FIDO Authenticator Security Requirements

Table 1: Versions represented by this document
	L1	L2	L3	L4	L5
Security Requirements version (RV)	RV 1.1.0	RV 1.1.0	-	RV 1.0.0	RV 1.0.0
Vendor Questionnaire version (QV)	QV 1.1.0	QV 1.1.0	-	QV 1.0.0	QV 1.0.0
Test Procedures version (PV)	PV 1.1.0	PV 1.1.0	-	PV 1.0.0	PV 1.0.0

Example Requirement
No.	Requirement	Security Measures
[Requirement Number]	[Specification]; [Testing Style]; [Level]
Requirement text. Note Note text. Relation to Partner Program [Level] [Partner Program]: Relation to Partner Program text. Calibration Calibration text. [Level] Vendor Questionnaire Vendor Questionnaire text. [Level] Test Procedure {Test Assurance Mode} Test Procedure text.	[Security Measures]

Table 1: Examples of underlying platforms and physical attacks
Example Cases	Rating-Result in Points	Rating-Result according CC V3	FIDO Level
Case 1: Basic CPU connected to RAM via simple PCB	8	No Rating	FIDO LEVEL 1-3
Case 2: Basic CPU connected to RAM via multilayer PCB with potting	11	No Rating	FIDO LEVEL 1-3
Case 3: CPU and RAM on the same die with absolutely no counter measures, internal integrity checks	24	Enhanced-Basic = up to AVA_VAN.3	FIDO LEVEL 4
Case 4: TrustZone or SGX or hypervisor with RAM encryption & integrity check connected to RAM via simple PCB	23	Enhanced-Basic = up to AVA_VAN.3	FIDO LEVEL 4
Case 5: Basic CPU connected to RAM via simple PCB self-destruct enclosure (not sure this is possible, but is fun to think about…)	21	Enhanced-Basic = up to AVA_VAN.3	FIDO LEVEL 4
Case 6: CPU with RAM encryption & integrity check connected to RAM via simple PCB	23	Enhanced-Basic = up to AVA_VAN.3	FIDO LEVEL 4
Case 7: Non-certified secure element	24	Enhanced-Basic = up to AVA_VAN.3	FIDO LEVEL 4
Case 8: CPU and RAM in a stacked die package	24	Enhanced-Basic = up to AVA_VAN.3	FIDO LEVEL 4
Case 9: CPU with PoP (package on package) connection to RAM	22	Enhanced-Basic = up to AVA_VAN.3	FIDO LEVEL 4
Case 10: Standard TPM (CC EAL4+ moderate certified)	27	Moderate = up to AVA_VAN.4	FIDO LEVEL 5
Case 11: CC certified secure element	33	High = up to AVA_VAN.5	FIDO LEVEL 5

2. Requirements

This section is normative.

2.1 Authenticator Definition and Derived Authenticator Requirements

The FIDO Authenticator (Authenticator, for short) is a set of hardware and software that implements the Authenticator portion of the FIDO UAF or FIDO U2F protocols. For the purpose of this requirements, the Authenticator is the set of hardware and software within the Authenticator boundary, as defined in the response to requirement 1.1.

We use the term Authenticator Application to refer to the entity that (a) is provided by the Authenticator vendor and (b) combines with the underlying operating environment (hardware and firmware) in a way that results in a FIDO Authenticator. This operating environment might be clearly separated from a high-level operating system (HLOS). In this case we call it "Restricted Operating Environment" (ROE). If such separation meets the requirements defined in [FIDORestrictedOperatingEnv], we call it Allowed Restricted Operating Environment (AROE).

Restricted Operating Environments Overview — Fig. 1 Restricted Operating Environments Architectural Overview

At L1, the Restricted Operating Environment as used in the figure above might be identical with the HLOS plus underlying HW and doesn't need to be an Allowed Restricted Operating Environment (AROE).

At L2 and above the Restricted Operating Environment MUST be an Allowed Restricted Operating Environment according to [FIDORestrictedOperatingEnv], e.g. a Trusted Execution Environment or a Secure Element.

In these requirements, the term “FIDO Relevant” means “used to fulfill or support FIDO Security Goals or FIDO Authenticator Security Requirements”.

Note

For the certification levels L1 and L2 the Authenticator doesn't need to restrict the private authentication key (Uauth.priv) to signing valid FIDO messages only (see requirement 2.1.15 being labeled L3+). As a consequence, the generation of the to-be-signed object could be performed outside of the Authenticator.

No.	Requirement	Security Measures
1.1	UAF + U2F; DaD; L1+
1.1	The vendor SHALL document an explicit Authenticator boundary. The Authenticator’s boundary SHALL include any hardware that performs or software that implements functionality used to fulfill FIDO Authenticator Security Requirements, or FIDO Relevant user verification, key generation, secure transaction confirmation display, or signature generation. If the Authenticator includes a software component, the boundary SHALL contain the processor that executes this software. If Transaction Confirmation Display is supported and the Metadata Statement related to this Authenticator claims Transaction Confirmation Display support with `tcDisplay` including the flag `TRANSACTION_CONFIRMATION_DISPLAY_PRIVILEGED_SOFTWARE` (0x0002), then the Transaction Confirmation Display MAY be implemented outside of an AROE - even when the Authenticator aims for a certification at L2+. However, in such case the vendor SHALL document where and how Transaction Confirmation Display is implemented. The Authenticator boundary as defined by FIDO is comprised of the hardware and software where the Authenticator runs. The Authenticator Application by definition, is always inside the authenticator boundary. The vendor MUST describe the operational environment for the Authenticator Application, including any specific hardware or operating system requirements to completely define this boundary. The Authenticator always comprises hardware and software and the vendor SHALL describe the boundary. An Authenticator typically belongs to one of the 4 categories: Authenticator Application running on some HLOS without an effective protection of the Authenticator Security Parameters against most other applications running in the same environment. Authenticator Application running on some HLOS with an effective protection of the Authenticator Security Parameters against most other applications running in the same environment - without breaking the HLOS. as #2, but having the Secret Authenticator Security Parameters protected by an AROE. entire Authenticator is implemented in an AROE (i.e. typically qualifying for L2+). For Authenticators falling under #1-3 above, the Authenticator is qualified for L1 Authenticator Certification only, and SHOULD refer to the L1 portions of this Requirements document. For Authenticators meeting #4, the Authenticator is qualified for L1 or above. It is up to the vendor to review the requirements in this document to determine the Level of Authenticator Certification they wish to complete. Note The documentation provided by the vendor SHOULD cover software attack protection and, if required, hardware attack protection. Relation to Partner Program L4 Common Criteria: A Security Target document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_INT and ASE_SPD (see [CC3V3-1R5]). L5 Common Criteria: A Security Target document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_INT and ASE_SPD (see [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. At L1, the Authenticator vendor SHALL declare and describe to which of the above mentioned categories the Authenticator Application belongs. At L1, the vendor SHALL also describe what portions of functionality the Authenticator uses from any underlying operating environment that belongs to the Authenticator but that is not included in the Authenticator Application. L2 Vendor Questionnaire Provide the tester with documentation that specifies how the requirement above is met. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL verify that the documentation meets the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement.	(SM-1, SM-9, SM-26)
1.2	UAF + U2F; DaD; L1+
1.2	The vendor SHALL document all FIDO Relevant security and cryptographic functions implemented within the Authenticator, both those on the “Allowed Cryptography List” [FIDOAllowedCrypto] and those not on this list. Note Some algorithms may only be allowed for certain Security Certification Levels. For example, not all cryptographic algorithms that are acceptable for L1 may be acceptable for L3. Relation to Partner Program L4 Common Criteria: A Security Target and a Development document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by Class FCS and ADV (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target and a Development document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by Class FCS and ADV (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. At L1, the vendor SHALL mark the FIDO Relevant security and cryptographic functions implemented in the Authenticator but implemented outside the Authenticator Application (i.e. in the underlying OS or HW). L2 Vendor Questionnaire Provide the tester with documentation that specifies how the requirement above is met. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL verify that the documentation meets the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement.	(SM-1, SM-9, SM-16, SM-26)
1.3	UAF + U2F; DaD; L1+
1.3	The vendor SHALL document where Authenticator User Private Keys (Uauth.priv) are stored, the structure of all KeyIDs and Key Handles used by the Authenticator, and explain how these private keys are related to the KeyIDs and Key Handles used by the Authenticator. Relation to Partner Program L4 Common Criteria: Development documentation MUST be provided This requirement is addressed by Class ADV (see [CC3V3-1R5]). L5 Common Criteria: Development documentation MUST be provided This requirement is addressed by Class ADV (see [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. At L1, the private keys, KeyIDs etc. that are generated outside the Authenticator Application SHALL be documented, but their internal structure does not need to be explained in detail. L2 Vendor Questionnaire Provide the tester with documentation that specifies how the requirement above is met. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL verify that the documentation meets the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement.	(SM-1, SM-6, SM-26)
1.4	UAF; DaD; L1+
1.4	The vendor SHALL document an Authenticator as a first-factor Authenticator or a second-factor Authenticator. [UAFAuthnrCommands], [Section 6.3.4] and [FIDOGlossary] entries "Authenticator, 1stF / First Factor" and "Authenticator, 2ndF / Second Factor". Relation to Partner Program L4 Common Criteria: a Security Target MUST be provided (see [CC1V3-1R5]). This requirements is addressed by ASE_INT (see [CC3V3-1R5]). L5 Common Criteria: a Security Target MUST be provided (see [CC1V3-1R5]). This requirements is addressed by ASE_INT (see [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. At L1, this requirement MUST be demonstrated to the Test Proctor during Interoperability Testing. Documentation is not required. L2 Vendor Questionnaire Provide the tester with documentation that specifies how the requirement above is met. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Mapping to Partner Program Requirements Source Code L1 Test Procedure {A0} The Security Secretariat SHALL verify the requirement during Interoperability Testing. L2 Test Procedure {A2} The tester SHALL verify that the documentation meets the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement.	(SM-26)
1.5	UAF; TVFR; L1+
1.5	If the Authenticator is a second-factor Authenticator, then the Authenticator SHALL not store user names inside a Raw Key Handle [UAFAuthnrCommands], [Section 5.1]. A cryptographically wrapped Raw Key Handle is called Key Handle. Relation to Partner Program L4 Common Criteria: A Security Target and a Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPR_ANO.2 and Class ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target and a Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPR_ANO.2 and Class ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Is this requirement applicable to the Authenticator? If No, then describe why. If Yes, Provide the Security Secretariat with a description of how the requirement above is met. L2 Vendor Questionnaire Is this requirement applicable to the Authenticator? If No, then describe why. If Yes, Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-23)
1.6	UAF; TVFR; L1+
1.6	Supporting Transaction Confirmation is OPTIONAL for Authenticators. If the Authenticator supports Transaction Confirmation Display, then it SHALL hash the Transaction Content using an Allowed Hashing Cryptographic Function. [UAFAuthnrCommands], [Section 6.3.4] Relation to Partner Program L4 Common Criteria: A Security Target, a Development and a Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, a Development and a Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-16)
1.7	UAF; TVFR; L1+
1.7	If the Authenticator uses the KHAccessToken method of binding keys to apps, then when responding to a “Register”, “Sign”, or “Deregister” command which includes the AppID, the Authenticator SHALL use an Allowed Hashing or Data Authentication Cryptographic Function to mix the ASM-provided KHAccessToken and AppID. If the Authenticator uses an alternative method of binding keys to apps, the vendor SHALL describe why this method provides equivalent security. Equivalent security means, (1) it prevents other apps (not originating from the same RP) from using the key and (2) in the case of bound Authenticators, it prevents other FIDO Clients of triggering the use of that key, and (3) it relies on the underlying HLOS platform to work as expected. Relation to Partner Program L4 Common Criteria: A Security Target, a Development and a Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_IFC.1, FDP_IFF.1, FCS_COP.1 Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, a Development and a Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_IFC.1, FDP_IFF.1, FCS_COP.1 Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-16)
1.8	UAF; TVFR; L1+
1.8	If the Authenticator uses the KHAccessToken method of binding keys to apps, then the Authenticator SHALL not process a “Deregister” command prior to validating the KHAccessToken. [UAFAuthnrCommands], [Section 6.4.4] Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_IFC.1, FDP_IFF.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_IFC.1, FDP_IFF.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-13)
1.9	UAF; TVFR; L1+
1.9	Supporting Transaction Confirmation is OPTIONAL for Authenticators. If the Authenticator supports Transaction Confirmation Display, then it SHALL display the transaction content supplied in the “Sign” command. [UAFAuthnrCommands], [Section 6.3.4] and [FIDOGlossary]. If the Metadata Statement related to this Authenticator claims Transaction Confirmation Display support with `tcDisplay` including the flag `TRANSACTION_CONFIRMATION_DISPLAY_PRIVILEGED_SOFTWARE` (0x0002), the Transaction Confirmation Display MAY be implemented outside of an AROE. If `tcDisplay` includes the flag `TRANSACTION_CONFIRMATION_DISPLAY_TEE`, or `TRANSACTION_CONFIRMATION_DISPLAY_HARDWARE`, then the Transaction Confirmation Display SHALL be implemented inside the AROE as part of the Authenticator. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_IFC.1, FDP.IFF.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_IFC.1, FDP.IFF.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. At L1, this requirement MUST be demonstrated to the Test Proctor during Interoperability Testing. Documentation is not required. L2 Vendor Questionnaire Is this requirement applicable to the Authenticator? If No, then describe why. If Yes, describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A0} The Security Secretariat SHALL verify the requirement during Interoperability Testing. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-10)
1.10	UAF + U2F; GaVR-3; L1+
1.10	Authenticators SHALL validate all data input to the Authenticator to defend against buffer overruns, stack overflows, integer under/overflow or other such invalid input-based attack vectors. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FAU_ARP.1, FDP_ITC.1, FDP_IFC.1, FDP_MSA.3, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FAU_ARP.1, FDP_ITC.1, FDP_IFC.1, FDP_MSA.3, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration L1: At L1, the Authenticator Application needs to verify only the inputs to the Authenticator Application before they are processed further by the underlying operating environment. L2: At L2, this requirement SHOULD be met for all inputs to the AROE itself and for apps running in the AROE that can affect the security of the authenticator. Note For example, if the AROE has a kernel and user mode apps, one of which implements the authenticator, then this requirement applies to the kernel and at least to the user mode app implementing the authenticator. L4: At L4, the protection SHALL be strong enough to be protected against enhanced-basic effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.3 or higher vulnerability analysis (see [CEMV3-1R5]). L5: At L5, the protection SHALL be strong enough to be protected against moderate or high effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.4 or higher vulnerability analysis (see [CEMV3-1R5]). L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Provide a rationale that the Authenticator validates all data input to the Authenticator. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements.	(SM-28)
1.11	UAF; DaD; L3+
1.11	If the Authenticator has a Transaction Confirmation Display, the AppID SHALL be displayed to the user when a “Register”, “Sign”, or “Deregister” command is received. Displaying the AppID SHALL meet the same security characteristics that apply to the Transaction Confirmation Display (see requirement 1.9). Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_IFC.1, FDP_IFF.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_IFC.1, FDP_IFF.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-10)

