NIAP Oversees Evaluations of Commercial IT Products for Use in National Security Systems

Short Name: pkg_tls_v2.0

Technology Type: Network Encryption

CC Version: 3.1

Date: 2022.12.19

Preceded By: pkg_tls_v1.1

Conformance Claim: None

Functional Package 

Control Mapping 

PP OVERVIEW

Transport Layer Security (TLS) and the closely-related Datagram TLS (DTLS) are cryptographic protocols designed to provide communications security over IP networks. The primary goal of the TLS protocol is to provide confidentiality and integrity of data transmitted between two communicating endpoints, as well as authentication of at least the server endpoint.

This "Functional Package for Transport Layer Security" (short name "TLS-PKG") defines functional requirements for the implementation of the Transport Layer Security (TLS) and Datagram TLS (DTLS) protocols. The requirements are intended to improve the security of products by enabling their evaluation.

SECURITY EVALUATION SUMMARY

The Target of Evaluation (TOE) in this Package is a product which acts as a TLS client or server, or both. This Package describes the security functionality of TLS in terms of CC.

The contents of this Package must be appropriately combined with a PP or PP-Module. When this Package is instantiated by a PP or PP-Module, the Package must include selection-based requirements in accordance with the selections or assignments indicated in the PP or PP-Module.

This U.S. Government Approved Protection Profile is not assigned to any Validated Products

Active Related Technical Decisions

• 0793 – Alignment of FCS_TLSS_EXT.5:2 with RFC 8446
  • References:  FCS_TLSS_EXT.5:2
• 0772 – TLS FP 2.0 selections in audit records table
  • References:  Section B.1, Table 2
• 0731 – Clarification of TLS 2.0 FP test 22.2
  • References:  FCS_TLSS_EXT.1
• 0729 – Self-contradictory test requirement
  • References:  FCS_TLSS_EXT.6

Archived Related Technical Decision

• 0716 – Correction to Audit Event for FCS_DTLSS_EXT.1