Requirements from the

Crypto Catalog

Purpose. This document presents the functional and assurance requirements found in the Crypto Catalog. Common Criteria evaluation, facilitated in the U.S. by the National Information Assurance Partnership (NIAP), is required for IA and IA-enabled products in National Security Systems according to CNSS Policy #11.

Using this document. This representation of the Protection Profile includes:

• Security Functional Requirements for use in evaluation. These are featured without the formal Assurance Activities specified in the Protection Profile, to assist the reader who is interested only in the requirements.
  It also includes, in tables shown later, particular types of security functional requirements that are not strictly required in all cases. These are:
• Selection-based Security Functional Requirements which become required when certain selections are made inside the regular Security Functionality Requirements (as indicated by the [selection:] construct).
• Objective Security Functional Requirements which are highly desired but not yet widely-available in commercial technology.
• Optional Security Functional Requirements which are available for evaluation and which some customers may insist upon.
• Security Assurance Requirements which relate to developer support for the product under evaluation, development processes, and other non-functionality security relevant requirements.