FIDO Universal Second Factor (U2F) Authenticator

Web information

Status active
Valid from 18.12.2018
Scheme 🇩🇪 DE
Category ICs, Smart Cards and Smart Card-Related Devices and Systems
Security level AVA_VAN.5, EAL4+

Certification report

Certification report PDF TXT

Extracted keywords

Schemes
MAC
Randomness
RNG

Security level
EAL 4, EAL 2, EAL 4 augmented
Security Assurance Requirements (SAR)
ALC_FLR, AVA_VAN.5, APE_INT.1, APE_CCL.1, APE_SPD.1, APE_OBJ.2, APE_ECD.1, APE_REQ.2
Protection profiles
BSI-CC-PP-0096-V3-2018, BSI-CC-PP-0096-V2-, BSI-CC-PP-0096-V2-2018

Certification process
1.3, 26 June 2018, Evaluation Technical Report BSI-CC-PP-0096-V2-2018 EAL Level 4 Augmented, BSI (confidential document) [8] FIDO Alliance Universal 2nd Factor 1.2 Specifications, 11. July 2017, https://fidoalliance

Standards
AIS 14, AIS 32, AIS 38, AIS 41, ISO/IEC 15408, ISO/IEC 18045, ISO/IEC 17065
Technical reports
BSI 7148

File metadata

Title Certification Report BSI-CC-PP-0096-V2-2018
Subject FIDO Universal Second Factor (U2F) Authenticator
Keywords "Common Criteria, Certification, Zertifizierung, Protection Profile, Schutzprofil, FIDO, Token, U2F, Second, 2nd, Factor"
Author Bundesamt für Sicherheit in der Informationstechnik
Creation date D:20181220123844+01'00'
Modification date D:20181220124459+01'00'
Pages 16
Creator Writer
Producer LibreOffice 5.2

Protection Profile

Protection profile PDF TXT

Extracted keywords

Schemes
MAC
Protocols
TLS
Randomness
RNG

Vendor
NXP Semiconductors, Infineon Technologies AG, STMicroelectronics

Security level
EAL4, EAL4 augmented
Security Assurance Requirements (SAR)
ADV_ARC.1, ADV_FSP.4, ADV_TDS.3, ADV_IMP.1, AGD_OPE.1, AGD_PRE.1, ATE_DPT.1, AVA_VAN.5
Security Functional Requirements (SFR)
FCS_RNG, FCS_CKM.5, FCS_RNG.1, FCS_CKM.1, FCS_RNG.1.1, FCS_RNG.1.2, FCS_CKM, FCS_CKM.2, FCS_COP.1, FCS_CKM.4, FCS_CKM.5.1, FCS_COP, FDP_ITC.1, FDP_ITC.2, FDP_IFC, FDP_IFF.1, FDP_IFF, FDP_IFC.1.1, FDP_IFC.1, FDP_IFF.1.1, FDP_IFF.1.2, FDP_IFF.1.3, FDP_IFF.1.4, FDP_IFF.1.5, FDP_SDI.1, FDP_SDI.1.1, FDP_ACC.1, FIA_SOS.2, FIA_UAU.2, FIA_UAU.6, FIA_UAU.1, FIA_UID.1, FIA_UAU.2.1, FIA_UAU.6.1, FMT_MSA.3, FMT_MSA, FMT_SMF.1, FMT_SMF.1.1, FMT_SMR.1, FMT_SMR.1.1, FMT_SMR.1.2, FMT_MTD.1, FMT_MSA.1, FMT_MSA.3.2, FPR_ANO.1, FPR_ANO.1.1, FPT_EMS, FPT_EMS.1, FPT_EMS.1.1, FPT_EMS.1.2, FPT_PHP.3, FPT_PHP.3.1, FPT_TST.1, FPT_TST.1.1, FPT_TST.1.2, FPT_TST.1.3
Protection profiles
BSI-PP-CC-0096-V3-2018, BSI-CC-PP-0096-V3-2018, BSI-CC-PP-0084-2014

Side-channel analysis
physical probing, side channels, side channel, SPA, DPA, timing attacks, Physical tampering, physical tampering, fault injection, reverse engineering

Standards
CCMB-2017-04-001, CCMB-2017-04-002, CCMB-2017-04-003, CCMB-2017-04-004

File metadata

Title FIDO Universal Second Factor (U2F) Authenticator
Subject PP FIDO U2F
Keywords Common Criteria, Protection Profile, PP0096, FIDO, U2F, EAL4
Author Bundesamt für Sicherheit in der Informationstechnik
Creation date D:20190314093059+01'00'
Modification date D:20190314132231+01'00'
Pages 43
Creator Writer
Producer LibreOffice 5.2

References

No references are available for this protection profile.