2.2 Key Management and Authenticator Security Parameters

2.2.1 Documentation

No.	Requirement	Security Measures
2.1.1	UAF + U2F; DaD; L1+
2.1.1	The vendor SHALL document all Authenticator Security Parameters (ASPs). Data parameters used by or stored within the Authenticator which are FIDO Relevant are called Authenticator Security Parameter. These SHALL, at minimum, include all FIDO user verification reference data, FIDO biometric data, Key Handle Access Tokens, User Verification Tokens, signature or registration operation counters, FIDO Relevant cryptographic keys, and FIDO relevant Allowed Random Number Generator state data. Biometric data is defined as raw captures off the sensor, stored templates, candidate match templates, and any intermediate forms of biometric data. Biometric data not used with FIDO is excluded. Relation to Partner Program L4 Common Criteria: A Security Target document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD (see[CC3V3-1R5]). L4 Common Criteria: A Security Target document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD (see[CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Provide the tester with documentation that specifies how the requirement above is met. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Mapping to Partner Program Requirements L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Mapping to Partner Program Requirements L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL verify that the documentation meets the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement.	(SM-1, SM-2, SM-6, SM-13, SM-15, SM-16, SM-26)
2.1.2	UAF + U2F; DaD; L1+
2.1.2	For each Authenticator Security Parameter, the vendor SHALL document the protections that are implemented for this parameter in order to support the FIDO Authenticator Security Goals or FIDO Authenticator Security Requirements, the location where this parameter is stored, how the parameter is protected in each storage location, how and when the parameter is input or output from the Authenticator, in what form the parameter is input or output, and when (if ever) the parameter is destroyed. Those Authenticator Security Parameters whose confidentiality MUST be protected in order to support the FIDO Security Goals or FIDO Authenticator Security Requirements SHALL be documented as “Secret Authenticator Security Parameters”; these SHALL, at minimum, include any of the following that are FIDO Relevant: secret and private keys, Allowed Random Number Generators’ state data, FIDO user verification reference data, and FIDO biometric data. Relation to Partner Program L4 Common Criteria: A Security Target and Development documents MUST be provided (see[CC1V3-1R5]). This requirement is addressed by FDP_IFF.1 and Class ADV (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target and Development documents MUST be provided (see[CC1V3-1R5]). This requirement is addressed by FDP_IFF.1 and Class ADV (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. At L1, the vendor SHALL describe the reliance of the Authenticator Application on the underlying operating environmentfor those Authenticator Security Parameters which are not fully maintained in the Authenticator Application. L2 Vendor Questionnaire Provide the tester with documentation that specifies how the requirement above is met. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Mapping to Partner Program Requirements L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Mapping to Partner Program Requirements L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL verify that the documentation meets the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement.	(SM-1, SM-2, SM-6, SM-13, SM-15, SM-16, SM-26)
2.1.3	UAF + U2F; DaD; L1+
2.1.3	For each Authenticator Security Parameter that is a cryptographic key that is generated, used, or stored within the Authenticator, the vendor SHALL document how this key is generated, whether the key is unique to a particular Authenticator or shared between multiple Authenticators, and the key’s claimed cryptographic strength. This claimed cryptographic strength SHALL not be larger than the maximal allowed claimed cryptographic strength for the underlying algorithm, as specified in the “Allowed Cryptography List” [FIDOAllowedCrypto]. If the key is used with an algorithm not listed on the “Allowed Cryptography List” [FIDOAllowedCrypto], then the claimed cryptographic strength for this key SHALL be zero. Note This requirement interacts with requirement 5.4 as the cryptographic strength of a key might get degraded - depending on potential side channel attacks - slightly each time the key is used. Relation to Partner Program L4 Common Criteria: A Security Target and Development documents MUST be provided (see[CC1V3-1R5]). This requirement is addressed by FCS_CKM and Class ADV (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target and Development documents MUST be provided (see[CC1V3-1R5]). This requirement is addressed by FCS_CKM and Class ADV (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. At L1, the vendor SHALL describe the reliance of the Authenticator Application on the underlying operating environmentfor those Authenticator Security Parameters (where stored, how protected, ...) which are not fully maintained in the Authenticator Application. If a cryptographic key is generated using an RNG with an unknown cryptographic strength, the cryptographic strength of that key is unknown. L2 Vendor Questionnaire Provide the tester with documentation that specifies how the requirement above is met. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Mapping to Partner Program Requirements L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Mapping to Partner Program Requirements L1 Test Procedure {A2} The tester SHALL verify that the documentation meets the requirement. L2 Test Procedure {A2} The tester SHALL verify that the documentation meets the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement.	(SM-1, SM-2, SM-6, SM-13, SM-16, SM-26)
2.1.4	UAF + U2F; DaD; L1+
2.1.4	The vendor SHALL document the Authenticator’s Overall Claimed Cryptographic Strength; the Overall Authenticator Claimed Cryptographic Strength SHALL be less than or equal to the claimed cryptographic strength of all the Authenticator Security Parameters that are cryptographic keys. Relation to Partner Program L4 Common Criteria: A Security Target and Operation User Guidance MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, FCS_COP.1 and AGD_OPE.1 (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target and Operation User Guidance MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, FCS_COP.1 and AGD_OPE.1 (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration L1: At L1, if the security strength for the RNG is not known, an unknown Overall Claimed Cryptographic Strength SHALL be assumed - which is allowed at L1. L2: At L2, the Authenticator’s Overall Claimed Cryptographic Strength SHALL at least be greater than or equal to 100 bits and it SHOULD be greater than or equal to 112 bits. L4: At L4, the Authenticator’s Overall Claimed Cryptographic Strength SHALL at least be greater than or equal to 100 bits and it SHOULD be greater than or equal to 112 bits. L5: At L5, the Authenticator’s Overall Claimed Cryptographic Strength SHALL at least be greater than or equal to 100 bits and it SHOULD be greater than or equal to 112 bits. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Provide the tester with documentation that specifies how the requirement above is met. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Operation User Guidance Mapping to Partner Program Requirements L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Operation User Guidance Mapping to Partner Program Requirements L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL verify that the documentation meets the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement.	(SM-1, SM-16, SM-26)
2.1.5	UAF + U2F; GaVR-3; L1+
2.1.5	All Authenticator Security Parameters within the Authenticator SHALL be protected against modification and substitution. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.3, FMT_MTD.1, FPT_TST.1, FDP_SDI.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.3, FMT_MTD.1, FPT_TST.1, FDP_SDI.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration L1: At L1, the Authenticator Application SHALL follow best security practices specific to the underlying operating environment for protecting the Authenticator Security Parameters against being modified or substituted by (1) the user and (2) other applications. Due to the nature of L1 it is acceptable for the Authenticator Application to rely on the underlying operating environment for protecting the Authenticator Security Parameters against other applications running in the same operating environment. L2: At L2, the requirement SHALL be fulfilled by mechanisms functioning entirely inside the AROE. L4: At L4, the protection SHALL be strong enough to be protected against enhanced-basic effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.3 or higher vulnerability analysis (see [CEMV3-1R5]). L5: At L5, the protection SHALL be strong enough to be protected against moderate or high effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.4 or higher vulnerability analysis (see [CEMV3-1R5]). L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Provide a rationale that all Authenticator Security Parameters within the Authenticator are protected against modification and substitution. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements.	(SM-1, SM-6, SM-13, SM-15, SM-16)
2.1.6	UAF + U2F; GaVR-3; L1+
2.1.6	All Secret Authenticator Security Parameters within the Authenticator SHALL be protected against unauthorized disclosure. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_ITT.1, FTP_ITT.1, FDP_IFC.1, FPT_PHP.3, FPR_UNO.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_ITT.1, FTP_ITT.1, FDP_IFC.1, FPT_PHP.3, FPR_UNO.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration L1: At L1, the Authenticator Application SHALL follow best security practices specific to the underlying operating environment for protecting the Authenticator Security Parameters against being modified or substituted by (1) the user and (2) other applications. At L1, the Authenticator Application (either by implementing appropriate protection mechanisms directly in the Authenticator Application or by leveraging the underlying operating environment for implementing those) SHALL protect the Secret Authenticator Security Parameters from being disclosed to other application running in the same operating environment. If the Authenticator Application cannot leverage mechanisms of the underlying operating environment for that, it SHALL at least store such parameters in encrypted form such that the decryption key is not available to the other applications running in the same operating environment. For example, by using a user provided secret to be entered or a key derived from some biometric at startup of the Authenticator Application using a best practice key derivation function (for converting a low entropy password into a cryptographic key, e.g. according to [SP800-132]). L2: At L2, the requirement SHALL be fulfilled by mechanisms functioning entirely inside the AROE. L4: At L4, the protection SHALL be strong enough to be protected against enhanced-basic effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.3 or higher vulnerability analysis (see [CEMV3-1R5]). L5: At L5, the protection SHALL be strong enough to be protected against moderate or high effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.4 or higher vulnerability analysis (see [CEMV3-1R5]). L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Provide a rationale that all Secret Authenticator Security Parameters within the Authenticator are protected against unauthorized disclosure. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements.	(SM-1, SM-13, SM-16)
