Offline RI Listing

Final Interpretation for RI # 38 - Use of 'as a minimum' in C&P elements

Date:	10/31/2003
Subject:	Use of 'as a minimum' in C&P elements
CC Part #1 Reference:	CC Part 1, Annex C.2.7
CC Part #2 Reference:	CC Part 2, Annex E.1 (FCS_CKM)
CC Part #3 Reference:	CC Part 3, Section 4.1 (APE_DES) CC Part 3, Section 8.2 (ACM_CAP) CC Part 3, Section 8.3 (ACM_SCP) CC Part 3 Section 16.1 (AMA_AMP) CC Part 3 Section 16.2 (AMA_CAT)
CEM Reference:	CEM Part 2 ACM_SCP

Issue:

The CC occasionally uses the phrase 'as a minimum' in content and presentation of evidence elements. In using this phrase the CC explicitly allows the developer to provide additional information. Where this phrase is not used, does the CC imply that the developer is not allowed to provide additional information?

Interpretation

The CC allows the developer to provide additional information to that explicitly required. Therefore, the phrase 'as a minimum' is unnecessary.

Specific Changes

The following change is made to the CC v2.1 Part 1:

The phrase 'as a minimum' is deleted from paragraph 217

The following change is made to the CC v2.1 Part 2:

The first sentence of paragraph 696 is deleted. The paragraph becomes:

The inclusion of other stages is dependent on the key management strategy being implemented, as the TOE need not be involved in all of the key life-cycle (e.g. the TOE may only generate and distribute cryptographic keys).

The following changes are made to the CC v2.1 Part 3:

The phrase 'as a minimum' is deleted from the following elements in CC Part 3:

APE_DES.1.1C

ASE_DES.1.1C

ACM_CAP.5.16C

ACM_SCP.*.1C

AMA_AMP.1.11C

In CC Part 3, section 15.3.2, paragraph 549:

"As a minimum, TOE components are required to be categorised as either TSP-enforcing or non-TSP-enforcing."

is changed to:

"TOE component categorisation must indicate whether the component is TSP-enforcing or non-TSP-enforcing."
In CC Part 3, AMA_CAT.1.1C:

"as a minimum, TOE components must be categorised as one of TSP-enforcing or non-TSP-enforcing."

is changed to:

"TOE component categorisation must indicate whether the component is TSP-enforcing or non-TSP-enforcing."

The following changes are made to the CEM v1.0:

The phrase "as a minimum" is deleted from paragraphs 952 and 1326.
Each first line of paragraphs 955 and 1329 is changed to:

"The list should include at least the following:"

Rationale

This interpretation removes the instances of 'as a minimum' as that is the phrase referenced. Other uses of similar phrases, such as 'at a minimum' and 'minimum requirements' are under consideration and will be handled under a separate intepretation in the future.