Common Criteria (NIAP) Validations of TITANIUM and CRUCIBLE

Star Lab has entered into an agreement with a Common Criteria (CC) National Information Assurance Partnership (NIAP) evaluation lab, for the evaluation of the Crucible Embedded Hypervisor and Titanium Security Suite. As part of this agreement, Star Lab has undertaken the formal process of creating ST and TOE documents as required for Common Criteria / NIAP evaluation. Star Lab is expecting to enter formal testing of the Crucible / Titanium components with the evaluation lab, beginning in Q4 2018, with an estimated completion date of Q3 2019.

CRUCIBLE is being evaluated against the following protection profiles:

  1. Protection Profile for Virtualization Version 1.0

  2. Extended Package for Server Virtualization Version 1.0

The evaluation of Crucible against these NIAP profiles will be used to establish a baseline for having Crucible accredited as a MILS separation kernel hypervisor.

TITANIUM is being evaluated against the following protection profiles:

  1. FortiFS – Protection Profile for Application Software Version 1.2

  2. FortiFS – Extended Package for Software File Encryption Version 1.0

  3. FortiFDE – collaborative Protection Profile for Full Drive Encryption – Encryption Engine Version 2.0

  4. FortiFDE – collaborative Protection Profile for Full Drive Encryption – Authorization Acquisition Version 2.0.

The evaluation of TITANIUM against these profiles will enable Star Lab to provide two Linux-based software mechanisms for its customer to achieve 1 layer of protection as required for Commercial Solutions for Classified Program (CSfC) Data-at-Rest (DAR). Once evaluated, Titanium (and the FortiFS / FortiFDE components) will be one of the few evaluated DAR components for Linux.

Additionally, in support of these Common Criteria / NIAP evaluations, Star Lab is submitting its Crucible Cryptographic Wrapper library (CCW) for FIPS 140-2 Level 1 evaluation.

Contact Star Lab for additional details on product accreditation schedules, licensing, or to schedule a demo. 

Product NewsJonathan Kline