Updated 6.4.1 SBD_TECH-1

**Activities:**

1. Study the technical documentation.

2. Identify the structures where data is transferred.

3. Study the deployment guidance.

4. Study the implementation from the product and from the technical documentation.

2. Identify the structures where data is transferred as described in the requirement.

3. Study the deployment guidance and the protocols used.

4. Compare the cryptographic implementation of the product and of the technical documentation.

**Verdict:**

1. Pass, if the data flow and transmission is identifiable from the technical documentation

1. Pass, if the data flow and transmission are identifiable from the technical documentation

2. and testing the implementation of interfaces matches the documentation

3. and the interfaces transferring confidential data are protected with encryption.

3. and the interfaces deploy the protocols operating the cryptographic means protecting the data in accoradance to Annex K.

4. Fail otherwise.

**Supporting Evidence:**

1. Listing of tested interfaces and the protocol replies that show that encryption is used.

2. Listing of interfaces showing authentication is used.

1. Listing of tested interfaces and the protocol replies that show that cryptography as of **CON_CRYPTO-1** is used.

2. Listing of the interfaces, their deployed protocols with the invoked cryptographic means.

### 6.4.2 SBD_TECH-2