{"_id": "b3d04ced1eaa1923", "_type": "sec_certs.sample.protection_profile.ProtectionProfile", "dgst": "b3d04ced1eaa1923", "web_data": {"_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData", "category": "Network and Network-Related Devices and Systems", "status": "archived", "is_collaborative": true, "name": "collaborative Protection Profile for Network Devices v2.0 + Errata 20180314", "version": "2.0E", "security_level": {"_type": "Set", "elements": ["None"]}, "not_valid_before": "2018-03-14", "not_valid_after": "2022-01-11", "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/cpp_nd_v2.0-vr.pdf", "pp_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/CPP_ND_V2.0E.pdf", "scheme": null, "maintenances": []}, "pdf_data": {"_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData", "report_metadata": {"pdf_file_size_bytes": 714523, "pdf_is_encrypted": false, "pdf_number_of_pages": 18, "/CreationDate": "D:20180420133139-04'00'", "/ModDate": "D:20180420133139-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": []}}, "pp_metadata": {"pdf_file_size_bytes": 2942711, "pdf_is_encrypted": false, "pdf_number_of_pages": 182, "/CreationDate": "D:20180404095719-04'00'", "/ModDate": "D:20180404095719-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["http://www.commoncriteriaportal.org/"]}}, "report_keywords": {"cc_cert_id": {}, "cc_protection_profile_id": {}, "cc_security_level": {}, "cc_sar": {"ADV": {"ADV_FSP.1": 1}, "AGD": {"AGD_OPE": 1, "AGD_PRE": 1}, "ALC": {"ALC_CMC": 1, "ALC_CMS": 1}, "ATE": {"ATE_IND": 1}, "AVA": {"AVA_VAN": 1}, "APE": {"APE_REQ": 1, "APE_CCL.1": 1, "APE_ECD.1": 1, "APE_INT.1": 1, "APE_OBJ.1": 1, "APE_REQ.1": 1, "APE_SPD.1": 1}, "ASE": {"ASE_CCL": 1, "ASE_ECD": 1, "ASE_INT": 1, "ASE_OBJ": 1, "ASE_REQ": 1, "ASE_SPD": 1, "ASE_TSS": 1}}, "cc_sfr": {"FAU": {"FAU_GEN": 2, "FAU_STG_EXT": 2, "FAU_STG": 2}, "FCO": {"FCO_CPC_EXT": 1}, "FCS": {"FCS_CKM": 3, "FCS_COP": 4, "FCS_RBG_EXT": 1, "FCS_SSHC_EXT": 1, "FCS_SSHS_EXT": 1, "FCS_TLSC_EXT": 2, "FCS_TLSS_EXT": 2}, "FIA": {"FIA_AFL": 1, "FIA_PMG_EXT": 1, "FIA_UIA_EXT": 1, "FIA_UAU_EXT": 1, "FIA_UAU": 1}, "FMT": {"FMT_MOF": 4, "FMT_MTD": 2, "FMT_SMF": 1, "FMT_SMR": 1}, "FPT": {"FPT_SKP_EXT": 1, "FPT_APW_EXT": 1, "FPT_TST_EXT": 2, "FPT_TUD_EXT": 2, "FPT_STM_EXT": 1, "FPT_ITT": 1}, "FTA": {"FTA_SSL_EXT": 1, "FTA_SSL": 2, "FTA_TAB": 1}, "FTP": {"FTP_ITC": 1, "FTP_TRP": 2}}, "cc_claims": {"T": {"T.UNAUTHORIZED_ADMINISTRATOR": 1, "T.WEAK_CRYPTOGRAPHY": 1, "T.UNTRUSTED_COMMUNICATION_": 1, "T.WEAK_AUTHENTICATION_": 1, "T.UPDATE_COMPROMISE": 1, "T.UNDETECTED_ACTI": 1, "T.SECURITY_FUNCTIONALITY_": 2, "T.PASSWORD_CRACKING": 1}, "A": {"A.PHYSICAL_PROTECTION": 1, "A.LIMITED_FUNCTIONALITY": 1, "A.NO_THRU_TRAFFIC_PROTECTION": 1, "A.TRUSTED_ADMINISTRATOR": 1, "A.REGULAR_UPDATES": 1, "A.ADMIN_CREDENTIALS_SECURE": 1, "A.COMPONENTS_RUNNING": 1, "A.RESIDUAL_INFORMATION": 