2.1.7	UAF + U2F; TVFR; L1+
2.1.7	The Authenticator SHALL use an Allowed Data Authentication, Signature, or Key Protection Cryptographic Function to protect any externally-stored Authenticator Security Parameters against modification or the replay of stale (but possibly previously authenticated) data. Note In this requirement, externally-stored refers to parameters stored outside of the Authenticator boundary. For example, cloud storage services. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, FDP_ACC.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]) L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, FDP_ACC.1 Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]) Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-1, SM-6, SM-13, SM-15, SM-16, SM-25)
2.1.8	UAF + U2F; TVFR; L1+
2.1.8	The Authenticator SHALL protect any externally-stored Secret Authenticator Security Parameters using an Allowed Key Protection Cryptographic Function. [UAFAuthnrCommands], [Sections 5.1, 6.3.4] for RawKeyHandles. Relation to Partner Program L4 Common Criteria: A Security Taget, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, FDP_ACC.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Taget, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, FDP_ACC.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-1, SM-6, SM-13, SM-15, SM-16, SM-25)
2.1.9	UAF + U2F; TVFR; L1+
2.1.9	Any key used with an Allowed Key Protection Cryptographic Function to protect an externally-stored secret or private key which is an Authenticator Security Parameter SHALL have a claimed cryptographic strength greater than or equal to the claimed cryptographic strength of the key being wrapped. Relation to Partner Program L4 Common Criteria: Security Target, Development, Tests and Preparative Procedures Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, AGD_PRE.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: Security Target, Development, Tests and Preparative Procedures Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, AGD_PRE.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. At L1, externally-stored means stored outside the Authenticator boundary. In the case of L1 this Authenticator boundary includes the underlying operating environment. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Guidance Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Guidance Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-1, SM-6, SM-16, SM-25)
2.1.10	UAF + U2F; TVFR; L1+
2.1.10	Authenticators might offload the persistent storage of key material to components outside the Authenticator boundary if they cryptographically wrap it appropriately. Such structure containing cryptographically wrapped key material or information related to keys is called Key Handle containing a key. If the Authenticator uses such Key Handle approach, the Authenticator SHALL verify that any Key Handle containing a key provided to the Authenticator was generated by that Authenticator using an Allowed Data Authentication or Signature Cryptographic Function; if not, then no signature using this key SHALL be generated. [U2FRawMsgs], [Section 5.1] and [UAFAuthnrCommands], [Annex A Security Guidelines, entry Wrap.sym]. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, FMT_MTD.3, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, FMT_MTD.3, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration L1: At L1, this Authenticator boundary includes the underlying operating environment. L2: No calibration required. L4: No calibration required. L5: No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-1, SM-2, SM-16, SM-25, SM-27)
2.1.11	UAF; TVFR; L1+
2.1.11	If the Authenticator supports the KHAccessToken [UAFAuthnrCommands] method of binding keys to apps, then the Authenticator SHALL verify that the supplied KHAccessToken is associated with the referenced Key Handle prior to using that Key Handle to generate a signature; if not, then no signature associated with this Key Handle SHALL be generated. [UAFAuthnrCommands], [Section 6.3.4]. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, FDP_IFF, FDP_IFC, FIA_USB.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, FDP_IFF, FDP_IFC, FIA_USB.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-13)
2.1.12	UAF + U2F; TVFR; L1+
2.1.12	If the Authenticator supports the Key Handle approach, then the Authenticator SHALL verify that any Key Handle containing a key provided to the Authenticator is associated with the application parameter (U2F) or AppID (UAF) by using an Allowed Data Authentication or Signature Cryptographic Function; if not, then no signature using this key SHALL be generated. [U2FRawMsgs], [Section 5.1] and [UAFAuthnrCommands], [Section 6.3.4]. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, FDP_IFF, FDP_IFC, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, FDP_IFF, FDP_IFC, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-1, SM-2, SM-16, SM-25, SM-27)
2.1.13	UAF + U2F; GaVR-1; L1+
2.1.13	The Authenticator SHALL generate an independent User Authentication Key for each registration [UAFAuthnrCommands], [Section 6.2.4]. Note Any User Authentication Key (Uauth) SHALL only be used for authenticating one user account to one particular Relying Party. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, FCS_RNG, FCS_CKM, FDP_IFF, FDP_IFC, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, FCS_RNG, FCS_CKM, FDP_IFF, FDP_IFC, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Provide the tester with documentation that specifies how the requirement above is met. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-1, SM-2, SM-27)
2.1.14	UAF + U2F; TVFR; L2+
2.1.14	The Authenticator SHALL support Full Basic attestation (or an attestation method with equal or better security) or ECDAA attestation. The Attestation Private Key SHALL only be used to sign well-formed FIDO attestation objects. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, FDP_IFF, FDP_IFC, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, FDP_IFF, FDP_IFC, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-3)
2.1.15	UAF + U2F; TVFR; L3+
2.1.15	All Authenticator User Private Keys (Uauth.priv) SHALL only be usable for generating well-formed FIDO signature assertions. [U2FImplCons], [Section 2.7] and [UAFAuthnrCommands], [Section 5.2]. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_IFF, FDP_IFC, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_IFF, FDP_IFC, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-1)
2.1.16	UAF + U2F; TVFR; L1+
2.1.16	In the event that an Authenticator Security Parameter is destroyed, all plaintext instances of that parameter within the Authenticator SHALL be overwritten by data that is not dependent on the value of the parameter, e.g., overwriting the parameter with all 0s or some other fixed bit pattern. Authenticator Security Parameters that are cryptographically protected using an Allowed Confidentiality or Key Protection Cryptographic Function SHALL either be treated as plaintext (as above), or the key used to protect these Authenticator Security Parameters SHALL be destroyed. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_CKM.4, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_CKM.4, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-1, SM-24)
2.1.17	UAF + U2F; TVFR; L2+
2.1.17	Authenticators might support a function allowing the user resetting the Authenticator to the original (factory) state, i.e. deleting all user specific information. This process is called factory reset in this document. In the event of a factory reset, the Authenticator SHALL destroy all User-specific Secret Authenticator Security Parameters other than any Allowed Random Number Generator’s state. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_IFF.1, FMT_MSA.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_IFF.1, FMT_MSA.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-1, SM-18, SM-19)
2.1.18	UAF + U2F; TVFR; L1+
2.1.18	Any time the Authenticator generates an Authenticator Security Parameter which is a key for use with an algorithm specified in the “Allowed Cryptography List” [FIDOAllowedCrypto], the Authenticator SHALL generate keys as required by the standard referenced in the “Allowed Cryptography List” [FIDOAllowedCrypto] for that algorithm. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests MUST be provided (see [CC1V3-1R5]).. This requirement is addressed by FCS_CKM.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests MUST be provided (see [CC1V3-1R5]).. This requirement is addressed by FCS_CKM.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-1, SM-16, SM-21)
2.1.19	UAF + U2F; GaVR-1; L1+
2.1.19	Any wrapped FIDO biometric data and FIDO user verification reference data that is output from the Authenticator SHALL only be able to be unwrapped by the Authenticator that produced this data. Note Cryptographic Collision would be an exception. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_ACC.1, FDP_ACF.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_ACC.1, FDP_ACF.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-27)
2.1.20	UAF + U2F; GaVR-1; L1+
2.1.20	Any wrapped Authenticator User Private Key (UAuth.priv) that is output from the Authenticator SHALL only be able to be unwrapped by the Authenticator that produced this data. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_ACC.1, FDP_ACF.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_ACC.1, FDP_ACF.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-1, SM-6, SM-26)

2.2.2 Random Number Generation

No.

Requirement

Security Measures

2.2.1

UAF + U2F; TVFR; L1+

An Allowed Random Number Generator or Allowed Key Derivation Function SHALL be used for all key generation resulting in an Authenticator Security Parameter and for any random input for FIDO Relevant signature generation.

Relation to Partner Program

L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]).

This requirement is addressed by FCS_CKM.1, FCS_RNG.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]).

L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]).

This requirement is addressed by FCS_CKM.1, FCS_RNG.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]).

