Booz Allen Hamilton Cyber Assurance Testing Laboratory

NVLAP Lab Code: 200423-0

---

Address and Contact Information:

900 Elkridge Landing Road, Suite 100
Linthicum, MD 21090
Contact: Mr. Eric Winterton
Phone: 410-684-6691
Fax: 410-850-4592
E-Mail: catl@bah.com
Send E-Mail to Laboratory: BAH Inc. Common Criteria Testing Lab.

---

NVLAP Accreditation Information

Listed below is the scope of accreditation for this laboratory as of February 8, 2013. For additional information, contact NVLAP at (301) 975-4016.

Send E-Mail to NVLAP at: NVLAP@nist.gov

---

Cryptographic and Security Testing

Accreditation Valid From: July 1, 2012 Through: June 30, 2013

• Basic Cryptographic and Security Testing

[17BCS]
Basic Cryptographic and Security Testing

• Cryptographic Algorithm Validation Testing

[17CAV]
Cryptographic Algorithm Validation Testing

[17CAV/01]
NIST - Cryptographic Algorithm Validation System (CAVS) for all FIPS-approved and NIST-recommended security functions as required in FIPS PUB 140-2 Annex A (and all superseded versions)

• Cryptographic Modules - Hardware 1 Testing

[17CMH1]
Cryptographic Modules – Hardware 1 Testing (FIPS 140-2 or successor, Security Level 1 to 3)

[17CMH1/01]
All test methods in accordance with FIPS 140-1, except those listed in 17CMH2/01

[17CMH1/02]
All test methods in accordance with FIPS 140-2, except those listed in 17CMH2/02 and CAVS

• Cryptographic Modules - Hardware 2 Testing

[17CMH2]
Cryptographic Modules – Hardware 2 Testing (FIPS 140-2 or successor, Security Level 4 and above)

[17CMH2/01]
Test methods for Physical Security Level 4, in accordance with FIPS 140-1

[17CMH2/02]
Test methods for Physical Security Level 4, in accordance with FIPS 140-2

• Cryptographic Modules – Software 1 Testing

[17CMS1]
Cryptographic Modules – Software 1 Testing (FIPS 140-2 or successor, Security Level 1 to 3)

[17CMS1/01]
All test methods in accordance with FIPS 140-1, except those listed in 17CMS2/01

[17CMS1/02]
All test methods in accordance with FIPS 140-2, except those listed in 17CMS2/02 and CAVS

• Cryptographic Modules – Software 2 Testing

[17CMS2]
Cryptographic Modules – Software 2 Testing (FIPS 140-2 or successor, Security Level 4 and above)

[17CMS2/01]
Test methods for Software Security Level 4, in accordance with FIPS 140-1

[17CMS2/02]
Test methods for Software Security Level 4, in accordance with FIPS 140-2

• Department of Homeland Security Identity and Privilege Credential Management Testing

[17DHSIPCM]
Department of Homeland Security Identity and Privilege Credential Management Testing

• General Services Administration Precursor Testing

[17GSAP/01]
FIPS 201 Evaluation Program – Electromagnetically Opaque Sleeve

[17GSAP/02]
FIPS 201 Evaluation Program – Electronic Personalization

[17GSAP/03]
FIPS 201 Evaluation Program – PIV Card

[17GSAP/04]
FIPS 201 Evaluation Program – PIV Card Reader - Authentication Key

[17GSAP/05]
FIPS 201 Evaluation Program – PIV Card Reader - Biometric

[17GSAP/06]
FIPS 201 Evaluation Program – PIV Card Reader - CHUID (Contact)

[17GSAP/07]
FIPS 201 Evaluation Program – PIV Card Reader - CHUID (Contactless)

[17GSAP/08]
FIPS 201 Evaluation Program – PIV Card Reader - Transparent

[17GSAP/09]
FIPS 201 Evaluation Program – Template Generator

[17GSAP/10]
FIPS 201 Evaluation Program – Card Printer Station

[17GSAP/11]
FIPS 201 Evaluation Program – CHUID Authentication Reader (Contact)

[17GSAP/12]
FIPS 201 Evaluation Program – CHUID Authentication Reader (Contactless)

[17GSAP/13]
FIPS 201 Evaluation Program – Template Graphical Personalization

[17GSAP/14]
FIPS 201 Evaluation Program – Facial Image Capturing Camera

• Personal Identity Verification Testing

[17PIV]
Personal Identity Verification Testing (NPIVP, FIPS 201)

[17PIV/01]
PIV Card Applications Conformance Test Suite for products meeting specifications in the Federal Information Processing Standard 201 and NIST Special Publication 800-73 or their successors

[17PIV/02]
PIV Middleware Conformance Test Suite for products meeting specifications in the Federal Information Processing Standard 201 and NIST Special Publication 800-73 or their successors

• Security Content Automation Protocol Testing

[17SCAP]
Security Content Automation Protocol Testing (SCAP, CVE, CCE, CPE, CVSS, XCCDF and OVAL)

[17SCAP/01]
Common Vulnerabilities and Exposures (CVE)

[17SCAP/02]
Common Configuration Enumeration (CCE)

[17SCAP/03]
Common Platform Enumeration (CPE)

[17SCAP/04]
Common Vulnerability Scoring System (CVSS)

[17SCAP/05]
eXtensible Configuration Checklist Document Format (XCCDF)

[17SCAP/06]
Open Vulnerability Assessment Language (OVAL)

[17SCAP/07]
Security Content Automation Protocol (SCAP)

---

Common Criteria Testing

Accreditation Valid From: July 1, 2012 Through: June 30, 2013

• Common Criteria Testing

[26/A01] ISO/IEC 15408
Information Tech. - Security Techniques - Evaluation Criteria for IT Security Common Evaluation Methodology for Information Technology Security: Part 1 - Introduction and general model Part 2 - Evaluation methodology

[26/A01a]
APE: Protection Profile evaluation

[26/A01b]
ASE: Security Target evaluation

[26/A01c]
EAL1: Evaluation assurance level 1

[26/A01d]
EAL2: Evaluation assurance level 2

[26/A01e]
EAL3: Evaluation assurance level 3

[26/A01f]
EAL4: Evaluation assurance level 4

Return to NVLAP Program Listing