PP-Module for VPN Client, Version 3.0

Profile details

Status active
Valid from 29.09.2025
Scheme πŸ‡ΊπŸ‡Έ US
Category Network and Network-Related Devices and Systems
Security level

Certification report

certification report could not be downloaded, no link is available.

Protection profile

Extracted keywords

Symmetric Algorithms
AES, DES, HMAC, HMAC-SHA-384
Asymmetric Algorithms
ECDH, ECDSA, ECC, Diffie-Hellman, DH
Hash functions
PBKDF, PBKDF2
Schemes
Key Exchange
Protocols
SSH, TLS, DTLS, IKE, IKEv2, IKEv1, IPsec, VPN
Randomness
DRBG, RBG
Elliptic Curves
P-384, P-521, curve P-384, Curve25519
Block cipher modes
GCM

Claims
T.TSF_CONFIGURATION, T.TSF_FAILURE, T.UNAUTHORIZED_ACCESS, T.USER_DATA_REUSE, T.NETWORK_ATTACK, T.NETWORK_EAVESDROP, T.LOCAL_ATTACK, T.NETWORK, T.EAVESDROP, T.FLAWAPP, A.NO_TOE_BYPASS, A.PHYSICAL, A.TRUSTED_CONFIG, A.PLATFORM, A.PROPER_ADMIN, A.NOTIFY, A.PRECAUTION, A.CONFIG, A.MDM_SERVER_PLATFORM, OE.NO_TOE_BYPASS, OE.PHYSICAL, OE.TRUSTED_CONFIG, OE.PLATFORM, OE.PROPER_USER, OE.PROPER_ADMIN, OE.PRECAUTION, OE.CONFIG, OE.IT_ENTERPRISE
Security Assurance Requirements (SAR)
AGD_PRE, AGD_OPE, AGD_OPE.1, ATE_IND.1
Security Functional Requirements (SFR)
FAU_GEN, FAU_SEL, FAU_GEN.1, FAU_SEL.1, FCS_CKM_EXT, FCS_EAP_EXT, FCS_EAP_EXT.1, FCS_TLS_EXT.1.1, FCS_TLSC_EXT.1.1, FCS_CKM, FCS_COP, FCS_CKM_EXT.2, FCS_CKM_EXT.2.1, FCS_CKM_EXT.1, FCS_CKM.6, FCS_CKM.6.1, FCS_CKM.6.2, FCS_STO_EXT.1, FCS_CKM.1, FCS_RBG.1, FCS_RBG_EXT.1, FCS_COP.1, FCS_CKM.2, FCS_EAP_EXT.1.1, FCS_EAP_EXT.1.2, FCS_EAP_EXT.1.3, FDP_VPN_EXT, FDP_DAR_EXT.2.2, FDP_IFC_EXT, FDP_VPN_EXT.1, FDP_VPN_EXT.1.1, FDP_RIP.2, FDP_RIP.2.1, FIA_BMA_EXT, FIA_PSK_EXT, FIA_XCU_EXT.1.1, FIA_PSK_EXT.1, FIA_BMA_EXT.1, FIA_PSK_EXT.2, FIA_PSK_EXT.3, FIA_PSK_EXT.4, FIA_PSK_EXT.5, FIA_BMA_EXT.1.1, FIA_PSK_EXT.1.2, FIA_PSK_EXT.1.1, FIA_PSK_EXT.2.1, FIA_PSK_EXT.3.1, FIA_PSK_EXT.3.2, FIA_PSK_EXT.3.3, FIA_PSK_EXT.3.4, FIA_PSK_EXT.3.5, FIA_PSK_EXT.3.7, FIA_PSK_EXT.1.3, FIA_PSK_EXT.4.1, FIA_PSK_EXT.5.1, FIA_PSK_EXT.3.6, FMT_SMF, FMT_SMF_EXT, FMT_SMF.1, FMT_SMF_EXT.1, FMT_MTD.1, FMT_MOF_EXT.1, FMT_SMR, FPT_TST_EXT, FPT_TUD_EXT.1, FPT_TST_EXT.1, FPT_ITT, FPT_TRP, FPT_TST_EXT.1.1, FPT_TST_EXT.1.2, FPT_STM.1, FTP_ITC.1, FTP_ITC.1.1, FTP_ITC.1.2, FTP_ITC.1.3, FTP_ITC, FTP_ITC_EXT, FTP_ITC_EXT.1.1, FTP_DIT_EXT, FTP_ITC_EXT.1, FTP_TRP, FTP_TRP.1, FTP_DIT_EXT.1

