atsec information security
Evaluations | CC Resources | atsec Documents

CC Guidance

CC News
The 9th International Common Criteria Conference will be held on the 23rd to the 25th of September 2008, in Silla Jeju, Korea.

       http://www.commoncriteriaportal.org/
CC Documents
The Common Criteria, the Common Evaluation Methodology and the CC Mutual Recognition Arrangement can be found at:

      http://www.niap-ccevs.org/cc-scheme

There you also find the documents "CC - An Introduction" and the "CC - Users Guide".

The documents published as the Joint Interpretation Library for CC evaluations can be found here:

       http://www.cesg.gov.uk
Web sites for the CC evaluation schemes in the World
The following links lead to the entry pages of the CC evaluation schemes in those countries that have official Common Criteria evaluation schemes established.

       Australia / New Zealand
       Canada
       France
       Germany
       Japan
       The Netherlands
       Norway
       Republic of Korea
       Spain
       UK
       USA
These countries have signed the Common Criteria Recognition Arrangement (CCRA), see this document for more information.

There are also a number of countries who do not have a national scheme for conducting evaluations but have undersigned the CCRA, thus accepting the certificates produced by the nations listed above. These are:
Austria, Czech Republic, Denmark, Finland, Greece, Hungary, India, Israel, Italy, Korea, The Netherlands, Norway, Republic of Singapore, Spain, Sweden and Turkey.
List of evaluated products
The following links lead the lists of evaluated products in each country that has a CC scheme in place. Note that some countries also provide lists of products in evaluation.

       Australia / New Zealand
       Canada
       France
       Germany
       Japan
       The Netherlands
       Norway
       Republic of Korea
       Spain
       UK
       USA

Other useful CC sites:

       Consistency Instruction Manuals
       CC at the German BSI
       Guidance to consumers of evaluated projects
       Acronyms guide (NIST)
       http://www.commoncriteriaportal.org
There are two mailinglists dealing with CC public interpretations which can be found at the bottom of http://niap.nist.gov/cc-scheme/PUBLIC/.
FIPS 140-2
US Federal Information Processing Standard (FIPS) 140-2 is dedicated to the assessment of cryptographic products. This standard is not directly related to the Common Criteria but can be seen as a complementing standard to assess whether the implementation of a cryptographic function is compliant to the standardized cryptographic functions and algorithms in other FIPS documents (e. g. the Data Encryption Standard DES, the Advanced Encryption Standard AES, the Digital Signature Standard DSS or the Secure Hash Algorithm SHA-1) and to verify that the cryptographic product provides a set of minimum functions for separation of user roles, key generation and key management. A large number of cryptographic products have been assessed using this standard. The standard, the list of evaluated products and other related information on FIPS 140-2 can be found at http://csrc.nist.gov/cryptval/.

Please also take a look at our FIPS 140-2 FAQs.

Top
PUBLICATIONS
atsec employees' expertise is in demand: we are members of international boards, speakers on conferences, and authors of books and articles. [more]
JOBS
We are currently looking for new colleagues in US and Europe. [more]
Legal notice ->
Site map ->
   
atsec information security | info@atsec.com