NIAP Oversees Evaluations of Commercial IT Products for Use in National Security Systems

Short Name: pp_ssh_ep_v1.0

Technology Type: Remote Access

CC Version: 3.1

Date: 2016.02.19

Succeeded By: pkg_ssh_v1.0

Sunset Date: 2021.11.13

Conformance Claim: None

Protection Profile 

Control Mapping 

PP OVERVIEW

Secure Shell (SSH) is a protocol for secure remote login and other secure network services over an untrusted network. SSH software can act as a client, server, or both. This EP describes the extended security functionality of SSH in terms of [CC]. This EP can extend the Protection Profiles for Application Software, General-Purpose Operating Systems, or Mobile Device Management. It is expected that the content of this EP will be appropriately combined with the base PP to include selectionbased requirements in accordance with the selections and/or assignments made, and any optional and/or objective components.

Assigned to the following Validated Products

• VID11201 – Axonius Cybersecurity Asset Management Platform v4.0-f
• VID11202 – Red Hat Enterprise Linux 8.2
• Oracle Linux 7.6
• SUSE Linux Enterprise Server Version 15 SP2
• IBM AIX 7.2.5, Service Pack 3 (SP3) Standard Edition (SE)

Active Related Technical Decisions

• 0598 – Expanded AES Modes in FCS_COP for App PP
  • References:  FCS_COP.1(1)
• 0446 – Missing selections for SSH
  • References:  FCS_SSHC_EXT.1.3, FCS_SSHC_EXT.1.5, FCS_SSHS_EXT.1.3, FCS_SSHS_EXT.1.5
• 0420 – Conflict in FCS_SSHC_EXT.1.1 and FCS_SSHS_EXT.1.1
  • References:  FCS_SSHC_EXT.1.1, FCS_SSHS_EXT.1.1
• 0332 – Support for RSA SHA2 host keys
  • References:  FCS_SSHC_EXT.1.4, FCS_SSHS_EXT.1.4
• 0331 – SSH Rekey Testing
  • References:  FCS_SSHS_EXT.1.7, FCS_SSHC_EXT.1.7
• 0240 – FCS_COP.1.1(1) Platform provided crypto for encryption/decryption
  • References:  FCS_COP.1.1(1)

Archived Related Technical Decision

• 0313 – Correction to Algorithm Selection in FCS_SSHS_EXT.1.4