STARCOS 3.7 COS HBA-SMC
Giesecke+Devrient ePayments GmbH - EUCC EUCC-3087-2026-11
Key facts
- Scheme
- EUCC
- Certificate
- EUCC-3087-2026-11
- Standard
- EUCC (Common Criteria)
- Assurance level
- Unknown
- Status
- active
- Manufacturer
- Giesecke+Devrient ePayments GmbH
- Category
- SMARTCARDS AND SIMILAR DEVICES
- Certification scheme
- DE
- Lab
- BSI
- Certified
- June 17, 2026
- Valid until
- June 17, 2031
- Versions
- 3.7
Algorithms
- AES
- CMAC
- DH
- Diffie-Hellman
- DSA
- ECC
- ECDH
- ECDSA
- HPC
- RSA-OAEP
- SHA-1
- SHA-224
- SHA-256
- SHA-384
- SHA-512
Algorithms named in the security target and certification report.
Assurance requirements
- ADV_ARC.1
- ADV_FSP.4
- ADV_IMP.2
- ADV_INT.3
- ADV_TDS.5
- AGD_OPE.1
- AGD_PRE.1
- ALC_CMC.5
- ALC_CMS.4
- ALC_DEL.1
- ALC_DVS.2
- ALC_FLR.1
- ALC_LCD.1
- ALC_TAT.3
- ASE_CCL.1
- ASE_ECD.1
- ASE_INT.1
- ASE_OBJ.2
- ASE_REQ.2
- ASE_SPD.1
- ASE_TSS.1
- ATE_COV.3
- ATE_DPT.2
- ATE_FUN.2
- ATE_IND.2
- AVA_VAN.5
Security assurance requirements (SARs) found in the certificate documents, e.g. AVA_VAN.5 for vulnerability analysis against high attack potential. See Common Criteria EAL levels explained.
CVEs that may affect this product
sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP, the Common Criteria Portal and ENISA (EUCC) - dataset of September 22, 2026 - synced October 17, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain