[Public Interpretations Database]

PD-0121: Format of the ADV_IMP Implementation Representation

This decision represents a long-term technical decision based on an OD, and may not be the same as the final results of the source OD. With respect to published criteria documentation and scheme documents, it provides suggested guidance on evaluation direction, but is not authoritative. Authoritative decisions are provided through the published criteria documents and published scheme and international interpretations thereof. With respect to published PPs, PDs are authoritative corrections to the PP, based on input from the PP author (if available), that are in force until the publication of the next revision of that PP.

Effective Date: 2005-08-23
Last Modified 2006-08-02

Issue

What form must the ADV_IMP implementation representation take? Would it be acceptable to provide the implementation representation in the form of pretty-printed Microsoft Word files that contain text that appeared to be the source code for the product?

Resolution

The source code must be provided in the same form that is used by the developer to develop and generate the TSF.

Support

Although other forms might be easier to read, there is a distinct potential for introducing errors in transforming the source. This possibility is of a sufficient concern at EAL4 (which is where IMP first appears) to require the original form be provided.

This resolution is echoed in Draft CCv3 Part 3 paragraph 385:

The developer makes available the implementation representation in the form used by the developer, so that the evaluator may use automated techniques in the analysis. This also increases the confidence that the implementation representation examined is actually the one used in the production of the TSF (as opposed to the case where it is supplied in an alternate presentation format, such as a word processor document). It should be noted that other forms of the implementation representation may also be used by the developer; these forms are supplied as well. The overall goal is to supply the evaluator with the information that will maximise the evaluator's analysis efforts.

 

Modification History:

2005-08-23
PD Issued. [August 2005 ODRB Agenda Item 3.a.ii]

References:

  • CC v2.2 Part 3
  • CC v2.2 CEM
  • CC v3.0 Part 3

Related NIs:

  • None

Related CCIMB-INTERPs:

  • None

Source OD: 0245