@@ -1134,15 +1134,6 @@ The assessment criteria for each security requirements are described in a struct
- Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;
- Relevant vendor or design documentation describing the applied security measures;
- REFERENCE: ASS-REQ-6.4-08
- OBJECTIVE: XXX
- PREPARATION: XXX
- ACTIVITIES: XXX
- VERDICT: XXX
- EVIDENCE: XXX
## 6.2 No known exploitable vulnerabilities
- REFERENCE: ASS-REQ-6.4-08
@@ -1429,6 +1420,229 @@ The assessment criteria for each security requirements are described in a struct
## 6.11 Minimisation of attack surfaces
## 6.12 Exploitation mitigation mechanisms
### 6.12.1 Certificate issuance
- REFERENCE: ACC_PKI_EMM_001
- OBJECTIVE: Verify the certificates issued by the certificate generation service are public-key certificates or attribute certificates whose format complies with the X.509 standard ITU-T X.509 [\[3\]](#_ref_3).
- PREPARATION:
- Certificate request interface accessible.
- Required user profiles defined to generate the certificate.
- Certificate Policy parameters defined, i.e. product configuration realted to configurable certficate generation constraints (e.g. Certificate validaty periode, mandatory Certificate fields and values, etc.)
- ACTIVITIES:
- Verify that certficates are correctly generated when correct information is provided.
- Provide a set of necessary and correct elements defined by the Certificate Policy.
- Generate, i.e. activate the certificate generation fonction with the correct inputs
- Verify that a certificate is generated including the inputed data
- Verify that the signature is correct and covers all the necessary fields
- Verify that certficates are not generated if inputed data are missing or incorrect related to the Certificate Policy configuratio
- Provide a set of necessary and correct elements defined by the Certificate Policy.
- Generate, i.e. activate the certificate generation fonction with the correct inputs
- Verify that a certificate is generated including the inputed data
- Verify that the signature is correct and covers all the necessary fields
- VERDICT:SUCCESS if all the verifications pass; else FAIL.
- EVIDENCE:
- Certificate generation requests parameters
- Generated certficates or error messages generated by the product
- Signature verification input and output
- REFERENCE: ACC_PKI_EMM_002
- OBJECTIVE: Verify the format of public-key certificates issued by the certificate generation service complies with ITU-T X.509 [\[3\]](#_ref_3).
- PREPARATION: Document the circumstances in which the certificate generation service may issue a certificate. Ability to request a certificate issuance for the different identified circumstances.
- ACTIVITIES: For each way the product may issue a certificate:
a) issue a certificate;
b) verify points a,c,f of the NOTE of REQ-5.3-02;
c) attempt to issue a certificate with a null Name for the issuer field, then verify the certificate contains a critical issuerAltName extension;
d) attempt to issue a certificate with a null Name for the subject field, then verify the certificate contains a critical subjectAltName extension;
- VERDICT: SUCCESS if all the verifications pass; else FAIL.
- EVIDENCE:
a) The documentation of certificate issuance circumstances;
b) the way issuances were requested, and the responses and issued certificates from the product.
- REFERENCE: ACC_PKI_EMM_003
- OBJECTIVE: Verify the product implements and follows a certificate profile for issued certificates.
- PREPARATION:
- Document the circumstances in which the certificate generation service may issue a certificate.
- Ability to request a certificate issuance for the different identified circumstances.
- Document the certificate profile implemented by the product.
- ACTIVITIES: For each way the product may issue a certificate:
a) issue a certificate;
b) verify the certificate to match the constraints of the certificate profile;
c) for all constraints of the certificate profile, attempt to issue a certificate disrespecting the constraint, and verify the issuance to fail.
- VERDICT: SUCCESS if all the verifications pass; else FAIL.
- EVIDENCE:
a) The documentation of certificate issuance circumstances;
b) the documentation of the certificate profile;
c) the way issuances were requested, and the responses and issued certificates from the product.
- REFERENCE: ACC_PKI_EMM_004
- OBJECTIVE: Verify the product enables the Administrator to specify the set of acceptable values for the following fields and extensions:
a) the authority key identifier;
b) the algorithm identifier for the subject’s public/private key pair;
c) the identifier of the certificate issuer;
d) the length of time for which the certificate is valid.
- PREPARATION:
- Administrator access, to enable configuration.
