{"_id": "9a53053632701553", "_type": "sec_certs.sample.protection_profile.ProtectionProfile", "dgst": "9a53053632701553", "web_data": {"_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData", "category": "Network and Network-Related Devices and Systems", "status": "archived", "is_collaborative": true, "name": "collaborative Protection Profile for Network Devices v1.0", "version": "1.0", "security_level": {"_type": "Set", "elements": ["None"]}, "not_valid_before": "2015-02-27", "not_valid_after": "2022-01-11", "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/cpp_nd_v1.0-vr.pdf", "pp_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/CPP_ND_V1.0.pdf", "scheme": null, "maintenances": []}, "pdf_data": {"_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData", "report_metadata": {"pdf_file_size_bytes": 160433, "pdf_is_encrypted": false, "pdf_number_of_pages": 13, "/Author": "Aerospace Corporation", "/Company": "The Aerospace Corporation", "/CreationDate": "D:20160407154550-04'00'", "/Creator": "Acrobat PDFMaker 11 for Word", "/ModDate": "D:20160407154554-04'00'", "/Producer": "Adobe PDF Library 11.0", "/SourceModified": "D:20160407194346", "pdf_hyperlinks": {"_type": "Set", "elements": []}}, "pp_metadata": {"pdf_file_size_bytes": 1430533, "pdf_is_encrypted": false, "pdf_number_of_pages": 112, "/Author": "James Donndelinger", "/CreationDate": "D:20150227145826-05'00'", "/Creator": "Microsoft\u00ae Word 2013", "/ModDate": "D:20160407154140-04'00'", "/Producer": "Microsoft\u00ae Word 2013", "pdf_hyperlinks": {"_type": "Set", "elements": ["http://www.commoncriteriaportal.org/"]}}, "report_keywords": {"cc_cert_id": {}, "cc_protection_profile_id": {}, "cc_security_level": {}, "cc_sar": {"ADV": {"ADV_FSP.1": 1}, "AGD": {"AGD_OPE": 1, "AGD_PRE": 1}, "ALC": {"ALC_CMC": 1, "ALC_CMS": 1}, "ATE": {"ATE_IND": 1}, "AVA": {"AVA_VAN": 1}, "APE": {"APE_CCL.1": 1, "APE_ECD.1": 1, "APE_INT.1": 1, "APE_OBJ.2": 1, "APE_REQ.1": 1}, "ASE": {"ASE_CCL": 1, "ASE_ECD": 1, "ASE_INT": 1, "ASE_OBJ": 1, "ASE_REQ": 1, "ASE_SPD": 1, "ASE_TSS": 1}}, "cc_sfr": {"FAU": {"FAU_GEN": 2, "FAU_STG_EXT": 3, "FAU_STG": 1}, "FCS": {"FCS_CKM": 3, "FCS_COP.1": 4, "FCS_RBG_EXT": 1, "FCS_SSHC_EXT": 1, "FCS_SSHS_EXT": 1, "FCS_TLSC_EXT": 2, "FCS_TLSS_EXT": 2}, "FIA": {"FIA_PMG_EXT": 1, "FIA_UIA_EXT": 1, "FIA_UAU_EXT": 1, "FIA_UAU": 1}, "FMT": {"FMT_MOF.1": 6, "FMT_MTD": 2, "FMT_SMF": 1, "FMT_SMR": 1, "FMT_MOF": 1}, "FPT": {"FPT_SKP_EXT": 1, "FPT_APW_EXT": 1, "FPT_TST_EXT": 2, "FPT_TUD_EXT": 2, "FPT_STM": 1, "FPT_FLS": 1}, "FTA": {"FTA_SSL_EXT": 1, "FTA_SSL": 2, "FTA_TAB": 1}, "FTP": {"FTP_ITC": 