1}, "OE": {"OE.PHYSICAL": 1, "OE.NO_GENERAL_PURPOSE": 1, "OE.NO_THRU_TRAFFIC_PROTECTION": 1, "OE.TRUSTED_ADMIN": 1, "OE.UPDATES": 1, "OE.ADMIN_CREDENTIALS_SECURE": 1, "OE.COMPONENTS_RUNNING": 1, "OE.RESIDUAL_INFORMATION": 1}}, "vendor": {"Cisco": {"Cisco": 63}}, "eval_facility": {"Acumen": {"Acumen Security": 4}, "Gossamer": {"Gossamer Security": 8}}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 1}}}, "asymmetric_crypto": {}, "pq_crypto": {}, "hash_function": {}, "crypto_scheme": {}, "crypto_protocol": {"SSH": {"SSH": 2}, "TLS": {"TLS": {"TLS": 4}, "DTLS": {"DTLS": 4}}, "IPsec": {"IPsec": 1}}, "randomness": {}, "cipher_mode": {}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "technical_report_id": {}, "device_model": {}, "tee_name": {}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"X509": {"X.509": 4}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "pp_keywords": {"cc_cert_id": {}, "cc_protection_profile_id": {}, "cc_security_level": {}, "cc_sar": {"ADV": {"ADV_FSP.1": 4}, "AGD": {"AGD_OPE.1": 3, "AGD_PRE.1": 3, "AGD_OPE": 8}, "ALC": {"ALC_CMC.1": 4, "ALC_CMS.1": 4}, "ATE": {"ATE_IND.1": 3, "ATE_IND": 1}, "AVA": {"AVA_VAN.1": 5, "AVA_VAN": 2}, "APE": {"APE_CCL.1": 1, "APE_ECD.1": 1, "APE_INT.1": 1, "APE_OBJ.1": 1, "APE_REQ.1": 1, "APE_SPD.1": 1}, "ASE": {"ASE_TSS.1": 7, "ASE_CCL.1": 1, "ASE_ECD.1": 1, "ASE_INT.1": 1, "ASE_OBJ.1": 1, "ASE_REQ.1": 1, "ASE_SPD.1": 1}}, "cc_sfr": {"FAU": {"FAU_GEN": 22, "FAU_GEN.1": 17, "FAU_GEN.2": 7, "FAU_STG_EXT": 16, "FAU_STG.1": 12, "FAU_STG_EXT.1": 11, "FAU_STG": 9, "FAU_GEN.1.1": 6, "FAU_GEN.1.2": 1, "FAU_GEN.2.1": 1, "FAU_STG_EXT.1.1": 3, "FAU_STG_EXT.1.2": 3, "FAU_STG_EXT.1.3": 6, "FAU_STG.1.1": 1, "FAU_STG.1.2": 1, "FAU_STG_EXT.2": 6, "FAU_STG.3": 2, "FAU_STG_EXT.2.1": 1}, "FCO": {"FCO_CPC_EXT": 5, "FCO_CPC_EXT.1": 24, "FCO_CPC_EXT.1.2": 12, "FCO_CPC_EXT.1.1": 5, "FCO_CPC_EXT.1.3": 3}, "FCS": {"FCS_CKM": 8, "FCS_CKM.1": 41, "FCS_CKM.2": 45, "FCS_CKM.4": 12, "FCS_COP": 172, "FCS_COP.1": 10, "FCS_RBG_EXT": 6, "FCS_RBG_EXT.1": 48, "FCS_SSHC_EXT": 9, "FCS_SSHS_EXT": 9, "FCS_TLSC_EXT": 13, "FCS_TLSS_EXT": 14, "FCS_SSHC_EXT.1": 11, "FCS_SSHS_EXT.1": 11, "FCS_TLSC_EXT.1": 13, "FCS_TLSC_EXT.2": 10, "FCS_TLSS_EXT.1": 14, "FCS_TLSS_EXT.2": 9, "FCS_CKM.1.1": 3, "FCS_CKM.2.1": 2, "FCS_CKM.4.1": 1, "FCS_RBG_EXT.1.1": 2, "FCS_RBG_EXT.1.2": 5, "FCS_SSHC_EXT.1.8": 3, "FCS_SSHS_EXT.1.8": 3, "FCS_TLSC_EXT.1.2": 3, "FCS_SSHC_EXT.1.1": 2, "FCS_SSHC_EXT.1.2": 2, "FCS_SSHC_EXT.1.3": 2, "FCS_SSHC_EXT.1.4": 2, "FCS_SSHC_EXT.1.5": 7, "FCS_SSHC_EXT.1.9": 3, "FCS_SSHC_EXT.1.6": 2, "FCS_SSHC_EXT.1.7": 2, "FCS_SSHS_EXT.1.1": 2, "FCS_SSHS_EXT.1.2": 2, "FCS_SSHS_EXT.1.3": 2, "FCS_SSHS_EXT.1.4": 2, "FCS_SSHS_EXT.1.5": 5, "FCS_SSHS_EXT.1.6": 2, "FCS_SSHS_EXT.1.7": 2, "FCS_TLSC_EXT.1.1": 6, "FCS_TLSC_EXT.1.3": 3, "FCS_TLSC_EXT.1.4": 2, "FCS_TLSC_EXT.2.1": 4, "FCS_TLSC_EXT.2.2": 