{"id":350088,"date":"2024-10-20T00:40:20","date_gmt":"2024-10-20T00:40:20","guid":{"rendered":"https:\/\/pdfstandards.shop\/product\/uncategorized\/bs-en-419221-52018\/"},"modified":"2024-10-26T00:25:05","modified_gmt":"2024-10-26T00:25:05","slug":"bs-en-419221-52018","status":"publish","type":"product","link":"https:\/\/pdfstandards.shop\/product\/publishers\/bsi\/bs-en-419221-52018\/","title":{"rendered":"BS EN 419221-5:2018"},"content":{"rendered":"

This part of EN 419221 specifies a Protection Profile for cryptographic modules suitable for use by trust service providers supporting electronic signature and electronic sealing operations, certificate issuance and revocation, time stamp operations, and authentication services, as identified by the (EU) No 910\/2014 regulation of the European Parliament and of the Council on electronic identification and trust services for electronic transactions in the internal market (eIDAS) in [Regulation]. The Protection Profile also includes optional support for protected backup of keys. The document follows the rules and conventions laid out in Common Criteria part 1 [CC1], Annex B “Specification of Protection Profiles”.<\/p>\n

PDF Catalog<\/h4>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
PDF Pages<\/th>\nPDF Title<\/th>\n<\/tr>\n
2<\/td>\nundefined <\/td>\n<\/tr>\n
9<\/td>\n1 Scope
2 Normative references <\/td>\n<\/tr>\n
10<\/td>\n3 Terms and definitions
3.1 Terms and definitions <\/td>\n<\/tr>\n
11<\/td>\n3.2 Abbreviations
4 Protection Profile
4.1 General <\/td>\n<\/tr>\n
12<\/td>\n4.2 Protection Profile Reference
4.3 Protection Profile Overview
4.3.1 General <\/td>\n<\/tr>\n
13<\/td>\n4.3.2 EU Qualified Electronic Signature \/ Seal Creation Device
4.4 TOE Overview
4.4.1 TOE type
4.4.1.1 General <\/td>\n<\/tr>\n
16<\/td>\n4.4.1.2 Cryptographic Functions <\/td>\n<\/tr>\n
17<\/td>\n4.4.1.3 Key Management <\/td>\n<\/tr>\n
19<\/td>\n4.4.1.4 Cryptographic Algorithms
4.4.1.5 Backup
4.4.1.6 Audit <\/td>\n<\/tr>\n
20<\/td>\n4.4.2 Usage and major security features of the TOE
4.4.2.1 General
4.4.2.2 Use Case 1: Local signing <\/td>\n<\/tr>\n
21<\/td>\n4.4.2.3 Use Case 2: Support for Remote Server Signing
4.4.3 Available non-TOE hardware\/software\/firmware
5 Conformance Claim
5.1 CC Conformance Claim
5.2 PP Claim
5.3 Conformance Rationale <\/td>\n<\/tr>\n
22<\/td>\n5.4 Conformance Statement
6 Security Problem Definition
6.1 Assets
6.2 Subjects
6.3 Threats
6.3.1 General <\/td>\n<\/tr>\n
23<\/td>\n6.3.2 T.KeyDisclose \u2014 Unauthorised disclosure of secret\/private key
6.3.3 T.KeyDerive \u2014 Derivation of secret\/private key
6.3.4 T.KeyMod \u2014 Unauthorised modification of a key
6.3.5 T.KeyMisuse \u2014 Misuse of a key
6.3.6 T.KeyOveruse \u2014 Overuse of a key
6.3.7 T.DataDisclose \u2014 Disclosure of sensitive client application data
6.3.8 T.DataMod \u2014 Unauthorised modification of client application data <\/td>\n<\/tr>\n
24<\/td>\n6.3.9 T.Malfunction \u2014 Malfunction of TOE hardware or software
6.4 Organisational Security Policies
6.4.1 P.Algorithms \u2014 Use of approved cryptographic algorithms
6.4.2 P.KeyControl \u2014 Support for control of keys
6.4.3 P.RNG \u2014 Random Number Generation <\/td>\n<\/tr>\n
25<\/td>\n6.4.4 P.Audit \u2014 Audit trail generation
6.5 Assumptions
6.5.1 A.ExternalData \u2014 Protection of data outside TOE control
6.5.2 A.Env \u2014 Protected operating environment
6.5.3 A.DataContext \u2014 Appropriate use of TOE functions <\/td>\n<\/tr>\n
26<\/td>\n6.5.4 A.UAuth \u2014 Authentication of application users
6.5.5 A.AuditSupport \u2014 Audit data review
6.5.6 A.AppSupport \u2014 Application security support
7 Security Objectives
7.1 General
7.2 Security Objectives for the TOE
7.2.1 General
7.2.2 OT.PlainKeyConf \u2014 Protection of confidentiality of plaintext secret keys
7.2.3 OT.Algorithms \u2014 Use of approved cryptographic algorithms <\/td>\n<\/tr>\n
27<\/td>\n7.2.4 OT.KeyIntegrity \u2014 Protection of integrity of keys
7.2.5 OT.Auth \u2014 Authorization for use of TOE functions and data
7.2.6 OT.KeyUseConstraint \u2014 Constraints on use of keys
7.2.7 OT.KeyUseScope \u2014 Defined scope for use of a key after authorization <\/td>\n<\/tr>\n
28<\/td>\n7.2.8 OT.DataConf \u2014 Protection of confidentiality of sensitive client application data
