Specifications

CRP-C0036-01
15
1. Security functions whose behavior could not be observed from outside
2. Security functions with changeable parameters
The evaluator sampled 24 (23%) of the developer’s 107 tests for sample testing
in a way that all the functions would be covered.
The penetration testing comprises 14 tests according to the outcome of the
vulnerability analysis performed based on publicly-known vulnerabilities,
multifunction product-specific vulnerabilities, and the evaluator’s knowledge of
the TOE gained during the evaluation.
c. Result
All evaluator testing conducted is completes correctly and could confirm the
behavior of the TOE. The evaluator also confirmed that all the test results are
consistent with the behavior, and that there are no obvious exploitable
vulnerabilities in the TOE.
2.4 Evaluation Result
The evaluator had the conclusion that the TOE satisfies all work units prescribed in
CEM Part 2 by submitting the Evaluation Technical Report.