@@ -1368,7 +1368,7 @@ As the product is delivered without known exploitable vulnerabilities, those leg
3. Interoperability-based: the cryptographic mechanism is listed in clause K.4.2 as an interoperability-based cryptographic mechanism for specific product function(s) and external specification(s) or external requirement(s).
***CON_CRYPTO-2** To prevent rollback or downgrade [i.10] the product shall:
* enforce a monotonic policy/configuration version (or equivalent mechanism);
* prevent re-enabling deprecated algorithms or disabled security checks via rollback without an explicit logged administrative override.
* preven the re-enabling of deprecated algorithms or the disabling of security checks via a rollback operation without having an explicit logged administrative override in place.
> NOTE 1: The reference to the product’s default configuration is intended to define a clear and assessable baseline, corresponding to the configuration in which the product is placed on the market. The product can provide several configurations that fulfil the requirement.
