Common Criteria





Our Common Criteria Lab

Aspect Labs is an accredited Common Criteria testing laboratory. We accept commercial products for Common Criteria testing at Evaluation Assurance Levels EAL1 - EAL7. We also provide documentation and engineering services to produce Common Criteria evidence at EAL 1-7. Our CC Toolkit is a set of pre-written Common Criteria documents covering standard protocols and opensource components that you can incorporate in your product.

Our Common Criteria testing style differs significantly from other labs. We focus on the security of the product, and try to minimize bureaucracy and paperwork. We usually spend a lot of time working face-to-face with the engineers on the customer site, something that other labs rarely do. Many of our customers are located in San Francisco Bay area, within a short drive from our Santa Clara office.

Training

The laboratory offers the following Common Criteria Training services:

  • One-hour "Introduction to Common Criteria" presentations performed on your company site. These presentations are available in the San Francisco Bay area, and include a non-technical introduction to the Common Criteria requirements and the process flow of a CC evaluation.
  • Three-day "Common Criteria Design and Documentation" course, which is a technical course covering the design of a CC-compliant product and preparation of documentation for a CC evaluation. This course can be given either on your company San Francisco Bay Area site, or at our Santa Clara office. Arrangements can be made for our staff members to give the course outside the Bay Area.

CC Toolkit

Your product most probably impements standard protocols, such as TCP/IP or SSH, as well as uses opensource components such as Linux, OpenSSH or Apache web server. You do not have to write the Common Criteria documents for these parts of your product from the scratch. We have these documents already written, and you can license them from our Common Criteria Toolkit which was already used by many other vendors.

The Aspect CC Toolkit covers ADV (Development) and ATE (Testing) documentation at EALs 1 to 4.

The following protocols are covered by the CC Toolkit:

  • TCP/IP/UDP/ICMP
  • SSL/TLS
  • SSH
  • HTTP/HTTPS
  • IPSec/IKE
    • SNMP
  • EAP-TLS, EAP-TTLS, EAP-PEAP, EAP-GPSK
  • WPA2/802.11i
  • WiMAX
  • RADIUS
  • DIAMETER
  • Telnet
  • FTP
  • SFTP
  • Serial
  • USB

The following opensource and free products are currently covered by the CC Toolkit:

  • Linux, including kernel and system libraries
  • OpenSSL
  • OpenSSH
  • FreeSWAN
  • telnetd
  • ftpd
  • DropBear
  • Apache web server
  • Apache Tomcat
  • Java/J2SE/J2ME
  • snmpd
  • wpa_supplicant
  • FreeRADIUS
  • Open DIAMETER
  • MadWifi

To license the CC Toolkit, call us at 1-888-347-7140 or send an e-mail to info@aspectlabs.com