U.S. Government Protection Profile for Separation Kernels in Environments Requiring High Robustness, Version 1.03

Profile details

Status archived
Valid from 29.06.2007
Valid until 01.09.2011
Scheme 🇺🇸 US
Category Operating Systems
Security level EAL6

Certification report

Extracted keywords

Claims
T.ADMIN_ERROR, T.ALTERED_DELIVERY, T.CONFIGURATION_CHANGE, T.CONFIGURATION_INTEGRITY, T.COVERT_CHANNEL_EXPLOIT, T.DENIAL_OF_SERVICE, T.INCORRECT_CONFIG, T.INCORRECT_LOAD, T.INSECURE_STATE, T.LEAST_PRIVILEGE, T.POOR_DESIGN, T.POOR_IMPLEMENTATION, T.POOR_TEST, T.TSF_COMPROMISE, T.UNAUTHORIZED_ACCESS, A.PHYSICAL, A.SUBJECT_ALLOCATION, A.COVERT_CHANNELS, A.TRUSTED_FLOWS
Security Assurance Requirements (SAR)
ADV_CTD, ADV_INI, ADV_LTD
Security Functional Requirements (SFR)
FAU_GEN.1
Certificates
CCEVS-VR-07-0055

Standards
CCIMB-2004-01-001, CCIMB-2004-01-002, CCIMB-2004-01-003, CCIMB-2004-01-004
Title Validation Report
Author Franklin Haskell
Creation date D:20070720081003-04'00'
Modification date D:20070720081309-04'00'
Pages 11
Creator Acrobat PDFMaker 7.0 for Word
Producer Acrobat Distiller 7.0 (Windows)

