Archived Validated Protection Profile - U.S. Government Family of Protection Profiles for Public Key Enabled Applications, Version 2.6.1

Short Name: pp_pke_2.6.1

Technology Type: PKI/KMI

CC Version: 2.x

Date: 31 July 2004

Preceded By: pp_pke_v2.5

Succeeded By: pp_pke_v2.75

Sunset Date: 21 March 2008

Conformance Claim: EAL3 Augmented

Protection Profile

Validation Report

PP OVERVIEW

Note: The U.S. Governmnet Family of Protection Profiles for PK Enabled Applications,Version 2.61 is identical in technical content to the USMC Family of PPs for PK Enabled Applications, Version 2.5. The only syntax changes are the replacement of the word "USMC" with the words "U.S. Government". Since the nature of changes to the U.S. Government Family of Protection Profiles for PK Enabled Applications, Version 2.61 are syntax only changes, the Validation Report for the USMC Family of PPs for PK Enabled Applications, Version 2.5 applies. Vendors seeking conformance to the U.S. Government Family of Protection Profiles for PK Enabled Applications, Version 2.61 should treat this version of the PP as having been validated.

The family of Protection Profiles describes the Information Technology (IT) security requirements for PKE Applications, based on the X.509 standard, integrated into computing platforms or systems. Public key technology provides digital signature generation and verification, public/private key encryption and decryption, public key distribution services, and various support functions. A PKE application may provide confidentiality, integrity, authentication, and non-repudiation, based on the use of public key technology security services. A variety of applications may be PK-enabled. This family of PPs defines different PK services. Thousands of possible PPs may be defined depending upon the combination of functional packages and the EAL chosen to meet the requirements of the application. Many functional requirements in the PPs represent extension to the Common Criteria because the CC does not provide requirements for the X.509 processing rules that are critical to this family of PPs.

Assigned to the following Validated Product

• Public Key Infrastructure Framework (PKIF) Version 1.2