Germany – IT services: consulting, software development, Internet and support – Projekt 1025 "CSP Update, Evaluierung, Rezertifizierung und API (CUERA)"

To meet its legal obligations (§146a AO and KassenSichV), the BSI must update the protection profiles BSI-CC-PP-0104 Cryptographic Service Provider (CSP) and BSI-CC-PP-0111 CSPLight (CSPL). As part of the project, the aforementioned protection profiles are to be enhanced for broader use in the areas of eID / EUDI-Wallet, 5G and FIDO / Passkeys. This also requires the development of a standardised interface description for CSPLight products in central data centre operations to increase interoperability and minimise dependencies on proprietary architectures. The project is divided into three separate lots (specialised lots in the sense of § 97 para. 4 GWB):

- Lot 1: Adaptation and updating of the CSP protection profile and CSPL protection profile (Update-CSPL)

- Lot 2: Evaluation CSP-PP/CSPL-PP (Eval-CSPL)

- Lot 3: Standardised Interface Description (API-CSPL)

Lot 1 includes the updating and modularisation of the protection profiles PP-CSP and PP-CSPL. Following on from this, Lot 2 involves an evaluation of the protection profiles CSP and CSPL according to EUCC. Finally, Lot 3 involves the development of a uniform, standardised interface description for CSP-Light based on the protection profile created in Lot 1. Details can be found in the service descriptions (see attachments).