1, "FTP_TRP": 1}}, "cc_claims": {"T": {"T.UNAUTHORIZED_ADMINISTRATOR_ACCESS": 1, "T.WEAK_CRYPTOGRAPHY": 1, "T.UNTRUSTED_COMMUNICATION_CHANNELS": 1, "T.WEAK_AUTHENTICATION_ENDPOINTS": 1, "T.UPDATE_COMPROMISE": 1, "T.UNDETECTED_ACTIVITY": 1, "T.SECURITY_FUNCTIONALITY_COMPROMISE": 1, "T.PASSWORD_CRACKING": 1, "T.SECURITY_FUNCTIONALITY_FAILURE": 1}, "A": {"A.PHYSICAL_PROTECTION": 1, "A.LIMITED_FUNCTIONALITY": 1, "A.NO_THRU_TRAFFIC_PROTECTION": 1, "A.TRUSTED_ADMINISTRATOR": 1, "A.REGULAR_UPDATES": 1, "A.ADMIN_CREDENTIALS_SECURE": 1}, "OE": {"OE.PHYSICAL": 1, "OE.NO_GENERAL_PURPOSE": 1, "OE.NO_THRU_TRAFFIC_PROTECTION": 1, "OE.TRUSTED_ADMIN": 1, "OE.UPDATES": 1, "OE.ADMIN_CREDENTIALS_SECURE": 1}}, "vendor": {"Cisco": {"Cisco": 7}}, "eval_facility": {"BoozAllenHamilton": {"Booz Allen Hamilton": 3}, "Gossamer": {"Gossamer Security": 2}}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 1}}}, "asymmetric_crypto": {}, "pq_crypto": {}, "hash_function": {}, "crypto_scheme": {}, "crypto_protocol": {"SSH": {"SSH": 3}, "TLS": {"TLS": {"TLS": 5}}, "IPsec": {"IPsec": 4}}, "randomness": {}, "cipher_mode": {}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "technical_report_id": {}, "device_model": {}, "tee_name": {}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"X509": {"X.509": 4}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "pp_keywords": {"cc_cert_id": {}, "cc_protection_profile_id": {}, "cc_security_level": {}, "cc_sar": {"ADV": {"ADV_FSP.1": 4}, "AGD": {"AGD_OPE.1": 3, "AGD_PRE.1": 3, "AGD_OPE": 8}, "ALC": {"ALC_CMC.1": 4, "ALC_CMS.1": 4}, "ATE": {"ATE_IND.1": 3, "ATE_IND": 1}, "AVA": {"AVA_VAN.1": 3, "AVA_VAN": 2}, "APE": {"APE_CCL.1": 1, "APE_ECD.1": 1, "APE_INT.1": 1, "APE_OBJ.1": 1, "APE_REQ.1": 1, "APE_SPD.1": 1}, "ASE": {"ASE_CCL.1": 1, "ASE_ECD.1": 1, "ASE_INT.1": 1, "ASE_OBJ.1": 1, "ASE_REQ.1": 1, "ASE_SPD.1": 1, "ASE_TSS.1": 2}}, "cc_sfr": {"FAU": {"FAU_GEN": 19, "FAU_GEN.1": 6, "FAU_GEN.2": 4, "FAU_STG_EXT": 7, "FAU_STG.1": 7, "FAU_GEN.1.1": 2, "FAU_GEN.1.2": 1, "FAU_STG_EXT.1": 7, "FAU_GEN.2.1": 1, "FAU_STG_EXT.1.1": 3, "FAU_STG_EXT.1.2": 3, "FAU_STG_EXT.1.3": 8, "FAU_STG_EXT.2": 8, "FAU_STG_EXT.3": 7, "FAU_STG.1.1": 1, "FAU_STG.1.2": 1, "FAU_STG_EXT.2.1": 2, "FAU_STG_EXT.3.1": 2}, "FCS": {"FCS_CKM": 2, "FCS_CKM.1": 12, "FCS_CKM.2": 9, "FCS_CKM.4": 4, "FCS_COP": 4, "FCS_COP.1": 44, "FCS_RBG_EXT": 4, "FCS_RBG_EXT.1": 18, "FCS_SSHC_EXT": 5, "FCS_SSHS_EXT": 5, "FCS_TLSC_EXT": 9, "FCS_TLSS_EXT": 10, "FCS_SSHC_EXT.1": 10, "FCS_SSHS_EXT.1": 10, "FCS_TLSC_EXT.1": 11, "FCS_TLSC_EXT.2": 11, "FCS_TLSS_EXT.1": 11, "FCS_TLSS_EXT.2": 9, "FCS_CKM.1.1": 