Certification process
out of scope, OE Objective Consistency Rationale OE.NO_TOE_BYPASS This objective addresses behavior that is out of scope of the GPOS PP and does not define an environment that a GPOS TOE is incapable of existing in. OE, OE Objective Consistency Rationale OE.NO_TOE_BYPASS This objective addresses behavior that is out of scope of the MDF PP and does not define an environment that an MDF TOE is incapable of existing in. OE, OE Objective Consistency Rationale OE.NO_TOE_BYPASS This objective addresses behavior that is out of scope of the App PP and does not define an environment that is globally applicable to all software, OE Objective Consistency Rationale OE.NO_TOE_BYPASS This objective addresses behavior that is out of scope of the MDM PP and does not define an environment that an MDM TOE is incapable of existing in. OE

References

No references are available for this protection profile.

Processing updates

Feed
  • The protection profile was first processed.

Raw data

{
  "_id": "ef4a1e19065a2564",
  "_type": "sec_certs.sample.protection_profile.ProtectionProfile",
  "dgst": "ef4a1e19065a2564",
  "heuristics": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"
  },
  "pdf_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData",
    "pp_filename": "",
    "pp_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 10
          },
          "ECDH": {
            "ECDH": 1
          },
          "ECDSA": {
            "ECDSA": 5
          }
        },
        "FF": {
          "DH": {
            "DH": 29,
            "Diffie-Hellman": 1
          }
        }
      },
      "cc_cert_id": {},
      "cc_claims": {
        "A": {
          "A.CONFIG": 1,
          "A.MDM_SERVER_PLATFORM": 2,
          "A.NOTIFY": 1,
          "A.NO_TOE_BYPASS": 9,
          "A.PHYSICAL": 7,
          "A.PLATFORM": 3,
          "A.PRECAUTION": 1,
          "A.PROPER_ADMIN": 3,
          "A.TRUSTED_CONFIG": 5
        },
        "OE": {
          "OE.CONFIG": 1,
          "OE.IT_ENTERPRISE": 1,
          "OE.NO_TOE_BYPASS": 4,
          "OE.PHYSICAL": 5,
          "OE.PLATFORM": 2,
          "OE.PRECAUTION": 1,
          "OE.PROPER_ADMIN": 3,
          "OE.PROPER_USER": 3,
          "OE.TRUSTED_CONFIG": 5
        },
        "T": {
          "T.EAVESDROP": 3,
          "T.FLAWAPP": 1,
          "T.LOCAL_ATTACK": 3,
          "T.NETWORK": 2,
          "T.NETWORK_ATTACK": 6,
          "T.NETWORK_EAVESDROP": 8,
          "T.TSF_CONFIGURATION": 4,
          "T.TSF_FAILURE": 4,
          "T.UNAUTHORIZED_ACCESS": 5,
          "T.USER_DATA_REUSE": 5
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "AGD": {
          "AGD_OPE": 3,
          "AGD_OPE.1": 1,
          "AGD_PRE": 1
        },
        "ATE": {
          "ATE_IND.1": 1
        }
      },
      "cc_security_level": {},
      "cc_sfr": {
        "FAU": {
          "FAU_GEN": 19,
          "FAU_GEN.1": 8,
          "FAU_SEL": 12,
          "FAU_SEL.1": 6
        },
        "FCS": {
          "FCS_CKM": 20,
          "FCS_CKM.1": 11,
          "FCS_CKM.2": 5,
          "FCS_CKM.6": 6,
          "FCS_CKM.6.1": 2,
          "FCS_CKM.6.2": 1,
          "FCS_CKM_EXT": 5,
          "FCS_CKM_EXT.1": 2,
          "FCS_CKM_EXT.2": 12,
          "FCS_CKM_EXT.2.1": 5,
          "FCS_COP": 10,
          "FCS_COP.1": 9,
          "FCS_EAP_EXT": 8,
          "FCS_EAP_EXT.1": 15,
          "FCS_EAP_EXT.1.1": 2,
          "FCS_EAP_EXT.1.2": 2,
          "FCS_EAP_EXT.1.3": 2,
          "FCS_RBG.1": 7,
          "FCS_RBG_EXT.1": 4,
          "FCS_STO_EXT.1": 2,
          "FCS_TLSC_EXT.1.1": 1,
          "FCS_TLS_EXT.1.1": 3
        },
        "FDP": {
          "FDP_DAR_EXT.2.2": 1,
          "FDP_IFC_EXT": 1,
          "FDP_RIP.2": 8,
          "FDP_RIP.2.1": 2,
          "FDP_VPN_EXT": 4,
          "FDP_VPN_EXT.1": 8,
          "FDP_VPN_EXT.1.1": 3
        },
