atsec information security
Evaluations | CC Resources | atsec Documents

CC Guidance

CC News
The 10th International Common Criteria Conference will be held on the 22nd to the 24th of September 2009, in Tromsø, Norway.

       http://www.commoncriteriaportal.org/

CC Documents
The Common Criteria and the Common Evaluation Methodology can be found at:

      http://www.commoncriteriaportal.org/thecc.html

There you also find the documents "CC - An Introduction" and the "CC - Users Guide".

The documents published as the Joint Interpretation Library for CC evaluations can be found here:

       http://www.cesg.gov.uk

Web sites for the CC evaluation schemes in the World
The following links lead to the entry pages of the CC evaluation schemes in those countries that have official Common Criteria evaluation schemes established.

       Australia / New Zealand

       Canada
       France
       Germany
       Japan
       The Netherlands
       Norway
       Republic of Korea
       Spain
       Sweden
       UK
       USA
These countries have signed the Common Criteria Recognition Arrangement (CCRA), see this page for more information.

There are also a number of countries who do not have a national scheme for conducting evaluations but have undersigned the CCRA, thus accepting the certificates produced by the nations listed above. These are:
Austria, Czech Republic, Denmark, Finland, Greece, Hungary, India, Israel, Italy, Malaysia, Republic of Singapore and Turkey.

List of evaluated products
The following links lead the lists of evaluated products in each country that has a CC scheme in place. Note that some countries also provide lists of products in evaluation.

       Australia / New Zealand

       Canada
       France
       Germany
       Japan
       The Netherlands
       Norway
       Republic of Korea
       Spain
       Sweden
       UK
       USA

Other useful CC sites:

       Consistency Instruction Manuals

       CC at the German BSI
       Guidance to consumers of evaluated projects
       Acronyms guide (NIST)
       http://www.commoncriteriaportal.org
FIPS 140-2
US Federal Information Processing Standard (FIPS) 140-2 is dedicated to the assessment of cryptographic products. This standard is not directly related to the Common Criteria but can be seen as a complementing standard to assess whether the implementation of a cryptographic function is compliant to the standardized cryptographic functions and algorithms in other FIPS documents (e. g. the Data Encryption Standard DES, the Advanced Encryption Standard AES, the Digital Signature Standard DSS or the Secure Hash Algorithm SHA-1) and to verify that the cryptographic product provides a set of minimum functions for separation of user roles, key generation and key management. A large number of cryptographic products have been assessed using this standard. The standard, the list of evaluated products and other related information on FIPS 140-2 can be found at http://csrc.nist.gov/cryptval/.

Please also take a look at our FIPS 140-2 FAQs.

Top

PUBLICATIONS
atsec employees' expertise is in demand: we are members of international boards, speakers on conferences, and authors of books and articles. [more]
JOBS
We are currently looking for new colleagues in US and Europe. [more]
Legal notice ->
Site map ->
   
atsec information security | info@atsec.com