This page was not yet optimized for use on mobile devices.
PP-Module for VPN Client, Version 3.0
Profile details
| Status | active |
|---|---|
| Valid from | 29.09.2025 |
| Scheme | πΊπΈ US |
| Category | Network and Network-Related Devices and Systems |
| Security level |
Certification report
certification report could not be downloaded, no link is available.
Protection profile
Extracted keywords
Symmetric Algorithms
AES, DES, HMAC, HMAC-SHA-384Asymmetric Algorithms
ECDH, ECDSA, ECC, Diffie-Hellman, DHHash functions
PBKDF, PBKDF2Schemes
Key ExchangeProtocols
SSH, TLS, DTLS, IKE, IKEv2, IKEv1, IPsec, VPNRandomness
DRBG, RBGBlock cipher modes
GCMClaims
T.TSF_CONFIGURATION, T.TSF_FAILURE, T.UNAUTHORIZED_ACCESS, T.USER_DATA_REUSE, T.NETWORK_ATTACK, T.NETWORK_EAVESDROP, T.LOCAL_ATTACK, T.NETWORK, T.EAVESDROP, T.FLAWAPP, A.NO_TOE_BYPASS, A.PHYSICAL, A.TRUSTED_CONFIG, A.PLATFORM, A.PROPER_ADMIN, A.NOTIFY, A.PRECAUTION, A.CONFIG, A.MDM_SERVER_PLATFORM, OE.NO_TOE_BYPASS, OE.PHYSICAL, OE.TRUSTED_CONFIG, OE.PLATFORM, OE.PROPER_USER, OE.PROPER_ADMIN, OE.PRECAUTION, OE.CONFIG, OE.IT_ENTERPRISESecurity Assurance Requirements (SAR)
AGD_PRE, AGD_OPE, AGD_OPE.1, ATE_IND.1Security Functional Requirements (SFR)
FAU_GEN, FAU_SEL, FAU_GEN.1, FAU_SEL.1, FCS_CKM_EXT, FCS_EAP_EXT, FCS_EAP_EXT.1, FCS_TLS_EXT.1.1, FCS_TLSC_EXT.1.1, FCS_CKM, FCS_COP, FCS_CKM_EXT.2, FCS_CKM_EXT.2.1, FCS_CKM_EXT.1, FCS_CKM.6, FCS_CKM.6.1, FCS_CKM.6.2, FCS_STO_EXT.1, FCS_CKM.1, FCS_RBG.1, FCS_RBG_EXT.1, FCS_COP.1, FCS_CKM.2, FCS_EAP_EXT.1.1, FCS_EAP_EXT.1.2, FCS_EAP_EXT.1.3, FDP_VPN_EXT, FDP_DAR_EXT.2.2, FDP_IFC_EXT, FDP_VPN_EXT.1, FDP_VPN_EXT.1.1, FDP_RIP.2, FDP_RIP.2.1, FIA_BMA_EXT, FIA_PSK_EXT, FIA_XCU_EXT.1.1, FIA_PSK_EXT.1, FIA_BMA_EXT.1, FIA_PSK_EXT.2, FIA_PSK_EXT.3, FIA_PSK_EXT.4, FIA_PSK_EXT.5, FIA_BMA_EXT.1.1, FIA_PSK_EXT.1.2, FIA_PSK_EXT.1.1, FIA_PSK_EXT.2.1, FIA_PSK_EXT.3.1, FIA_PSK_EXT.3.2, FIA_PSK_EXT.3.3, FIA_PSK_EXT.3.4, FIA_PSK_EXT.3.5, FIA_PSK_EXT.3.7, FIA_PSK_EXT.1.3, FIA_PSK_EXT.4.1, FIA_PSK_EXT.5.1, FIA_PSK_EXT.3.6, FMT_SMF, FMT_SMF_EXT, FMT_SMF.1, FMT_SMF_EXT.1, FMT_MTD.1, FMT_MOF_EXT.1, FMT_SMR, FPT_TST_EXT, FPT_TUD_EXT.1, FPT_TST_EXT.1, FPT_ITT, FPT_TRP, FPT_TST_EXT.1.1, FPT_TST_EXT.1.2, FPT_STM.1, FTP_ITC.1, FTP_ITC.1.1, FTP_ITC.1.2, FTP_ITC.1.3, FTP_ITC, FTP_ITC_EXT, FTP_ITC_EXT.1.1, FTP_DIT_EXT, FTP_ITC_EXT.1, FTP_TRP, FTP_TRP.1, FTP_DIT_EXT.1Certification process
out of scope, OE Objective Consistency Rationale OE.NO_TOE_BYPASS This objective addresses behavior that is out of scope of the GPOS PP and does not define an environment that a GPOS TOE is incapable of existing in. OE, OE Objective Consistency Rationale OE.NO_TOE_BYPASS This objective addresses behavior that is out of scope of the MDF PP and does not define an environment that an MDF TOE is incapable of existing in. OE, OE Objective Consistency Rationale OE.NO_TOE_BYPASS This objective addresses behavior that is out of scope of the App PP and does not define an environment that is globally applicable to all software, OE Objective Consistency Rationale OE.NO_TOE_BYPASS This objective addresses behavior that is out of scope of the MDM PP and does not define an environment that an MDM TOE is incapable of existing in. OEStandards
