STARCOS 3.7 ID ePA C2, STARCOS 3.7 ID eAT C2, STARCOS 3.7 ID ePass C2
Giesecke+Devrient ePayments GmbH - Common Criteria BSI-DSZ-CC-1077-V2-2024
Key facts
- Scheme
- Common Criteria
- Certificate
- BSI-DSZ-CC-1077-V2-2024
- Standard
- Common Criteria
- Assurance level
- EAL4+, ALC_DVS.2, ATE_DPT.2, AVA_VAN.5
- Status
- active
- Manufacturer
- Giesecke+Devrient ePayments GmbH
- Category
- ICs, Smart Cards and Smart Card-Related Devices and Systems
- Certification scheme
- DE
- Lab
- BSI
- Certified
- June 12, 2024
- Valid until
- June 12, 2029
- Versions
- 3.7
Algorithms
- 3DES
- AES
- CMAC
- DES
- DH
- Diffie-Hellman
- ECC
- ECDH
- ECDSA
- ECIES
- KMAC
- SHA-1
- SHA-224
- SHA-256
- SHA-384
- SHA-512
- TDES
- Triple-DES
Algorithms named in the security target and certification report.
Assurance requirements
- ADV_ARC.1
- ADV_FSP.4
- ADV_IMP.1
- ADV_TDS.3
- AGD_OPE.1
- AGD_PRE.1
- ALC_CMC.4
- ALC_CMS.4
- ALC_DEL.1
- ALC_DVS.2
- ALC_FLR.1
- ALC_LCD.1
- ALC_TAT.1
- ATE_DPT.2
- ATE_FUN.1
- AVA_VAN.5
Security assurance requirements (SARs) found in the certificate documents, e.g. AVA_VAN.5 for vulnerability analysis against high attack potential. See Common Criteria EAL levels explained.
Versions and maintenance
Maintenance updates
- December 10, 2025 - STARCOS 3.7 ID ePA C2, STARCOS 3.7 ID eAT C2, STARCOS 3.7 ID ePass C2
- August 24, 2025 - STARCOS 3.7 ID ePA C2, STARCOS 3.7 ID eAT C2, STARCOS 3.7 ID ePass C2 - security target
A maintenance update re-confirms the certificate for a changed product version without a full re-evaluation.
CVEs that may affect this product
sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Certificates it builds on
- BSI-DSZ-CC-1077-2020
- BSI-DSZ-CC-1110-V6-2023
Certificate ids found in this certificate's documents (automated extraction).
Protection profiles
- Machine-Readable Electronic Documents based on BSI TR-03110 for Official Use (Version 2.02)
- Common Criteria PP Configuration Machine Readable Electronic Documents - Optionales Nachladen (Optional Post-Emission Updates) (0.9.2)
The requirement sets this product was evaluated against. Browse protection profiles
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP, the Common Criteria Portal and ENISA (EUCC) - dataset of September 10, 2026 - synced October 17, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain