CC Supporting Documents related to Hardware Security Devices

This page provides technical documents on the evaluation of Hardware Security Devices of the following two categories below:

• Smartcards and Similar Devices
  Smartcards, Smartcard ICs and Similar Devices
• Hardware Devices with Security Boxes
  Hardware Devices with security functionality which depend upon a hardware physical envelope with counter-measures (a so-called "Security Box") against direct physical attacks such as Hardware Security Modules(HSMs)

CC Supporting Documents related to Hardware Security Devices

CC Supporting Documents related to Hardware Security Devices are issued from CCRA/SOG-IS as Common Criteria Supporting Documents. There are two types of supporting documents: Mandatory Techinical Documents and Guidance Documents. 

Mandatory Technical Documents
contain a consistent set of interpretations that specify or complement the CC/CEM during the IT Security Evaluation of Smartcards and related devices or hardware devices with security boxes.

Guidance Documents
contain background material to aid the understanding of the evaluation approach or any other information not considered to be mandatory. IT Security Evaluations that are subject to mutual authentication by CCRA/SOG-IS, it is required to show information on the CC support documents (including version numbers) used for evaluation.

General level CC supporting documents

General level CC supporting documents contain background material to aid the understanding of the evaluation approach of general level hardware it products.

• Title
• Type
• Version (Date)

• Collection of developer evidence(PDF:44 KB)
• Guidance
• 1.5 (Jan. 2012)

• Evaluation methodology for product series(PDF:321 KB)
• Guidance
• 1.0 (April 2017)

• Minimum site security requirements(PDF:745 KB)
  • This document is guidance in general but is mandatory for the specifics technical domain.
• Guidance
• 3.1 (Dec. 2023)

• Checklist (corresponding to MSSR v3.1)(Excel:25 KB)
• Guidance
• 3.1 (Dec. 2023)

• ADV_SPM.1 interpretation for [CC:2022] transition(PDF:161 KB)
• Guidance
• 1.0 (May 2024)

• Composite product evaluation and certification for CC:2022(PDF:221 KB)
• Mandatory
• 1.6 (April 2024)

Smartcards and similar devices CC supporting documents

• Title
• Type
• Version (Date)

• Application of Attack Potential to Smartcards(PDF:553 KB)
• Mandatory
• 3.2.1 (Feb. 2024)

• Application of CC to Integrated Circuits for CC3.1(PDF:227 KB)
• Mandatory
• 3.0 (Feb. 2009)

• Application of CC to Integrated Circuits for CC:2022(PDF:854 KB)
• Mandatory
• 4.0 (April 2024)

• Composite product evaluation for Smart Cards and similar devices for CC3.1(PDF:535 KB)
• Mandatory
• 1.5.1 (May 2018)

• ETR for composite evaluation template(PDF:1.6 MB)
• Guidance
• 1.2 (April 2024)

• Guidance for Smartcard evaluation for CC3.1(PDF:191 KB)
• Guidance
• 2.0 (Feb. 2010)

• Guidance for Smartcard evaluation for CC:2022(PDF:868 KB)
• Guidance
• 3.0 (April 2024)

• Security Architecture requirements (ADV_ARC) for Smart Cards and similar devices extended to Secure Sub-Systems in SoC(PDF:942 KB)
• Mandatory
• 2.1 (July 2021)

• Security Architecture requirements (ADV_ARC) for Smart Cards and similar devices extended to Secure Sub-Systems in SoC - Appendix 1(PDF:2.0 MB)
• Guidance
• 2.1 (July 2021)

• Certification of "open" smart card products(PDF:291 KB)
• Mandatory
• 2.0 (May 2024)

• Minimum site security requirements(PDF:745 KB)
• Mandatory
• 3.1 (Dec. 2023)

• Checklist (corresponding to MSSR v3.1)(Excel:25 KB)
• Guidance
• 3.1 (Dec. 2023)

• Site Technical Audit Report Template(PDF:252 KB)
• Guidance
• 1.0 (Feb. 2018)

• Security requirements for post-delivery code loading(PDF:468 KB)
• Guidance
• 2.0 (Sept. 2024)

• Minimum ITSEF Requirements for Security Evaluations of Smart cards and similar devices(PDF:1.1 MB)
• Mandatory
• 2.1 (Feb.2020)

• Assurance Continuity - Practical Cases for Smart Cards and similar devices for CC3.1(PDF:380 KB)
• Guidance
• 1.0 (Nov. 2017)

• Assurance Continuity - Practical Cases for Smart Cards and similar devices for CC:2022(PDF:806 KB)
• Guidance
• 1.1 (April 2024)

• Code Disclosure and Software IP Reuse(PDF:246 KB)
• Guidance
• 1.2 (Nov. 2017)

• Biometric Card - Guidelines(PDF:530 KB)
• Guidance
• 1.1 (Sept. 2023)

• Secure Sub-System in System-on-Chip (3S in SoC) – Life-cycle model related evaluation aspects(PDF:992 KB)
• Guidance
• 1.0 (Oct. 2024)

Hardware devices with security boxes CC supporting documents

• Title
• Type
• Version (Date)

• Application of Attack Potential to Hardware Devices with Security Boxes(PDF:436 KB)
• Mandatory
• 3.1 (Nov. 2023)

• Minimum ITSEF Requirements for Security Evaluations of Hardware Devices with Security Boxes(PDF:138 KB)
• Mandatory
• 1.1 (Aug. 2020)

• Minimum site security requirements(PDF:745 KB)
• Mandatory
• 3.1 (Dec. 2023)

• Checklist (corresponding to MSSR v3.1)(Excel:25 KB)
• Guidance
• 3.1 (Dec. 2023)