Xerox WorkCentre 5135/5150 Multifunction ... - Common Criteria

Xerox WorkCentre 5135/5150
Multifunction Systems Security Target
works with an external Accounting server (i.e., Equitrac or Control Systems). Network
Accounting uses full character set IDs.
For network scan, email, and IFax (not included in the evaluation) jobs the accounting
IDs (i.e., PINS) required by the Auditron, XSA, or Network Accounting, will be recorded
in the audit log.
If Network Authentication is enabled, then the name required by Network Authentication
will be recorded in the audit log.
For print and LanFax jobs, the network username associated with the logged in user at
the client workstation will be recorded in the audit log.
6.1.6. Cryptographic Support (TSF_FCS)
FCS_COP.1 (SSL 1), FCS_COP.1 (SSL 2), FCS_COP.1 (SSL 3), FCS_COP.1 (SSL 4)
The TOE utilizes digital signature generation and verification (RSA), data encryption
(TDES, AES), key establishment (RSA) and cryptographic checksum generation and
secure hash computation (SHA-1) to support secure communication between the TOE
and remote trusted products. Those packages include provisions for the generation of
checksum/hash values and meet the following standards: 3DES – NIST 800-67 (CAVP
Certificate No. 990); SHA-1 – FIPS-180-2 (CAVP Certificate No. 1331), AES-256-FIPS-
197 (CAVP Certificate No. 1472), SSLv3.1, RSA - FIPS 186-2 (CAVP Certificate No.
719)..
6.1.7. Management Data Protection – SSL (TSF_FDP_SSL)
FCS_COP.1 (SSL 1), FCS_COP.1 (SSL 2), FCS_COP.1 (SSL 3), FCS_COP.1 (SSL
4), FDP_IFC.1 (SSL), FDP_IFF.1 (SSL), FDP_UCT.1 , FDP_UIT.1, FTP_TRP.1
The TOE provides support for SSL and allows the TOE to act as either an SSL server,
or SSL client, depending on the function the TOE is performing. SSL v3.1 must be
enabled before the system administrator can retrieve the audit log. SSL functionality
also permits the TOE to be administered from the Web UI.
All information that is transmitted between the TOE and a remote trusted product using
SSL v3.1 is protected from both disclosure and modification. The disclosure protection
is accomplished by the symmetric encryption of the data being transferred using the
3DES EDE (aka, Triple DES – defined in NIST 800-67 (CAVP Certificate No. 990))
cipher or AES cipher and a per connection key generated as part of the SSLv3.1
protocol. The modification protection is accomplished by the use of the HMAC-SHA1
(Hashed Message Authentication Code – defined by IETF RFC2104) that is
incorporated into the SSLv3.1 record transfer protocol. The key establishment is
accomplished by the use of RSA.
Except for the cryptography used to protect the audit logs (SSL v3.1), the cryptography
used for management data protection has been scoped out of the evaluation.
74
Copyright 2009 Xerox Corporation, All rights reserved