FIPS PUB 186-5, FIPS 203, FIPS 204, FIPS PUB 197, NIST SP 800-208, NIST SP 800-38A, NIST SP 800-38D, NIST SP 800-38E, NIST SP 800-38F, NIST SP 800-38C, NIST SP 800-57, NIST SP 800-132, NIST SP 800-63b, RFC 4301, RFC 4303, RFC 7296, RFC 3526, RFC 7919, RFC 5280, RFC 7748, RFC 4106, RFC 8247, RFC 4868, RFC 5282, RFC 5114, RFC 4945, RFC 8784, RFC 5216, RFC 8996, RFC 5281, ISO/IEC 15408, X.509, CCMB-2022-11-001, CCMB-2022-11-002, CCMB-2022-11-003, CCMB-2022-11-004, CCMB-2022-11-005, CCMB-2022-11-006References
No references are available for this protection profile.
-
The protection profile was first processed.
{
"_id": "ef4a1e19065a2564",
"_type": "sec_certs.sample.protection_profile.ProtectionProfile",
"dgst": "ef4a1e19065a2564",
"heuristics": {
"_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"
},
"pdf_data": {
"_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData",
"pp_filename": "",
"pp_keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 10
},
"ECDH": {
"ECDH": 1
},
"ECDSA": {
"ECDSA": 5
}
},
"FF": {
"DH": {
"DH": 29,
"Diffie-Hellman": 1
}
}
},
"cc_cert_id": {},
"cc_claims": {
"A": {
"A.CONFIG": 1,
"A.MDM_SERVER_PLATFORM": 2,
"A.NOTIFY": 1,
"A.NO_TOE_BYPASS": 9,
"A.PHYSICAL": 7,
"A.PLATFORM": 3,
"A.PRECAUTION": 1,
"A.PROPER_ADMIN": 3,
"A.TRUSTED_CONFIG": 5
},
"OE": {
"OE.CONFIG": 1,
"OE.IT_ENTERPRISE": 1,
"OE.NO_TOE_BYPASS": 4,
"OE.PHYSICAL": 5,
"OE.PLATFORM": 2,
"OE.PRECAUTION": 1,
"OE.PROPER_ADMIN": 3,
"OE.PROPER_USER": 3,
"OE.TRUSTED_CONFIG": 5
},
"T": {
"T.EAVESDROP": 3,
"T.FLAWAPP": 1,
"T.LOCAL_ATTACK": 3,
"T.NETWORK": 2,
"T.NETWORK_ATTACK": 6,
"T.NETWORK_EAVESDROP": 8,
"T.TSF_CONFIGURATION": 4,
"T.TSF_FAILURE": 4,
"T.UNAUTHORIZED_ACCESS": 5,
"T.USER_DATA_REUSE": 5
}
},
"cc_protection_profile_id": {},
"cc_sar": {
"AGD": {
"AGD_OPE": 3,
"AGD_OPE.1": 1,
"AGD_PRE": 1
},
"ATE": {
"ATE_IND.1": 1
}
},
"cc_security_level": {},
"cc_sfr": {
"FAU": {
"FAU_GEN": 19,
"FAU_GEN.1": 8,
"FAU_SEL": 12,
"FAU_SEL.1": 6
},
"FCS": {
"FCS_CKM": 20,
"FCS_CKM.1": 11,
"FCS_CKM.2": 5,
"FCS_CKM.6": 6,
"FCS_CKM.6.1": 2,
"FCS_CKM.6.2": 1,
"FCS_CKM_EXT": 5,
"FCS_CKM_EXT.1": 2,
"FCS_CKM_EXT.2": 12,
"FCS_CKM_EXT.2.1": 5,
"FCS_COP": 10,
"FCS_COP.1": 9,
"FCS_EAP_EXT": 8,
"FCS_EAP_EXT.1": 15,
"FCS_EAP_EXT.1.1": 2,
"FCS_EAP_EXT.1.2": 2,
"FCS_EAP_EXT.1.3": 2,
"FCS_RBG.1": 7,
"FCS_RBG_EXT.1": 4,
"FCS_STO_EXT.1": 2,
"FCS_TLSC_EXT.1.1": 1,
"FCS_TLS_EXT.1.1": 3
},
"FDP": {
"FDP_DAR_EXT.2.2": 1,
"FDP_IFC_EXT": 1,
"FDP_RIP.2": 8,
"FDP_RIP.2.1": 2,
"FDP_VPN_EXT": 4,
"FDP_VPN_EXT.1": 8,
"FDP_VPN_EXT.1.1": 3
},
"FIA": {
"FIA_BMA_EXT": 4,
"FIA_BMA_EXT.1": 12,
"FIA_BMA_EXT.1.1": 3,
"FIA_PSK_EXT": 10,
"FIA_PSK_EXT.1": 24,
"FIA_PSK_EXT.1.1": 3,
