Wave Systems Corp. (fka WAVXQ)

[wavedreamer]

Funny how those standards committees in Europe talk the same language as in the USA with the NIAP. Nah it's probably just a coincidence:)


"Protection Profile PC Client Specific TPM (TPM Library Family Specification 2.0)

EAL4 +

07/07/2014

Atmel and Nuvoton listed as well:)

http://www.ssi.gouv.fr/fr/produits-et-prestataires/liste-des-evaluations-cc-en-cours/



ALSO:



The signatories of the agreement are now:

France, represented by ANSSI ( www.ssi.gouv.fr )
Germany, represented by the BSI ( www.bsi.bund.de )
Austria, represented by the Federal Chancellery ( www.digitales.oesterreich.gv.at )
Spain, represented by OCSTI ( www.oc.ccn.cni.es )
Finland, represented by FICORA ( www.ficora.fi )
Italy, represented by OCSI ( www.ocsi.isticom.it )
Norway, represented by the SERTIT ( www.sertit.no )
the Netherlands, represented by NLNCSA ( www.tuv-nederland.nl )
the United Kingdom, represented by the CESG ( www.cesg.gov.uk )
Sweden, represented by the FMV / CSEC ( www.csec.se )

Qualified certification bodies to issue high-level certificates in the technical field of "secure microcontrollers and like products" are now:

for France, ANSSI ( www.ssi.gouv.fr )
for Germany, BSI ( www.bsi.bund.de )
for the Netherlands, the NLNCSA ( http: //www.tuv-nederland.nl/nl/17/c ... )
for the United Kingdom, the CESG ( www.cesg.gov.uk )
for Spain, SCC ( www.oc.ccn.cni.es )

The new version of the agreement of the Common Criteria Recognition Arrangement (CCRA) has been applicable since 8 September 2014.


The new agreement defines a new type of Protection Profile (PP) in its Annex K: The Collaborative PP (cPP). This is a PP that has a dedicated evaluation method refining the generic CC . This cPP associated with its evaluation method is developed by an international technical community called iTC. The specific evaluation methods to cPP are approved under CCAR.

The limits of recognition CCAR are now established based on the type of process evaluation implementation: an evaluation according to the generic CC (a standard PP is taken into account or not), mutual recognition s' applies to the evaluation level EAL2 and the ALC_FLR family for an evaluation according to a cPP, mutual recognition applies to the level of evaluation in the cPP identified. The level of cPP is limited to EAL2 by default; this level can be extended to EAL4 if iTC can demonstrate that the work is sufficiently objective to be implemented by all schemes CCAR.
-
-

Finally, a transition plan between the two versions of the agreement has been established (see Article 17 of the new agreement). Until September 8, 2017, can be recognized up to EAL4 (ie under the terms of the old agreement ) product evaluations if they were registered before September 8, 2014; maintenances and revaluations of products have a prior certificate recognized under the terms of the old agreement.
-
-

Certificates recognized under this agreement are issued with the brand:

http://www.ssi.gouv.fr/fr/certification-qualification/cc/les-accords-de-reconnaissance-mutuelle.html