NIAP Oversees Evaluations of Commercial IT Products for Use in National Security Systems

Short Name: mod_fe_v1.0

Technology Type: Encrypted Storage

CC Version: 3.1

Date: 2019.07.25

Transition End Date: 2020.01.25

Preceded By: pp_app_swfe_ep_v1.0

Conformance Claim: None

Protection Profile 

Supporting Docs 

PP Configuration for APP-FE_V1.0 

PP Configuration for APP-FE_v1.1 

Control Mapping 

PP OVERVIEW

This PP-Module specifically addresses encryption of a set of data. This PP-Module addresses the primary threat that an unauthorized user will obtain access to a host machine containing encrypted information and be able to extract the sensitive data through the process of decryption. The Target of Evaluation (TOE) defined in this PP-Module is an encryption product that will inherently encrypt all of that data that the user selects to encrypt. For ease of explanation, "file" will frequently be used to refer to the object that is encrypted (however, it could be any number of things - folders, volumes, containers, etc.).

Assigned to the following Validated Products

• VID11161 – Samsung Knox File Encryption 1.3
• VID11263 – Samsung Knox File Encryption 1.4
• VID11308 – Samsung Electronics Co., Ltd. Samsung Knox File Encryption 1.4 – Fall

Active Related Technical Decisions

• 0650 – Conformance claim sections updated to allow for MOD_VPNC_V2.3 and 2.4
  • References:  Section 2
• 0644 – FCS_CKM_EXT.4 test applicability
  • References:  FCS_CKM_EXT.4, MOD_FE_V1.0-sd
• 0600 – Conformance claim sections updated to allow for MOD_VPNC_V2.3
  • References:  Section 2
• 0472 – File Encryption SFR Rationale and Consistency of TOE Type added
  • References:  Section 5.3, Section 6.1.1
• 0455 – NIST SP800-133 keygen methods for FAK/FEK Generation
  • References:  FDP_AUT_EXT.2.9, FCS_CKM_EXT.2.1