Protection profile

Extracted keywords

Symmetric Algorithms
HMAC
Asymmetric Algorithms
ECDSA, DSA
Randomness
RNG

Security level
EAL6, EAL7, EAL4, EAL 4, EAL48, EAL5, EAL6+
Claims
O.ACCESS, O.ADMIN_GUIDANCE, O.AUDIT_GENERATION, O.AUTHORIZED_SUBJECT, O.BOUNDED_EXECUTION, O.CHANGE_MANAGEMENT, O.CONFIGURATION_CHANGE, O.CORRECT_CONFIG, O.CORRECT_INIT, O.CORRECT_LOAD, O.CORRECT_TSF_OPERATION, O.COVERT_CHANNEL_ANALYSIS, O.CRYPTOGRAPHY, O.FUNCTIONAL_TESTING, O.INIT_SECURE_STATE, O.INSTALL_GUIDANCE, O.INTERNAL_LEAST_PRIVILEGE, O.MANAGE, O.RATINGS_MAINTENANCE, O.RECOVERY_SECURE_STATE, O.REFERENCE_MONITOR, O.RESIDUAL_INFORMATION, O.RESOURCE_ALLOCATION, O.SECURE_STATE, O.SOUND_DESIGN, O.SOUND_IMPLEMENTATION, O.SUBJECT_ISOLATION, O.TRANSITION, O.TRUSTED_DELIVERY, O.TSF_INTEGRITY, O.USER_GUIDANCE, O.VULNERABILITY_ANALYSIS_TEST, O.VULNERABILITY_ANALYSIS_T, O.VULNERABILITY_ANALYSIS_, O.AUTHORIZED_SUBJE, O.BOUNDED_EXECUT, O.CHANGE_MANAGE, O.CONFIGURATION_C, O.CORRECT_TSF_OPE, O.COVERT_CHANNEL, O.FUNCTIONAL_TESTI, O.INIT_SECURE_STAT, O.INSTALL_GUIDANC, O.INTERNAL_LEAST_, O.RATING_MAINTENA, O.RECOVERY_SECUR, O.REFERENCE_MONIT, O.RESIDUAL_INFORM, O.RESOURCE_ALLOC, O.SOUND_IMPLEMEN, O.SUBJECT_ISOLATIO, O.TRUSTED_DELIVER, O.VULNERABILITY_A, T.ADMIN_ERROR, T.ALTERED_DELIVERY, T.CONFIGURATION_CHANGE, T.CONFIGURATION_INTEGRITY, T.COVERT_CHANNEL_EXPLOIT, T.DENIAL_OF_SERVICE, T.INCORRECT_CONFIG, T.INCORRECT_LOAD, T.INSECURE_STATE, T.LEAST_PRIVILEGE, T.POOR_DESIGN, T.POOR_IMPLEMENTATION, T.POOR_TEST, T.TSF_COMPROMISE, T.UNAUTHORIZED_ACCESS, T.ALTERED_DELIVE, T.CONFIGURATION_, T.CONFIGURATION_I, T.COVERT_CHANNEL, T.POOR, T.UNAUTHORIZED, A.PHYSICAL, A.SUBJECT_ALLOCATION, A.COVERT_CHANNELS, A.TRUSTED_FLOWS, A.TRUSTED_INDIVIDUAL, R.P, OE.TRUSTED_FLOWS, OE.TRUSTED_INDIVIDUAL, OE.PHYSICAL, OE.SUBJECT_ALLOCATION, OE.COVERT_CHANNELS, OE.SUBJECT_ALLOCATIO
Security Assurance Requirements (SAR)
ACM_AUT, ACM_CAP, ACM_SCP, ACM_AUT.2, ACM_CAP.5, ACM_SCP.3, ADO_DEL, ADO_IGS, ADO_DEL_EXP.2, ADO_DEL_EXP, ADO_IGS.1, ADO_DEL.2, ADV_ARC, ADV_CTD, ADV_FSP, ADV_HLD, ADV_IMP, ADV_INI, ADV_INT, ADV_LLD, ADV_LTD, ADV_RCR, ADV_SPM, ADV_ARC_EXP, ADV_INT_EXP.3, ADV_ARC_EXP.1, ADV_CTD_EXP.1, ADV_FSP_EXP.4, ADV_HLD_EXP.4, ADV_IMP_EXP.3, ADV_INI_EXP.1, ADV_LLD_EXP.2, ADV_LTD_EXP.1, ADV_CTD_EXP, ADV_FSP_EXP, ADV_HLD_EXP, ADV_IMP_EXP, ADV_INI_EXP, ADV_INT_EXP, ADV_LLD_EXP, ADV_LTD_EXP, ADV_RCR_EXP, ADV_SPM_EXP, ADV_RCR.3, ADV_SPM.3, ADV_INT.3, ADV_DEL.2, ADV_FSP.4, ADV_HLD.