commoncriteria / application

Protection Profile for Application Software
The Unlicense
9 stars 3 forks source link

separate hashing and signing SFRs #99

Closed jeffblank closed 9 years ago

jeffblank commented 9 years ago

These should be different, not selections/assignments in http://common-criteria.rhcloud.com/application/output/application.html#FCS_COP_EXT.1.1

bourdett commented 9 years ago

currently we have:

perform no cryptographic hashing and signing, invoke platform-provided cryptographic [selection: hashing, signing] , invoke application-implemented cryptographic [selection: hashing, signing]

are you suggesting we change it to something like:

perform no cryptographic hashing and signing, invoke platform-provided cryptographic hashing, invoke platform-provided cryptographic signing , invoke application-implemented cryptographic hashing invoke application-implemented cryptographic signing

to me these look equivalent but the first one looks cleaner

zsmi commented 9 years ago

This looks to be complete.