FCS_SNI_EXT.1, Cryptographic Operation (Salt, Nonce, and Initialization Vector Generation), requires the generation of salts, nonces, and IVs to be used by the cryptographic components of the TOE to be performed in the specified manner. Management: FCS_SNI_EXT.1 No specific management functions are identified. Audit: FCS_SNI_EXT.1 There are no auditable events foreseen. FCS_SNI_EXT.1 Cryptographic Operation (Salt, Nonce, and Initialization Vector Generation) Hierarchical to: No other components Dependencies: FCS_RBG_EXT.1 Cryptographic Operation (Random Bit Generation) The TSF shall only use salts that are generated by a [selection: DRBG as FCS_SNI_EXT.1.1 specified in FCS_RBG_EXT.1, DRBG provided by the host platform]. FCS_SNI_EXT.1.2 The TSF shall only use unique nonces, with a minimum size of [assignment: bits. number of bits] FCS_SNI_EXT.1.3 The TSF shall create IVs in the following manner: CBC: IVs shall be non-repeating, CCM: Nonce shall be non-repeating, XTS: No IV. Tweak values shall be non-negative integers, assigned consecutively, and starting at an arbitrary non-negative integer, GCM: IV shall be non-repeating. The number of invocations of GCM shall not exceed 2^32 for a given secret key. FCS_SSHC_EXT SSH Client Protocol Family Behavior Components in this family describe the requirements for protecting remote communications using SSH when the TSF is the sender (client) for the communications. Component Leveling FCS_SSHC_EXT.1, SSH Client Protocol, requires the TSF to implement SSH as a client. Management: FCS_SSHC_EXT.1 The following actions could be considered for the management functions in FMT:
FCS_SNI_EXT.1, Cryptographic Operation (Salt, Nonce, and Initialization Vector Generation), requires the generation of salts, nonces, and IVs to be used by the cryptographic components of the TOE to be performed in the specified manner. Management: FCS_SNI_EXT.1 No specific management functions are identified. Audit: FCS_SNI_EXT.1 There are no auditable events foreseen. FCS_SNI_EXT.1 Cryptographic Operation (Salt, Nonce, and Initialization Vector Generation) Hierarchical to: No other components Dependencies: FCS_RBG_EXT.1 Cryptographic Operation (Random Bit Generation) FCS_SNI_EXT.1.1 The TSF shall only use salts that are generated by a [selection: DRBG as specified in FCS_RBG_EXT.1, DRBG provided by the host platform]. FCS_SNI_EXT.1.2 The TSF shall only use unique nonces, with a minimum size of [assignment: number of bits] bits. FCS_SNI_EXT.1.3 The TSF shall create IVs in the following manner: CBC: IVs shall be non-repeating, CCM: Nonce shall be non-repeating, XTS: No IV. Tweak values shall be non-negative integers, assigned consecutively, and starting at an arbitrary non-negative integer, GCM: IV shall be non-repeating. The number of invocations of GCM shall not exceed 2^32 for a given secret key. FCS_SSHC_EXT SSH Client Protocol Family Behavior Components in this family describe the requirements for protecting remote communications using SSH when the TSF is the sender (client) for the communications. Component Leveling FCS_SSHC_EXT.1, SSH Client Protocol, requires the TSF to implement SSH as a client. Management: FCS_SSHC_EXT.1 The following actions could be considered for the management functions in FMT:
FDE%20EM%20cPP%20v2.docx