This page was not yet optimized for use on mobile devices.
collaborative Protection Profile for Network Devices Version 2.1
Profile details
| Status | archived |
|---|---|
| Valid from | 11.03.2019 |
| Valid until | 27.09.2020 |
| Scheme | πΊπΈ US |
| Category | Network and Network-Related Devices and Systems |
| Security level | N/A |
Certification report
certification report could not be downloaded, no link is available.
Protection profile
Extracted keywords
Symmetric Algorithms
AES, HMAC, HMAC-SHA-384, HMAC-SHA-512, HMAC-SHA-256Asymmetric Algorithms
ECDHE, ECDH, ECDSA, ECC, Diffie-Hellman, DHE, DH, DSAHash functions
SHA-1, SHA1, SHA-256, SHA-384, SHA-512, SHA256, SHA384, SHA512, SHA-2Schemes
MAC, AEADProtocols
SSH, SSL, SSL 2.0, SSL 3.0, TLS, TLS 1.2, TLS 1.1, TLS v1.2, TLS 1.0, TLS v1.0, DTLS, DTLS 1.2, DTLS 1.0, DTLS v1.2, DTLS v1.0, IKEv1, IKEv2, IKE, IPsec, VPNRandomness
DRBG, RBGBlock cipher modes
CBC, CTR, GCMTLS cipher suites
TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384Claims
T.UNAUTHORIZED_ADMINISTRATOR_ACCESS, T.WEAK_CRYPTOGRAPHY, T.UNTRUSTED_COMMUNICATION_CHANNELS, T.WEAK_AUTHENTICATION_ENDPOINTS, T.UPDATE_COMPROMISE, T.UNDETECTED_ACTIVITY, T.SECURITY_FUNCTIONALITY_COMPROMISE, T.PASSWORD_CRACKING, T.SECURITY_FUNCTIONALITY_FAILURE, A.PHYSICAL_PROTECTION, A.LIMITED_FUNCTIONALITY, A.NO_THRU_TRAFFIC_PROTECTION, A.TRUSTED_ADMINISTRATOR, A.REGULAR_UPDATES, A.ADMIN_CREDENTIALS_SECURE, A.COMPONENTS_RUNNING, A.RESIDUAL_INFORMATION, OE.PHYSICAL, OE.NO_GENERAL_PURPOSE, OE.NO_THRU_TRAFFIC_PROTECTION, OE.TRUSTED_ADMIN, OE.UPDATES, OE.ADMIN_CREDENTIALS_SECURE, OE.COMPONENTS_RUNNING, OE.RESIDUAL_INFORMATIONSecurity Assurance Requirements (SAR)
ADV_FSP.1, AGD_OPE.1, AGD_PRE.1, AGD_OPE, ALC_CMC.1, ALC_CMS.1, ATE_IND.1, ATE_IND, AVA_VAN.1, AVA_VAN, APE_CCL.1, APE_ECD.1, APE_INT.1, APE_OBJ.1, APE_REQ.1, APE_SPD.1, ASE_TSS.1, ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.1, ASE_REQ.1, ASE_SPD.1Security Functional Requirements (SFR)
FAU_GEN, FAU_GEN.1, FAU_GEN.2, FAU_STG_EXT, FAU_STG.1, FAU_GEN_EXT, FAU_GEN_EXT.1, FAU_STG_EXT.3, FAU_STG_EXT.4, FAU_STG_EXT.1, FAU_STG, FAU_GEN.1.1, FAU_GEN.1.2, FAU_GEN.2.1, FAU_STG_EXT.1.1, FAU_STG_EXT.1.2, FAU_STG_EXT.1.3, FAU_STG.1.1, FAU_STG.1.2, FAU_STG_EXT.2, FAU_STG.3, FAU_GEN_EXT.1.1, FAU_STG_EXT.3.1, FAU_STG_EXT.4.1, FAU_STG_EXT.2.1, FCO_CPC_EXT, FCO_CPC_EXT.1, FCO_CPC_EXT.1.2, FCO_CPC_EXT.1.1, FCO_CPC_EXT.1.3, FCS_CKM, FCS_CKM.1, FCS_CKM.2, FCS_CKM.4, FCS_COP, FCS_COP.1, FCS_RBG_EXT, FCS_RBG_EXT.1, FCS_NTP_EXT, FCS_SSHC_EXT, FCS_SSHS_EXT, FCS_TLSC_EXT, FCS_TLSS_EXT, FCS_NTP_EXT.1, FCS_SSHC_EXT.1, FCS_SSHS_EXT.1, FCS_TLSC_EXT.1, FCS_TLSC_EXT.2, FCS_TLSS_EXT.1, FCS_TLSS_EXT.2, FCS_CKM.1.1, FCS_CKM.2.1, FCS_CKM.4.1, FCS_RBG_EXT.1.1, FCS_RBG_EXT.1.2, FCS_SSHC_EXT.1.8, FCS_SSHS_EXT.1.8, FCS_TLSC_EXT.1.2, FCS_NTP_EXT.1.1, FCS_NTP_EXT.1.2, FCS_NTP_EXT.1.3, FCS_NTP_EXT.1.4, FCS_SSHC_EXT.1.1, FCS_SSHC_EXT.1.2, FCS_SSHC_EXT.1.3, FCS_SSHC_EXT.1.4, FCS_SSHC_EXT.1.5, FCS_SSHC_EXT.1.9, FCS_SSHC_EXT.1.6, FCS_SSHC_EXT.1.7, FCS_SSHS_EXT.1.1, FCS_SSHS_EXT.1.2, FCS_SSHS_EXT.1.3, FCS_SSHS_EXT.1.4, FCS_SSHS_EXT.1.5, FCS_SSHS_EXT.1.6, FCS_SSHS_EXT.1.7, FCS_TLSC_EXT.1.1, FCS_TLSC_EXT.1.3, FCS_TLSC_EXT.1.4, FCS_TLSC_EXT.2.1, FCS_TLSC_EXT.2.2, FCS_TLSC_EXT.2.3, FCS_TLSC_EXT.2.4, FCS_TLSC_EXT.2.5, FCS_TLSS_EXT.1.1, FCS_TLSS_EXT.1.2, FCS_TLSS_EXT.1.3, FCS_TLSS_EXT.2.1, FCS_TLSS_EXT.2.2, FCS_TLSS_EXT.2.3, FCS_TLSS_EXT.2.4, FCS_TLSS_EXT.2.5, FCS_TLSS_EXT.2.6, FCS_DTLS_EXT.1.1, FCS_DTLS_EXT.2.1, FCS_TLS_EXT.1.1, FIA_AFL, FIA_PMG_EXT, FIA_PMG_EXT.1, FIA_UIA_EXT, FIA_UIA_EXT.1, FIA_UAU, FIA_UAU_EXT, FIA_UAU_EXT.2, FIA_UAU.7, FIA_AFL.1, FIA_AFL.1.1, FIA_AFL.1.2, FIA_PMG_EXT.1.1, FIA_UIA_EXT.1.1, FIA_UIA_EXT.1.2, FIA_UAU_EXT.2.1, FIA_UAU.7.1, FIA_UAU.1, FIA_UID.1, FMT_MOF, FMT_MTD, FMT_SMF, FMT_SMF.1, FMT_SMR, FMT_SMR.2, FMT_MOF.1, FMT_MTD.1, FMT_SMF.1.1, FMT_SMR.2.1, FMT_SMR.2.2, FMT_SMR.2.3, FMT_SMR.1, FPT_SKP_EXT, FPT_SKP_EXT.1, FPT_APW_EXT, FPT_APW_EXT.1, FPT_TST_EXT, FPT_TST_EXT.1, FPT_TUD_EXT, FPT_TUD_EXT.1, FPT_STM_EXT, FPT_STM_EXT.1, FPT_ITT, FPT_ITT.1, FPT_TST_EXT.2, FPT_TUD_EXT.2, FPT_TUD_EXT.1.2, FPT_TUD_EXT.2.2, FPT_SKP_EXT.1.1, FPT_APW_EXT.1.1, FPT_APW_EXT.1.2, FPT_TST_EXT.1.1, FPT_TUD_EXT.1.1, FPT_TUD_EXT.1.3, FPT_STM_EXT.1.1, FPT_STM_EXT.1.2, FPT_ITT.1.1, FPT_TST_EXT.2.1, FPT_TUD_EXT.2.1, FPT_PTD, FPT_STM, FPT_STM.1, FTA_SSL_EXT, FTA_SSL_EXT.1, FTA_SSL, FTA_SSL.3, FTA_SSL.4, FTA_TAB, FTA_TAB.1, FTA_SSL_EXT.1.1, FTP_ITC, FTP_ITC.1, FTP_TRP, FTP_TRP.1, FTP_ITC.1.1, FTP_ITC.1.2, FTP_ITC.1.3, FTP_ITC.2Certification process
out of scope, 16 Figure 4: Distributed TOE use case with Management Component out of scope, 16 Figure 4: Distributed TOE use case with Management Component out of scope.............................................. 