Brocade Communications Systems FCX Series User Manual download pdf (Page 38)

Version 1.1, 05/19/2014

GSS CCT Evaluation Technical Report Page 38 of 53

Document: AAR-BrocadeFastIron8010

2.6.2 EXTENDED: PROTECTION OF TSF DATA (FOR READING OF ALL SYMMETRIC

KEYS) (FPT_SKP_EXT.1)

2.6.2.1 FPT_SKP_EXT.1.1

TSS Assurance Activities: None Defined

Guidance Assurance Activities: None Defined

Testing Assurance Activities: None Defined

Component Assurance Activities: The evaluator shall examine the TSS to determine that it details how any pre-

shared keys, symmetric keys, and private keys are stored and that they are unable to be viewed through an

interface designed specifically for that purpose, as outlined in the application note in the NDPP. If these values are

not stored in plaintext, the TSS shall describe how they are protected/obscured.

Section 6.6 states that the TOE does not offer any interfaces that will disclose to any user cryptographic key.

2.6.3 RELIABLE TIME STAMPS (FPT_STM.1)

2.6.3.1 FPT_STM.1.1

TSS Assurance Activities: The evaluator shall examine the TSS to ensure that it lists each security function that

makes use of time. The TSS provides a description of how the time is maintained and considered reliable in the

context of each of the time related functions.

Section 6.6 states the TOE provides a hardware clock for reliable time stamps. The description explains the clock is

mainly used for timestamps in audit records but also supports the timing elements of cryptographic functions. By

virtue of being a real-time clock, the evaluator assumes it is reliable.

Guidance Assurance Activities: The evaluator examines the operational guidance to ensure it instructs the

administrator how to set the time. If the TOE supports the use of an NTP server, the operational guidance instructs

1 2 ... 33 34 35 36 37 38 39 40 41 42 43 ... 52 53

No comments

Brocade Communications Systems FCX Series User Manual Page 38