Calibration

L1: At L1, the Authenticator Application SHOULD use the OSes RNG if it is an Allowed RNG according to [FIDOAllowedCrypto] and add entropy as described in [FIDOAllowedCrypto], section "Random Number Generator". Otherwise the Authenticator Application SHALL implement its own Allowed RNG using the OSes RNG and potentially other sources for seeding entropy.

L2: At L2, the requirement SHALL be fulfilled by mechanisms functioning entirely inside the AROE.

L4: No calibration required.

L5: No calibration required.

L1 Vendor Questionnaire

Provide the Security Secretariat with a rationale of how the requirement above is met.

L2 Vendor Questionnaire

Describe how this requirement can be verified through documentation review. Please provide explicit design document references.

L4 Vendor Questionnaire

Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents:

High Level Design Documentation
Tests Documents
Mapping to Partner Program Requirements
Source Code

L5 Vendor Questionnaire

Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents:

Low Level Design Documentation
Tests Documents
Mapping to Partner Program Requirements
Source Code

L1 Test Procedure

{A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met.

L2 Test Procedure

{A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement.

L4 Test Procedure

The Tester SHALL verify the provided rationale and documentation meets the requirement.

The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.

L5 Test Procedure

The Tester SHALL verify the provided rationale and documentation meets the requirement.

The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.

(SM-16)

2.2.2

UAF + U2F; DaD; L1+

The security strength (see the relevant Allowed Deterministic Random Number Generator specification document cited in the “Allowed Cryptography List” [FIDOAllowedCrypto]) of any Authenticator’s Allowed Deterministic Random Number Generator SHALL be at least as large as the largest claimed cryptographic strength of any key generated or used.

Relation to Partner Program

L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]).

This requirement is addressed by FCS_RNG.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]).

L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]).

This requirement is addressed by FCS_RNG.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]).

Calibration

No calibration required.

L1 Vendor Questionnaire

Provide the Security Secretariat with a rationale of how the requirement above is met.

L2 Vendor Questionnaire

Provide the tester with documentation that specifies how the requirement above is met.

L4 Vendor Questionnaire

Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents:

High Level Design Documentation
Tests Documents
Mapping to Partner Program Requirements
Source Code

L5 Vendor Questionnaire

Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents:

Low Level Design Documentation
Tests Documents
Mapping to Partner Program Requirements
Source Code

L1 Test Procedure

{A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met.

L2 Test Procedure

{A2} The tester SHALL verify that the documentation meets the requirement.

L4 Test Procedure

The Tester SHALL verify the provided rationale and documentation meets the requirement.

The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.

L5 Test Procedure

The Tester SHALL verify the provided rationale and documentation meets the requirement.

The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.

(SM-1, SM-26)

2.2.3

UAF + U2F; TVFR; L1+

If the Authenticator adds Authenticator generated nonces and the nonces are produced randomly, then an Allowed Random Number Generator SHALL be used for nonce generation.

Authenticators with unrestricted keys (i.e. Metadata Statement isKeyRestricted: false) don't exclusively control the to-be-signed message and hence have no need to generate a nonce.

Relation to Partner Program

L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]).

This requirement is addressed by FCS_CKM.1, FCS_RNG.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]).

L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]).

This requirement is addressed by FCS_CKM.1, FCS_RNG.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]).

Calibration

No calibration required.

L1 Vendor Questionnaire

Provide the Security Secretariat with a rationale of how the requirement above is met.

L2 Vendor Questionnaire

Describe how this requirement can be verified through documentation review. Please provide explicit design document references.

L4 Vendor Questionnaire

Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents:

High Level Design Documentation
Tests Documents
Mapping to Partner Program Requirements
Source Code

L5 Vendor Questionnaire

Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents:

Low Level Design Documentation
Tests Documents
Mapping to Partner Program Requirements
Source Code

L1 Test Procedure

{A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met.

L2 Test Procedure

{A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement.

L4 Test Procedure

The Tester SHALL verify the provided rationale and documentation meets the requirement.

The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.

L5 Test Procedure

The Tester SHALL verify the provided rationale and documentation meets the requirement.

The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.

(SM-16)

2.2.4

UAF; TVFR; L3+

The Authenticator generated nonce SHALL be of sufficient length to guarantee that the probability of collision between produced Authenticator nonces for a particular User Authentication Key is less than 2^-32 after the maximum number of signatures allowed to be generated using that key.

If the Authenticator generated nonce value added is 16 bytes or longer, then this requirement can be considered to have been fulfilled without a separate argument.

Note

This interacts with requirement 5.4, describing the maximum possible number of signatures.

Bytes in Nonce	Log Base 2 of Allowed Operations
8	16
9	20
10	24
11	28
12	32

Relation to Partner Program

L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]).

This requirement is addressed by FCS_RNG.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]).

L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]).

This requirement is addressed by FCS_RNG.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]).

Calibration

No calibration required.

L4 Vendor Questionnaire

Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents:

High Level Design Documentation
Tests Documents
Mapping to Partner Program Requirements
Source Code

L5 Vendor Questionnaire

Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents:

Low Level Design Documentation
Tests Documents
Mapping to Partner Program Requirements
Source Code

L4 Test Procedure

The Tester SHALL verify the provided rationale and documentation meets the requirement.

The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.

L5 Test Procedure

The Tester SHALL verify the provided rationale and documentation meets the requirement.

The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.

(SM-8, SM-22)

2.2.5

UAF + U2F; L4+

If the Authenticator implements a Deterministic Random Number Generator, then an Allowed Physical True Random Number Generator SHALL always be used for seeding (seed, re-seed, seed update).

Note

Random Numbers means non-reproducible random numbers. In the instance that reproducible values are desired, using a Key Derivation Function (KDF) is dealt with elsewhere in this requirement set.

Relation to Partner Program

L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]).

This requirement is addressed by FCS_RNG.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]).

L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]).

This requirement is addressed by FCS_RNG.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]).

Calibration

No calibration required.

L4 Vendor Questionnaire

Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents:

High Level Design Documentation
Tests Documents
Mapping to Partner Program Requirements
Source Code

L5 Vendor Questionnaire

Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents:

Low Level Design Documentation
Tests Documents
Mapping to Partner Program Requirements
Source Code

L4 Test Procedure

The Tester SHALL verify the provided rationale and documentation meets the requirement.

The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.

L5 Test Procedure

The Tester SHALL verify the provided rationale and documentation meets the requirement.

The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.

(SM-16)

2.2.3 Signature Counters

Support of Signature counters is OPTIONAL.

Note

Authenticators with unrestricted keys (i.e. Metadata Statement field isKeyRestricted: false) cannot support these counters.

Authenticators with restricted keys (i.e. Metadata Statement field isKeyRestricted: true), SHALL set the signature counter value in the assertions to "0" to indicate that they are not supported.

An Authenticator using (1) restricted keys (i.e. Metadata Statement field isKeyRestricted: true) and (2) including values other than "0" for the counter "claims" to support the counter.

Note

If the Authenticator claims supporting signature counter(s), it MAY implement a single signature counter for all keys or one signature counter per key.

No.	Requirement	Security Measures
2.3.1	UAF + U2F; DaD; L1+
2.3.1	The vendor SHALL document whether the Authenticator supports Signature Counters and if they are supported, the vendor SHALL document whether one Signature Counter per authentication key is implemented or one (global) Signature Counter for all authentication keys (i.e. at least one counter covering multiple keys). Relation to Partner Program L4 Common Criteria: A Security Target document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_INT and ASE_SPD (see [CC3V3-1R5]). L5 Common Criteria: A Security Target document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_INT and ASE_SPD (see [CC3V3-1R5]). Calibration L1: At L1, Authenticators not running in an Allowed Restricted Operating Environment (AROE) [FIDORestrictedOperatingEnv], SHALL support signature counter(s). L2: No calibration required. L4: No calibration required. L5: No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Provide the tester with documentation that specifies how the requirement above is met. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL verify that the documentation meets the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement.	(SM-15)
2.3.2	UAF + U2F; GaVR-2; L1+
2.3.2	If the Authenticator claims supporting signature counter(s), then the Authenticator SHALL ensure that the signature counter value contained in FIDO signature assertions related to one specific authentication key either is (a) greater than "0" and always has been greater than "0" for any previously generated FIDO signature assertion related to the same authentication key and is (b) greater than the signature counter value contained in any previously generated FIDO signature assertion related to the same authentication key, or is set to "0" indicating that the signature counter is not supported any longer (e.g. in the case of a counter error). Note Once a signature counter value contained in a FIDO signature assertion for one specific authentication key has been set to "0" in MUST stay at such value for that specific authentication key (due to the requirement 1). [U2FImplCons], [Section 2.6] and [UAFAuthnrCommands] [Section 6.3.4]. If one signature counter per authentication key is implemented (recommended option), it SHALL be incremented by 1 per signature operation. If a global signature counter is implemented, it SHOULD be incremented by a positive random number per signature operation (see [UAFAuthnrCommands] [Section A Security Guidelines, entry SignCounter]). Relation to Partner Program L4 Common Criteria: A Security Target, Devlopment and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_IFF, FDP_IFC, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Devlopment and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_IFF, FDP_IFC, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Is this requirement applicable to the Authenticator? If No, then describe why. If Yes, provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Is this requirement applicable to the Authenticator? If No, then describe why. If Yes, provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-15)

