NIAP: View Technical Decision Details
NIAP/CCEVS
  NIAP  »»  Protection Profiles  »»  Technical Decisions  »»  View Details  
Archived TD0311:  FIT Technical Decision on CC Conformance Claims

Publication Date
2018.12.21

Protection Profiles
CPP_FDE_AA_V2.0, CPP_FDE_EE_V2.0

Other References

Issue Description

The FIT has issued a Technical Decision on CC Conformance Claims.

Resolution

Section 2. CC Conformance Claims in the FDE AA cPP V2.0 shall now read:

2. CC Conformance Claims

As defined by the references [CC1], [CC2], and [CC3], this cPP conforms to the requirements of Common Criteria v3.1, Release 5. This cPP is conformant to CC v3.1, r5, CC Part 2 and CC Part 3 conformant. Extended component definitions can be found in Appendix C.

The methodology applied for the cPP evaluation is defined in [CEM].

This cPP satisfies the following Assurance Families: APE_CCL.1, APE_ECD.1, APE_INT.1, APE_OBJ.1, APE_REQ.1 and APE_SPD.1.

This cPP does not claim conformance to another PP.

The FDE Enterprise Management (EM) PP-Module can specify the FDE-AA as a Base-PP for use with the FDE-EM in a PP-configuration.

An ST can claim conformance with the FDE-EE in combination with the FDE-AA and still maintain exact conformance.

In order to be conformant to this cPP, a TOE must demonstrate Exact Conformance. Exact Conformance is defined as the ST containing all of the requirements in section 5 of this cPP, and potentially requirements from Appendix A or Appendix B of this cPP. While iteration is allowed, no additional requirements (from the CC parts 2 or 3) are allowed to be included in the ST. Further, no requirements in section 5 of this cPP are allowed to be omitted."

 

Section 2. CC Conformance Claims in the FDE EE cPP V2.0 shall now read:

2. CC Conformance Claims

As defined by the references [CC1], [CC2], and [CC3], this cPP conforms to the requirements of Common Criteria v3.1, Release 5. This cPP is conformant to CC v3.1, r5, CC Part 2 and CC Part 3 conformant. Extended component definitions can be found in Appendix C.

The methodology applied for the cPP evaluation is defined in [CEM].

This cPP satisfies the following Assurance Families: APE_CCL.1, APE_ECD.1, APE_INT.1, APE_OBJ.1, APE_REQ.1 and APE_SPD.1.

This cPP does not claim conformance to another PP.

The FDE Enterprise Management (EM) PP-Module can specify the FDE-AA and FDE-EE as a set of Base-PPs for use with the FDE-EM in a PP-configuration.

An ST can claim conformance with the FDE-AA in combination with the FDE-EE and still maintain exact conformance.

In order to be conformant to this cPP, a TOE must demonstrate Exact Conformance. Exact Conformance is defined as the ST containing all of the requirements in section 5 of this cPP, and potentially requirements from Appendix A or Appendix B of this cPP. While iteration is allowed, no additional requirements (from the CC parts 2 or 3) are allowed to be included in the ST. Further, no requirements in section 5 of this cPP are allowed to be omitted."

 

For further information, please see the FIT interpretation here: https://www.niap-ccevs.org/Documents_and_Guidance/ccevs/FITDecision201803.pdf

Justification

See issue description.

 
 
Site Map              Contact Us              Home