Crypto

  1. Updates to the OSPP

    In the beginning of March an updated version of the Protection Profile for General Purpose Operating Systems was released. This brings the OSPP up to version 4.1, with version 4.0 now having a sunset date of September 9, 2016. The changes to this version of the PP are relatively modest and all of them affect Read More…

  2. The SSH Extended Package

    Several weeks ago a new EP that adds SSH capabilities to the Application Software, General Purpose OS and Mobile Device Management PPs was released. Most of the SFRs and assurance activities in this EP should be familiar to anyone who has worked with previous PPs that had SSH requirements. What’s significant about this new EP Read More…

  3. San Bernardino, Paris, and the Implications for COTS Solutions Certification for Government Use

    By now, nearly everyone in the Western world has heard of the on-going campaign by many law enforcement and intelligence agencies to get legislation requiring technology vendors, and in particular manufacturers of mobile devices, to offer back doors and/or off-by-default encryption. While this battle seems to by cyclical, rearing its head every few years, the Read More…