The NIT has issued a technical decision for RSA-based ciphers and the Server Key Exchange message

12/18/2019: Updated to also apply to NDcPP v2.0E

The TSS requirements for FCS_DTLSS_EXT.*.4 and FCS_TLSS_EXT.*.3 shall be replaced as follows:

If using ECDHE or DHE ciphers, the evaluator shall verify that the TSS describes the key agreement parameters of the server Key Exchange message.

For further information, please see the NIT interpretation at: https://www.niap-ccevs.org/Documents_and_Guidance/ccevs/NITDecisionRFI201913rev2.pdf

See issue description