
          "O.CORRECT_INIT": 4,
          "O.CORRECT_LOAD": 6,
          "O.CORRECT_TSF_OPE": 1,
          "O.CORRECT_TSF_OPERATION": 7,
          "O.COVERT_CHANNEL": 1,
          "O.COVERT_CHANNEL_ANALYSIS": 5,
          "O.CRYPTOGRAPHY": 4,
          "O.FUNCTIONAL_TESTI": 1,
          "O.FUNCTIONAL_TESTING": 7,
          "O.INIT_SECURE_STAT": 1,
          "O.INIT_SECURE_STATE": 3,
          "O.INSTALL_GUIDANC": 1,
          "O.INSTALL_GUIDANCE": 3,
          "O.INTERNAL_LEAST_": 1,
          "O.INTERNAL_LEAST_PRIVILEGE": 3,
          "O.MANAGE": 6,
          "O.RATINGS_MAINTENANCE": 3,
          "O.RATING_MAINTENA": 1,
          "O.RECOVERY_SECUR": 1,
          "O.RECOVERY_SECURE_STATE": 3,
          "O.REFERENCE_MONIT": 1,
          "O.REFERENCE_MONITOR": 3,
          "O.RESIDUAL_INFORM": 1,
          "O.RESIDUAL_INFORMATION": 3,
          "O.RESOURCE_ALLOC": 1,
          "O.RESOURCE_ALLOCATION": 3,
          "O.SECURE_STATE": 4,
          "O.SOUND_DESIGN": 5,
          "O.SOUND_IMPLEMEN": 1,
          "O.SOUND_IMPLEMENTATION": 3,
          "O.SUBJECT_ISOLATIO": 1,
          "O.SUBJECT_ISOLATION": 3,
          "O.TRANSITION": 6,
          "O.TRUSTED_DELIVER": 1,
          "O.TRUSTED_DELIVERY": 3,
          "O.TSF_INTEGRITY": 4,
          "O.USER_GUIDANCE": 4,
          "O.VULNERABILITY_A": 1,
          "O.VULNERABILITY_ANALYSIS_": 2,
          "O.VULNERABILITY_ANALYSIS_T": 1,
          "O.VULNERABILITY_ANALYSIS_TEST": 8
        },
        "OE": {
          "OE.COVERT_CHANNELS": 5,
          "OE.PHYSICAL": 5,
          "OE.SUBJECT_ALLOCATIO": 1,
          "OE.SUBJECT_ALLOCATION": 3,
          "OE.TRUSTED_FLOWS": 5,
          "OE.TRUSTED_INDIVIDUAL": 5
        },
        "R": {
          "R.P": 27
        },
        "T": {
          "T.ADMIN_ERROR": 2,
          "T.ALTERED_DELIVE": 1,
          "T.ALTERED_DELIVERY": 1,
          "T.CONFIGURATION_": 1,
          "T.CONFIGURATION_CHANGE": 2,
          "T.CONFIGURATION_I": 1,
          "T.CONFIGURATION_INTEGRITY": 1,
          "T.COVERT_CHANNEL": 1,
          "T.COVERT_CHANNEL_EXPLOIT": 1,
          "T.DENIAL_OF_SERVICE": 2,
          "T.INCORRECT_CONFIG": 2,
          "T.INCORRECT_LOAD": 2,
          "T.INSECURE_STATE": 2,
          "T.LEAST_PRIVILEGE": 2,
          "T.POOR": 1,
          "T.POOR_DESIGN": 2,
          "T.POOR_IMPLEMENTATION": 1,
          "T.POOR_TEST": 2,
          "T.TSF_COMPROMISE": 2,
          "T.UNAUTHORIZED": 1,
          "T.UNAUTHORIZED_ACCESS": 1
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ACM": {
          "ACM_AUT": 3,
          "ACM_AUT.2": 13,
          "ACM_CAP": 3,
          "ACM_CAP.5": 28,
          "ACM_SCP": 3,
          "ACM_SCP.3": 6
        },
        "ADO": {
          "ADO_DEL": 2,
          "ADO_DEL.2": 1,
          "ADO_DEL_EXP": 1,
          "ADO_DEL_EXP.2": 26,
          "ADO_IGS": 3,
          "ADO_IGS.1": 9
        },
        "ADV": {