7.2.9 OT.DataMod \u2014 Protection of integrity of client application data
7.2.10 OT.ImportExport \u2014 Secure import and export of keys
7.2.11 OT.Backup \u2014 Secure backup of user data <\/td>\n<\/tr>\n
29<\/td>\n7.2.12 OT.RNG \u2014 Random number quality
7.2.13 OT.TamperDetect \u2014 Tamper Detection
7.2.14 OT.FailureDetect \u2014 Detection of TOE hardware or software failures
7.2.15 OT.Audit \u2014 Generation of audit trail
7.3 Security Objectives for the Operational Environment
7.3.1 General
7.3.2 OE.ExternalData \u2014 Protection of data outside TOE control <\/td>\n<\/tr>\n
30<\/td>\n7.3.3 OE.Env \u2014 Protected operating environment
7.3.4 OE.DataContext \u2014 Appropriate use of TOE functions
7.3.5 OE.Uauth \u2014 Authentication of application users
7.3.6 OE.AuditSupport \u2014 Audit data review <\/td>\n<\/tr>\n
31<\/td>\n7.3.7 OE.AppSupport \u2014 Application security support
8 Extended Components Definitions
8.1 Generation of random numbers (FCS_RNG)
8.1.1 General
8.1.2 Family behaviour
8.1.3 Component levelling <\/td>\n<\/tr>\n
32<\/td>\n8.2 Basic TSF Self Testing (FPT_TST_EXT.1)
8.2.1 General
8.2.2 Family behaviour
8.2.3 Component levelling <\/td>\n<\/tr>\n
33<\/td>\n9 Security Requirements
9.1 General
9.2 Typographical Conventions
9.3 SFR Architecture
9.3.1 SFR Relationships <\/td>\n<\/tr>\n
35<\/td>\n9.3.2 SFRs and the Key Lifecycle <\/td>\n<\/tr>\n
37<\/td>\n9.4 Security Functional Requirements
9.4.1 General
9.4.2 Cryptographic Support (FCS) <\/td>\n<\/tr>\n
40<\/td>\n9.4.3 Identification and authentication (FIA) <\/td>\n<\/tr>\n
43<\/td>\n9.4.4 User data protection (FDP) <\/td>\n<\/tr>\n
49<\/td>\n9.4.5 Trusted path\/channels (FTP) <\/td>\n<\/tr>\n
51<\/td>\n9.4.6 Protection of the TSF (FPT) <\/td>\n<\/tr>\n
53<\/td>\n9.4.7 Security management (FMT) <\/td>\n<\/tr>\n
60<\/td>\n9.4.8 Security audit data generation (FAU) <\/td>\n<\/tr>\n
62<\/td>\n9.5 Security Assurance Requirements
9.5.1 General <\/td>\n<\/tr>\n
63<\/td>\n9.5.2 Refinements of Security Assurance Requirements <\/td>\n<\/tr>\n
67<\/td>\n10 Rationales
10.1 Security Objectives Rationale
10.1.1 Security Objectives Coverage <\/td>\n<\/tr>\n
68<\/td>\n10.1.2 Security Objectives Sufficiency
10.1.2.1 General
10.1.2.2 Threats <\/td>\n<\/tr>\n
69<\/td>\n10.1.2.3 Organisational Security Policies <\/td>\n<\/tr>\n
70<\/td>\n10.1.2.4 Assumptions
10.2 Security Requirements Rationale
10.2.1 Security Requirements Coverage <\/td>\n<\/tr>\n
72<\/td>\n10.2.2 SFR Dependencies <\/td>\n<\/tr>\n
74<\/td>\n10.2.3 Rationale for SARs <\/td>\n<\/tr>\n
75<\/td>\n10.2.4 AVA_VAN.5 Advanced methodical vulnerability analysis <\/td>\n<\/tr>\n
76<\/td>\nAnnex A (informative)Mapping to Regulation (EU) 910\/2014 <\/td>\n<\/tr>\n<\/table>\n","protected":false},"excerpt":{"rendered":"

Protection Profiles for TSP Cryptographic Modules – Cryptographic Module for Trust Services<\/b><\/p>\n\n\n\n\n
Published By<\/td>\nPublication Date<\/td>\nNumber of Pages<\/td>\n<\/tr>\n
BSI<\/b><\/a><\/td>\n2018<\/td>\n82<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"featured_media":350095,"template":"","meta":{"rank_math_lock_modified_date":false,"ep_exclude_from_search":false},"product_cat":[695,2641],"product_tag":[],"class_list":{"0":"post-350088","1":"product","2":"type-product","3":"status-publish","4":"has-post-thumbnail","6":"product_cat-35-240-30","7":"product_cat-bsi","9":"first","10":"instock","11":"sold-individually","12":"shipping-taxable","13":"purchasable","14":"product-type-simple"},"_links":{"self":[{"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/product\/350088","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/product"}],"about":[{"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/types\/product"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/media\/350095"}],"wp:attachment":[{"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/media?parent=350088"}],"wp:term":[{"taxonomy":"product_cat","embeddable":true,"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/product_cat?post=350088"},{"taxonomy":"product_tag","embeddable":true,"href":"https:\/\/pdfstandards.shop\/wp-json\/wp\/v2\/product_tag?post=350088"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}