3, "FCS_CKM.2.1": 2, "FCS_CKM.4.1": 1, "FCS_COP.1.1": 5, "FCS_RBG_EXT.1.1": 2, "FCS_RBG_EXT.1.2": 5, "FCS_SSHC_EXT.1.1": 2, "FCS_SSHC_EXT.1.2": 2, "FCS_SSHC_EXT.1.3": 2, "FCS_SSHC_EXT.1.4": 2, "FCS_SSHC_EXT.1.5": 4, "FCS_SSHC_EXT.1.9": 3, "FCS_SSHC_EXT.1.6": 2, "FCS_SSHC_EXT.1.7": 2, "FCS_SSHC_EXT.1.8": 2, "FCS_SSHS_EXT.1.1": 2, "FCS_SSHS_EXT.1.2": 2, "FCS_SSHS_EXT.1.3": 2, "FCS_SSHS_EXT.1.4": 2, "FCS_SSHS_EXT.1.5": 2, "FCS_SSHS_EXT.1.6": 2, "FCS_SSHS_EXT.1.7": 2, "FCS_SSHS_EXT.1.8": 2, "FCS_TLSC_EXT.1.1": 4, "FCS_TLSC_EXT.1.2": 2, "FCS_TLSC_EXT.1.3": 2, "FCS_TLSC_EXT.1.4": 2, "FCS_TLS_EXT.1.1": 2, "FCS_TLSC_EXT.2.1": 3, "FCS_TLSC_EXT.2.2": 2, "FCS_TLSC_EXT.2.3": 2, "FCS_TLSC_EXT.2.4": 2, "FCS_TLS_EXT.2.1": 1, "FCS_TLSC_EXT.2.5": 2, "FCS_TLSS_EXT.1.1": 6, "FCS_TLSS_EXT.1.2": 2, "FCS_TLSS_EXT.1.3": 2, "FCS_TLSS_EXT.2.1": 6, "FCS_TLSS_EXT.2.2": 2, "FCS_TLSS_EXT.2.3": 2, "FCS_TLSS_EXT.2.4": 3, "FCS_TLSS_EXT.2.5": 2, "FCS_TLSS_EXT.2.6": 2, "FCS_TLS_EXT.1": 1}, "FIA": {"FIA_PMG_EXT": 5, "FIA_PMG_EXT.1": 10, "FIA_UIA_EXT": 6, "FIA_UIA_EXT.1": 10, "FIA_UAU": 4, "FIA_UAU_EXT": 5, "FIA_UAU_EXT.2": 10, "FIA_UAU.7": 4, "FIA_PMG_EXT.1.1": 2, "FIA_UIA_EXT.1.1": 2, "FIA_UIA_EXT.1.2": 2, "FIA_UAU_EXT.2.1": 2, "FIA_UAU.7.1": 1, "FIA_UAU.1": 1}, "FMT": {"FMT_MOF": 10, "FMT_MOF.1": 30, "FMT_MTD": 8, "FMT_MTD.1": 7, "FMT_SMF": 2, "FMT_SMF.1": 8, "FMT_SMR": 2, "FMT_SMR.2": 4, "FMT_MOF.1.1": 8, "FMT_MTD.1.1": 1, "FMT_SMF.1.1": 1, "FMT_SMR.2.1": 1, "FMT_SMR.2.2": 1, "FMT_SMR.2.3": 2}, "FPT": {"FPT_SKP_EXT": 5, "FPT_SKP_EXT.1": 10, "FPT_APW_EXT": 5, "FPT_APW_EXT.1": 10, "FPT_TST_EXT": 3, "FPT_TST_EXT.1": 10, "FPT_TUD_EXT": 7, "FPT_TUD_EXT.1": 12, "FPT_STM": 2, "FPT_STM.1": 4, "FPT_FLS": 6, "FPT_TST_EXT.2": 12, "FPT_TUD_EXT.2": 11, "FPT_TUD_EXT.2.2": 3, "FPT_SKP_EXT.1.1": 2, "FPT_APW_EXT.1.1": 2, "FPT_APW_EXT.1.2": 2, "FPT_TST_EXT.1.1": 4, "FPT_TUD_EXT.1.1": 2, "FPT_TUD_EXT.1.2": 4, "FPT_TUD_EXT.1.3": 8, "FPT_STM.1.1": 1, "FPT_FLS.1": 1, "FPT_TST_EXT.2.1": 2, "FPT_TUD_EXT.2.1": 1, "FPT_PTD": 1}, "FTA": {"FTA_SSL_EXT": 3, "FTA_SSL_EXT.1": 10, "FTA_SSL": 3, "FTA_SSL.3": 5, "FTA_SSL.4": 5, "FTA_TAB": 2, "FTA_TAB.1": 9, "FTA_SSL_EXT.1.1": 2, "FTA_SSL.3.1": 1, "FTA_SSL.4.1": 1, "FTA_TAB.1.1": 1}, "FTP": {"FTP_ITC": 3, "FTP_ITC.1": 12, "FTP_TRP": 2, "FTP_TRP.1": 9, "FTP_ITC.1.1": 3, "FTP_ITC.1.2": 1, "FTP_ITC.1.3": 2, "FTP_TRP.1.1": 1, "FTP_TRP.1.2": 1, "FTP_TRP.1.3": 1}}, "cc_claims": {"T": {"T.UNAUTHORIZED_ADMINISTRATOR_ACCESS": 2, "T.WEAK_CRYPTOGRAPHY": 2, "T.UNTRUSTED_COMMUNICATION_CHANNELS": 2, "T.WEAK_AUTHENTICATION_ENDPOINTS": 2, "T.UPDATE_COMPROMISE": 2, "T.UNDETECTED_ACTIVITY": 