Updates

  • The protection profile data changed.
  • The protection profile data changed.
  • The protection profile data changed.
  • The protection profile was first processed.

Raw data 

{
  "_id": "e3c46437db5cb755",
  "_type": "sec_certs.sample.protection_profile.ProtectionProfile",
  "dgst": "e3c46437db5cb755",
  "heuristics": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"
  },
  "pdf_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData",
    "pp_filename": "pp0096V3b_pdf.pdf",
    "pp_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {},
      "cc_claims": {},
      "cc_protection_profile_id": {
        "BSI": {
          "BSI-CC-PP-0084-2014": 1,
          "BSI-CC-PP-0096-V3-2018": 1,
          "BSI-PP-CC-0096-V3-2018": 1
        }
      },
      "cc_sar": {
        "ADV": {
          "ADV_ARC.1": 2,
          "ADV_FSP.4": 2,
          "ADV_IMP.1": 2,
          "ADV_TDS.3": 2
        },
        "AGD": {
          "AGD_OPE.1": 2,
          "AGD_PRE.1": 2
        },
        "ATE": {
          "ATE_DPT.1": 2
        },
        "AVA": {
          "AVA_VAN.5": 5
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL4": 12,
          "EAL4 augmented": 3
        }
      },
      "cc_sfr": {
        "FCS": {
          "FCS_CKM": 15,
          "FCS_CKM.1": 10,
          "FCS_CKM.2": 4,
          "FCS_CKM.4": 11,
          "FCS_CKM.5": 6,
          "FCS_CKM.5.1": 1,
          "FCS_COP": 5,
          "FCS_COP.1": 8,
          "FCS_RNG": 5,
          "FCS_RNG.1": 14,
          "FCS_RNG.1.1": 2,
          "FCS_RNG.1.2": 2
        },
        "FDP": {
          "FDP_ACC.1": 4,
          "FDP_IFC": 20,
          "FDP_IFC.1": 9,
          "FDP_IFC.1.1": 4,
          "FDP_IFF": 20,
          "FDP_IFF.1": 5,
          "FDP_IFF.1.1": 4,
          "FDP_IFF.1.2": 4,
          "FDP_IFF.1.3": 8,
          "FDP_IFF.1.4": 4,
          "FDP_IFF.1.5": 4,
          "FDP_ITC.1": 3,
          "FDP_ITC.2": 3,
          "FDP_SDI.1": 3,
          "FDP_SDI.1.1": 1
        },
        "FIA": {
          "FIA_SOS.2": 1,
          "FIA_UAU.1": 1,
          "FIA_UAU.2": 8,
          "FIA_UAU.2.1": 1,
          "FIA_UAU.6": 8,
          "FIA_UAU.6.1": 1,
          "FIA_UID.1": 2
        },
        "FMT": {
          "FMT_MSA": 24,
          "FMT_MSA.1": 5,
          "FMT_MSA.3": 5,
          "FMT_MSA.3.2": 4,
          "FMT_MTD.1": 6,
          "FMT_SMF.1": 11,
          "FMT_SMF.1.1": 1,
          "FMT_SMR.1": 21,
          "FMT_SMR.1.1": 1,
          "FMT_SMR.1.2": 1
        },
        "FPR": {
          "FPR_ANO.1": 3,
          "FPR_ANO.1.1": 1
        },
        "FPT": {
          "FPT_EMS": 5,
          "FPT_EMS.1": 7,
          "FPT_EMS.1.1": 3,
          "FPT_EMS.1.2": 3,
          "FPT_PHP.3": 3,
          "FPT_PHP.3.1": 1,
          "FPT_TST.1": 5,
          "FPT_TST.1.1": 1,
          "FPT_TST.1.2": 1,
          "FPT_TST.1.3": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "TLS": {
            "TLS": 2
          }
        }
      },
      "crypto_scheme": {
        "MAC": {
          "MAC": 20
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RNG": 13
        }
      },
      "side_channel_analysis": {
        "FI": {
          "Physical tampering": 1,
          "fault injection": 1,
          "physical tampering": 1
        },
        "SCA": {
          "DPA": 1,
          "SPA": 1,
          "physical probing": 1,
          "side channel": 4,
          "side channels": 1,
          "timing attacks": 1
        },
        "other": {
          "reverse engineering": 1
        }
      },
      "standard_id": {
        "CC": {
          "CCMB-2017-04-001": 2,
          "CCMB-2017-04-002": 2,
          "CCMB-2017-04-003": 2,
          "CCMB-2017-04-004": 1
        }
      },
      "symmetric_crypto": {},
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Infineon": {
          "Infineon Technologies AG": 1
        },
        "NXP": {
          "NXP Semiconductors": 1
        },
        "STMicroelectronics": {
          "STMicroelectronics": 1
        }
      },
      "vulnerability": {}
    },
    "pp_metadata": {