4, ADV_IMP.3, ADV_LLD.2, AGD_ADM, AGD_USR, AGD_ADM_EXP.1, AGD_ADM_EXP, AGD_USR.1, ALC_DVS, ALC_FLR, ALC_LCD, ALC_TAT, ALC_DVS.2, ALC_FLR.3, ALC_LCD.2, ALC_TAT.3, ATE_COV, ATE_DPT, ATE_FUN, ATE_IND, ATE_COV.3, ATE_DPT.3, ATE_FUN.2, ATE_IND.3, AVA_CCA, AVA_MSU, AVA_SOF, AVA_VLA, AVA_VLA_EXP.4, AVA_CCA_EXP.2, AVA_CCA_EXP, AVA_VLA_EXP, AVA_MSU.3, AVA_SOF.1, AVA_VLA.4, AMA_AMP, AMA_AMP_EXP.1, AMA_AMP_EXP, APE_SRE
Security Functional Requirements (SFR)
FAU_ARP, FAU_GEN, FAU_SAR, FAU_SEL, FAU_GEN.1.1, FAU_ARP.1.1, FAU_SEL.1.1, FAU_SAA.1.2, FAU_SAR_EXP.1, FAU_SEL_EXP.1, FAU_ARP.1, FAU_GEN.1, FAU_SAR_EXP.1.1, FAU_SAR_EXP.1.2, FAU_SEL_EXP.1.1, FAU_SAR.1, FAU_SEL.1, FAU_SAA.1, FDP_IFC, FDP_IFF, FDP_RIP, FDP_IFC.2.1, FDP_RIP.2.1, FDP_IFF.1, FDP_IFC.2, FDP_IFF.3, FDP_RIP.2, FDP_ATD_EXP.1, FDP_IFC.2.2, FDP_IFF.3.1, FDP_IFF.1.1, FDP_IFF.1.2, FIA_ATD, FIA_USB, FIA_ATD_EXP.1, FIA_USB_EXP.1, FIA_ATD_EXP.1.1, FIA_USB_EXP.1.1, FIA_USB_EXP.1.2, FIA_USB_EXP.1.3, FIA_ATD.1, FIA_USB.1, FMT_MCD_EXP, FMT_MOF, FMT_MSA, FMT_MTD, FMT_SMF, FMT_MTD_EXP.1, FMT_MTD_EXP.1.1, FMT_MOF_EXP.1, FMT_MOF_EXP.1.1, FMT_MCD_EXP.1, FMT_MSA_EXP.1, FMT_MSA_EXP.3, FMT_MOF.1, FMT_MSA.3, FMT_MTD.1, FMT_MTD.3, FMT_SMF.1, FMT_TST.1, FMT_MCD_EXP.1.1, FMT_MOF.1.1, FMT_MSA_EXP, FMT_MSA_EXP.1.1, FMT_MSA_EXP.1.2, FMT_MSA_EXP.3.1, FMT_MTD.1.1, FMT_MTD.3.1, FMT_SMF.1.1, FMT_MSA.1, FMT_MSA.3.1, FMT_MTN_EXP.1.1, FPT_AMT, FPT_CFG_EXP, FPT_ESS_EXP, FPT_FLS, FPT_HLT_EXP, FPT_MTN_EXP, FPT_PLP_EXP, FPT_RCV_EXP, FPT_RST_EXP, FPT_RVM, FPT_SEP, FPT_STM, FPT_TST_EXP, FPT_FLS.1, FPT_CFG_EXP.1, FPT_ESS_EXP.1, FPT_HLT_EXP.1, FPT_MTN_EXP.1, FPT_MTN_EXP.2, FPT_PLP_EXP.1, FPT_RCV_EXP.2, FPT_RST_EXP.1, FPT_TST_EXP.1, FPT_AMT.1, FPT_TST.1, FPT_AMT.1.1, FPT_CHG_EXP.1, FPT_RCV.4, FPT_RVM.1, FPT_SEP.3, FPT_STM.1, FPT_ESS_EXP.1.2, FPT_TST, FPT_CFG_EXP.1.1, FPT_CFG_EXP.1.2, FPT_CFG.1.3, FPT_CFG_EXP.1.3, FPT_CFG_EXP.1.4, FPT_ESS_EXP.1.1, FPT_ESS_EXP.1.3, FPT_ESS, FPT_FLS.1.1, FPT_HLT_EXP.1.1, FPT_HLT_EXP.1.2, FPT_MTN_EXP.1.1, FPT_MTN_EXP.1.2, FPT_MTN_EXP.1.3, FPT_MTN_EXP.2.1, FPT_PLP_EXP.1.1, FPT_RCV_EXP.2.1, FPT_RCV_EXP.2.2, FPT_RCV_EXP.2.3, FPT_RCV_EXP.2.4, FPT_RCV_EXP.2.5, FPT_RCV.4.1, FPT_RST_EXP.1.1, FPT_RST_EXP.1.2, FPT_RVM.1.1, FPT_SEP.3.1, FPT_SEP.3.2, FPT_SEP.3.3, FPT_STM.1.1, FPT_TST_EXP.1.1, FPT_TST_EXP.1.2, FPT_TST_EXP.1.3, FPT_TST_EXP.1.4, FPT_MNT_EXP.2, FPT_RCV.2, FPT_PRU_EXP.1, FPT_PHP, FRU_RSA, FRU_PRU_EXP.1, FRU_RSA.2, FRU_RSA.2.1, FRU_RSA.2.2, FRU_PRU_EXP.1.1, FTP_AMT, FTP_TST.1

