Germany – IT services: consulting, software development, Internet and support – Projekt 1025 "CSP Update, Evaluierung, Rezertifizierung und API (CUERA)"

To meet its legal obligations (Section 146a AO and KassenSichV), the BSI must update the protection profiles BSI-CC-PP-0104 Cryptographic Service Provider (CSP) and BSI-CC-PP-0111 CSPLight (CSPL). As part of the project, the aforementioned protection profiles will also be enhanced for broader use in the areas of eID / EUDI-Wallet, 5G, and FIDO / Passkeys. This also requires the development of a standardized interface description for CSPLight products in the central data centre operation to increase interoperability and minimize dependencies on proprietary architectures. The project is divided into three separate lots (specialist lots within the meaning of Section 97 (4) GWB):

- Lot 1: Adaptation and updating of the CSP protection profile and CSPL protection profile (Update-CSPL)

- Lot 2: Evaluation of CSP-PP/CSPL-PP (Eval-CSPL)

- Lot 3: Standardised interface description (API-CSPL)

Lot 1 involves updating and modularizing the protection profiles PP-CSP and PP-CSPL. Following on from this, Lot 2 will involve an evaluation of the CSP and CSPL protection profiles in accordance with EUCC. Finally, Lot 3 will develop a uniform, standardized interface description for CSP-Light based on the protection profile created in Lot 1. Details can be found in the specifications (see attachments).