17 Figure 5: Management Component required to fulfil, cPP, and such functionality will be specified in other device-type specific cPPs. Also considered out of scope are virus and emailing scanning, intrusion detection/prevention capabilities, Network Address, v2.1, 24-September-2018 Page 17 of 192 Figure 4: Distributed TOE use case with Management Component out of scope For the cases in both Figure 3 and Figure 4, the Management Component may be certified separately, indicated as βREQUIREDβ but not listed in the later elements of this component are implemented is out of scope of the evaluation activity for this requirement. RFC 5647 only applies to the RFC compliant, indicated as βREQUIREDβ but not listed in the later elements of this component are implemented is out of scope of the evaluation activity for this requirement. FCS_SSHS_EXT SSH Server Protocol 1 F I A _ X 5 0 9Standards
FIPS PUB 186-4, NIST SP 800-56B, SP 800-56B, SP 800-131A, NIST SP 800-57, PKCS #1, RFC 2986, RFC 3526, RFC 5280, RFC 6960, RFC 5759, RFC 6347, RFC 4347, RFC 3268, RFC 4492, RFC 5246, RFC 5288, RFC 5289, RFC 6125, RFC 2818, RFC 4301, RFC 4303, RFC 3602, RFC 4106, RFC 4109, RFC 4304, RFC 4868, RFC 5996, RFC 5282, RFC 4945, RFC 2409, RFC 1305, RFC 5905, RFC 4253, RFC 5647, RFC 8332, RFC 6668, RFC 4251, RFC 4346, ISO/IEC 9796-2, ISO/IEC 14888-3, ISO/IEC 10118, ISO/IEC 18031:2011, X.509, CCMB-2017-04-001, CCMB-2017-04-002, CCMB-2017-04-003, CCMB-2017-04-004References
No references are available for this protection profile.
-
The protection profile was first processed.
{
"_id": "fc19c4e08dc9c4bb",
"_type": "sec_certs.sample.protection_profile.ProtectionProfile",
"dgst": "fc19c4e08dc9c4bb",
"heuristics": {
"_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"
},
"pdf_data": {
"_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData",
"pp_filename": "",
"pp_keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 1
},
"ECDH": {
"ECDH": 5,
"ECDHE": 6
},
"ECDSA": {
"ECDSA": 5
}
},
"FF": {
"DH": {
"DH": 20,
"DHE": 6,
"Diffie-Hellman": 23
},
"DSA": {
"DSA": 1
}
}
},
"cc_cert_id": {},
"cc_claims": {
"A": {
"A.ADMIN_CREDENTIALS_SECURE": 2,
"A.COMPONENTS_RUNNING": 6,
"A.LIMITED_FUNCTIONALITY": 2,
"A.NO_THRU_TRAFFIC_PROTECTION": 3,
"A.PHYSICAL_PROTECTION": 2,
"A.REGULAR_UPDATES": 2,
"A.RESIDUAL_INFORMATION": 2,
"A.TRUSTED_ADMINISTRATOR": 2
},
"OE": {
"OE.ADMIN_CREDENTIALS_SECURE": 3,
"OE.COMPONENTS_RUNNING": 3,
"OE.NO_GENERAL_PURPOSE": 3,
"OE.NO_THRU_TRAFFIC_PROTECTION": 3,
"OE.PHYSICAL": 3,
"OE.RESIDUAL_INFORMATION": 3,
"OE.TRUSTED_ADMIN": 3,
"OE.UPDATES": 3
},
"T": {
"T.PASSWORD_CRACKING": 4,
"T.SECURITY_FUNCTIONALITY_COMPROMISE": 2,
"T.SECURITY_FUNCTIONALITY_FAILURE": 2,
"T.UNAUTHORIZED_ADMINISTRATOR_ACCESS": 2,
"T.UNDETECTED_ACTIVITY": 3,
"T.UNTRUSTED_COMMUNICATION_CHANNELS": 4,
"T.UPDATE_COMPROMISE": 2,
"T.WEAK_AUTHENTICATION_ENDPOINTS": 2,
"T.WEAK_CRYPTOGRAPHY": 2
}
},