2, "FCS_TLSC_EXT.2.3": 3, "FCS_TLSC_EXT.2.4": 2, "FCS_TLSC_EXT.2.5": 2, "FCS_TLSS_EXT.1.1": 8, "FCS_TLSS_EXT.1.2": 2, "FCS_TLSS_EXT.1.3": 2, "FCS_TLSS_EXT.2.1": 4, "FCS_TLSS_EXT.2.2": 2, "FCS_TLSS_EXT.2.3": 2, "FCS_TLSS_EXT.2.4": 3, "FCS_TLSS_EXT.2.5": 2, "FCS_TLSS_EXT.2.6": 2, "FCS_DTLS_EXT.1.1": 1, "FCS_DTLS_EXT.2.1": 1, "FCS_TLS_EXT.1.1": 2}, "FIA": {"FIA_AFL": 2, "FIA_AFL.1": 10, "FIA_PMG_EXT": 6, "FIA_PMG_EXT.1": 13, "FIA_UIA_EXT": 7, "FIA_UIA_EXT.1": 25, "FIA_UAU": 2, "FIA_UAU_EXT": 6, "FIA_UAU_EXT.2": 20, "FIA_UAU.7": 8, "FIA_AFL.1.1": 1, "FIA_AFL.1.2": 1, "FIA_PMG_EXT.1.1": 2, "FIA_UIA_EXT.1.1": 2, "FIA_UIA_EXT.1.2": 3, "FIA_UAU_EXT.2.1": 2, "FIA_UAU.7.1": 1, "FIA_UAU.1": 2, "FIA_UID.1": 2}, "FMT": {"FMT_MOF": 51, "FMT_MTD": 21, "FMT_SMF": 2, "FMT_SMF.1": 26, "FMT_SMR": 2, "FMT_SMR.2": 17, "FMT_MOF.1": 4, "FMT_MTD.1": 7, "FMT_SMF.1.1": 1, "FMT_SMR.2.1": 1, "FMT_SMR.2.2": 2, "FMT_SMR.2.3": 3, "FMT_SMR.1": 6}, "FPT": {"FPT_SKP_EXT": 6, "FPT_SKP_EXT.1": 13, "FPT_APW_EXT": 6, "FPT_APW_EXT.1": 13, "FPT_TST_EXT": 8, "FPT_TST_EXT.1": 13, "FPT_TUD_EXT": 10, "FPT_TUD_EXT.1": 15, "FPT_STM_EXT": 5, "FPT_STM_EXT.1": 12, "FPT_ITT": 14, "FPT_ITT.1": 36, "FPT_TST_EXT.2": 16, "FPT_TUD_EXT.2": 17, "FPT_TUD_EXT.1.2": 5, "FPT_TUD_EXT.2.2": 3, "FPT_SKP_EXT.1.1": 2, "FPT_APW_EXT.1.1": 2, "FPT_APW_EXT.1.2": 2, "FPT_TST_EXT.1.1": 4, "FPT_TUD_EXT.1.1": 4, "FPT_TUD_EXT.1.3": 14, "FPT_STM_EXT.1.1": 2, "FPT_STM_EXT.1.2": 4, "FPT_ITT.1.1": 1, "FPT_TST_EXT.2.1": 2, "FPT_TUD_EXT.2.1": 1, "FPT_PTD": 1, "FPT_STM": 2, "FPT_STM.1": 2}, "FTA": {"FTA_SSL_EXT": 5, "FTA_SSL_EXT.1": 16, "FTA_SSL": 3, "FTA_SSL.3": 9, "FTA_SSL.4": 8, "FTA_TAB": 2, "FTA_TAB.1": 14, "FTA_SSL_EXT.1.1": 2}, "FTP": {"FTP_ITC": 14, "FTP_ITC.1": 61, "FTP_TRP": 45, "FTP_TRP.1": 11, "FTP_ITC.1.1": 3, "FTP_ITC.1.2": 1, "FTP_ITC.1.3": 2, "FTP_ITC.2": 6}}, "cc_claims": {"T": {"T.UNAUTHORIZED_ADMINISTRATOR_ACCESS": 2, "T.WEAK_CRYPTOGRAPHY": 2, "T.UNTRUSTED_COMMUNICATION_CHANNELS": 4, "T.WEAK_AUTHENTICATION_ENDPOINTS": 2, "T.UPDATE_COMPROMISE": 2, "T.UNDETECTED_ACTIVITY": 3, "T.SECURITY_FUNCTIONALITY_COMPROMISE": 2, "T.PASSWORD_CRACKING": 4, "T.SECURITY_FUNCTIONALITY_FAILURE": 2}, "A": {"A.PHYSICAL_PROTECTION": 2, "A.LIMITED_FUNCTIONALITY": 2, "A.NO_THRU_TRAFFIC_PROTECTION": 3, "A.TRUSTED_ADMINISTRATOR": 2, "A.REGULAR_UPDATES": 2, "A.ADMIN_CREDENTIALS_SECURE": 2, "A.COMPONENTS_RUNNING": 2, "A.RESIDUAL_INFORMATION": 2}, "OE": {"OE.PHYSICAL": 3, "OE.NO_GENERAL_PURPOSE": 3, "OE.NO_THRU_TRAFFIC_PROTECTION": 3, "OE.TRUSTED_ADMIN": 3, "OE.UPDATES": 3, "OE.ADMIN_CREDENTIALS_SECURE": 3, "OE.COMPONENTS_RUNNING": 3, "OE.RESIDUAL_INFORMATION": 3}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 21, "AES-": 1}}, "constructions": {"MAC": {"HMAC": 7, "HMAC-SHA-384": 3, "HMAC-SHA-512": 1, "HMAC-SHA-256": 2}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDHE": 6, "ECDH": 