      "/Author": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik ",
      "/CreationDate": "D:20190314093059+01\u002700\u0027",
      "/Creator": "Writer",
      "/Keywords": "Common Criteria, Protection Profile, PP0096, FIDO, U2F, EAL4",
      "/ModDate": "D:20190314132231+01\u002700\u0027",
      "/Producer": "LibreOffice 5.2",
      "/Subject": "PP FIDO U2F",
      "/Title": "FIDO Universal Second Factor (U2F) Authenticator",
      "pdf_file_size_bytes": 1605334,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 43
    },
    "report_filename": "pp0096V3a_pdf.pdf",
    "report_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {},
      "cc_claims": {},
      "cc_protection_profile_id": {
        "BSI": {
          "BSI-CC-PP-0096-V2-": 1,
          "BSI-CC-PP-0096-V2-2018": 3,
          "BSI-CC-PP-0096-V3-2018": 8
        }
      },
      "cc_sar": {
        "ALC": {
          "ALC_FLR": 1
        },
        "APE": {
          "APE_CCL.1": 1,
          "APE_ECD.1": 1,
          "APE_INT.1": 1,
          "APE_OBJ.2": 1,
          "APE_REQ.2": 1,
          "APE_SPD.1": 1
        },
        "AVA": {
          "AVA_VAN.5": 2
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 2": 1,
          "EAL 4": 3,
          "EAL 4 augmented": 2
        }
      },
      "cc_sfr": {},
      "certification_process": {
        "ConfidentialDocument": {
          "1.3, 26 June 2018, Evaluation Technical Report BSI-CC-PP-0096-V2-2018 EAL Level 4 Augmented, BSI (confidential document) [8] FIDO Alliance Universal 2nd Factor 1.2 Specifications, 11. July 2017, https://fidoalliance": 1
        }
      },
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "MAC": {
          "MAC": 1
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "BSI": {
          "AIS 14": 1,
          "AIS 32": 1,
          "AIS 38": 1,
          "AIS 41": 1
        },
        "ISO": {
          "ISO/IEC 15408": 4,
          "ISO/IEC 17065": 2,
          "ISO/IEC 18045": 4
        }
      },
      "symmetric_crypto": {},
      "technical_report_id": {
        "BSI": {
          "BSI 7148": 1
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "report_metadata": {
      "/Author": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "/CreationDate": "D:20181220123844+01\u002700\u0027",
      "/Creator": "Writer",
      "/Keywords": "\"Common Criteria, Certification, Zertifizierung, Protection Profile, Schutzprofil, FIDO, Token, U2F, Second, 2nd, Factor\"",
      "/ModDate": "D:20181220124459+01\u002700\u0027",
      "/Producer": "LibreOffice 5.2",
      "/Subject": "FIDO Universal Second Factor (U2F) Authenticator",
      "/Title": "Certification Report BSI-CC-PP-0096-V2-2018",
      "pdf_file_size_bytes": 457534,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://www.sogisportal.eu/",
          "https://www.commoncriteriaportal.org/",
          "https://www.bsi.bund.de/"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 16
    }
  },
  "state": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState",
    "pp": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "pdf_hash": "7ecedd6057a234b58a10cd8d4626fa1df250c98f05bd94066b0c09c07acb608b",
      "txt_hash": "1cb066de0cf5d2120285b32dac45a5743e472e4a72a178f972609ac65422f9ec"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "pdf_hash": "26d822276a977896fa1f27071ca39c5719adcade2de7e2096e9403c074c7438c",
      "txt_hash": "dce55db756eaddcff6d9e69cd0f681061178a89c8834764c048561434da5477c"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData",
    "category": "ICs, Smart Cards and Smart Card-Related Devices and Systems",
    "is_collaborative": false,
    "maintenances": [],
    "name": "FIDO Universal Second Factor (U2F) Authenticator",
    "not_valid_after": null,
    "not_valid_before": "2018-12-18",
    "pp_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0096V3b_pdf.pdf",
    "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0096V3a_pdf.pdf",
    "scheme": "DE",
    "security_level": {
      "_type": "Set",
      "elements": [
        "EAL4+",
        "AVA_VAN.5"
      ]
    },
    "status": "active",
    "version": "3"
  }
}