"cc_protection_profile_id": {},
"cc_sar": {
"ADV": {
"ADV_FSP.1": 4
},
"AGD": {
"AGD_OPE": 8,
"AGD_OPE.1": 3,
"AGD_PRE.1": 3
},
"ALC": {
"ALC_CMC.1": 4,
"ALC_CMS.1": 4
},
"APE": {
"APE_CCL.1": 1,
"APE_ECD.1": 1,
"APE_INT.1": 1,
"APE_OBJ.1": 1,
"APE_REQ.1": 1,
"APE_SPD.1": 1
},
"ASE": {
"ASE_CCL.1": 1,
"ASE_ECD.1": 1,
"ASE_INT.1": 1,
"ASE_OBJ.1": 1,
"ASE_REQ.1": 1,
"ASE_SPD.1": 1,
"ASE_TSS.1": 4
},
"ATE": {
"ATE_IND": 1,
"ATE_IND.1": 3
},
"AVA": {
"AVA_VAN": 2,
"AVA_VAN.1": 5
}
},
"cc_security_level": {},
"cc_sfr": {
"FAU": {
"FAU_GEN": 24,
"FAU_GEN.1": 13,
"FAU_GEN.1.1": 4,
"FAU_GEN.1.2": 1,
"FAU_GEN.2": 7,
"FAU_GEN.2.1": 1,
"FAU_GEN_EXT": 5,
"FAU_GEN_EXT.1": 19,
"FAU_GEN_EXT.1.1": 2,
"FAU_STG": 8,
"FAU_STG.1": 11,
"FAU_STG.1.1": 1,
"FAU_STG.1.2": 1,
"FAU_STG.3": 2,
"FAU_STG_EXT": 16,
"FAU_STG_EXT.1": 11,
"FAU_STG_EXT.1.1": 7,
"FAU_STG_EXT.1.2": 3,
"FAU_STG_EXT.1.3": 7,
"FAU_STG_EXT.2": 6,
"FAU_STG_EXT.2.1": 1,
"FAU_STG_EXT.3": 15,
"FAU_STG_EXT.3.1": 2,
"FAU_STG_EXT.4": 11,
"FAU_STG_EXT.4.1": 2
},
"FCO": {
"FCO_CPC_EXT": 5,
"FCO_CPC_EXT.1": 24,
"FCO_CPC_EXT.1.1": 5,
"FCO_CPC_EXT.1.2": 12,
"FCO_CPC_EXT.1.3": 3
},
"FCS": {
"FCS_CKM": 8,
"FCS_CKM.1": 40,
"FCS_CKM.1.1": 3,
"FCS_CKM.2": 44,
"FCS_CKM.2.1": 2,
"FCS_CKM.4": 13,
"FCS_CKM.4.1": 1,
"FCS_COP": 176,
"FCS_COP.1": 12,
"FCS_DTLS_EXT.1.1": 1,
"FCS_DTLS_EXT.2.1": 1,
"FCS_NTP_EXT": 7,
"FCS_NTP_EXT.1": 13,
"FCS_NTP_EXT.1.1": 2,
"FCS_NTP_EXT.1.2": 2,
"FCS_NTP_EXT.1.3": 2,
"FCS_NTP_EXT.1.4": 2,
"FCS_RBG_EXT": 6,
"FCS_RBG_EXT.1": 47,
"FCS_RBG_EXT.1.1": 2,
"FCS_RBG_EXT.1.2": 6,
"FCS_SSHC_EXT": 8,
"FCS_SSHC_EXT.1": 11,
"FCS_SSHC_EXT.1.1": 2,
"FCS_SSHC_EXT.1.2": 2,
"FCS_SSHC_EXT.1.3": 2,
"FCS_SSHC_EXT.1.4": 2,
"FCS_SSHC_EXT.1.5": 9,
"FCS_SSHC_EXT.1.6": 2,
"FCS_SSHC_EXT.1.7": 2,
"FCS_SSHC_EXT.1.8": 3,
"FCS_SSHC_EXT.1.9": 3,
"FCS_SSHS_EXT": 8,
"FCS_SSHS_EXT.1": 11,
"FCS_SSHS_EXT.1.1": 2,
"FCS_SSHS_EXT.1.2": 2,
"FCS_SSHS_EXT.1.3": 2,
"FCS_SSHS_EXT.1.4": 2,
"FCS_SSHS_EXT.1.5": 7,
"FCS_SSHS_EXT.1.6": 2,
"FCS_SSHS_EXT.1.7": 2,
"FCS_SSHS_EXT.1.8": 3,
"FCS_TLSC_EXT": 12,
"FCS_TLSC_EXT.1": 13,
"FCS_TLSC_EXT.1.1": 6,
"FCS_TLSC_EXT.1.2": 3,
"FCS_TLSC_EXT.1.3": 3,
"FCS_TLSC_EXT.1.4": 2,
"FCS_TLSC_EXT.2": 12,
"FCS_TLSC_EXT.2.1": 4,
"FCS_TLSC_EXT.2.2": 2,
"FCS_TLSC_EXT.2.3": 3,
"FCS_TLSC_EXT.2.4": 2,
"FCS_TLSC_EXT.2.5": 2,
"FCS_TLSS_EXT": 13,
"FCS_TLSS_EXT.1": 16,
"FCS_TLSS_EXT.1.1": 8,
"FCS_TLSS_EXT.1.2": 2,
"FCS_TLSS_EXT.1.3": 2,
"FCS_TLSS_EXT.2": 11,
"FCS_TLSS_EXT.2.1": 4,
"FCS_TLSS_EXT.2.2": 2,
"FCS_TLSS_EXT.2.3": 2,
"FCS_TLSS_EXT.2.4": 3,
"FCS_TLSS_EXT.2.5": 2,
"FCS_TLSS_EXT.2.6": 2,