          "ADV_ARC": 2,
          "ADV_ARC_EXP": 2,
          "ADV_ARC_EXP.1": 24,
          "ADV_CTD": 2,
          "ADV_CTD_EXP": 1,
          "ADV_CTD_EXP.1": 17,
          "ADV_DEL.2": 1,
          "ADV_FSP": 2,
          "ADV_FSP.4": 3,
          "ADV_FSP_EXP": 1,
          "ADV_FSP_EXP.4": 26,
          "ADV_HLD": 4,
          "ADV_HLD.4": 2,
          "ADV_HLD_EXP": 1,
          "ADV_HLD_EXP.4": 21,
          "ADV_IMP": 2,
          "ADV_IMP.3": 2,
          "ADV_IMP_EXP": 1,
          "ADV_IMP_EXP.3": 14,
          "ADV_INI": 2,
          "ADV_INI_EXP": 2,
          "ADV_INI_EXP.1": 61,
          "ADV_INT": 3,
          "ADV_INT.3": 3,
          "ADV_INT_EXP": 2,
          "ADV_INT_EXP.3": 55,
          "ADV_LLD": 4,
          "ADV_LLD.2": 6,
          "ADV_LLD_EXP": 1,
          "ADV_LLD_EXP.2": 17,
          "ADV_LTD": 2,
          "ADV_LTD_EXP": 1,
          "ADV_LTD_EXP.1": 20,
          "ADV_RCR": 2,
          "ADV_RCR.3": 10,
          "ADV_RCR_EXP": 1,
          "ADV_SPM": 2,
          "ADV_SPM.3": 16,
          "ADV_SPM_EXP": 1
        },
        "AGD": {
          "AGD_ADM": 5,
          "AGD_ADM_EXP": 1,
          "AGD_ADM_EXP.1": 41,
          "AGD_USR": 3,
          "AGD_USR.1": 11
        },
        "ALC": {
          "ALC_DVS": 3,
          "ALC_DVS.2": 11,
          "ALC_FLR": 4,
          "ALC_FLR.3": 18,
          "ALC_LCD": 3,
          "ALC_LCD.2": 12,
          "ALC_TAT": 3,
          "ALC_TAT.3": 10
        },
        "AMA": {
          "AMA_AMP": 2,
          "AMA_AMP_EXP": 2,
          "AMA_AMP_EXP.1": 21
        },
        "APE": {
          "APE_SRE": 1
        },
        "ATE": {
          "ATE_COV": 3,
          "ATE_COV.3": 12,
          "ATE_DPT": 3,
          "ATE_DPT.3": 7,
          "ATE_FUN": 3,
          "ATE_FUN.2": 15,
          "ATE_IND": 3,
          "ATE_IND.3": 11
        },
        "AVA": {
          "AVA_CCA": 3,
          "AVA_CCA_EXP": 1,
          "AVA_CCA_EXP.2": 24,
          "AVA_MSU": 3,
          "AVA_MSU.3": 15,
          "AVA_SOF": 4,
          "AVA_SOF.1": 10,
          "AVA_VLA": 3,
          "AVA_VLA.4": 1,
          "AVA_VLA_EXP": 1,
          "AVA_VLA_EXP.4": 22
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 4": 1,
          "EAL4": 2,
          "EAL48": 1,
          "EAL5": 1,
          "EAL6": 6,
          "EAL6+": 1,
          "EAL7": 1
        }
      },
      "cc_sfr": {
        "FAU": {
          "FAU_ARP": 2,
          "FAU_ARP.1": 8,
          "FAU_ARP.1.1": 4,
          "FAU_GEN": 2,
          "FAU_GEN.1": 6,
          "FAU_GEN.1.1": 1,
          "FAU_SAA.1": 2,
          "FAU_SAA.1.2": 3,
          "FAU_SAR": 2,
          "FAU_SAR.1": 2,
          "FAU_SAR_EXP.1": 8,
          "FAU_SAR_EXP.1.1": 2,
          "FAU_SAR_EXP.1.2": 1,
          "FAU_SEL": 2,
          "FAU_SEL.1": 2,
          "FAU_SEL.1.1": 1,
          "FAU_SEL_EXP.1": 6,
          "FAU_SEL_EXP.1.1": 1
        },