2.3 Authenticator’s Test for User Presence and User Verification

No.	Requirement	Security Measures
3.1	UAF + U2F; TVFR; L1+
3.1	If the Authenticator is not marked as a Silent Authenticator, the Authenticator SHALL provide a mechanism to establish if the user authorizes a given action. (For a U2F, this is the “Test for User Presence”. Generically, the term “User Verification” may also refer to this “Test for User Presence”.) Note This requirement prevents remote attacks. The user has to confirm an action by pressing a button or providing some other (physical) gesture. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FIA_UID.2, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FIA_UID.2, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. At L1, this requirement MUST be demonstrated to the Test Proctor during Interoperability Testing. Documentation is not required. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A0} The Security Secretariat SHALL verify the requirement during Interoperability Testing. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-1, SM-5)
3.2	UAF + U2F; GaVR-2; L1+
3.2	The Authenticator SHALL not generate User Authentication Keys or produce signatures using such keys without first establishing that a user has requested this operation by verifying the user. [UAFAuthnrCommands], [section 6.2.4, 6.3.4] Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FIA_UAU.2, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FIA_UAU.2, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. l verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-1, SM-5)
3.3
3.3	3.3 was removed as a U2F L1+ Security Requirement as part of DV 1.1.0. See Requirement 3.4. Requirement text within DV 1.0.2 read as follows: Once the Authenticator’s test for user presence is successful (and user presence is detected), the user SHALL be deemed “present” for no more than 10 seconds, or until the next operation which requires user presence is performed, whichever comes first.
3.4	UAF + U2F; GaVR-1; L1+
3.4	This requirement relates to "UserVerificationCaching" as specified in [UAFRegistry] for more details. If not declared otherwise in the Metadata Statement: Once the Authenticator’s user verification / user presence check is successful, the user SHALL be deemed “verified” for no more than 10 seconds, or until the next operation which requires user verification, whichever comes first. Any provided User Verification Token SHALL not be valid after this time period. [UAFAuthnrCommands], [Appendix A Security Guidelines] If declared otherwise in the Metadata Statement: The authenticator SHALL truthfully declare support of this user verification caching in the related Metadata Statement [FIDOMetadataStatement] (entry `isFreshUserVerificationRequired=false`). Once the Authenticator’s user verification / user presence check is successful, the user SHALL be deemed “verified” for no longer than the "maximum user verification caching time" as provided by the caller. If the caller has not specified a "maximum user verification caching time", then the Authenticator SHALL NOT cache the user verification event. Any provided User Verification Token SHALL NOT be valid after this time period. Multiple authentication operations might be performed in this time. The authenticator MAY limit the number of acceptable authentications in this time. The authenticator SHALL add the "maximum user verification caching time" related to the specific Uauth key to the attestation statement. When performing a TransactionConfirmation operation, the authenticator SHALL freshly verify the user. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FIA_UAU.2, FIA_UAU.6, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests document MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FIA_UAU.2, FIA_UAU.6, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. At L1, this requirement MUST be demonstrated to the Test Proctor during Interoperability Testing. Documentation is not required. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A0} The Security Secretariat SHALL verify the requirement during Interoperability Testing. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-5)
3.5	UAF; GaVR-1; L1+
3.5	The Authenticator SHALL not reveal the stored username(s) prior to verifying the user. [UAFAuthnrCommands], [Section 6.3.4] Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_ITT.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_ITT.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. At L1, this requirement MUST be demonstrated to the Test Proctor during Interoperability Testing. Documentation is not required. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A0} The Security Secretariat SHALL verify the requirement during Interoperability Testing. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-5, SM-10)
3.6	UAF; GaVR-1; L1+
3.6	The Authenticator SHALL not output unencrypted AppIDs or KeyIDs that are associated with a Key Handle prior to verifying the user. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_ITC.1, FIA_UAU.2, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_ITC.1, FIA_UAU.2, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-5, SM-23)
3.7	UAF + U2F; L3+
3.7	If the Authenticator accepts input directly from the user or provides outputs directly to the user, then this communication SHALL be protected from data injection, disclosure, modification or substitution through use of a Trusted Path. This Trusted Path SHALL allow a user to communicate directly with the Authenticator, SHALL only be able to be activated by the Authenticator or the user, and cannot be imitated by untrusted software. Note Only silent authenticators [FIDOGlossary] do not have a need for accepting any input directly from the user or providing output directly to the user. A Trusted Path is the means by which a user and a security functionality of the Authenticator can communicate with the necessary confidence. In other words, a Trusted Path allows users to perform functions through an assured direct interaction with the security functionality of the Authenticator. For instance, plaintext ASPs may be entered into or output from the Authenticator in an encrypted form (e.g. display text digitally signed). This means that if the Authenticator has a Transaction Confirmation Display, it SHALL be protected from a display overlay attack. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FTP_TRP.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FTP_TRP.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration L4: At L4, the protection SHALL be strong enough to be protected against enhanced-basic effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.3 or higher vulnerability analysis (see [CEMV3-1R5]). L5: At L5, the protection SHALL be strong enough to be protected against moderate or high effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.4 or higher vulnerability analysis (see [CEMV3-1R5]). L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements.	(SM-5, SM-10, SM-29)
3.8	UAF + U2F; GaVR-3; L1+
3.8	The Authenticator SHALL protect against injection or replay of FIDO user verification data (e.g. user presence status, PIN, or biometric data). Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_RPL.1, FAU_ARP.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_RPL.1, FAU_ARP.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration L1: At L1, the Authenticator Application SHALL follow best security practices specific to the underlying operating environment for protecting against injection or replay of FIDO user verification data. This especially means that the Authenticator Application SHALL not provide any API for injecting FIDO user verification data. L2: At L2, the requirement SHALL be fulfilled by mechanisms functioning entirely inside the AROE. L4: At L4, the protection SHALL be strong enough to be protected against enhanced-basic effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.3 or higher vulnerability analysis (see [CEMV3-1R5]). L5: At L5, the protection SHALL be strong enough to be protected against moderate or high effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.4 or higher vulnerability analysis (see [CEMV3-1R5]). L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements.	(SM-5, SM-27)
3.9	UAF + U2F; GaVR-3; L1+
3.9	Authenticators implementing user verification methods other than user presence check [FIDOGlossary], SHALL rate-limit user verification attempts in order to prevent brute force attacks. [FIDOMetadataStatement], sections 3.1, 3.2, 3.3 and [UAFAuthnrCommands], Appendix A Security Guidelines, entry "Matcher". After the 5th (and subsequent) failed user verification attempts, the Authenticator SHALL enforce a delay of (at least) 30 seconds before accepting further user verification attempts. Counting failed attempts separately per user verification method is acceptable for no more than three different user verification methods (e.g. one counter for fingerprint, second counter for iris, third counter for PIN). The retry counter(s) SHALL be reset if and only if the user verification succeeds with some of the supported alternative user verification methods. This means that an Authenticator supporting only a single user verification method could only reset the retry counter if that user verification method succeeds. Note The rate limiting requirement applies to all user verification methods. Implementing a more strict rate limiting method is allowed. We recommend an exponential increase of such delay, (e.g. 1 minute after the 6th+ false attempt, 2 minutes after the 7th+ false attempt, 4 minutes after the 8th+, etc.), or disabling the biometric user verification after the 5th (and subsequent) failed attempt and falling back to an alternative biometric (different from the failed biometric) or knowledge-based user verification method (e.g. PIN/Passcode/Pattern) if such alternative method is already implemented. Disabling the first user verification method and falling back to an alternative user verification method MAY take place immediately after the 5th failed attempt. We are considering making this recommendation mandatory in upcoming versions of these security requirements document. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FAU_ARP.1, FAU_SAA.1, FAU_GEN.1, FPT_STM.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FAU_ARP.1, FAU_SAA.1, FAU_GEN.1, FPT_STM.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration L1: No calibration required. L2: At L2, the requirement SHALL be fulfilled by mechanisms functioning entirely inside the AROE. L4: At L4, the protection SHALL be strong enough to be protected against enhanced-basic effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.3 or higher vulnerability analysis (see [CEMV3-1R5]). Note This implies that an attack potential calculation should be undertaken to determine what the actual rate limit should be to meet the requirement at the level. It is likely to be more restrictive for the end user than the rate described in the requirement text. L5: At L5, the protection SHALL be strong enough to be protected against moderate or high effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.4 or higher vulnerability analysis (see [CEMV3-1R5]). Note This implies that an attack potential calculation should be undertaken to determine what the actual rate limit should be to meet the requirement at the level. It is likely to be more restrictive for the end user than the rate described in the requirement text. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. At L1, this requirement MUST be demonstrated to the Test Proctor during Interoperability Testing. Documentation is not required. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A0} The Security Secretariat SHALL verify the requirement during Interoperability Testing. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements.	(SM-1, SM-5, SM-27)
3.10	UAF + U2F; GaVR-3; L3+
3.10	If the authenticator supports biometric user verification (e.g. fingerprint, face recognition, etc.), then the authenticator biometric component SHALL be certified according to [FIDOBiometricsRequirements]. The Level Calibration, correspondence to Partner Programs, Vendor Questionnaires, and Test Procedures for this requirement are all specified in [FIDOBiometricsRequirements]. Relation to Partner Program L4 Common Criteria: A Security Target, a Preparative Guidance document a Biometric Certification Report MUST be provided. (see [CC1V3-1R5]) This requirement is addressed by ASE_INT, ASE_SPD and AGD_PRE (see [CC3V3-1R5]). L5 Common Criteria: A Security Target, a Preparative Guidance document and a Biometric Certification Report MUST be provided. (see [CC1V3-1R5]) This requirement is addressed by ASE_INT, ASE_SPD and AGD_PRE (see [CC3V3-1R5]). Calibration L4: Refer to [CAFVM], [FSDPP] and [BEAT]. L5: Refer to [CAFVM], [FSDPP] and [BEAT]. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Guidance Documents Mapping to Partner Program Requirements FIDO Biometric Certification Report L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Guidance Documents Mapping to Partner Program Requirements FIDO Biometric Certification Report L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements.	(SM-1, SM-5, SM-27)

2.4 Privacy

No.	Requirement	Security Measures
4.1	UAF + U2F; GaVR-1; L1+
4.1	An Authenticator SHALL not have any Correlation Handle that is visible across multiple Relying Parties. If the authenticator uses a shared attestation key (e.g. Full Basic Attestation), the minimum number of Authenticators sharing this key MUST be at least 100000. Note The goal of this requirement is that, for privacy reasons, the Authenticator MUST NOT leak information about the user across multiple Relying Parties by sharing a Correlation Handle. This requirement specifically applies to KeyIDs, KeyHandles etc. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPR_ANO.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPR_ANO.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-23)
4.2	UAF + U2F; GaVR-1; L1+
4.2	An Authenticator SHALL not provide information to one Relying Party that can be used to uniquely identify that Authenticator instance to a different Relying Party. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FMT_MTD.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FMT_MTD.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-23)
4.3	UAF; GaVR-1; L1+
4.3	An external party with two (AAID, KeyID) tuples produced using the Authenticator SHALL not be able to establish that they were produced using the same Authenticator. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPR_UNL.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPR_UNL.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-23)
4.4	UAF; GaVR-1; L1+
4.4	The Authenticator’s response to a “Deregister” command SHALL not reveal whether the provided KeyID was registered. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_IFC, FDP_IFF, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FDP_IFC, FDP_IFF, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. At L1, this requirement MUST be demonstrated to the Test Proctor during Interoperability Testing. Documentation is not required. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A0} The Security Secretariat SHALL verify the requirement during Interoperability Testing. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-23)