2, "T.SECURITY_FUNCTIONALITY_COMPROMISE": 2, "T.PASSWORD_CRACKING": 2, "T.SECURITY_FUNCTIONALITY_FAILURE": 2}, "A": {"A.PHYSICAL_PROTECTION": 2, "A.LIMITED_FUNCTIONALITY": 2, "A.NO_THRU_TRAFFIC_PROTECTION": 2, "A.TRUSTED_ADMINISTRATOR": 2, "A.REGULAR_UPDATES": 2, "A.ADMIN_CREDENTIALS_SECURE": 2}, "OE": {"OE.PHYSICAL": 3, "OE.NO_GENERAL_PURPOSE": 3, "OE.NO_THRU_TRAFFIC_PROTECTION": 3, "OE.TRUSTED_ADMIN": 3, "OE.UPDATES": 3, "OE.ADMIN_CREDENTIALS_SECURE": 3}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 16, "AES-": 2}}, "constructions": {"MAC": {"HMAC": 4, "HMAC-SHA-256": 1, "HMAC-SHA-384": 1, "HMAC-SHA-512": 1}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDH": 5, "ECDHE": 2}, "ECDSA": {"ECDSA": 5}, "ECC": {"ECC": 1}}, "FF": {"DH": {"Diffie-Hellman": 10, "DH": 26, "DHE": 2}, "DSA": {"DSA": 1}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 4}, "SHA2": {"SHA-256": 4, "SHA-384": 3, "SHA-512": 3, "SHA256": 12, "SHA-2": 2}}}, "crypto_scheme": {"MAC": {"MAC": 16}, "AEAD": {"AEAD": 1}}, "crypto_protocol": {"SSH": {"SSH": 88}, "TLS": {"SSL": {"SSL 1.0": 4, "SSL 2.0": 4, "SSL 3.0": 4, "SSL": 2}, "TLS": {"TLS": 103, "TLS 1.2": 12, "TLS 1.1": 12, "TLS v1.2": 4, "TLS 1.0": 4, "TLS v1.0": 2}}, "IKE": {"IKEv1": 26, "IKEv2": 26, "IKE": 9}, "IPsec": {"IPsec": 37}, "VPN": {"VPN": 2}}, "randomness": {"PRNG": {"DRBG": 3}, "RNG": {"RBG": 9}}, "cipher_mode": {"CBC": {"CBC": 3}, "GCM": {"GCM": 5}}, "ecc_curve": {"NIST": {"P-256": 4, "P-384": 8, "P-521": 2, "curve P-384": 4, "secp256r1": 4, "secp384r1": 4, "secp521r1": 2}}, "crypto_engine": {}, "tls_cipher_suite": {"TLS": {"TLS_RSA_WITH_AES_128_CBC_SHA": 12, "TLS_RSA_WITH_AES_256_CBC_SHA": 4, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 4, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 4, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 4, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 4, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 4, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 4, "TLS_RSA_WITH_AES_128_CBC_SHA256": 4, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 4, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 4, "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 4, "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 4, "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 4, "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 4}}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "technical_report_id": {}, "device_model": {}, "tee_name": {}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS PUB 186-4": 5}, "NIST": {"NIST SP 