5}, "ECDSA": {"ECDSA": 5}, "ECC": {"ECC": 1}}, "FF": {"DH": {"Diffie-Hellman": 22, "DHE": 6, "DH": 20}, "DSA": {"DSA": 1}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 4}, "SHA2": {"SHA-256": 4, "SHA-384": 3, "SHA-512": 5, "SHA256": 32, "SHA-2": 2}}}, "crypto_scheme": {"MAC": {"MAC": 35}, "AEAD": {"AEAD": 1}}, "crypto_protocol": {"SSH": {"SSH": 102}, "TLS": {"SSL": {"SSL": 12, "SSL 2.0": 4, "SSL 3.0": 4}, "TLS": {"TLS": 131, "TLS 1.2": 12, "TLS 1.1": 12, "TLS v1.2": 4, "TLS 1.0": 4, "TLS v1.0": 4}, "DTLS": {"DTLS": 161, "DTLS 1.2": 18, "DTLS 1.0": 18, "DTLS v1.2": 8, "DTLS v1.0": 8}}, "IKE": {"IKEv1": 25, "IKEv2": 25, "IKE": 10}, "IPsec": {"IPsec": 49}, "VPN": {"VPN": 2}}, "randomness": {"PRNG": {"DRBG": 3}, "RNG": {"RBG": 10}}, "cipher_mode": {"CBC": {"CBC": 3}, "CTR": {"CTR": 2}, "GCM": {"GCM": 3}}, "ecc_curve": {"NIST": {"P-256": 4, "P-384": 8, "P-521": 4, "curve P-384": 4, "secp256r1": 16, "secp384r1": 16, "secp521r1": 16}}, "crypto_engine": {}, "tls_cipher_suite": {"TLS": {"TLS_RSA_WITH_AES_128_CBC_SHA": 24, "TLS_RSA_WITH_AES_192_CBC_SHA": 8, "TLS_RSA_WITH_AES_256_CBC_SHA": 8, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 8, "TLS_DHE_RSA_WITH_AES_192_CBC_SHA": 8, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 8, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 8, "TLS_ECDHE_RSA_WITH_AES_192_CBC_SHA": 8, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 8, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 8, "TLS_ECDHE_ECDSA_WITH_AES_192_CBC_SHA": 8, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 8, "TLS_RSA_WITH_AES_128_CBC_SHA256": 8, "TLS_RSA_WITH_AES_192_CBC_SHA256": 8, "TLS_RSA_WITH_AES_128_GCM_SHA256": 8, "TLS_RSA_WITH_AES_192_GCM_SHA256": 8, "TLS_RSA_WITH_AES_256_GCM_SHA384": 8, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 8, "TLS_ECDHE_ECDSA_WITH_AES_192_CBC_SHA256": 8, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 8, "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 8, "TLS_ECDHE_ECDSA_WITH_AES_192_GCM_SHA256": 8, "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 8, "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 8, "TLS_ECDHE_RSA_WITH_AES_192_GCM_SHA256": 8, "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 8, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256": 8, "TLS_ECDHE_RSA_WITH_AES_192_CBC_SHA256": 8, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384": 8}}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "technical_report_id": {}, "device_model": {}, "tee_name": {}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS PUB 186-4": 5}, "NIST": {"NIST SP 800-56B": 1, "SP 800-56B": 1, "SP 800-131A": 1, "NIST SP 800-57": 4}, "PKCS": {"PKCS #1": 1}, "RFC": {"RFC 2986": 3, "RFC 3526": 1, "RFC 5280": 21, "RFC 6960": 3, "RFC 5759": 3, "RFC 6347": 26, "RFC 4347": 18, "RFC 3268": 48, "RFC 4492": 48, "RFC 5246": 64, "RFC 5288": 