2.5 Physical Security, Side Channel Attack Resistance and Fault Injection Resistance

No.	Requirement	Security Measures
5.1	UAF + U2F; DaD; L2+
5.1	The vendor SHALL document the physical security and side channel attack protections used by the Authenticator. Relation to Partner Program L4 Common Criteria: Development documentation MUST be provided. This requirement is addressed by Class ADV (see [CC3V3-1R5]). L5 Common Criteria: Development documentation MUST be provided. This requirement is addressed by Class ADV (see [CC3V3-1R5]). Calibration No calibration required. L2 Vendor Questionnaire Provide the tester with documentation that specifies how the requirement above is met. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Mapping to Partner Program Requirements Source Code L2 Test Procedure {A2} The tester SHALL verify that the documentation meets the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement.	(SM-1, SM-20, SM-24, SM-26, SM-29)
5.2	N/A
5.2	5.2 was removed as a UAF + U2F L4+ Security Requirement as part of DV 1.1.0. See Requirement 5.3. Requirement text within DV 1.0.2 read as follows: The Authenticator SHALL provide evidence of physical tampering that allows the attacker to violate FIDO Security Goals or FIDO Authenticator Security Requirements. Note At L4, such evidence SHALL be visible to the user (and not necessarily to the RP). As a consequence, a level of cooperation from the user is expected to protect the RP.	N/A
5.3	UAF + U2F; L3+
5.3	The Authenticator shall resist physical tampering that allows the attacker to violate FIDO Security Goals or FIDO Authenticator Security Requirements. Note The keys can be zeroed in response to an attack so the Authenticator is no longer usable. This is the way the relying party can be informed of the attack. If the Authenticator includes a biometric user verification feature, the calibration as defined below must address that feature to the same level of vulnerability assessment. Note Resistance to physical tampering obviates the need for physical tamper evidence. Relation to Partner Program L4 Common Criteria: A Security Target and Development documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.3 and Class ADV (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target and Development documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.3 and Class ADV (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration L4: At L4, the protection SHALL be strong enough to be protected against enhanced-basic effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.3 or higher vulnerability analysis (see [CEMV3-1R5]). L5: At L5, the protection SHALL be strong enough to be protected against moderate or high effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.4 or higher vulnerability analysis (see [CEMV3-1R5]). L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Mapping to Partner Program Requirements Source Code L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements.	(SM-20, SM-24, SM-26)
5.4	UAF + U2F; TVFR; L2+
5.4	Each secret or private key that is an Authenticator Security Parameter SHALL have a key use limit establishing the maximal number of times that particular key can be used within a particular Authenticator. Note Key refresh needs to be initiated by the RP for ideal user experience. In the current protocol, there is no provision for the Authenticator to initiate key refresh. This requirement interacts with requirements 2.3, 2.25, 5.5, 5.6. This is a requirement that provides flexibility in satisfying other requirements. The idea is that key use limit SHOULD be established such that the other requirements cited here are fulfilled (providing the vendor the ability to restrict the number of possible key uses rather than using longer nonces or better side-channel countermeasures), and additionally provides the option for the vendor to defend the Authenticator against attacks that are not yet known. Both cryptographic and side-channel attacks on the Authenticator can be enabled by having access to information associated with distinct cryptographic operations under the same key, so the vendor MAY elect to impose a conservative key use limit in order to defend against such attacks, especially for attacks that are not yet known and thus cannot easily be otherwise defended against. Any limit that allows the Authenticator to fulfill the other related requirements is sufficient for compliance to the requirement set. Some examples follow: If a vendor doesn't require any particular key use limit to satisfy additional requirements, and they are not concerned with the possibility of unknown cryptographic attack, then this limit can be simply the maximal possible uses of this key, given the hardware constraints of the Authenticator (i.e., the rate of key use that the hardware can support multiplied by the total expected lifetime of the Authenticator). In this instance, the Authenticator need not retain the number of uses of each key. For example, if a device can perform one key use per second and has an expected lifetime of 5 years, then a reported key use limit of roughly (5365+1)86400 (less than 2^28) would be sufficient. If the vendor does wish to limit the number of possible key uses, but does not wish to store state associated with this data, then the vendor can limit the average key use rate such that the total number of uses of a given key throughout the expected lifetime of the Authenticator is sufficiently low. For an example, if an Authenticator vendor wishes to limit the total number of key uses of a user key to 10,000,000 (less than 2^24) and the Authenticator has a expected lifetime of 5 years, then the Authenticator MUST enforce a long term average key use rate of roughly 1 key use every 158 seconds. If a vendor does not wish to arbitrarily limit the rate at which keys can be used, but does wish to restrict the number of possible key uses, then they can store a count of the number of times a particular key has been used, and then disable use of the key at the limit. Some keys (e.g., the User Private Key, or the Attestation key) cannot be painlessly replaced within the FIDO protocol (this requires re-enrolling, or replacing the Authenticator, respectively), so a suitably large limit SHOULD be chosen to prevent usability problems. FIDO Authenticators typically require a user verification before using a private key. Such manual interaction requires a minimum amount of time. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FMT_MTD.2, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FMT_MTD.2, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-24, SM-26)
5.5	UAF + U2F; L4+
5.5	The Authenticator SHALL not leak Secret Authenticator Security Parameter data (e.g. due to power, near field, or radio leakage) at a rate that would allow an attacker to weaken the key below the claimed cryptographic strength of the key, even after an attacker has observed all allowed key uses. Note This interacts with requirement 5.4. Relation to Partner Program L4 Common Criteria: A Security Target, Development documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.2, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.3, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration L4: At L4, the protection SHALL be strong enough to be protected against enhanced-basic effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.3 or higher vulnerability analysis (see [CEMV3-1R5]). L5: At L5, the protection SHALL be strong enough to be protected against moderate or high effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.4 or higher vulnerability analysis (see [CEMV3-1R5]). L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Mapping to Partner Program Requirements Source Code L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements.	(SM-20)
5.6	UAF + U2F; GaVR-3; L3+
5.6	The variations in the amount of time required to perform a cryptographic algorithm SHALL not allow remote attackers to reduce the security of Authenticator Security Parameters which are secret or private keys below their claimed cryptographic strength. Note This requirement is mandatory for L3+ but it remains relevant for L2 as a developer guideline. It refers to all Secret Authenticator Security Parameters, and not just the authentication and attestation keys. This means it includes keys used to wrap these parameters, including keys that might be used to wrap biometric reference data. The defense against remote timing attacks requires securing the cryptographic operation implementations and/or hardening the Allowed Restricted Operating Environment (AROE, see [FIDORestrictedOperatingEnv]) cache implementation: Securing cryptographic operations: Concerning symmetric-key algorithms, It is recommended to use Hardware-based cryptographic algorithms replacing the software-based implementation and thus eliminating the side-channel information leaked from the execution of cryptographic operations. Otherwise, the software implementation MUST consider randomization of the control flow so that there is no fixed relation between the execution path and the cache set. Or, MUST enable using the same amount of cache independently from the keys used. AROE cache enhanced implementations: It is recommended to secure the cache memory implementation in order to restrict the impact from the Rich OS on the AROE cache memory. This could be done by programming memory allocations so that the Rich OS memory will never be mapped to the AROE cache memory. The implementation can also consider flushing sensitive secure cache to memory to eliminate the information on the table access. For more details on how to implement adequate counter-measures please review the following research papers: for ECC, remote timing attack (protocol timing) refer to https://eprint.iacr.org/2011/232 for ECC, local cache timing attack (local cache timing) refer to http://eprint.iacr.org/2014/161 for RSA cache timing refer to https://eprint.iacr.org/2015/898 for AES cache timing refer to https://eprint.iacr.org/2014/435 Note This interacts with requirement 5.4. Relation to Partner Program L4 Common Criteria: A Security Target and Devlopment documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.2 and Class ADV (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target and Devlopment documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.3 and Class ADV (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration L4: At L4, the protection SHALL be strong enough to be protected against enhanced-basic effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.3 or higher vulnerability analysis (see [CEMV3-1R5]). L5: At L5, the protection SHALL be strong enough to be protected against moderate or high effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.4 or higher vulnerability analysis (see [CEMV3-1R5]). L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Mapping to Partner Program Requirements Source Code L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements.	(SM-20, SM-29)
5.7	UAF + U2F; L4+
5.7	The length of time required to perform a cryptographic algorithm using a Secret Authenticator Security Parameter SHALL not be dependent on the value of that secret or private key. Note No time variations are allowed in this requirement, in comparison to requirement 5.6, in which some time variations are allowed. Relation to Partner Program L4 Common Criteria: A Security Target and Development documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.2, Class ADV (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target and Development documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.3, Class ADV (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Mapping to Partner Program Requirements Source Code L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-20, SM-29)
5.8	UAF + U2F; GaVR-2; L2+
5.8	All physical and logical debug interfaces to the Authenticator which enable violation of FIDO Authenticator Security Goals or FIDO Authenticator Security Requirements SHALL be disabled and unusable in fielded Authenticators. Relation to Partner Program L4 Common Criteria: A Security Target, Development, Tests and Preparative Procedure Guidance documentation MUST be provided. This requirement is addressed by FPT_TST.1, AGD_PRE, Class ADV and ATE. L5 Common Criteria: A Security Target, Development, Tests and Preparative Procedure Guidance documentation MUST be provided. This requirement is addressed by FPT_TST.1, AGD_PRE, Class ADV and ATE. Calibration No calibration required. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Guidance Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Guidance Documents Mapping to Partner Program Requirements Source Code L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-23, SM-26)
5.9	UAF + U2F; L4+
5.9	The Authenticator SHALL be resistant to induced fault attacks. Note This requirement is mandatory for L4+ but it is still relevant for L2+ as a developer guideline. The developer SHALL take into account SW-based fault induction side channel attack and implement relevant countermeasures such as enabling memory error detection. Relation to Partner Program L4 Common Criteria: A Security Target and Development documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.2 and Class ADV (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target and Development documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.3 and Class ADV (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration L4: At L4, the protection SHALL be strong enough to be protected against enhanced-basic effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.3 or higher vulnerability analysis (see [CEMV3-1R5]). L5: At L5, the protection SHALL be strong enough to be protected against moderate or high effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.4 or higher vulnerability analysis (see [CEMV3-1R5]). L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Mapping to Partner Program Requirements Source Code L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements.	(SM-28, SM-21)

2.6 Attestation

For compliance with L1, Surrogate Basic Attestation [UAFProtocol] in the case of UAF / self-signed attestation certificates in the case of U2F is acceptable.