        "FDP": {
          "FDP_ATD_EXP.1": 1,
          "FDP_IFC": 6,
          "FDP_IFC.2": 8,
          "FDP_IFC.2.1": 4,
          "FDP_IFC.2.2": 3,
          "FDP_IFF": 7,
          "FDP_IFF.1": 19,
          "FDP_IFF.1.1": 1,
          "FDP_IFF.1.2": 1,
          "FDP_IFF.3": 5,
          "FDP_IFF.3.1": 1,
          "FDP_RIP": 2,
          "FDP_RIP.2": 3,
          "FDP_RIP.2.1": 4
        },
        "FIA": {
          "FIA_ATD": 2,
          "FIA_ATD.1": 3,
          "FIA_ATD_EXP.1": 8,
          "FIA_ATD_EXP.1.1": 3,
          "FIA_USB": 3,
          "FIA_USB.1": 2,
          "FIA_USB_EXP.1": 8,
          "FIA_USB_EXP.1.1": 3,
          "FIA_USB_EXP.1.2": 3,
          "FIA_USB_EXP.1.3": 3
        },
        "FMT": {
          "FMT_MCD_EXP": 2,
          "FMT_MCD_EXP.1": 8,
          "FMT_MCD_EXP.1.1": 1,
          "FMT_MOF": 2,
          "FMT_MOF.1": 19,
          "FMT_MOF.1.1": 15,
          "FMT_MOF_EXP.1": 1,
          "FMT_MOF_EXP.1.1": 1,
          "FMT_MSA": 2,
          "FMT_MSA.1": 2,
          "FMT_MSA.3": 2,
          "FMT_MSA.3.1": 1,
          "FMT_MSA_EXP": 1,
          "FMT_MSA_EXP.1": 12,
          "FMT_MSA_EXP.1.1": 1,
          "FMT_MSA_EXP.1.2": 1,
          "FMT_MSA_EXP.3": 6,
          "FMT_MSA_EXP.3.1": 1,
          "FMT_MTD": 2,
          "FMT_MTD.1": 8,
          "FMT_MTD.1.1": 2,
          "FMT_MTD.3": 4,
          "FMT_MTD.3.1": 3,
          "FMT_MTD_EXP.1": 2,
          "FMT_MTD_EXP.1.1": 2,
          "FMT_MTN_EXP.1.1": 1,
          "FMT_SMF": 2,
          "FMT_SMF.1": 10,
          "FMT_SMF.1.1": 1,
          "FMT_TST.1": 1
        },
        "FPT": {
          "FPT_AMT": 2,
          "FPT_AMT.1": 11,
          "FPT_AMT.1.1": 4,
          "FPT_CFG.1.3": 1,
          "FPT_CFG_EXP": 3,
          "FPT_CFG_EXP.1": 14,
          "FPT_CFG_EXP.1.1": 3,
          "FPT_CFG_EXP.1.2": 2,
          "FPT_CFG_EXP.1.3": 1,
          "FPT_CFG_EXP.1.4": 1,
          "FPT_CHG_EXP.1": 1,
          "FPT_ESS": 1,
          "FPT_ESS_EXP": 2,
          "FPT_ESS_EXP.1": 13,
          "FPT_ESS_EXP.1.1": 2,
          "FPT_ESS_EXP.1.2": 3,
          "FPT_ESS_EXP.1.3": 1,
          "FPT_FLS": 2,
          "FPT_FLS.1": 10,
          "FPT_FLS.1.1": 1,
          "FPT_HLT_EXP": 2,
          "FPT_HLT_EXP.1": 7,
          "FPT_HLT_EXP.1.1": 1,
          "FPT_HLT_EXP.1.2": 1,
          "FPT_MNT_EXP.2": 1,
          "FPT_MTN_EXP": 2,
          "FPT_MTN_EXP.1": 12,
          "FPT_MTN_EXP.1.1": 1,
          "FPT_MTN_EXP.1.2": 1,
          "FPT_MTN_EXP.1.3": 2,
          "FPT_MTN_EXP.2": 11,
          "FPT_MTN_EXP.2.1": 1,
          "FPT_PHP": 1,
          "FPT_PLP_EXP": 3,
          "FPT_PLP_EXP.1": 8,
          "FPT_PLP_EXP.1.1": 1,
          "FPT_PRU_EXP.1": 1,
          "FPT_RCV.2": 1,
          "FPT_RCV.4": 5,
          "FPT_RCV.4.1": 1,
          "FPT_RCV_EXP": 2,
          "FPT_RCV_EXP.2": 15,
          "FPT_RCV_EXP.2.1": 1,
          "FPT_RCV_EXP.2.2": 1,
