Included Packages - commoncriteria/pp-template GitHub Wiki

Updated 18 September 2025

The Included Packages section specifies the Functional Packages that may be claimed in an evaluation against this PP or PP-Module.

Assurance Packages are currently not supported in this construct.

This construct exists solely to support automation and does not have any relationship to what appears in the Conformance Claims section of the PP. Eventually this might change.

Each <include-pkg> element specifies each package, and the location of the correct version of the package. If inclusion of the package in the Security Target depends on a selection, feature, or use case, the element must include a <depends> tag specifying the dependency or dependencies. If the package is always included, the <depends> tag should be omitted.

The id attribute of each <include-pkg> tag must match the Github repo name of the Functional Package in order for the upcoming <package-usage> feature to work.

As follows:

  • SSH: "ssh"
  • TLS: "tls"
  • X.509: "X509"
  <include-pkg id="ssh">                            # the id must be unique within this document
    <git>
      <url>https://github.com/commoncriteria/ssh</url>  # location of the github repo for the package
      <branch>release-1.0</branch>                      # name of the github branch for the proper version of the package
    </git>
    <url>https://www.niap-ccevs.org/protectionprofiles/459</url>   # path to the package folder on the NIAP website
    <depends on-sel="sel_all_ssh"/>                     # selection(s) within this document on which inclusion depends
  </include-pkg>
  
  <include-pkg id="tls">
    <git>
      <url>https://github.com/commoncriteria/tls</url>
      <branch>release-2.0</branch>
    </git>
    <url>https://www.niap-ccevs.org/protectionprofiles/465</url>
    <depends on-sel="sel_all_tls" on-also="sel_all_dtls"/>
  </include-pkg>

  <include-pkg id="X509">
    <git>
       <url>https://github.com/commoncriteria/X509</url>
       <branch>release-1.0</branch>
    </git>
    <url>https://www.niap-ccevs.org/static_html/protection-profile/511/Functional%20Package%20for%20X.509_v1.0.html</url>
  </include-pkg>

See also, Dependencies.

⚠️ **GitHub.com Fallback** ⚠️