        "FIA": {
          "FIA_BMA_EXT": 4,
          "FIA_BMA_EXT.1": 12,
          "FIA_BMA_EXT.1.1": 3,
          "FIA_PSK_EXT": 10,
          "FIA_PSK_EXT.1": 24,
          "FIA_PSK_EXT.1.1": 3,
          "FIA_PSK_EXT.1.2": 8,
          "FIA_PSK_EXT.1.3": 1,
          "FIA_PSK_EXT.2": 13,
          "FIA_PSK_EXT.2.1": 5,
          "FIA_PSK_EXT.3": 12,
          "FIA_PSK_EXT.3.1": 5,
          "FIA_PSK_EXT.3.2": 4,
          "FIA_PSK_EXT.3.3": 3,
          "FIA_PSK_EXT.3.4": 3,
          "FIA_PSK_EXT.3.5": 2,
          "FIA_PSK_EXT.3.6": 1,
          "FIA_PSK_EXT.3.7": 3,
          "FIA_PSK_EXT.4": 13,
          "FIA_PSK_EXT.4.1": 3,
          "FIA_PSK_EXT.5": 13,
          "FIA_PSK_EXT.5.1": 3,
          "FIA_XCU_EXT.1.1": 2
        },
        "FMT": {
          "FMT_MOF_EXT.1": 2,
          "FMT_MTD.1": 2,
          "FMT_SMF": 8,
          "FMT_SMF.1": 4,
          "FMT_SMF_EXT": 1,
          "FMT_SMF_EXT.1": 2,
          "FMT_SMR": 1
        },
        "FPT": {
          "FPT_ITT": 3,
          "FPT_STM.1": 6,
          "FPT_TRP": 1,
          "FPT_TST_EXT": 14,
          "FPT_TST_EXT.1": 10,
          "FPT_TST_EXT.1.1": 1,
          "FPT_TST_EXT.1.2": 1,
          "FPT_TUD_EXT.1": 4
        },
        "FTP": {
          "FTP_DIT_EXT": 1,
          "FTP_DIT_EXT.1": 1,
          "FTP_ITC": 7,
          "FTP_ITC.1": 6,
          "FTP_ITC.1.1": 1,
          "FTP_ITC.1.2": 1,
          "FTP_ITC.1.3": 1,
          "FTP_ITC_EXT": 1,
          "FTP_ITC_EXT.1": 2,
          "FTP_ITC_EXT.1.1": 1,
          "FTP_TRP": 2,
          "FTP_TRP.1": 1
        }
      },
      "certification_process": {
        "OutOfScope": {
          "OE Objective Consistency Rationale OE.NO_TOE_BYPASS This objective addresses behavior that is out of scope of the App PP and does not define an environment that is globally applicable to all software": 1,
          "OE Objective Consistency Rationale OE.NO_TOE_BYPASS This objective addresses behavior that is out of scope of the GPOS PP and does not define an environment that a GPOS TOE is incapable of existing in. OE": 1,
          "OE Objective Consistency Rationale OE.NO_TOE_BYPASS This objective addresses behavior that is out of scope of the MDF PP and does not define an environment that an MDF TOE is incapable of existing in. OE": 1,
          "OE Objective Consistency Rationale OE.NO_TOE_BYPASS This objective addresses behavior that is out of scope of the MDM PP and does not define an environment that an MDM TOE is incapable of existing in. OE": 1,
          "out of scope": 4
        }
      },
      "cipher_mode": {
        "GCM": {
          "GCM": 2
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 28,
          "IKEv1": 4,
          "IKEv2": 40
        },
        "IPsec": {
          "IPsec": 193
        },
        "SSH": {
          "SSH": 9
        },
        "TLS": {
          "DTLS": {
            "DTLS": 10
          },
          "TLS": {
            "TLS": 28
          }
        },
        "VPN": {
          "VPN": 266
        }
      },
      "crypto_scheme": {
        "KEX": {
          "Key Exchange": 3
        }
      },
      "device_model": {},
      "ecc_curve": {
        "Curve": {
          "Curve25519": 2
        },
        "NIST": {
          "P-384": 19,
          "P-521": 10,
          "curve P-384": 1
        }
      },
      "eval_facility": {},
      "hash_function": {
        "PBKDF": {
          "PBKDF": 1,
          "PBKDF2": 1
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 3
        },
        "RNG": {
          "RBG": 7
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "CC": {
          "CCMB-2022-11-001": 1,
          "CCMB-2022-11-002": 1,
          "CCMB-2022-11-003": 1,
          "CCMB-2022-11-004": 1,
          "CCMB-2022-11-005": 1,
          "CCMB-2022-11-006": 1
        },
        "FIPS": {
          "FIPS 203": 8,
