In this scenario, it does not make sense for the FIA_X509_EXT.1, FIA_X509_EXT.2, FIA_X509_EXT.3 requirements to be mandatory. (RfI#12) FCS_SSHC_EXT.1.2 has been Update also SD accordingly 1 Accepted and the SD has changed to keep public key authentication been updated to reflect the as mandatory but password authentication fact that password-based has been made optional. This is in authentication is now agreement with the corresponding NIT optional. Technical recommendation. Unfortunately, the SD has not been updated accordingly, though comments are placed in the corresponding sections. (RfI#14) For FCS_IPSEC_EXT.1.3 tunnel Add application note to mandate 2 No change. mode and transport mode have been made transport mode for TOE Currently there does not selectable which is in agreement with the administration. seem to be a clear reason corresponding NIT Technical to demand transport mode recommendation. For administration of the for administration. This TOE transport mode should be mandated. can be re-examined as part of the public review. Protection is not defined anywhere and unnecessary modifications to 1 Added application notes “CoreData” Profile appears to be a superficial However, Part 2 SFRs. to v1.0.3, any change of this nature would make this FMT_MTD.1/CoreData Section SFR refined. and 6.6.2, to clarify label usage
In this scenario, it does not make sense for the FIA_X509_EXT.1, FIA_X509_EXT.2, FIA_X509_EXT.3 requirements to be mandatory. (RfI#12) FCS_SSHC_EXT.1.2 has been changed to keep public key authentication as mandatory but password authentication has been made optional. This is in agreement with the corresponding NIT Technical recommendation. Unfortunately, the SD has not been updated accordingly, though comments are placed in the corresponding sections. Update also SD accordingly 1 Accepted and the SD has been updated to reflect the fact that password-based authentication is now optional. (RfI#14) For FCS_IPSEC_EXT.1.3 tunnel mode and transport mode have been made selectable which is in agreement with the corresponding NIT Technical recommendation. For administration of the TOE transport mode should be mandated. Add application note to mandate transport mode for TOE administration. 2 No change. Currently there does not seem to be a clear reason to demand transport mode for administration. This can be re-examined as part of the public review. Protection Profile v1.0.3, Section 6.6.2, “CoreData” is not defined anywhere and appears to be a superficial However, any change of this nature would make this SFR refined. unnecessary modifications to Part 2 SFRs. 1 Added application notes to FMT_MTD.1/CoreData and to clarify label usage