"FIA_PSK_EXT.1.2": 8,
"FIA_PSK_EXT.1.3": 1,
"FIA_PSK_EXT.2": 13,
"FIA_PSK_EXT.2.1": 5,
"FIA_PSK_EXT.3": 12,
"FIA_PSK_EXT.3.1": 5,
"FIA_PSK_EXT.3.2": 4,
"FIA_PSK_EXT.3.3": 3,
"FIA_PSK_EXT.3.4": 3,
"FIA_PSK_EXT.3.5": 2,
"FIA_PSK_EXT.3.6": 1,
"FIA_PSK_EXT.3.7": 3,
"FIA_PSK_EXT.4": 13,
"FIA_PSK_EXT.4.1": 3,
"FIA_PSK_EXT.5": 13,
"FIA_PSK_EXT.5.1": 3,
"FIA_XCU_EXT.1.1": 2
},
"FMT": {
"FMT_MOF_EXT.1": 2,
"FMT_MTD.1": 2,
"FMT_SMF": 8,
"FMT_SMF.1": 4,
"FMT_SMF_EXT": 1,
"FMT_SMF_EXT.1": 2,
"FMT_SMR": 1
},
"FPT": {
"FPT_ITT": 3,
"FPT_STM.1": 6,
"FPT_TRP": 1,
"FPT_TST_EXT": 14,
"FPT_TST_EXT.1": 10,
"FPT_TST_EXT.1.1": 1,
"FPT_TST_EXT.1.2": 1,
"FPT_TUD_EXT.1": 4
},
"FTP": {
"FTP_DIT_EXT": 1,
"FTP_DIT_EXT.1": 1,
"FTP_ITC": 7,
"FTP_ITC.1": 6,
"FTP_ITC.1.1": 1,
"FTP_ITC.1.2": 1,
"FTP_ITC.1.3": 1,
"FTP_ITC_EXT": 1,
"FTP_ITC_EXT.1": 2,
"FTP_ITC_EXT.1.1": 1,
"FTP_TRP": 2,
"FTP_TRP.1": 1
}
},
"certification_process": {
"OutOfScope": {
"OE Objective Consistency Rationale OE.NO_TOE_BYPASS This objective addresses behavior that is out of scope of the App PP and does not define an environment that is globally applicable to all software": 1,
"OE Objective Consistency Rationale OE.NO_TOE_BYPASS This objective addresses behavior that is out of scope of the GPOS PP and does not define an environment that a GPOS TOE is incapable of existing in. OE": 1,
"OE Objective Consistency Rationale OE.NO_TOE_BYPASS This objective addresses behavior that is out of scope of the MDF PP and does not define an environment that an MDF TOE is incapable of existing in. OE": 1,
"OE Objective Consistency Rationale OE.NO_TOE_BYPASS This objective addresses behavior that is out of scope of the MDM PP and does not define an environment that an MDM TOE is incapable of existing in. OE": 1,
"out of scope": 4
}
},
"cipher_mode": {
"GCM": {
"GCM": 2
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"IKE": {
"IKE": 28,
"IKEv1": 4,
"IKEv2": 40
},
"IPsec": {
"IPsec": 193
},
"SSH": {
"SSH": 9
},
"TLS": {
"DTLS": {
"DTLS": 10
},
"TLS": {
"TLS": 28
}
},
"VPN": {
"VPN": 266
}
},
"crypto_scheme": {
"KEX": {
"Key Exchange": 3
}
},
"device_model": {},
"ecc_curve": {
"Curve": {
"Curve25519": 2
},
"NIST": {
"P-384": 19,
"P-521": 10,
"curve P-384": 1
}
},
"eval_facility": {},
"hash_function": {
"PBKDF": {
"PBKDF": 1,
"PBKDF2": 1
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 3
},
"RNG": {
"RBG": 7
}
},
"side_channel_analysis": {},
"standard_id": {
"CC": {
"CCMB-2022-11-001": 1,
"CCMB-2022-11-002": 1,
"CCMB-2022-11-003": 1,
"CCMB-2022-11-004": 1,
"CCMB-2022-11-005": 1,
"CCMB-2022-11-006": 1
},
"FIPS": {
"FIPS 203": 8,
"FIPS 204": 4,
"FIPS PUB 186-5": 10,
"FIPS PUB 197": 2
},
"ISO": {
"ISO/IEC 15408": 2
},
"NIST": {
"NIST SP 800-132": 1,
"NIST SP 800-208": 8,
"NIST SP 800-38A": 6,
"NIST SP 800-38C": 5,
"NIST SP 800-38D": 6,
"NIST SP 800-38E": 3,
"NIST SP 800-38F": 6,
"NIST SP 800-57": 3,
"NIST SP 800-63b": 1
},
"RFC": {
"RFC 3526": 13,
"RFC 4106": 1,
