CR for WinMagic SecureDoc Ver 2 - Common Criteria

More documents

Recommendations

Info

Canadian CCS Certification Report EAL 1 Evaluation of SecureDoc Version 2.0 TABLE OF CONTENTS Disclaimer.................................................................................................................................i Foreword .................................................................................................................................ii TABLE OF CONTENTS.......................................................................................................iii Executive summary.................................................................................................................1 1 Identification of Target of Evaluation ............................................................................3 2 Security Target................................................................................................................3 3 Security Policy.................................................................................................................3 4 Assumptions and Clarification of Scope.........................................................................4 4.1 USAGE ASSUMPTIONS..................................................................................................... 4 4.2 ENVIRONMENTAL ASSUMPTIONS .................................................................................... 4 4.3 CLARIFICATION OF SCOPE .............................................................................................. 4 5 Architectural Information...............................................................................................5 6 Documentation ................................................................................................................5 7 ITS product testing .........................................................................................................5 8 Evaluated Configuration.................................................................................................6 9 Results of the Evaluation ................................................................................................6 10 Comments, Observations and Recommendations..........................................................7 10.1 COMMENTS AND OBSERVATIONS................................................................................. 7 10.2 RECOMMENDATIONS .................................................................................................. 7 11 Glossary ...........................................................................................................................8 12 References and bibliography...........................................................................................9 ______________________________________________________________________________ 1999-LGS-01 Version 1.02 April 18, 2000 - Page iii of iii -
Canadian CCS Certification Report EAL 1 Evaluation of SecureDoc Version 2.0 EXECUTIVE SUMMARY SecureDoc Disk Encryption, version 2.0 for Windows 95/98 and Windows NT, from WinMagic Inc., is the Target of Evaluation (TOE) for this EAL 1 evaluation. The SecureDoc 2.0 Disk Encryption product controls access to disk partitions or entire disks by encryption (DES, Triple DES, or CAST5) using keys assigned to established user accounts. Once SecureDoc has been installed and keys and user accounts have been created, a user need only log on to the platform and request access to a file. SecureDoc works at the BIOS level to identify and authenticate the user via a password mechanism. Based upon the identity of the user, SecureDoc will determine if the user has been assigned the key to decrypt the disk or partition on which the file resides. If the user has been assigned the key, SecureDoc will use the key to transparently decrypt the disk or partition and make the original text of the file available to the user. The threats that are countered by SecureDoc include: unauthorized access to information or resources (via encryption); corruption of the encryption process due to loss of power or an operating system fault; and denial of access resulting from users forgetting their passwords and thus not having access to their encryption keys. SecureDoc's use of the DES, Triple-DES and CAST5 algorithms and associated key lengths was validated under the Cryptographic Module Validation Program (CMVP). The Common Criteria evaluation verified that no plaintext remained in areas of disk media encrypted using SecureDoc. The cryptography, however, was not validated to FIPS 140- 1, meaning that the ability of cryptography to withstand a concerted attack effort is unknown and cannot be inferred from the algorithm validation effort. The Common Criteria Evaluation Facility (CCEF) conducting the evaluation was Information Technology Security Laboratory, DOMUS Security, a division of LGS Group, Inc. The evaluation was completed on July 23, 1999. Cryptographic validation was performed under the CMVP by the same facility and was completed on April 6, 2000. The evaluation of SecureDoc Disk Encryption has determined that the TOE can be trusted to a level of assurance of EAL 1, to conform to the requirements of the Security Target (ST) [5]. The TOE is CC Part 2 conformant (functional requirements from CC Part 2 only) and CC Part 3 conformant (assurance requirements from CC Part 3 only). The evaluation was carried out in accordance with the rules of the Canadian Common Criteria Evaluation and Certification Scheme (the Canadian CCS). The Canadian CCS has established a Certification Body that is managed by the Communications Security Establishment (CSE). The evaluation was performed using the Common Criteria (CC) [1] and applied using the Common Methodology for Information Technology Security Evaluation (CEM) [3,4]. ________________________________________________________________________ 1999-LGS-01 Version 1.02 April 18, 2000 - Page 1 of 10 -
Page 1 and 2: Certification Report EAL 1 Evaluati
Page 3: Canadian CCS Certification Report E
Page 7 and 8: Canadian CCS Certification Report E
Page 13: Canadian CCS Certification Report E

CR for WinMagic SecureDoc Ver 2 - Common Criteria

Create successful ePaper yourself

Delete template?

Save as template?