Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
PD CEN TS 419221 — Protection Profiles for TSP Cryptographic Modules
Protection Profiles for TSP Cryptographic Modules (CEN/TS 419221, 2016 edition)
🔑 The PD CEN/TS 419221 series is a set of CEN Technical Specifications issued in the UK as “Published Documents”, on Protection Profiles (PP) for Trust Service Provider (TSP) cryptographic modules. A protection profile is a standard product of the Common Criteria (ISO/IEC 15408) IT security evaluation framework, describing the security functional requirements and assurance requirements of a class of Target of Evaluation (TOE) for manufacturers to develop against, evaluators to assess against, and procurers to select. The 2016 edition replaces the earlier CWA 14167 series and aligns with the EU eIDAS trust service regulatory framework. BSI Technical Committee IST/17 (Cards and personal identification) is responsible for UK participation, classified under ICS 35.040 / 35.240.30. This article presents the series as a whole: its structure and technical points.
💡 The security of electronic signatures and trust services depends on the trustworthiness of cryptographic modules. CEN/TS 419221 standardises “what security strength a cryptographic module must achieve and how to assess it” via CC protection profiles, providing important technical support for trust service evaluation under eIDAS.
1. Series Overview 📌
The four parts of the PD CEN/TS 419221 series in this batch (all 2016 editions):
| Part | Edition | Subject | Main Content |
|---|---|---|---|
| PD CEN/TS 419221-1 | 2016 | Part 1: Overview | Overview of the TSP cryptographic module protection profile system: series structure, application background (replaces CWA 14167-1:2003), and usage. |
| PD CEN/TS 419221-2 | 2016 | Part 2: Cryptographic module for CSP signing operations with backup | Defines a protection profile for a cryptographic module used by a Certification Service Provider (CSP) for signing operations with key backup. |
| PD CEN/TS 419221-3 | 2016 | Part 3: Cryptographic module for CSP key generation services | Defines a protection profile for a cryptographic module used for CSP key generation services. |
| PD CEN/TS 419221-4 | 2016 | Part 4: Cryptographic module for CSP signing operations (without backup) | Defines a protection profile for a CSP signing operation module without key backup (scan version; written from public domain knowledge). |
⚠️ Part 4 (419221-4:2016) is a scan-only file in the source material; its content is summarised from public domain knowledge. Always refer to the official BSI published version.
2. Protection Profiles and Cryptographic Module Security 🧩
Part 1 (Overview) introduces the concept of protection profiles and the series structure. Protection profiles are written per ISO/IEC 15408 (Common Criteria), specifying the Security Functional Requirements (SFR) and Security Assurance Requirements (SAR) of the TOE, and referencing CC components (e.g., security audit, cryptographic support, user data protection, security management, privacy classes). The cryptographic modules of TSPs (e.g., Certification Authorities CA, Time-Stamping Authorities TSA) perform key functions such as signing key management, signature generation, and key backup; their security must be assured by CC evaluation.
Part 2 defines a protection profile for signing operations with key backup. Core security functions include: signing key generation, use, storage, and backup/recovery, key access control, correct implementation of cryptographic operations (e.g., RSA/ECDSA signing), and confidentiality and integrity protection of key material.
| Cryptographic Module Role | Key Security Functions | Typical Controls |
|---|---|---|
| CSP signing module (with backup) | Signing key management + backup/recovery | Key access control, backup encryption, dual control |
| Key generation service module | Key pair generation and distribution | Random number quality, generation process audit, private key protection |
| CSP signing module (without backup) | Signing key in use | Key non-exportability, operation audit, access control |
3. Security Requirements and Evaluation Points 🔧
- Key security management: specifies generation randomness, storage protection, use authorisation, and secure backup/recovery mechanisms (e.g., key splitting, backup encryption, dual control) for the signing private key.
- Cryptographic algorithms and protocols: support approved signature and hash algorithms, prohibit weak algorithms, and ensure correct implementation of cryptographic operations.
- Audit and logging: record key operations, management actions, and security-related events for later tracing and audit.
- Physical and environmental security: the module operates in a controlled environment with tamper resistance, side-channel resistance, and unauthorised-access resistance.
- CC evaluation: perform independent evaluation per the protection profile; the evaluation result (EAL level) is used for trust service compliance decisions.
🚨 The security reputation of trust services rests on “keys cannot be leaked, operations are auditable, modules are evaluable”. If a cryptographic module is not evaluated per a protection profile, its claimed security lacks independent verification, which in trust frameworks such as eIDAS may directly lead to non-conformity.
4. Engineering Practice 🛠️
- 🏛️ Trust service construction: CAs, TSAs, and other TSPs should select cryptographic modules conforming to the relevant protection profile when building signing and time-stamping services.
- 🔍 Procurement and selection: use the protection profile as the technical basis for cryptographic module procurement, requiring suppliers to provide CC evaluation certificates and reports.
- 📋 Compliance evaluation: when conducting trust service evaluation per eIDAS and national regulations, cite this series to define cryptographic module security requirements.
- 🛡️ Key management optimisation: improve signing key generation, backup, and rotation management per the profile requirements, enhancing key security and business continuity.
5. Frequently Asked Questions ❓
❓ Q: What is a Protection Profile (PP)?
A: A protection profile is a standardised description of security functional and assurance requirements for a class of Target of Evaluation (TOE) under the Common Criteria (ISO/IEC 15408); manufacturers develop against the PP and evaluators assess against it, achieving “the same security standard for the same class of product”.
A: A protection profile is a standardised description of security functional and assurance requirements for a class of Target of Evaluation (TOE) under the Common Criteria (ISO/IEC 15408); manufacturers develop against the PP and evaluators assess against it, achieving “the same security standard for the same class of product”.
❓ Q: How does this series relate to the eIDAS regulation?
A: eIDAS is the EU regulatory framework for trust services (electronic signatures, seals, time stamps, etc.); its qualification depends on security evaluation. CEN/TS 419221 provides CC protection profiles for TSP cryptographic modules, one of the technical bases for evaluation and compliance.
A: eIDAS is the EU regulatory framework for trust services (electronic signatures, seals, time stamps, etc.); its qualification depends on security evaluation. CEN/TS 419221 provides CC protection profiles for TSP cryptographic modules, one of the technical bases for evaluation and compliance.
❓ Q: What is the difference between Part 2 and Part 4 (signing modules)?
A: Part 2 addresses signing operations with key backup and additionally specifies mechanisms for backup, recovery, and backup key security; Part 4 addresses signing operations without backup, focusing on key non-exportability and operation audit.
A: Part 2 addresses signing operations with key backup and additionally specifies mechanisms for backup, recovery, and backup key security; Part 4 addresses signing operations without backup, focusing on key non-exportability and operation audit.
❓ Q: What should be checked when procuring a cryptographic module?
A: Verify the module conforms to the relevant protection profile, holds a recognised CC evaluation certificate (including evaluation level and scope), and that its key management, audit, and physical security functions match its claims.
A: Verify the module conforms to the relevant protection profile, holds a recognised CC evaluation certificate (including evaluation level and scope), and that its key management, audit, and physical security functions match its claims.