"RFC 4301": 6,
"RFC 4303": 3,
"RFC 4868": 1,
"RFC 4945": 2,
"RFC 5114": 4,
"RFC 5216": 2,
"RFC 5280": 2,
"RFC 5281": 2,
"RFC 5282": 1,
"RFC 7296": 4,
"RFC 7748": 1,
"RFC 7919": 5,
"RFC 8247": 1,
"RFC 8784": 4,
"RFC 8996": 4
},
"X509": {
"X.509": 25
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 11
}
},
"DES": {
"DES": {
"DES": 1
}
},
"constructions": {
"MAC": {
"HMAC": 1,
"HMAC-SHA-384": 1
}
}
},
"technical_report_id": {},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"pp_metadata": {
"/CreationDate": "D:20251029153127+00\u002700\u0027",
"/Creator": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/141.0.0.0 Safari/537.36",
"/ModDate": "D:20251029153127+00\u002700\u0027",
"/Producer": "Skia/PDF m141",
"/Title": "PP-Module for VPN Client",
"pdf_file_size_bytes": 5824080,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://www.niap-ccevs.org/protectionprofiles/516",
"http://www.commoncriteriaportal.org/files/ccfiles/CC2022PART3R1.pdf",
"http://www.commoncriteriaportal.org/files/ccfiles/CC2022PART2R1.pdf",
"http://www.commoncriteriaportal.org/files/ccfiles/CC2022PART5R1.pdf",
"https://www.niap-ccevs.org/static_html/protection-profile/428/-428-/index.html",
"http://www.commoncriteriaportal.org/files/ccfiles/CC2022PART4R1.pdf",
"http://www.commoncriteriaportal.org/files/ccfiles/CEM2022R1.pdf",
"https://www.commoncriteriaportal.org/files/ccfiles/CC2022PART1R1.pdf",
"https://www.niap-ccevs.org/protectionprofiles/511",
"https://www.niap-ccevs.org/static_html/protection-profile/469/OS%205.0%20PP/index.html",
"https://www.niap-ccevs.org/static_html/protection-profile/468/MDF%204.0%20PP/index.html"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 91
},
"report_filename": null,
"report_keywords": null,
"report_metadata": null
},
"scheme_metadata": {
"cc_version": "CC:2022",
"pp_short_name": "MOD_VPNC_V3.0",
"pp_sponsor_id": "NIAP",
"pp_transition": null,
"predecessor": "MOD_VPNC_V2.5",
"source_scheme": "US",
"successor": null
},
"state": {
"_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState",
"pp": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": "2c74f41095627961009efc8ee87115412a98450fb1066baaf101f4113c2c4db0",
"txt_hash": "75ca4a9589fea889b46583ea997a215aa465ee54d6beedf60166b68c50b70634"
},
"report": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": false,
"download_ok": false,
"extract_ok": false,
"json_hash": null,
"source_hash": null,
"txt_hash": null
}
},
"web_data": {
"_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData",
"category": "Network and Network-Related Devices and Systems",
"is_collaborative": false,
"maintenances": [],
"name": "PP-Module for VPN Client, Version 3.0",
"not_valid_after": null,
"not_valid_before": "2025-09-29",
"pp_link": "https://www.niap-ccevs.org/api/file/get_public_file/?file_id=36328",
"report_link": null,
"scheme": "US",
"security_level": {
"_type": "Set",
"elements": []
},
"status": "active",
"version": "3.0"
}
}