No.	Requirement	Security Measures
6.1	UAF + U2F; TVFR; L2+
6.1	The vendor SHALL use attestation certificates / ECDAA Issuer public keys [FIDOEcdaaAlgorithm] dedicated to a single Authenticator model. Relation to Partner Program L4 Common Criteria: A Security Target, Development, Tests and Preparative Guidance documentation MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, AGD_PRE, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development, Tests and Preparative Guidance documentation MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, AGD_PRE, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Guidance Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Guidance Documents Mapping to Partner Program Requirements Source Code L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-3)
6.2	UAF + U2F; TVFR; L1+
6.2	Each Authenticator being declared as the same model (i.e. having the same AAID, AAGUID or having at least one common attestationCertificateKeyIdentifier in the MetadataStatement), SHALL fulfill at least the security characteristics stated for that Authenticator model. Relation to Partner Program L4 Common Criteria: A Security Target, Preparative and User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, AGD_PRE and AGD_OPE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Preparative and User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, AGD_PRE and AGD_OPE (see [CC2V3-1R5] and [CC3V3-1R5]) Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. At L1, this requirement MUST be demonstrated to the Test Proctor during Interoperability Testing. Documentation is not required. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A0} The Security Secretariat SHALL verify the requirement during Interoperability Testing. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement.	(SM-3)
6.3	UAF + U2F; GaVR-1; L1+
6.3	The Authenticator SHALL accurately describe itself in its provided metadata, or alternately describe an Authenticator of lesser security. The vendor SHALL provide all mandatory Metadata Statement fields see [FIDOMetadataRequirements]. Relation to Partner Program L4 Common Criteria: A Security Target, Preparative and User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, AGD_PRE and AGD_OPE (see [CC2V3-1R5] and [CC3V3-1R5]) L5 Common Criteria: A Security Target, Preparative and User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, AGD_PRE and AGD_OPE (see [CC2V3-1R5] and [CC3V3-1R5]) Calibration No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. At L1, this requirement MUST be demonstrated to the Test Proctor during Interoperability Testing. Documentation is not required. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A0} The Security Secretariat SHALL verify the requirement during Interoperability Testing. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement.	(SM-3)
6.4	UAF + U2F; DaD; L2+
6.4	The vendor SHALL document whether the attestation root certificate is shared across multiple Authenticator models. In such case, the attestation certificate MUST contain an extension indicating the Authenticator model (e.g. AAID or AAGUID). Relation to Partner Program L4 Common Criteria: A Security Target, Preparative and User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, AGD_PRE and AGD_OPE (see [CC2V3-1R5] and [CC3V3-1R5]) L5 Common Criteria: A Security Target, Preparative and User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, AGD_PRE and AGD_OPE (see [CC2V3-1R5] and [CC3V3-1R5]) Calibration No calibration required. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L2 Test Procedure {A2} The tester SHALL verify that the documentation meets the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement.	(SM-3)
6.5	UAF + FIDO2; DaD; L2+
6.5	The vendor SHALL document whether the attestation certificate includes the Authenticator model (e.g. AAID or AAGUID). L2 Vendor Questionnaire Provide the tester with documentation that specifies how the requirement above is met. Relation to Partner Program L4 Common Criteria: A Security Target, Preparative and User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, AGD_PRE and AGD_OPE (see [CC2V3-1R5] and [CC3V3-1R5]) L5 Common Criteria: A Security Target, Preparative and User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, AGD_PRE and AGD_OPE (see [CC2V3-1R5] and [CC3V3-1R5]) L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L2 Test Procedure {A2} The tester SHALL verify that the documentation meets the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement.	(SM-3)

2.7 Operating Environment

Note

At L1 we allow the Authenticator Application to run in any operating environment. For the levels L2-L5, the Authenticator Application needs to run in an Allowed Restricted Operating Environment [FIDORestrictedOperatingEnv].

No.	Requirement	Security Measures
7.1	UAF + U2F; GaVR-1; L2+
7.1	The Authenticator Application SHALL run in an Allowed Restricted Operating Environment (AROE)[FIDORestrictedOperatingEnv]. Relation to Partner Program L4 Common Criteria: A Security Target, a Preparative and Operational User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, AGD_OPE and AGD_PRE (see [CC3V3-1R5]) L5 Common Criteria: A Security Target, a Preparative and Operational User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, AGD_OPE and AGD_PRE (see [CC3V3-1R5]) Calibration No calibration required. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement.	(SM-1)
7.2	UAF + U2F; GaVR-3; L2+
7.2	The operating environment SHALL be configured so that all operating environment security functions used by the Authenticator are active and available for use to support the FIDO Authenticator Security Goals or FIDO Authenticator Security Requirements. Relation to Partner Program L4 Common Criteria: A Security Target, a Preparative and Operational User Guidance and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, AGD_OPE, AGD_PRE and Class ATE (see [CC3V3-1R5]). L5 Common Criteria: A Security Target, a Preparative and Operational User Guidance and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, AGD_OPE, AGD_PRE and Class ATE (see [CC3V3-1R5]). Calibration No calibration required. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Guidance Documents Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Guidance Documents Tests Documents Mapping to Partner Program Requirements Source Code L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-1)
7.3	UAF + U2F; GaVR-3; L2+
7.3	The operating environment SHALL prevent non-Authenticator processes from reading, writing and modifying running or stored Authenticator Application and its associated memory. Relation to Partner Program L4 Common Criteria: A Security Target, Development, a Preparative and Operational User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, AGD_OPE, AGD_PRE and Class ADV (see [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development, a Preparative and Operational User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, AGD_OPE, AGD_PRE and Class ADV (see [CC3V3-1R5]). Calibration L2: At L2, the requirement SHALL be fulfilled by mechanisms functioning entirely inside the AROE. L4: At L4, the protection SHALL be strong enough to be protected against enhanced-basic effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.3 or higher vulnerability analysis (see [CEMV3-1R5]). L5: At L5, the protection SHALL be strong enough to be protected against moderate or high effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.4 or higher vulnerability analysis (see [CEMV3-1R5]). L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements.	(SM-1)
7.4	UAF + U2F; GaVR-3; L2+
7.4	The operating environment SHALL not be able to be modified in a way that undermines the security of the Authenticator. Relation to Partner Program L4 Common Criteria: A Security Target, Development, a Preparative and Operational User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, AGD_OPE, AGD_PRE and Class ADV (see [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development, a Preparative and Operational User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, AGD_OPE, AGD_PRE and Class ADV (see [CC3V3-1R5]). Calibration L2: At L2, the requirement SHALL be fulfilled by mechanisms functioning entirely inside the AROE. L4: At L4, the protection SHALL be strong enough to be protected against enhanced-basic effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.3 or higher vulnerability analysis (see [CEMV3-1R5]). L5: At L5, the protection SHALL be strong enough to be protected against moderate or high effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.4 or higher vulnerability analysis (see [CEMV3-1R5]). L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements.	(SM-1)
7.5	UAF + U2F; GaVR-1; L2+
7.5	The security configuration of the operating environment SHALL be fully under control of the Authenticator vendor or its delegates such that the security configuration present at commercial shipment cannot be changed except for in-the-field updates that are also fully under control of the Authenticator device vendor or its delegates. Note In some environments (e.g. PC), the user (i.e. anyone other than the Authenticator vendor or its delegates) might change the security configuration of the Authenticator. However, it is the responsibility of the Authenticator to detect potential changes in the Authenticator security configuration and provide the appropriate RP response through a FIDO assertion if the changed configuration still meets the expected security characteristics according to the Metadata Statement (or stop working and either protect the security parameters at the prior level or securely destroy them if it doesn't). The Authenticator certification MUST include all security configuration items available to the user. Relation to Partner Program L4 Common Criteria: A Security Target, a Preparative and Operational User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, AGD_OPE and AGD_PRE (see [CC3V3-1R5]). L5 Common Criteria: A Security Target, a Preparative and Operational User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, AGD_OPE and AGD_PRE (see [CC3V3-1R5]). Calibration No calibration required. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement.	(SM-1, SM-28)
7.6	UAF + U2F; GaVR-1; L2+
7.6	The security characteristics of the Authenticator SHALL not be modifiable by anyone other than the Authenticator device vendor or its delegates. Relation to Partner Program L4 Common Criteria: A Security Target, a Preparative and Operational User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, AGD_OPE and AGD_PRE (see [CC3V3-1R5]). L5 Common Criteria: A Security Target, a Preparative and Operational User Guidance documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, AGD_OPE and AGD_PRE (see [CC3V3-1R5]). Calibration No calibration required. L2 Vendor Questionnaire Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Guidance Documents Mapping to Partner Program Requirements Source Code L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement.	(SM-1, SM-28)

2.8 Self-Tests and Firmware Updates

No.	Requirement	Security Measures
8.1	UAF + U2F; GaVR-2; L2+
8.1	An Authenticator SHALL either (a) be resistant to induced fault analysis (requirement 5.9) or (b) after powering up, an Authenticator SHALL run a known answer self-test for any deterministic cryptographic function prior to using that function, or (c) the Authenticator SHALL verify the validity of its software and Firmware using an Allowed Signature Algorithm. If the most recent known answer self-test did not pass, the corresponding cryptographic function SHALL not be used. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.2 and/or FPT_TST.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.3 and/or FPT_TST.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L2 Vendor Questionnaire Is this requirement applicable to the Authenticator? If No, then describe why. Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this are consistent with the vendor's provided rationale. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-21, SM-24)
8.2	UAF + U2F; TVFR; L1+
8.2	If the Authenticator mediates the update of its software, then the Authenticator SHALL use an Allowed Data Authentication or Signature Cryptographic Function to verify that the software being loaded has not been tampered with. If the loaded software does not pass, then the Authenticator SHALL not update the software. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, FPT_TST.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FCS_COP.1, FPT_TST.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L1 Vendor Questionnaire Is this requirement applicable to the Authenticator? If No, then describe why. If Yes, provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Is this requirement applicable to the Authenticator? If No, then describe why. If Yes, provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-16, SM-26, SM-24)
8.3	UAF + U2F; TVFR; L2+
8.3	An Authenticator SHALL either (a) be resistant to induced fault analysis (requirement 5.7) or (b) the Authenticator SHALL verify that any generated Authenticator Security Parameters which are public / private keys have the correct mathematical relationships prior to outputting the public key or using the private key for signature generation, or (c) the Authenticator SHALL verify the validity of its software and Firmware using an Allowed Signature Algorithm. Relation to Partner Program L4 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.2 and/or FPT_TST.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.3 and/or FPT_TST.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration No calibration required. L2 Vendor Questionnaire Is this requirement applicable to the Authenticator? If No, then describe why. Provide a rationale for how the requirement above is met. Provide a documentation review procedure to confirm that the Authenticator’s design is consistent with the provided rationale. Please provide explicit design document references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results.	(SM-21)
8.4	UAF + U2F; L3+
8.4	An Authenticator SHALL either be resistant to induced fault analysis (requirement 5.7) or the Authenticator SHALL verify that any produced signature is valid prior to outputting the signature. Relation to Partner Program L4 Common Criteria:A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.2 and/or FPT_TST.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). L5 Common Criteria: A Security Target, Development and Tests documents MUST be provided (see [CC1V3-1R5]). This requirement is addressed by FPT_PHP.3 and/or FPT_TST.1, Class ADV and ATE (see [CC2V3-1R5] and [CC3V3-1R5]). Calibration L4: At L4, the protection SHALL be strong enough to be protected against enhanced-basic effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.3 or higher vulnerability analysis (see [CEMV3-1R5]). L5: At L5, the protection SHALL be strong enough to be protected against moderate or high effort software and hardware attacks [AttackPotentialSmartcards]. The vulnerability assessment methodology is defined by AVA_VAN.4 or higher vulnerability analysis (see [CEMV3-1R5]). L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: High Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Low Level Design Documentation Tests Documents Mapping to Partner Program Requirements Source Code L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. The Tester SHALL conduct vulnerability analysis and penetration testing to meet the calibration requirements.	(SM-21)

2.9 Manufacturing and Development

Note

At L1, the creation of the final Authenticator Application is considered the Authenticator manufacturing.

