4759 CESECORE

The CESeCore project aims to produce an open source security core product by establishing a new security architecture. This architecture implies gathering all security functions into a security core and the isolation of all security functions and Common C riteria (CC) EAL-certifiable parts of the application into relatively static modules. These core modules would rarely change therefore, do not require re-certification whenever there is a change in the embedding applications. Functionalities existing arou nd this security core will be able to use the CC EAL certified security services offered. These embedding applications will easily incorporate new functionality and bug fixes without requiring re-certification of the CC EAL. The security core architecture will primarily apply to security related software products, but will not be limited to such usage. The software applications which require security in the context that they are used will also be able to make use the security functions of the certified se curity core. These security functions will include digital signature creation, integrity protection and verification of the operational logs and validation of signed data received from an external source by the software. The single most important inno vative aspect about CESeCore is in collecting relevant security functions in a Common Criteria EAL certified security core and providing this core as a commodity product for integration to third party applications, whether they are security targeted or ge neral purpose. There are two main risks regarding the new architecture, namely: 1) That the new architecture will not be as efficient as expected and therefore might not provide the necessary performance which is essential for the security software. 2) T hat there are compatibility issues in terms of usage of the security core