800-56B": 1, "SP 800-56B": 1, "SP 800-131A": 1, "NIST SP 800-57": 4}, "PKCS": {"PKCS #1": 1}, "RFC": {"RFC 5280": 11, "RFC 2560": 2, "RFC 5759": 2, "RFC 2986": 2, "RFC 2818": 3, "RFC 4301": 4, "RFC 4303": 2, "RFC 3602": 4, "RFC 4106": 4, "RFC 4109": 2, "RFC 4304": 2, "RFC 4868": 5, "RFC 5996": 5, "RFC 5282": 2, "RFC 4945": 2, "RFC 2409": 1, "RFC 4253": 12, "RFC 5647": 8, "RFC 6668": 2, "RFC 4251": 2, "RFC 5246": 32, "RFC 4346": 8, "RFC 3268": 16, "RFC 4492": 16, "RFC 5289": 24, "RFC 6125": 8, "RFC 6460": 2}, "ISO": {"ISO/IEC 9796-2": 1, "ISO/IEC 14888-3": 1, "ISO/IEC 10118": 2, "ISO/IEC 18031:2011": 6}, "X509": {"X.509": 24}, "CC": {"CCMB-2012-09-001": 1, "CCMB-2012-09-002": 1, "CCMB-2012-09-003": 1, "CCMB-2012-09-004": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {"OutOfScope": {"out of scope": 5, "scope of this cPP, as these will be specified in other device-type specific cPPs. Also considered out of scope is virus and emailing scanning, intrusion detection/prevention capabilities, Network Address": 1, "indicated as \u201cREQUIRED\u201d but not listed in the later elements of this component are implemented is out of scope of the assurance activity for this requirement. FCS_SSHC_EXT.1.2 The TSF shall ensure that the SSH": 2, "indicated as \u201cREQUIRED\u201d but not listed in the later elements of this component are implemented is out of scope of the assurance activity for this requirement. collaborative Protection Profile for Network": 1, "Page 88 of 112 \u201cREQUIRED\u201d but not listed in the later elements of this component are implemented is out of scope of the assurance activity for this requirement. FCS_SSHS_EXT.1.2 The TSF shall ensure that the SSH": 1}}}, "report_filename": "cpp_nd_v1.0-vr.pdf", "pp_filename": "CPP_ND_V1.0.pdf"}, "heuristics": {"_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"}, "state": {"_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState", "pp": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "ee1ff5866ae6d580bda11a03c9667e922624d1cedf9f006db8f8295cb78f741b", "txt_hash": "9e6fd432e02b21146ce091cd5261fc0b5b8efc08c8ef7dc464261a3e028b5bbd", "json_hash": null}, "report": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "be363a2a43d15d27d76beb5c20063741c224ee28b91d608ae6bcb03c6f515eca", "txt_hash": "74468a7175906405176c58ff48925f774cbada0c38c1fe21779bfe8cbfc743ca", "json_hash": null}}, "scheme_metadata": {"source_scheme": "US", "pp_short_name": "CPP_ND_V1.0", "pp_sponsor_id": "", "pp_transition": "2015-08-27T00:00:00Z", "cc_version": "3.1", "predecessor": "PP_ND_V1.1", "successor": "CPP_ND_V2.0"}}