24, "RFC 5289": 96, "RFC 6125": 16, "RFC 2818": 3, "RFC 4301": 4, "RFC 4303": 2, "RFC 3602": 4, "RFC 4106": 2, "RFC 4109": 2, "RFC 4304": 2, "RFC 4868": 6, "RFC 5996": 5, "RFC 5282": 2, "RFC 4945": 2, "RFC 2409": 1, "RFC 4253": 12, "RFC 5647": 8, "RFC 6668": 2, "RFC 4251": 2, "RFC 4346": 8}, "ISO": {"ISO/IEC 9796-2": 1, "ISO/IEC 14888-3": 1, "ISO/IEC 10118": 2, "ISO/IEC 18031:2011": 6}, "X509": {"X.509": 46}, "CC": {"CCMB-2012-09-001": 1, "CCMB-2012-09-002": 1, "CCMB-2012-09-003": 1, "CCMB-2012-09-004": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {"OutOfScope": {"out of scope": 7, "16 Figure 4: Distributed TOE use case with Management Component out of scope ": 1, "16 Figure 4: Distributed TOE use case with Management Component out of scope ................................................16 Figure 5: Management Component required to": 1, "cPP, and such functionality will be specified in other device-type specific cPPs. Also considered out of scope are virus and emailing scanning, intrusion detection/prevention capabilities, Network Address": 1, "situation is depicted in Figure 4. Figure 4: Distributed TOE use case with Management Component out of scope For the cases in both Figure 3 and Figure 4, the Management Component may be certified separately": 1, "indicated as \u201cREQUIRED\u201d but not listed in the later elements of this component are implemented is out of scope of the evaluation activity for this requirement. FCS_SSHC_EXT.1.2 The TSF shall ensure that the SSH": 1, "indicated as \u201cREQUIRED\u201d but not listed in the later elements of this component are implemented is out of scope of the evaluation activity for this requirement. FCS_SSHS_EXT.1.2 The TSF shall ensure that the SSH": 2, "indicated as \u201cREQUIRED\u201d but not listed in the later elements of this component are implemented is out of scope of the evaluation activity for this requirement. FCS_SSHC_EXT SSH Client Protocol 1 F I A _ X 5 0 9": 1}}}, "report_filename": "cpp_nd_v2.0-vr.pdf", "pp_filename": "CPP_ND_V2.0E.pdf"}, "heuristics": {"_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"}, "state": {"_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState", "pp": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "0157d6544adc07395f951bd02e894878739f28419eda51b7ef3530c376cfc40d", "txt_hash": "9ee7a3c02bb06fc01fed7dcca53eea5a9ded01faa7e1fcbf742cd101b921cc5c", "json_hash": null}, "report": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "8f0f0b9fb4352427fcd5fe1d73c0f8b3a25d6c7388d8dcfac51c72cab24a900c", "txt_hash": "5bf5f4739756783eb8af8108381f1455ec0bb0d531ecd4585ea086ddaf61eb04", "json_hash": null}}, "scheme_metadata": {"source_scheme": "US", "pp_short_name": "CPP_ND_V2.0E", "pp_sponsor_id": "", "pp_transition": "2018-03-14T00:00:00Z", "cc_version": "3.1", "predecessor": "CPP_ND_V2.0", "successor": "CPP_ND_V2.1"}}