Standards
FIPS PUB 186-29, FIPS PUB 198, FIPS PUB 186-3, FIPS PUB 186-2, FIPS 140-2, FIPS PUB 180-2, CCIMB-2003-02-001, CCIMB-2005-08-001, CCIMB-2005-08-002, CCIMB-2005-08-003, CCIMB-2005-08-004
Title US Government Protection Profile for Separation Kernels In Environments Requiring High Robustness
Subject High Robustness Separation Kernel Protection Profile
Keywords separation kernel, SK, SKPP, partitioning kernel, high robustness, data isolation, information flow control, partition, COTS
Author NSA
Creation date D:20070720081813-04'00'
Modification date D:20070720083527-04'00'
Pages 182
Creator Acrobat PDFMaker 7.0 for Word
Producer Acrobat Distiller 7.0 (Windows)

References

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

Processing updates

  • The protection profile data changed.
  • The protection profile data changed.
  • The protection profile data changed.
  • The protection profile data changed.
  • The protection profile was first processed.

Raw data

{
  "_id": "84252b8a63cdb62b",
  "_type": "sec_certs.sample.protection_profile.ProtectionProfile",
  "dgst": "84252b8a63cdb62b",
  "heuristics": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"
  },
  "pdf_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData",
    "pp_filename": "pp_skpp_hr_v1.03.pdf",
    "pp_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDSA": {
            "ECDSA": 3
          }
        },
        "FF": {
          "DSA": {
            "DSA": 1
          }
        }
      },
      "cc_cert_id": {},
      "cc_claims": {
        "A": {
          "A.COVERT_CHANNELS": 3,
          "A.PHYSICAL": 2,
          "A.SUBJECT_ALLOCATION": 3,
          "A.TRUSTED_FLOWS": 3,
          "A.TRUSTED_INDIVIDUAL": 3
        },
        "O": {
          "O.ACCESS": 4,
          "O.ADMIN_GUIDANCE": 4,
          "O.AUDIT_GENERATION": 4,
          "O.AUTHORIZED_SUBJE": 1,
          "O.AUTHORIZED_SUBJECT": 3,
          "O.BOUNDED_EXECUT": 1,
          "O.BOUNDED_EXECUTION": 3,
          "O.CHANGE_MANAGE": 1,
          "O.CHANGE_MANAGEMENT": 5,
          "O.CONFIGURATION_C": 1,
          "O.CONFIGURATION_CHANGE": 5,
          "O.CORRECT_CONFIG": 5,
          "O.CORRECT_INIT": 4,
          "O.CORRECT_LOAD": 6,
          "O.CORRECT_TSF_OPE": 1,
          "O.CORRECT_TSF_OPERATION": 7,
          "O.COVERT_CHANNEL": 1,
          "O.COVERT_CHANNEL_ANALYSIS": 5,
          "O.CRYPTOGRAPHY": 4,
          "O.FUNCTIONAL_TESTI": 1,
          "O.FUNCTIONAL_TESTING": 7,
          "O.INIT_SECURE_STAT": 1,
          "O.INIT_SECURE_STATE": 3,
          "O.INSTALL_GUIDANC": 1,
          "O.INSTALL_GUIDANCE": 3,
          "O.INTERNAL_LEAST_": 1,
          "O.INTERNAL_LEAST_PRIVILEGE": 3,
          "O.MANAGE": 6,
          "O.RATINGS_MAINTENANCE": 3,
          "O.RATING_MAINTENA": 1,
          "O.RECOVERY_SECUR": 1,
          "O.RECOVERY_SECURE_STATE": 3,
          "O.REFERENCE_MONIT": 1,
          "O.REFERENCE_MONITOR": 3,
          "O.RESIDUAL_INFORM": 1,
          "O.RESIDUAL_INFORMATION": 3,
          "O.RESOURCE_ALLOC": 1,
          "O.RESOURCE_ALLOCATION": 3,
          "O.SECURE_STATE": 4,
          "O.SOUND_DESIGN": 5,
          "O.SOUND_IMPLEMEN": 1,
          "O.SOUND_IMPLEMENTATION": 3,
          "O.SUBJECT_ISOLATIO": 1,
          "O.SUBJECT_ISOLATION": 3,
          "O.TRANSITION": 6,
          "O.TRUSTED_DELIVER": 1,