"FCS_TLS_EXT.1.1": 2
},
"FIA": {
"FIA_AFL": 2,
"FIA_AFL.1": 8,
"FIA_AFL.1.1": 1,
"FIA_AFL.1.2": 1,
"FIA_PMG_EXT": 4,
"FIA_PMG_EXT.1": 13,
"FIA_PMG_EXT.1.1": 2,
"FIA_UAU": 2,
"FIA_UAU.1": 2,
"FIA_UAU.7": 9,
"FIA_UAU.7.1": 1,
"FIA_UAU_EXT": 5,
"FIA_UAU_EXT.2": 20,
"FIA_UAU_EXT.2.1": 2,
"FIA_UIA_EXT": 6,
"FIA_UIA_EXT.1": 26,
"FIA_UIA_EXT.1.1": 2,
"FIA_UIA_EXT.1.2": 3,
"FIA_UID.1": 2
},
"FMT": {
"FMT_MOF": 50,
"FMT_MOF.1": 5,
"FMT_MTD": 22,
"FMT_MTD.1": 7,
"FMT_SMF": 2,
"FMT_SMF.1": 32,
"FMT_SMF.1.1": 1,
"FMT_SMR": 2,
"FMT_SMR.1": 6,
"FMT_SMR.2": 17,
"FMT_SMR.2.1": 1,
"FMT_SMR.2.2": 2,
"FMT_SMR.2.3": 3
},
"FPT": {
"FPT_APW_EXT": 5,
"FPT_APW_EXT.1": 13,
"FPT_APW_EXT.1.1": 2,
"FPT_APW_EXT.1.2": 2,
"FPT_ITT": 17,
"FPT_ITT.1": 45,
"FPT_ITT.1.1": 1,
"FPT_PTD": 1,
"FPT_SKP_EXT": 5,
"FPT_SKP_EXT.1": 13,
"FPT_SKP_EXT.1.1": 2,
"FPT_STM": 2,
"FPT_STM.1": 2,
"FPT_STM_EXT": 5,
"FPT_STM_EXT.1": 12,
"FPT_STM_EXT.1.1": 2,
"FPT_STM_EXT.1.2": 5,
"FPT_TST_EXT": 7,
"FPT_TST_EXT.1": 13,
"FPT_TST_EXT.1.1": 4,
"FPT_TST_EXT.2": 17,
"FPT_TST_EXT.2.1": 2,
"FPT_TUD_EXT": 9,
"FPT_TUD_EXT.1": 15,
"FPT_TUD_EXT.1.1": 6,
"FPT_TUD_EXT.1.2": 5,
"FPT_TUD_EXT.1.3": 14,
"FPT_TUD_EXT.2": 17,
"FPT_TUD_EXT.2.1": 1,
"FPT_TUD_EXT.2.2": 3
},
"FTA": {
"FTA_SSL": 3,
"FTA_SSL.3": 9,
"FTA_SSL.4": 8,
"FTA_SSL_EXT": 5,
"FTA_SSL_EXT.1": 16,
"FTA_SSL_EXT.1.1": 2,
"FTA_TAB": 2,
"FTA_TAB.1": 14
},
"FTP": {
"FTP_ITC": 17,
"FTP_ITC.1": 69,
"FTP_ITC.1.1": 3,
"FTP_ITC.1.2": 1,
"FTP_ITC.1.3": 2,
"FTP_ITC.2": 6,
"FTP_TRP": 42,
"FTP_TRP.1": 11
}
},
"certification_process": {
"OutOfScope": {
" 16 Figure 4: Distributed TOE use case with Management Component out of scope": 1,
" 16 Figure 4: Distributed TOE use case with Management Component out of scope.............................................. 17 Figure 5: Management Component required to fulfil": 1,
"cPP, and such functionality will be specified in other device-type specific cPPs. Also considered out of scope are virus and emailing scanning, intrusion detection/prevention capabilities, Network Address": 1,
"indicated as \u201cREQUIRED\u201d but not listed in the later elements of this component are implemented is out of scope of the evaluation activity for this requirement. FCS_SSHS_EXT SSH Server Protocol 1 F I A _ X 5 0 9": 1,
"indicated as \u201cREQUIRED\u201d but not listed in the later elements of this component are implemented is out of scope of the evaluation activity for this requirement. RFC 5647 only applies to the RFC compliant": 3,
"out of scope": 7,