No.	Requirement	Security Measures
9.1	UAF + U2F; TVFR; L1+
9.1	If Authenticator Security Parameters which are cryptographic keys are generated during manufacturing, then these keys SHALL be generated as required by the standard referenced in the “Allowed Cryptography List” [FIDOAllowedCrypto] for that algorithm using an Allowed Random Number Generator. Relation to Partner Program L4 Common Criteria: A Security Target, Preparative Guidance and Development Security Life-cycle support documentation MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, AGD_PRE and ALC_DVS.1 (see [CC3V3-1R5]) L5 Common Criteria: A Security Target, Preparative Guidance and Development Security Life-cycle support documentation MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, AGD_PRE and ALC_DVS.2 (see [CC3V3-1R5]) Calibration L1: At L1, the creation of the final Authenticator Application is considered the Authenticator manufacturing. L2: No calibration required. L4: No calibration required. L5: No calibration required. L1 Vendor Questionnaire Is this requirement applicable to the Authenticator? If No, then describe why. If Yes, provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Is this requirement applicable to the Authenticator? If No, then describe why. If Yes, describe how this requirement can be verified through documentation review. Please provide explicit design documentation references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Guidance Documents Life-Cycle Support Documents Mapping to Partner Program Requirements L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Guidance Documents Life-Cycle Support Documents Mapping to Partner Program Requirements L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL conduct a development site audit to validate the security measures defined in the life-cycle support documents	(SM-28)
9.2	UAF + U2F; TVFR; L2+
9.2	Access to the private component of any Authenticator's attestation key SHALL be restricted to security-qualified authorized factory personnel. Relation to Partner Program L4 Common Criteria: A Security Target, Preparative Guidance and Development Security Life-cycle support documentation MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, AGD_PRE and ALC_DVS.1 (see [CC1V3-1R5]). L5 Common Criteria: A Security Target, Preparative Guidance and Development Security Life-cycle support documentation MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ASE_SPD, AGD_PRE and ALC_DVS.2 (see [CC3V3-1R5]). Calibration L2: At L2, security protection controls (physical, procedural, personnel, and other security measures) on the production environment MUST be adequate to provide the confidentiality and integrity of the design and implementation of the Authenticator that is necessary to ensure that secure operation of the Authenticator is not compromised. Note For example, production machines SHALL NOT be directly connected to unprotected networks (e.g. the Internet). Only security-qualified authorized factory personnel SHALL have access to all means of processing the handling of attestation key life cycle (generation, provisioning, and verification). Security measures for protecting the life cycle management of the key generation and key provisioning SHALL be provided in the Vendor Questionnaire. Note Security-qualified authorized factory personnel should be limited to a small number of people. It should not be every worker in the factory and it should not be all the development engineers. L4: At L4, ALC_DVS.1 MUST be applied. L5: At L5, ALC_DVS.2 MUST be applied. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design documentation references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Life-Cycle Support Documents Mapping to Partner Program Requirements L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Life-Cycle Support Documents Mapping to Partner Program Requirements L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL conduct a development site audit to validate the security measures defined in the life-cycle support documents	(SM-28)
9.3	UAF + U2F; TVFR; L2+
9.3	The equipment used to generate, store and provision Authenticator Security Parameters SHALL be secured to prevent modification of all provisioned Authenticator Security Parameters and secured to prevent capture of provisioned Secret Authenticator Security Parameters. The equipment used by the authenticator vendor to generate, store and provision other keys whose compromise would affect the security of the Authenticator and the ability to identify it based on certificates in the FIDO Metadata Service [FIDOMetadataService] SHALL also be secured. Relation to Partner Program L4 Common Criteria: A Development Security Life-cycle support documentation MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ALC_DVS.1 (see [CC3V3-1R5]). L5 Common Criteria: A Development Security Life-cycle support documentation MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ALC_DVS.2 (see [CC3V3-1R5]). Calibration L2: At L2, all Authenticator Security Parameters must be protected by some form of integrity protection and all Secret Authenticate Security Parameters must never be exposed in the clear. Use of Allowed Cryptographic Algorithms [FIDOAllowedCrypto] is preferred, but not required for these protections (if the lack of security is compensated by physical controls). Note For example, attestation secret keys provisioned over a serial cable between the Authenticator device and the equipment used to store and inject keys should be encrypted and integrity protected to prevent factory personnel from snooping the cable or carrying out a man-in-the-middle attack on the cable. L4: At L4, ALC_DVS.1 (see [CC3V3-1R5]) MUST be applied. L5: At L5, ALC_DVS.2 (see [CC3V3-1R5]) MUST be applied. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design documentation references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Life-Cycle Support Documents Mapping to Partner Program Requirements L5 Vendor Questionnaire TProvide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Life-Cycle Support Documents Mapping to Partner Program Requirements L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. The Tester SHALL conduct a development site audit to validate the security measures defined in the life-cycle support documents	(SM-28)
9.4	UAF + U2F; TVFR; L1+
9.4	A revision control system SHALL be implemented for the Authenticator and all of its components, and for all associated Authenticator documentation. This revision control system SHALL, at minimum, track changes to all software or hardware specifications, implementation files, and all tool chains used in the production of the final Authenticator. Relation to Partner Program L4 Common Criteria: A Configuration Management Scope and Capabilities documentation MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ALC_CMC.4 and ALC_CMS.1 (see [CC3V3-1R5]). L5 Common Criteria: A Configuration Management Scope and Capabilities documentation MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ALC_CMC.4 and ALC_CMS.1 (see [CC3V3-1R5]). Calibration L1: At L1, the use of a revision control system SHALL only be proven for the Authenticator Application. L2: No calibration required. L4: No calibration required. L5: No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design documentation references. L4 Vendor Questionnaire TProvide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Life-Cycle Support Documents Mapping to Partner Program Requirements L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Life-Cycle Support Documents Mapping to Partner Program Requirements L1 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL conduct a development site audit to validate the security measures defined in the life-cycle support documents	(SM-28)
9.5	UAF + U2F; TVFR; L1+
9.5	Each version of each configuration item that comprises the Authenticator and associated documentation SHALL be assigned a unique identification. Note "Configuration item" stands for all the objects managed by the configuration management system during the product development. These may be either parts of the product (e.g. source code) or objects related to the development of the product like guidance documents, development tools, tests results, etc.) Relation to Partner Program L4 Common Criteria: A Configuration Management Scope and Capabilities documentation MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ALC_CMC.4 and ALC_CMS.1 (see [CC3V3-1R5]). L5 Common Criteria: A Configuration Management Scope and Capabilities documentation MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ALC_CMC.4 and ALC_CMS.1 (see [CC3V3-1R5]). Calibration L1: At L1, the configuration items comprising the Authenticator Application are relevant. L2: No calibration required. L4: No calibration required. L5: No calibration required. L1 Vendor Questionnaire Provide the Security Secretariat with a rationale of how the requirement above is met. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design documentation references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Life-Cycle Support Documents Mapping to Partner Program Requirements L5 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Life-Cycle Support Documents Mapping to Partner Program Requirements L1 Test Procedure {A1} The Security Secretariat SHALL review the provided rationale to verify the requirement is met. L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL conduct a development site audit to validate the security measures defined in the life-cycle support documents	(SM-28)
9.6	UAF + U2F; TVFR; L2+
9.6	There SHALL be management and control over all personnel that can enter the physical part of the factory where attestation key material is configured into the authenticators. Note This refers to all factory workers possibly including those that have little or nothing to do with the manufacturing line itself, such as cleaning and repair staff. The point of this requirement is to defend against counterfeit devices being run through the manufacturing line to receive real attestation keys. For example, loading dock staff working at 2 AM might conspire to manufacture counterfeit devices. Relation to Partner Program L4 Common Criteria: A Development Security Life-cycle support documentation MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ALC_DVS.1 (see [CC3V3-1R5]). L5 Common Criteria: A Development Security Life-cycle support documentation MUST be provided (see [CC1V3-1R5]). This requirement is addressed by ALC_DVS.2 (see [CC3V3-1R5]). Calibration L2: At L2, standard per-person badge access systems or standard brass keys and door locks are acceptable. Any personnel without a key or badge MUST be escorted by one with a key or badge. L4: At L4, ALC_DVS.1 (see [CC3V3-1R5]) must be applied. L5: At L5, ALC_DVS.2 (see [CC3V3-1R5]) must be applied. L2 Vendor Questionnaire Describe how this requirement can be verified through documentation review. Please provide explicit design documentation references. L4 Vendor Questionnaire Provide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Life-Cycle Support Documents Mapping to Partner Program Requirements L5 Vendor Questionnaire TProvide the tester with a rationale for how the implementation meets the requirements, including the following supporting documents: Life-Cycle Support Documents Mapping to Partner Program Requirements L2 Test Procedure {A2} The tester SHALL conduct the documentation review described by the vendor, and confirm that all the results of this review meet the requirement. L4 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. L5 Test Procedure The Tester SHALL verify the provided rationale and documentation meets the requirement. The Tester SHALL execute a sample of tests from the tests documentation provided to verify the developer test results. The Tester SHALL conduct a development site audit to validate the security measures defined in the life-cycle support documents	(SM-28)

FIDO Authenticator Security Requirements

FIDO Alliance Final Requirements Document 13 December 2017

Abstract

Status of This Document

Table of Contents

1. Notation

1.1 Version

1.2 Key Words

1.3 How to Read this Document

1.4 Security Levels

1.5 Partner Programs

1.6 Examples of Underlying Platforms

1.7 FIDO Specifications

1.8 Security Measures

1.9 Testing Style

1.9.1 Test Assurance Modes

1.9.2 Test Procedures - Key Words

2. Requirements

2.1 Authenticator Definition and Derived Authenticator Requirements

2.2 Key Management and Authenticator Security Parameters

2.2.1 Documentation

2.2.2 Random Number Generation

2.2.3 Signature Counters

2.3 Authenticator’s Test for User Presence and User Verification

2.4 Privacy

2.5 Physical Security, Side Channel Attack Resistance and Fault Injection Resistance

2.6 Attestation

2.7 Operating Environment

2.8 Self-Tests and Firmware Updates

2.9 Manufacturing and Development

A. References

A.1 Normative references

A.2 Informative references