          "O.TRUSTED_DELIVERY": 3,
          "O.TSF_INTEGRITY": 4,
          "O.USER_GUIDANCE": 4,
          "O.VULNERABILITY_A": 1,
          "O.VULNERABILITY_ANALYSIS_": 2,
          "O.VULNERABILITY_ANALYSIS_T": 1,
          "O.VULNERABILITY_ANALYSIS_TEST": 8
        },
        "OE": {
          "OE.COVERT_CHANNELS": 5,
          "OE.PHYSICAL": 5,
          "OE.SUBJECT_ALLOCATIO": 1,
          "OE.SUBJECT_ALLOCATION": 3,
          "OE.TRUSTED_FLOWS": 5,
          "OE.TRUSTED_INDIVIDUAL": 5
        },
        "R": {
          "R.P": 27
        },
        "T": {
          "T.ADMIN_ERROR": 2,
          "T.ALTERED_DELIVE": 1,
          "T.ALTERED_DELIVERY": 1,
          "T.CONFIGURATION_": 1,
          "T.CONFIGURATION_CHANGE": 2,
          "T.CONFIGURATION_I": 1,
          "T.CONFIGURATION_INTEGRITY": 1,
          "T.COVERT_CHANNEL": 1,
          "T.COVERT_CHANNEL_EXPLOIT": 1,
          "T.DENIAL_OF_SERVICE": 2,
          "T.INCORRECT_CONFIG": 2,
          "T.INCORRECT_LOAD": 2,
          "T.INSECURE_STATE": 2,
          "T.LEAST_PRIVILEGE": 2,
          "T.POOR": 1,
          "T.POOR_DESIGN": 2,
          "T.POOR_IMPLEMENTATION": 1,
          "T.POOR_TEST": 2,
          "T.TSF_COMPROMISE": 2,
          "T.UNAUTHORIZED": 1,
          "T.UNAUTHORIZED_ACCESS": 1
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ACM": {
          "ACM_AUT": 3,
          "ACM_AUT.2": 13,
          "ACM_CAP": 3,
          "ACM_CAP.5": 28,
          "ACM_SCP": 3,
          "ACM_SCP.3": 6
        },
        "ADO": {
          "ADO_DEL": 2,
          "ADO_DEL.2": 1,
          "ADO_DEL_EXP": 1,
          "ADO_DEL_EXP.2": 26,
          "ADO_IGS": 3,
          "ADO_IGS.1": 9
        },
        "ADV": {
          "ADV_ARC": 2,
          "ADV_ARC_EXP": 2,
          "ADV_ARC_EXP.1": 24,
          "ADV_CTD": 2,
          "ADV_CTD_EXP": 1,
          "ADV_CTD_EXP.1": 17,
          "ADV_DEL.2": 1,
          "ADV_FSP": 2,
          "ADV_FSP.4": 3,
          "ADV_FSP_EXP": 1,
          "ADV_FSP_EXP.4": 26,
          "ADV_HLD": 4,
          "ADV_HLD.4": 2,
          "ADV_HLD_EXP": 1,
          "ADV_HLD_EXP.4": 21,
          "ADV_IMP": 2,
          "ADV_IMP.3": 2,
          "ADV_IMP_EXP": 1,
          "ADV_IMP_EXP.3": 14,
          "ADV_INI": 2,
          "ADV_INI_EXP": 2,
          "ADV_INI_EXP.1": 61,
          "ADV_INT": 3,
          "ADV_INT.3": 3,
          "ADV_INT_EXP": 2,
          "ADV_INT_EXP.3": 55,
          "ADV_LLD": 4,
          "ADV_LLD.2": 6,
          "ADV_LLD_EXP": 1,
          "ADV_LLD_EXP.2": 17,
          "ADV_LTD": 2,
          "ADV_LTD_EXP": 1,
          "ADV_LTD_EXP.1": 20,
          "ADV_RCR": 2,
          "ADV_RCR.3": 10,
          "ADV_RCR_EXP": 1,
          "ADV_SPM": 2,
          "ADV_SPM.3": 16,
          "ADV_SPM_EXP": 1
        },
        "AGD": {
          "AGD_ADM": 5,
          "AGD_ADM_EXP": 1,
          "AGD_ADM_EXP.1": 41,
          "AGD_USR": 3,
          "AGD_USR.1": 11
        },
        "ALC": {
          "ALC_DVS": 3,
          "ALC_DVS.2": 11,
          "ALC_FLR": 4,
          "ALC_FLR.3": 18,
          "ALC_LCD": 3,
          "ALC_LCD.2": 12,
          "ALC_TAT": 3,
          "ALC_TAT.3": 10
        },
        "AMA": {
          "AMA_AMP": 2,
          "AMA_AMP_EXP": 2,
          "AMA_AMP_EXP.1": 21
        },
        "APE": {
          "APE_SRE": 1
        },
        "ATE": {
