The Target of Evaluation (TOE) is Apple iOS 9.2 on iPhone and iPad devices using the A7 or A8/A8X processor (iPhone 5s, iPad mini 2, iPad Mini 3, iPad Air (A7); iPhone 6, iPhone 6 Plus (A8), iPad Air 2 (A8x)).
","evaluation_configuration":"\r\n\r\nDevices Covered by the Evaluation
\r\n| \r\n Device Name \r\n | \r\n\r\n Model Number \r\n | \r\n\r\n WiFi \r\n | \r\n\r\n Cellular \r\n | \r\n\r\n Bluetooth \r\n | \r\n
| \r\n iPhone 6 Plus/ iPhone 6 \r\n | \r\n\r\n A1549/A1522 (GSM) \r\nA1549/A1522 (CDMA) \r\nA1586/A1524 \r\n | \r\n\r\n 802.11/a/b/g/n/ac \r\n802.11/a/b/g/n/ac \r\n802.11/a/b/g/n/ac \r\n | \r\n\r\n See table \r\nSee table \r\nSee table \r\n | \r\n\r\n 4.0 \r\n4.0 \r\n4.0 \r\n | \r\n
| \r\n iPhone 5s \r\n | \r\n\r\n A1533 (GSM) \r\nA1533 (CDMA) \r\nA1453 \r\nA1457 \r\nA1530 \r\n | \r\n\r\n 802.11/a/b/g/n/ac \r\n802.11/a/b/g/n/ac \r\n802.11/a/b/g/n/ac \r\n802.11/a/b/g/n/ac \r\n802.11/a/b/g/n/ac \r\n | \r\n\r\n See table \r\nSee table \r\nSee table \r\nSee table \r\nSee table \r\n | \r\n\r\n 4.0 \r\n4.0 \r\n4.0 \r\n4.0 \r\n4.0 \r\n | \r\n
| \r\n iPad mini 3 \r\n | \r\n\r\n WiFi only \r\nWiFi + cellular \r\n | \r\n\r\n 802.11a/?b/?g/?n \r\n802.11a/?b/?g/?n \r\n | \r\n\r\n - \r\nSee table \r\n | \r\n\r\n 4.0 \r\n4.0 \r\n | \r\n
| \r\n iPad Air 2 \r\n | \r\n\r\n WiFi only \r\nWiFi + Cellular \r\n | \r\n\r\n 802.11a/b/g/n/ac \r\n802.11a/b/g/n/ac \r\n | \r\n\r\n - \r\nSee table \r\n | \r\n\r\n 4.0 \r\n4.0 \r\n | \r\n
| \r\n iPad mini 2 \r\n | \r\n\r\n WiFi only \r\nWiFi + Cellular \r\n | \r\n\r\n 802.11a/b/g/n \r\n802.11a/b/g/n \r\n | \r\n\r\n - \r\nSee table \r\n | \r\n\r\n 4.0 \r\n4.0 \r\n | \r\n
| \r\n iPad Air \r\n | \r\n\r\n WiFi only \r\nWiFi + Cellular \r\n | \r\n\r\n 802.11a/b/g/n \r\n802.11a/b/g/n \r\n | \r\n\r\n - \r\nSee table \r\n | \r\n\r\n 4.0 \r\n4.0 \r\n | \r\n
Cellular Protocols Supported
\r\n| \r\n Device Name \r\n | \r\n\r\n Model Number \r\n | \r\n\r\n Cellular \r\n | \r\n
| \r\n iPhone 6 Plus/ iPhone 6 \r\n | \r\n\r\n A1549/A1522 (GSM) \r\n\r\n | \r\n\r\n UMTS/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz) \r\nGSM/EDGE (850, 900, 1800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 13, 17, 18, 19, 20, 25, 26, 28, 29) \r\n | \r\n
| \r\n \r\n | \r\n\r\n A1549/A1522 (CDMA) \r\n | \r\n\r\n CDMA EV-DO Rev. A and Rev. B (800, 1700/2100, 1900, 2100 MHz) \r\nUMTS/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz) \r\nGSM/EDGE (850, 900, 1800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 13, 17, 18, 19, 20, 25, 26, 28, 29) \r\n | \r\n
| \r\n \r\n | \r\n\r\n A1586/A1524 \r\n | \r\n\r\n CDMA EV-DO Rev. A and Rev. B (800, 1700/2100, 1900, 2100 MHz) \r\nUMTS/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz) \r\nTD-SCDMA 1900 (F), 2000 (A) \r\nGSM/EDGE (850, 900, 1800, 1900 MHz) \r\nFDD-LTE (Bands 1, 2, 3, 4, 5, 7, 8, 13, 17, 18, 19, 20, 25, 26, 28, 29) \r\nTD-LTE (Bands 38, 39, 40, 41) \r\n | \r\n
| \r\n iPhone 5s \r\n | \r\n\r\n A1533 (GSM) \r\n | \r\n\r\n UMTS/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz); \r\nGSM/EDGE (850, 900, 1800, 1900 MHz); \r\nLTE (Bands 1, 2, 3, 4, 5, 8, 13, 17, 19, 20, 25) \r\n | \r\n
| \r\n \r\n | \r\n\r\n A1533 (CDMA) \r\n | \r\n\r\n CDMA EV-DO Rev. A and Rev. B (800, 1700/2100, 1900, 2100 MHz); \r\nUMTS/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz); \r\nGSM/EDGE (850, 900, 1800, 1900 MHz); \r\nLTE (Bands 1, 2, 3, 4, 5, 8, 13, 17, 19, 20, 25) \r\n | \r\n
| \r\n \r\n | \r\n\r\n A1453 \r\n | \r\n\r\n CDMA EV-DO Rev. A and Rev. B (800, 1700/2100, 1900, 2100 MHz); \r\nUMTS/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz); \r\nGSM/EDGE (850, 900, 1800, 1900 MHz); \r\nLTE (Bands 1, 2, 3, 4, 5, 8, 13, 17, 18, 19, 20, 25, 26) \r\n | \r\n
| \r\n \r\n | \r\n\r\n A1457 \r\n | \r\n\r\n UMTS/HSPA+/DC-HSDPA (850, 900, 1900, 2100 MHz); \r\nGSM/EDGE (850, 900, 1800, 1900 MHz); \r\nLTE (Bands 1, 2, 3, 5, 7, 8, 20) \r\n | \r\n
| \r\n \r\n | \r\n\r\n A1530 \r\n | \r\n\r\n UMTS/HSPA+/DC-HSDPA (850, 900, 1900, 2100 MHz); \r\nGSM/EDGE (850, 900, 1800, 1900 MHz); \r\nFDD-LTE (Bands 1, 2, 3, 5, 7, 8, 20); \r\nTD-LTE (Bands 38, 39, 40) \r\n | \r\n
| \r\n iPad mini 3 \r\n | \r\n\r\n WiFi + cellular \r\n | \r\n\r\n UMTS/?HSPA/?HSPA+/?DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz); \r\nGSM/EDGE (850, 900, 1800, 1900 MHz) \r\nCDMA EV-DO Rev. A and Rev. B (800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 13, 17, 18, 19, 20, 25, 26) \r\n | \r\n