"v2.1, 24-September-2018 Page 17 of 192 Figure 4: Distributed TOE use case with Management Component out of scope For the cases in both Figure 3 and Figure 4, the Management Component may be certified separately": 1
}
},
"cipher_mode": {
"CBC": {
"CBC": 3
},
"CTR": {
"CTR": 2
},
"GCM": {
"GCM": 13
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"IKE": {
"IKE": 11,
"IKEv1": 25,
"IKEv2": 25
},
"IPsec": {
"IPsec": 51
},
"SSH": {
"SSH": 105
},
"TLS": {
"DTLS": {
"DTLS": 162,
"DTLS 1.0": 18,
"DTLS 1.2": 18,
"DTLS v1.0": 8,
"DTLS v1.2": 8
},
"SSL": {
"SSL": 12,
"SSL 2.0": 4,
"SSL 3.0": 4
},
"TLS": {
"TLS": 136,
"TLS 1.0": 4,
"TLS 1.1": 12,
"TLS 1.2": 12,
"TLS v1.0": 4,
"TLS v1.2": 4
}
},
"VPN": {
"VPN": 2
}
},
"crypto_scheme": {
"AEAD": {
"AEAD": 1
},
"MAC": {
"MAC": 39
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-256": 4,
"P-384": 8,
"P-521": 4,
"curve P-384": 4,
"secp256r1": 16,
"secp384r1": 16,
"secp521r1": 16
}
},
"eval_facility": {},
"hash_function": {
"SHA": {
"SHA1": {
"SHA-1": 4,
"SHA1": 2
},
"SHA2": {
"SHA-2": 2,
"SHA-256": 3,
"SHA-384": 3,
"SHA-512": 5,
"SHA256": 26,
"SHA384": 2,
"SHA512": 2
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 3
},
"RNG": {
"RBG": 11
}
},
"side_channel_analysis": {},
"standard_id": {
"CC": {
"CCMB-2017-04-001": 1,
"CCMB-2017-04-002": 1,
"CCMB-2017-04-003": 1,
"CCMB-2017-04-004": 1
},
"FIPS": {
"FIPS PUB 186-4": 5
},
"ISO": {
"ISO/IEC 10118": 2,
"ISO/IEC 14888-3": 1,
"ISO/IEC 18031:2011": 6,
"ISO/IEC 9796-2": 1
},
"NIST": {
"NIST SP 800-56B": 1,
"NIST SP 800-57": 4,
"SP 800-131A": 1,
"SP 800-56B": 1
},
"PKCS": {
"PKCS #1": 1
},
"RFC": {
"RFC 1305": 2,
"RFC 2409": 1,
"RFC 2818": 3,
"RFC 2986": 3,
"RFC 3268": 32,
"RFC 3526": 2,
"RFC 3602": 4,
"RFC 4106": 2,
"RFC 4109": 2,
"RFC 4251": 2,
"RFC 4253": 12,
"RFC 4301": 4,
"RFC 4303": 2,
"RFC 4304": 2,
"RFC 4346": 8,
"RFC 4347": 18,
"RFC 4492": 32,
"RFC 4868": 6,
"RFC 4945": 2,
"RFC 5246": 48,
"RFC 5280": 9,
"RFC 5282": 2,
"RFC 5288": 32,
"RFC 5289": 64,
"RFC 5647": 12,
"RFC 5759": 3,
"RFC 5905": 2,
"RFC 5996": 5,
"RFC 6125": 16,
"RFC 6347": 22,
"RFC 6668": 2,
"RFC 6960": 3,
"RFC 8332": 2
},
"X509": {
"X.509": 46
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 22
}
},
"constructions": {
"MAC": {
"HMAC": 7,
"HMAC-SHA-256": 2,
"HMAC-SHA-384": 3,
"HMAC-SHA-512": 1
}
}
},
"technical_report_id": {},
"tee_name": {},
"tls_cipher_suite": {
"TLS": {
"TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 8,
"TLS_DHE_RSA_WITH_AES_128_GCM_SHA256": 8,
"TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 8,
"TLS_DHE_RSA_WITH_AES_256_GCM_SHA384": 8,