          "ATE_COV": 3,
          "ATE_COV.3": 12,
          "ATE_DPT": 3,
          "ATE_DPT.3": 7,
          "ATE_FUN": 3,
          "ATE_FUN.2": 15,
          "ATE_IND": 3,
          "ATE_IND.3": 11
        },
        "AVA": {
          "AVA_CCA": 3,
          "AVA_CCA_EXP": 1,
          "AVA_CCA_EXP.2": 24,
          "AVA_MSU": 3,
          "AVA_MSU.3": 15,
          "AVA_SOF": 4,
          "AVA_SOF.1": 10,
          "AVA_VLA": 3,
          "AVA_VLA.4": 1,
          "AVA_VLA_EXP": 1,
          "AVA_VLA_EXP.4": 22
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 4": 1,
          "EAL4": 2,
          "EAL48": 1,
          "EAL5": 1,
          "EAL6": 6,
          "EAL6+": 1,
          "EAL7": 1
        }
      },
      "cc_sfr": {
        "FAU": {
          "FAU_ARP": 2,
          "FAU_ARP.1": 8,
          "FAU_ARP.1.1": 4,
          "FAU_GEN": 2,
          "FAU_GEN.1": 6,
          "FAU_GEN.1.1": 1,
          "FAU_SAA.1": 2,
          "FAU_SAA.1.2": 3,
          "FAU_SAR": 2,
          "FAU_SAR.1": 2,
          "FAU_SAR_EXP.1": 8,
          "FAU_SAR_EXP.1.1": 2,
          "FAU_SAR_EXP.1.2": 1,
          "FAU_SEL": 2,
          "FAU_SEL.1": 2,
          "FAU_SEL.1.1": 1,
          "FAU_SEL_EXP.1": 6,
          "FAU_SEL_EXP.1.1": 1
        },
        "FDP": {
          "FDP_ATD_EXP.1": 1,
          "FDP_IFC": 6,
          "FDP_IFC.2": 8,
          "FDP_IFC.2.1": 4,
          "FDP_IFC.2.2": 3,
          "FDP_IFF": 7,
          "FDP_IFF.1": 19,
          "FDP_IFF.1.1": 1,
          "FDP_IFF.1.2": 1,
          "FDP_IFF.3": 5,
          "FDP_IFF.3.1": 1,
          "FDP_RIP": 2,
          "FDP_RIP.2": 3,
          "FDP_RIP.2.1": 4
        },
        "FIA": {
          "FIA_ATD": 2,
          "FIA_ATD.1": 3,
          "FIA_ATD_EXP.1": 8,
          "FIA_ATD_EXP.1.1": 3,
          "FIA_USB": 3,
          "FIA_USB.1": 2,
          "FIA_USB_EXP.1": 8,
          "FIA_USB_EXP.1.1": 3,
          "FIA_USB_EXP.1.2": 3,
          "FIA_USB_EXP.1.3": 3
        },
        "FMT": {
          "FMT_MCD_EXP": 2,
          "FMT_MCD_EXP.1": 8,
          "FMT_MCD_EXP.1.1": 1,
          "FMT_MOF": 2,
          "FMT_MOF.1": 19,
          "FMT_MOF.1.1": 15,
          "FMT_MOF_EXP.1": 1,
          "FMT_MOF_EXP.1.1": 1,
          "FMT_MSA": 2,
          "FMT_MSA.1": 2,
          "FMT_MSA.3": 2,
          "FMT_MSA.3.1": 1,
          "FMT_MSA_EXP": 1,
          "FMT_MSA_EXP.1": 12,
          "FMT_MSA_EXP.1.1": 1,
          "FMT_MSA_EXP.1.2": 1,
          "FMT_MSA_EXP.3": 6,
          "FMT_MSA_EXP.3.1": 1,
          "FMT_MTD": 2,
          "FMT_MTD.1": 8,
          "FMT_MTD.1.1": 2,
          "FMT_MTD.3": 4,
          "FMT_MTD.3.1": 3,
          "FMT_MTD_EXP.1": 2,
          "FMT_MTD_EXP.1.1": 2,
          "FMT_MTN_EXP.1.1": 1,
          "FMT_SMF": 2,
          "FMT_SMF.1": 10,
          "FMT_SMF.1.1": 1,
          "FMT_TST.1": 1
        },
        "FPT": {
          "FPT_AMT": 2,
          "FPT_AMT.1": 11,
          "FPT_AMT.1.1": 4,
          "FPT_CFG.1.3": 1,
          "FPT_CFG_EXP": 3,
          "FPT_CFG_EXP.1": 14,
          "FPT_CFG_EXP.1.1": 3,
          "FPT_CFG_EXP.1.2": 2,
          "FPT_CFG_EXP.1.3": 1,
          "FPT_CFG_EXP.1.4": 1,
          "FPT_CHG_EXP.1": 1,
          "FPT_ESS": 1,
          "FPT_ESS_EXP": 2,
          "FPT_ESS_EXP.1": 13,
          "FPT_ESS_EXP.1.1": 2,
          "FPT_ESS_EXP.1.2": 3,
