Re: Expertise, Resources, and Motivation of Attackers

["NIAP Interpretations Board" <ccevs-nib@nist.gov>]

The NIB would like to add that, for CCEVS evaluations of an ST that contains no 
permutational nor probabilistic mechanisms, an SOF claim is not applicable.  
This guidance is captured in CCEVS precedence decision PD-0086 (located at: 
http://niap.nist.gov/cc-scheme/PD/0086.html).  Also, as indicated in PD-0048 
(http://niap.nist.gov/cc-scheme/PD/0048.html) a PP author generally cannot 
determine that a compliant ST will not contain permutational nor probabilistic 
mechanisms.  Therefore an SOF claim is generally required for PPs.