NIAP Oversees Evaluations of Commercial IT Products for Use in National Security Systems

Short Name: pkg_ssh_v1.0

Technology Type: Remote Access

CC Version: 3.1

Date: 2021.05.13

Preceded By: pp_ssh_ep_v1.0

Conformance Claim: None

Functional Package 

Control Mapping 

PP OVERVIEW

Secure Shell (SSH) is a protocol for secure remote login and other secure network services over an untrusted network. SSH software can act as a client, server, or both.

This Functional Package for Secure Shell provides a collection of Secure Shell (SSH) protocol related SFRs and Evaluation Activities (EAs) covering audit, authentication, cryptographic algorithms, and protocol negotiation. The intent of this package is to provide PP, cPP, and PP-Module authors with a readily consumable collection of SFRs and EAs to be integrated into their documents.

The contents of this Package must be appropriately combined with a PP or PP-Module. When this Package is instantiated by a PP or PP-Module, the Package must include selection-based requirements in accordance with the selections or assignments indicated in the PP or PP-Module.

Assigned to the following Validated Products

• VID11319 – Infinera Corporation Transcend Network Management System Server 18.10.3
• Oracle Linux 8.4

Active Related Technical Decisions

• 0777 – Clarification to Selections for Auditable Events for FCS_SSH_EXT.1
  • References:  Section 3.1, Table 1
• 0732 – FCS_SSHS_EXT.1.3 Test 2 Update
  • References:  FCS_SSH_EXT.1.3
• 0695 – Choice of 128 or 256 bit size in AES-CTR in SSH Functional Package.
  • References:  Section 1.3, FCS_COP.1
• 0682 – Addressing Ambiguity in FCS_SSHS_EXT.1 Tests
  • References:  FCS_SSHS_EXT.1

Archived Related Technical Decisions

• 0694 – FCS_SSH_EXT.1.3 Inconsistency
• 0666 – Ambiguous intent of FCS_SSHS_EXT.1 tests