          "FPT_ESS_EXP.1.3": 1,
          "FPT_FLS": 2,
          "FPT_FLS.1": 10,
          "FPT_FLS.1.1": 1,
          "FPT_HLT_EXP": 2,
          "FPT_HLT_EXP.1": 7,
          "FPT_HLT_EXP.1.1": 1,
          "FPT_HLT_EXP.1.2": 1,
          "FPT_MNT_EXP.2": 1,
          "FPT_MTN_EXP": 2,
          "FPT_MTN_EXP.1": 12,
          "FPT_MTN_EXP.1.1": 1,
          "FPT_MTN_EXP.1.2": 1,
          "FPT_MTN_EXP.1.3": 2,
          "FPT_MTN_EXP.2": 11,
          "FPT_MTN_EXP.2.1": 1,
          "FPT_PHP": 1,
          "FPT_PLP_EXP": 3,
          "FPT_PLP_EXP.1": 8,
          "FPT_PLP_EXP.1.1": 1,
          "FPT_PRU_EXP.1": 1,
          "FPT_RCV.2": 1,
          "FPT_RCV.4": 5,
          "FPT_RCV.4.1": 1,
          "FPT_RCV_EXP": 2,
          "FPT_RCV_EXP.2": 15,
          "FPT_RCV_EXP.2.1": 1,
          "FPT_RCV_EXP.2.2": 1,
          "FPT_RCV_EXP.2.3": 1,
          "FPT_RCV_EXP.2.4": 1,
          "FPT_RCV_EXP.2.5": 1,
          "FPT_RST_EXP": 3,
          "FPT_RST_EXP.1": 11,
          "FPT_RST_EXP.1.1": 1,
          "FPT_RST_EXP.1.2": 1,
          "FPT_RVM": 5,
          "FPT_RVM.1": 6,
          "FPT_RVM.1.1": 1,
          "FPT_SEP": 5,
          "FPT_SEP.3": 7,
          "FPT_SEP.3.1": 3,
          "FPT_SEP.3.2": 1,
          "FPT_SEP.3.3": 4,
          "FPT_STM": 2,
          "FPT_STM.1": 4,
          "FPT_STM.1.1": 3,
          "FPT_TST": 1,
          "FPT_TST.1": 4,
          "FPT_TST_EXP": 2,
          "FPT_TST_EXP.1": 10,
          "FPT_TST_EXP.1.1": 1,
          "FPT_TST_EXP.1.2": 1,
          "FPT_TST_EXP.1.3": 1,
          "FPT_TST_EXP.1.4": 1
        },
        "FRU": {
          "FRU_PRU_EXP.1": 7,
          "FRU_PRU_EXP.1.1": 2,
          "FRU_RSA": 2,
          "FRU_RSA.2": 3,
          "FRU_RSA.2.1": 3,
          "FRU_RSA.2.2": 3
        },
        "FTP": {
          "FTP_AMT": 1,
          "FTP_TST.1": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RNG": 3
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "CC": {
          "CCIMB-2003-02-001": 2,
          "CCIMB-2005-08-001": 1,
          "CCIMB-2005-08-002": 1,
          "CCIMB-2005-08-003": 1,
          "CCIMB-2005-08-004": 1
        },
        "FIPS": {
          "FIPS 140-2": 1,
          "FIPS PUB 180-2": 1,
          "FIPS PUB 186-2": 2,
          "FIPS PUB 186-29": 1,
          "FIPS PUB 186-3": 2,
          "FIPS PUB 198": 2
        }
      },
      "symmetric_crypto": {
        "constructions": {
          "MAC": {
            "HMAC": 1
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "pp_metadata": {
      "/Author": "NSA",
      "/CreationDate": "D:20070720081813-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 7.0 for Word",
      "/Keywords": "separation kernel, SK, SKPP, partitioning kernel, high robustness, data isolation, information flow control, partition, COTS",
      "/ModDate": "D:20070720083527-04\u002700\u0027",
      "/Producer": "Acrobat Distiller 7.0 (Windows)",
      "/SourceModified": "D:20070720112933",
      "/Subject": "High Robustness Separation Kernel Protection Profile",
      "/Title": "US Government Protection Profile for Separation Kernels In Environments Requiring High Robustness",
      "pdf_file_size_bytes": 1216063,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "mailto:[email protected]"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 182
    },