"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 8,
"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 8,
"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 8,
"TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 8,
"TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 8,
"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 8,
"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 8,
"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256": 8,
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 8,
"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 8,
"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384": 8,
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 8,
"TLS_RSA_WITH_AES_128_CBC_SHA": 16,
"TLS_RSA_WITH_AES_128_CBC_SHA256": 8,
"TLS_RSA_WITH_AES_128_GCM_SHA256": 8,
"TLS_RSA_WITH_AES_256_CBC_SHA": 8,
"TLS_RSA_WITH_AES_256_GCM_SHA384": 8
}
},
"vendor": {},
"vulnerability": {}
},
"pp_metadata": {
"/AAPL:Keywords": "[]",
"/CreationDate": "D:20180925192013Z",
"/Creator": "Word",
"/Keywords": "",
"/ModDate": "D:20190311180713-04\u002700\u0027",
"/Producer": "Mac OS X 10.12.6 Quartz PDFContext",
"/Title": "Microsoft Word - NDcPP v2_1.docx",
"pdf_file_size_bytes": 2250652,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 192
},
"report_filename": null,
"report_keywords": null,
"report_metadata": null
},
"scheme_metadata": {
"cc_version": "3.1",
"pp_short_name": "CPP_ND_V2.1",
"pp_sponsor_id": "",
"pp_transition": null,
"predecessor": "CPP_ND_V2.0E",
"source_scheme": "US",
"successor": "CPP_ND_V2.2E"
},
"state": {
"_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState",
"pp": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": "906ec7854d91308e052d027f199d7f152365ee609f83012e6f267618e05e4700",
"txt_hash": "335781b268713efcfd3259d5019aa043601eb8c6c350b62b4738e7cfb602545c"
},
"report": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": false,
"download_ok": false,
"extract_ok": false,
"json_hash": null,
"source_hash": null,
"txt_hash": null
}
},
"web_data": {
"_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData",
"category": "Network and Network-Related Devices and Systems",
"is_collaborative": true,
"maintenances": [],
"name": "collaborative Protection Profile for Network Devices Version 2.1",
"not_valid_after": "2020-09-27",
"not_valid_before": "2019-03-11",
"pp_link": "https://www.niap-ccevs.org/api/file/get_public_file/?file_id=13343",
"report_link": null,
"scheme": "US",
"security_level": {
"_type": "Set",
"elements": []
},
"status": "archived",
"version": "2.1"
}
}