          "FPT_RCV_EXP.2.3": 1,
          "FPT_RCV_EXP.2.4": 1,
          "FPT_RCV_EXP.2.5": 1,
          "FPT_RST_EXP": 3,
          "FPT_RST_EXP.1": 11,
          "FPT_RST_EXP.1.1": 1,
          "FPT_RST_EXP.1.2": 1,
          "FPT_RVM": 5,
          "FPT_RVM.1": 6,
          "FPT_RVM.1.1": 1,
          "FPT_SEP": 5,
          "FPT_SEP.3": 7,
          "FPT_SEP.3.1": 3,
          "FPT_SEP.3.2": 1,
          "FPT_SEP.3.3": 4,
          "FPT_STM": 2,
          "FPT_STM.1": 4,
          "FPT_STM.1.1": 3,
          "FPT_TST": 1,
          "FPT_TST.1": 4,
          "FPT_TST_EXP": 2,
          "FPT_TST_EXP.1": 10,
          "FPT_TST_EXP.1.1": 1,
          "FPT_TST_EXP.1.2": 1,
          "FPT_TST_EXP.1.3": 1,
          "FPT_TST_EXP.1.4": 1
        },
        "FRU": {
          "FRU_PRU_EXP.1": 7,
          "FRU_PRU_EXP.1.1": 2,
          "FRU_RSA": 2,
          "FRU_RSA.2": 3,
          "FRU_RSA.2.1": 3,
          "FRU_RSA.2.2": 3
        },
        "FTP": {
          "FTP_AMT": 1,
          "FTP_TST.1": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RNG": 3
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "CC": {
          "CCIMB-2003-02-001": 2,
          "CCIMB-2005-08-001": 1,
          "CCIMB-2005-08-002": 1,
          "CCIMB-2005-08-003": 1,
          "CCIMB-2005-08-004": 1
        },
        "FIPS": {
          "FIPS 140-2": 1,
          "FIPS PUB 180-2": 1,
          "FIPS PUB 186-2": 2,
          "FIPS PUB 186-29": 1,
          "FIPS PUB 186-3": 2,
          "FIPS PUB 198": 2
        }
      },
      "symmetric_crypto": {
        "constructions": {
          "MAC": {
            "HMAC": 1
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "pp_metadata": {
      "/Author": "NSA",
      "/CreationDate": "D:20070720081813-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 7.0 for Word",
      "/Keywords": "separation kernel, SK, SKPP, partitioning kernel, high robustness, data isolation, information flow control, partition, COTS",
      "/ModDate": "D:20070720083527-04\u002700\u0027",
      "/Producer": "Acrobat Distiller 7.0 (Windows)",
      "/SourceModified": "D:20070720112933",
      "/Subject": "High Robustness Separation Kernel Protection Profile",
      "/Title": "US Government Protection Profile for Separation Kernels In Environments Requiring High Robustness",
      "pdf_file_size_bytes": 1216063,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "mailto:[email protected]"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 182
    },
    "report_filename": "pp_skpp_hr_v1.03-vr.pdf",
    "report_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {
        "US": {
          "CCEVS-VR-07-0055": 1
        }
      },
      "cc_claims": {
        "A": {
          "A.COVERT_CHANNELS": 1,
          "A.PHYSICAL": 1,
          "A.SUBJECT_ALLOCATION": 1,
          "A.TRUSTED_FLOWS": 1
        },
        "T": {