    "report_filename": "pp_skpp_hr_v1.03-vr.pdf",
    "report_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {
        "US": {
          "CCEVS-VR-07-0055": 1
        }
      },
      "cc_claims": {
        "A": {
          "A.COVERT_CHANNELS": 1,
          "A.PHYSICAL": 1,
          "A.SUBJECT_ALLOCATION": 1,
          "A.TRUSTED_FLOWS": 1
        },
        "T": {
          "T.ADMIN_ERROR": 1,
          "T.ALTERED_DELIVERY": 1,
          "T.CONFIGURATION_CHANGE": 1,
          "T.CONFIGURATION_INTEGRITY": 1,
          "T.COVERT_CHANNEL_EXPLOIT": 1,
          "T.DENIAL_OF_SERVICE": 1,
          "T.INCORRECT_CONFIG": 1,
          "T.INCORRECT_LOAD": 1,
          "T.INSECURE_STATE": 1,
          "T.LEAST_PRIVILEGE": 1,
          "T.POOR_DESIGN": 1,
          "T.POOR_IMPLEMENTATION": 1,
          "T.POOR_TEST": 1,
          "T.TSF_COMPROMISE": 1,
          "T.UNAUTHORIZED_ACCESS": 1
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ADV": {
          "ADV_CTD": 1,
          "ADV_INI": 1,
          "ADV_LTD": 1
        }
      },
      "cc_security_level": {},
      "cc_sfr": {
        "FAU": {
          "FAU_GEN.1": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "CC": {
          "CCIMB-2004-01-001": 1,
          "CCIMB-2004-01-002": 1,
          "CCIMB-2004-01-003": 1,
          "CCIMB-2004-01-004": 1
        }
      },
      "symmetric_crypto": {},
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "report_metadata": {
      "/Author": "Franklin Haskell",
      "/Company": "The MITRE Corporation",
      "/CreationDate": "D:20070720081003-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 7.0 for Word",
      "/ModDate": "D:20070720081309-04\u002700\u0027",
      "/Producer": "Acrobat Distiller 7.0 (Windows)",
      "/SourceModified": "D:20070720120840",
      "/Title": "Validation Report",
      "pdf_file_size_bytes": 86313,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 11
    }
  },
  "scheme_metadata": {
    "cc_version": "2.x",
    "pp_short_name": "PP_SKPP_HR_V1.03",
    "pp_sponsor_id": "NSA",
    "pp_transition": null,
    "predecessor": null,
    "source_scheme": "US",
    "successor": null
  },
  "state": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState",
    "pp": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "364619961f493608fe4d17e760aa30e8700dbbc93e7dff6cf15368fa03b64a39",
      "txt_hash": "71ce39653051e904b2739055634cd1432239a37738b3dfe38ee773d0ad6cc01d"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "dc0cac035b724fa106689ce810411ce57ae500dd5f7e0897e8a219f0c48b07d1",
      "txt_hash": "1492c999d0a8df57a30c260de36e674fec09b962671029a5fd6e79f1b48c3eef"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData",
    "category": "Operating Systems",
    "is_collaborative": false,
    "maintenances": [],
    "name": "U.S. Government Protection Profile for Separation Kernels in Environments Requiring High Robustness, Version 1.03",
    "not_valid_after": "2011-09-01",
    "not_valid_before": "2007-06-29",
    "pp_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp_skpp_hr_v1.03.pdf",
    "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp_skpp_hr_v1.03-vr.pdf",
    "scheme": "US",
    "security_level": {
      "_type": "Set",
      "elements": [
        "EAL6"
      ]
    },
    "status": "archived",
    "version": "1.03"
  }
}