| \r\n iPad Air 2 \r\n | \r\n\r\n WiFi + cellular \r\n | \r\n\r\n UMTS/?HSPA/?HSPA+/?DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz); GSM/EDGE (850, 900, 1800, 1900 MHz) \r\nCDMA EV-DO Rev. A and Rev. B (800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 13, 17, 18, 19, 20, 25, 26, 28, 29, 38, 39, 40, 41) \r\n | \r\n
| \r\n iPad mini 2 \r\n | \r\n\r\n WiFi + cellular \r\n | \r\n\r\n UMTS/HSPA/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz); GSM/EDGE (850, 900, 1800, 1900 MHz) \r\nCDMA EV-DO Rev. A and Rev. B (800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 13, 17, 18, 19, 20, 25, 26) \r\n | \r\n
| \r\n iPad Air \r\n | \r\n\r\n WiFi + cellular \r\n | \r\n\r\n UMTS/HSPA/HSPA+/DC-HSDPA (850, 900, 1700/2100, 1900, 2100 MHz); GSM/EDGE (850, 900, 1800, 1900 MHz) \r\nCDMA EV-DO Rev. A and Rev. B (800, 1900 MHz) \r\nLTE (Bands 1, 2, 3, 4, 5, 7, 8, 13, 17, 18, 19, 20, 25, 26) \r\n | \r\n
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which Apple iOS 9.2 were judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1.4. The evaluation methodology used by the evaluation team to conduct the evaluation was the Common Methodology for Information Technology Security Evaluation, Version 3.1.4. The product, when delivered and configured as identified in the iOS 9.2 Common Criteria Guide document, meets the requirements of the Protection Profile for Mobile Device Fundamentals Version 2.0.
\r\nThe Apple iOS 9.2 Common Criteria Guide document satisfies all of the security functional requirements stated in the Apple iOS 9.2 MDFPPv2 Security Target. The project underwent CCEVS Validator review. The evaluation was completed in December, 2015. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report number CCEVS-VR-VID10695-2016, prepared by CCEVS.
","environmental_strengths":"\r\n\r\nThe TOE provides cryptographic services for the encryption of data-at rest, for secure communication channels, and for use by applications. In addition, the TOE implements a number of cryptographic protocols that can be used to establish a trusted channel to other IT entities.
\r\nThe TOE provides cryptographic services via the following cryptographic modules.
\r\n· The Apple iOS CoreCrypto Kernel Module v6
\r\n· The Apple iOS CoreCrypto Module v6
\r\nExcept for making emergency calls, users need to authenticate using a passcode. This passcode can be configured for a minimum length, for dedicated passcode policies, and for a maximum life time. Passcodes are obscured when entered, the frequency of entering passcodes is limited, and the number of consecutive failed attempts of entering the passcode is also limited. The TOE also enters a locked state after a (configurable) time of user inactivity and the user is required to enter his passcode to unlock the TOE.
\r\nExternal entities connecting to the TOE via a secure protocol (EAP-TLS, TLS, IPsec) can be authenticated using X.509 certificates.
\r\nUser data in files is protected using cryptographic functions, ensuring this data remains protected even if the device is lost or stolen. Critical data, like passcodes used by applications or application defined cryptographic keys, can be stored in the key chain, which provides additional protection. Passcode protection and encryption ensure that data-at-rest remains protected even in the case of the device being lost or stolen. Data can also be protected so that only the application that owns the data can access it.
\r\nSecurity management capabilities are provided to users via the user interface of the device and to administrators through the installation of configuration profiles on the device. This installation can be done using the Apple Configurator tool or by using a Mobile Device Management System.
\r\nThe TSF protects itself by having its own code and data protected from unauthorized access (using hardware provided memory protection features), by encrypting user and TSF data using TSF protected keys and encryption/decryption functions, by self tests, by ensuring the integrity and authenticity of TSF updates and downloaded applications, and by locking the TOE upon user request or after a defined time of user inactivity.
\r\nThe TSF provides functions to lock the TOE upon request and after an administrator configurable time of inactivity. Access to the TOE via a wireless network is controlled by user/administrator defined policy.
\r\nThe TOE supports the use of the following cryptographic protocols that define a trusted channel between itself and another trusted IT product: IEEE 802.11-2012; IEEE 802.1X; EAP-TLS; TLS; IPsec.
","features":[]}