International Technical Communities and Collaborative Protection Profiles

Background

As international technical communities (iTCs) are formed to produce and maintain collaborative protection profiles (cPPs) in line with the CCRA details of each iTC will be provided below

General

The CCDB has defined a generic process for establishing iTCs and creating cPPs and associated Supporting Documents through these iTCs. The iTC/cPP Process paper is available here.

The membership of an iTC brings together many skills and backgrounds needed for the creation of an effective cPP and its Supporting Documents. It is intended that the iTC will include at least:

  • Developers (technical representatives, as subject matter experts are vital - marketing and/or CC specialists can take part and may be helpful at the start up meeting but success depends upon the continual interactions between the technical experts involved)
  • Government experts (especially those versed in the threats associated with the technology and governmental use cases)
  • Evaluators (able to contribute to the requirements and assurance activities, and to comment on the technical and cost effectiveness of proposed assurance activities)

Associated Information

The CCDB USB Working Group (WG) has created a draft rationale identifying a list of expected Supporting Documents relating to the specification and evaluation of cryptographic mechanisms in cPPs, and has submitted the rationale to the CCDB for their consideration. The WG has identified the following four documents to support cPP development: Cryptographic Definitions, Extended Security Functional Requirements for Cryptography in cPPs, Specification of Cryptography in cPPs, Verification of Cryptography in cPPs. Once CCMC and CCDB approval is obtained, these documents are expected to be used by many of the new iTCs and cPPs, as part of a harmonised multi-national approach to specifying and evaluating cryptographic requirements in cPPs.

The iTCs currently endorsed by the CCMC are:

The cPPs and Supporting Documents being developed/maintained by each iTC will be indicated on the relevant iTC page.