          "T.ADMIN_ERROR": 1,
          "T.ALTERED_DELIVERY": 1,
          "T.CONFIGURATION_CHANGE": 1,
          "T.CONFIGURATION_INTEGRITY": 1,
          "T.COVERT_CHANNEL_EXPLOIT": 1,
          "T.DENIAL_OF_SERVICE": 1,
          "T.INCORRECT_CONFIG": 1,
          "T.INCORRECT_LOAD": 1,
          "T.INSECURE_STATE": 1,
          "T.LEAST_PRIVILEGE": 1,
          "T.POOR_DESIGN": 1,
          "T.POOR_IMPLEMENTATION": 1,
          "T.POOR_TEST": 1,
          "T.TSF_COMPROMISE": 1,
          "T.UNAUTHORIZED_ACCESS": 1
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ADV": {
          "ADV_CTD": 1,
          "ADV_INI": 1,
          "ADV_LTD": 1
        }
      },
      "cc_security_level": {},
      "cc_sfr": {
        "FAU": {
          "FAU_GEN.1": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "CC": {
          "CCIMB-2004-01-001": 1,
          "CCIMB-2004-01-002": 1,
          "CCIMB-2004-01-003": 1,
          "CCIMB-2004-01-004": 1
        }
      },
      "symmetric_crypto": {},
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "report_metadata": {
      "/Author": "Franklin Haskell",
      "/Company": "The MITRE Corporation",
      "/CreationDate": "D:20070720081003-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 7.0 for Word",
      "/ModDate": "D:20070720081309-04\u002700\u0027",
      "/Producer": "Acrobat Distiller 7.0 (Windows)",
      "/SourceModified": "D:20070720120840",
      "/Title": "Validation Report",
      "pdf_file_size_bytes": 86313,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 11
    }
  },
  "state": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState",
    "pp": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_garbage": false,
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "pdf_hash": "364619961f493608fe4d17e760aa30e8700dbbc93e7dff6cf15368fa03b64a39",
      "txt_hash": "71ce39653051e904b2739055634cd1432239a37738b3dfe38ee773d0ad6cc01d"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_garbage": false,
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "pdf_hash": "dc0cac035b724fa106689ce810411ce57ae500dd5f7e0897e8a219f0c48b07d1",
      "txt_hash": "1492c999d0a8df57a30c260de36e674fec09b962671029a5fd6e79f1b48c3eef"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData",
    "category": "Operating Systems",
    "is_collaborative": false,
    "maintenances": [],
    "name": "U.S. Government Protection Profile for Separation Kernels in Environments Requiring High Robustness, Version 1.03",
    "not_valid_after": "2011-09-01",
    "not_valid_before": "2007-06-29",
    "pp_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp_skpp_hr_v1.03.pdf",
    "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp_skpp_hr_v1.03-vr.pdf",
    "scheme": "US",
    "security_level": {
      "_type": "Set",
      "elements": [
        "EAL6"
      ]
    },
    "status": "archived",
    "version": "1.03"
  }
}