          "FIPS 204": 4,
          "FIPS PUB 186-5": 10,
          "FIPS PUB 197": 2
        },
        "ISO": {
          "ISO/IEC 15408": 2
        },
        "NIST": {
          "NIST SP 800-132": 1,
          "NIST SP 800-208": 8,
          "NIST SP 800-38A": 6,
          "NIST SP 800-38C": 5,
          "NIST SP 800-38D": 6,
          "NIST SP 800-38E": 3,
          "NIST SP 800-38F": 6,
          "NIST SP 800-57": 3,
          "NIST SP 800-63b": 1
        },
        "RFC": {
          "RFC 3526": 13,
          "RFC 4106": 1,
          "RFC 4301": 6,
          "RFC 4303": 3,
          "RFC 4868": 1,
          "RFC 4945": 2,
          "RFC 5114": 4,
          "RFC 5216": 2,
          "RFC 5280": 2,
          "RFC 5281": 2,
          "RFC 5282": 1,
          "RFC 7296": 4,
          "RFC 7748": 1,
          "RFC 7919": 5,
          "RFC 8247": 1,
          "RFC 8784": 4,
          "RFC 8996": 4
        },
        "X509": {
          "X.509": 25
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 11
          }
        },
        "DES": {
          "DES": {
            "DES": 1
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 1,
            "HMAC-SHA-384": 1
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "pp_metadata": {
      "/CreationDate": "D:20251029153127+00\u002700\u0027",
      "/Creator": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/141.0.0.0 Safari/537.36",
      "/ModDate": "D:20251029153127+00\u002700\u0027",
      "/Producer": "Skia/PDF m141",
      "/Title": "PP-Module for VPN Client",
      "pdf_file_size_bytes": 5824080,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://www.niap-ccevs.org/protectionprofiles/516",
          "http://www.commoncriteriaportal.org/files/ccfiles/CC2022PART3R1.pdf",
          "http://www.commoncriteriaportal.org/files/ccfiles/CC2022PART2R1.pdf",
          "http://www.commoncriteriaportal.org/files/ccfiles/CC2022PART5R1.pdf",
          "https://www.niap-ccevs.org/static_html/protection-profile/428/-428-/index.html",
          "http://www.commoncriteriaportal.org/files/ccfiles/CC2022PART4R1.pdf",
          "http://www.commoncriteriaportal.org/files/ccfiles/CEM2022R1.pdf",
          "https://www.commoncriteriaportal.org/files/ccfiles/CC2022PART1R1.pdf",
          "https://www.niap-ccevs.org/protectionprofiles/511",
          "https://www.niap-ccevs.org/static_html/protection-profile/469/OS%205.0%20PP/index.html",
          "https://www.niap-ccevs.org/static_html/protection-profile/468/MDF%204.0%20PP/index.html"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 91
    },
    "report_filename": null,
    "report_keywords": null,
    "report_metadata": null
  },
  "scheme_metadata": {
    "cc_version": "CC:2022",
    "pp_short_name": "MOD_VPNC_V3.0",
    "pp_sponsor_id": "NIAP",
    "pp_transition": null,
    "predecessor": "MOD_VPNC_V2.5",
    "source_scheme": "US",
    "successor": null
  },
  "state": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState",
    "pp": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "2c74f41095627961009efc8ee87115412a98450fb1066baaf101f4113c2c4db0",
      "txt_hash": "75ca4a9589fea889b46583ea997a215aa465ee54d6beedf60166b68c50b70634"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": false,
      "download_ok": false,
      "extract_ok": false,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData",
    "category": "Network and Network-Related Devices and Systems",
    "is_collaborative": false,
    "maintenances": [],
    "name": "PP-Module for VPN Client, Version 3.0",
    "not_valid_after": null,
    "not_valid_before": "2025-09-29",
    "pp_link": "https://www.niap-ccevs.org/api/file/get_public_file/?file_id=36328",
    "report_link": null,
    "scheme": "US",
    "security_level": {
      "_type": "Set",
      "elements": []
    },
    "status": "active",
    "version": "3.0"
  }
}