- Ability to request a certificate issuance for the different identified circumstances.
- ACTIVITIES:
- Configure a set of acceptable values for each of the identified fields and extensions, which does not contain all possible values.
- For each way the product may issue a certificate:
- For each of the identified fields and extensions:
a) attempt to issue a certificate, where all fields and extensions have acceptable values except the one being verified;
b) verify the issuance to fail or to be impossible.
- VERDICT: SUCCESS if no certificate is issued; else FAIL.
- EVIDENCE:
a) The documentation of public-key certificate issuance circumstances;
b) The applied configuration of the identified fields and extensions;
c) the way issuances were requested, and the responses and issued certificates from the product.
- REFERENCE: ACC_PKI_EMM_005
- OBJECTIVE: Verify that the product requires the Administrator to specify the set of acceptable values for the fields and extensions identified in REQ-5.3-04.
- PREPARATION: Document the circumstances in which the certificate generation service may issue a public-key certificate.
- Administrator access to not-installed or reinitialised product, or specifically its certificate generation service and related configuration.
- ACTIVITIES: For each way the product may issue a public-key certificate:
- verify that no certificate may be issued until acceptables values for the identified fields and extensions are set.
- VERDICT: SUCCESS if all the verifications pass; else FAIL.
- EVIDENCE:
a) The documentation of public-key certificate issuance circumstances;
b) the way issuances were requested, and the responses from the product.
- REFERENCE: ACC_PKI_EMM_006
- OBJECTIVE: Verify the product marks the keyUsage, basicConstraints and certificatePolicies as critical in issued certificates.
- PREPARATION: Document the circumstances in which the certificate generation service may issue a public-key certificate. Ability to request a certificate issuance for the different identified circumstances.
- ACTIVITIES: For each way the product may issue a public-key certificate:
a) issue a certificate;
b) verify the keyUsage, basicConstraints and certificatePolicies extensions to be marked critical;
c) if applicable, attempt to issue a certificate with either extension marked not critical, and verify the issuance to fail.
- VERDICT: SUCCESS if all the verifications pass; else FAIL.
- EVIDENCE:
a) The documentation of public-key certificate issuance circumstances;
b) the way issuances were requested, and the responses and issued certificates from the product.
- REFERENCE: ACC_PKI_EMM_007
- OBJECTIVE: Verify the product disallows the keyUsage extension to offer both digital signature and encryption or key agreement capabilities.
- PREPARATION: Document the circumstances in which the certificate generation service may issue a public-key certificate. Ability to request a certificate issuance for the different identified circumstances.
- ACTIVITIES: For each way the product may issue a public-key certificate:
a) issue a certificate;
b) verify the keyUsage extension does not contain values from simultaneously:
b.1) digitalSignature, contentCommitment, keyCertSign, cRLSign; and
c) if applicable, attempt to issue such a certificate and verify the issuance to fail.
- VERDICT: SUCCESS if all the verifications pass; else FAIL.
- EVIDENCE:
a) The documentation of public-key certificate issuance circumstances;
b) the way issuances were requested, and the responses and issued certificates from the product.
- REFERENCE: ACC_PKI_EMM_008
- OBJECTIVE: Verify the product ensures a prospective certificate subject possesses the private key that corresponds to the public key in the certificate request before issuing a certificate, unless the private key never left the certificate issuance service.
- PREPARATION: Document the circumstances in which the certificate generation service may issue a public-key certificate. Ability to request a certificate issuance.
- ACTIVITIES: For each way the product may issue a public-key certificate:
a) attempt to issue a certificate with digital signature capabilities for a given public-key;
b) if the product does not generate the key pair itself, or it has left the issuance service:
b.1) provide an invalid signature when required;
b.2) verify the issuance to fail;
c) attempt to issue a certificate with encryption or key agreement capabilities for a given public-key;
d) if the product does not generate the key pair itself, or it has left the issuance service:
d.1) provide an invalid decryption when required;
d.2) verify the issuance to fail.
Among all the issuance attempts involving signing or decryption, verify the random value to sign or decrypt is always distinct, and their concatenation of high entropy.
- VERDICT: SUCCESS if all the verifications pass; else FAIL.
- EVIDENCE:
a) The documentation of public-key certificate issuance circumstances;
b) the way issuances were requested, and the responses from the product;
c) the key pairs issued by the product if any, and how and when they were obtained;
