search

DSC-iTC / cPP

Dedicated Security Components cPP & SD
MIT License
3 stars 3 forks source link

CCDB GE/027 - Section 2.1.4 #69

Open woodbe opened 1 year ago

woodbe commented 1 year ago

Comment:

Are true (physical) Random Number Generators in the scope of this document?

Proposal:

Priority: 1

woodbe commented 1 year ago

No, the cPP expects that the DSC will have a DRBG of some sort but may use a physical source as an entropy input. It is not expected that a physical RNG would be used directly.

This is something that could be considered for a future release, but it doesn't seem to be a very common configuration (based on my knowledge) for the type of components that would be certified as a DSC. While there may be some hardware noise source, that is usually only used for entropy input and even when there is a physical RNG it is used in the same manner.

Recommend closing, or marking for future consideration (parking lot) as this would not seem needed for v1.1.

woodbe commented 1 month ago

A simple resolution for this would be to add FCS_RNG.1 as an optional SFR since this is already defined in the CC:2022. I still am not sure this is necessary though.