Archived
TD0311: FIT Technical Decision on CC Conformance Claims
Publication Date
2018.12.21
Protection Profiles
CPP_FDE_AA_V2.0, CPP_FDE_EE_V2.0
Other References
Issue Description
The FIT has issued a Technical Decision on CC Conformance Claims. Resolution
Section 2. CC Conformance Claims in the FDE AA cPP V2.0 shall now read: 2. CC Conformance Claims As defined by the references [CC1], [CC2], and [CC3], this cPP conforms to the requirements of Common Criteria v3.1, Release 5. This cPP is conformant to CC v3.1, r5, CC Part 2 and CC Part 3 conformant. Extended component definitions can be found in Appendix C. The methodology applied for the cPP evaluation is defined in [CEM]. This cPP satisfies the following Assurance Families: APE_CCL.1, APE_ECD.1, APE_INT.1, APE_OBJ.1, APE_REQ.1 and APE_SPD.1. This cPP does not claim conformance to another PP. The FDE Enterprise Management (EM) PP-Module can specify the FDE-AA as a Base-PP for use with the FDE-EM in a PP-configuration. An ST can claim conformance with the FDE-EE in combination with the FDE-AA and still maintain exact conformance. In order to be conformant to this cPP, a TOE must demonstrate Exact Conformance. Exact Conformance is defined as the ST containing all of the requirements in section 5 of this cPP, and potentially requirements from Appendix A or Appendix B of this cPP. While iteration is allowed, no additional requirements (from the CC parts 2 or 3) are allowed to be included in the ST. Further, no requirements in section 5 of this cPP are allowed to be omitted."
Section 2. CC Conformance Claims in the FDE EE cPP V2.0 shall now read: 2. CC Conformance Claims As defined by the references [CC1], [CC2], and [CC3], this cPP conforms to the requirements of Common Criteria v3.1, Release 5. This cPP is conformant to CC v3.1, r5, CC Part 2 and CC Part 3 conformant. Extended component definitions can be found in Appendix C. The methodology applied for the cPP evaluation is defined in [CEM]. This cPP satisfies the following Assurance Families: APE_CCL.1, APE_ECD.1, APE_INT.1, APE_OBJ.1, APE_REQ.1 and APE_SPD.1. This cPP does not claim conformance to another PP. The FDE Enterprise Management (EM) PP-Module can specify the FDE-AA and FDE-EE as a set of Base-PPs for use with the FDE-EM in a PP-configuration. An ST can claim conformance with the FDE-AA in combination with the FDE-EE and still maintain exact conformance. In order to be conformant to this cPP, a TOE must demonstrate Exact Conformance. Exact Conformance is defined as the ST containing all of the requirements in section 5 of this cPP, and potentially requirements from Appendix A or Appendix B of this cPP. While iteration is allowed, no additional requirements (from the CC parts 2 or 3) are allowed to be included in the ST. Further, no requirements in section 5 of this cPP are allowed to be omitted."
For further information, please see the FIT interpretation here: https://www.niap-ccevs.org/Documents_and_Guidance/ccevs/FITDecision201803.pdf Justification
See issue description. |