Big news from Kernkonzept: Our operating system L4Re Secure Separation Kernel CC 1.0.1 has received the renowned EAL 4+ Common Criteria certification from Germany’s Federal Office for Information Security (BSI). That’s a global gold standard for IT security – and a huge step forward for our customers and partners.
What does it mean? With the EAL4+ certification (a standard that corresponds to the test depth for the approval for German GEHEIM/NATO SECRET), we are relieving manufacturers of high-security IT products from the time-consuming and risk-prone process of having their own software products certified from scratch as security-critical components. Because the L4Re Secure Separation Kernel CC 1.0.1 is already certified, they get a head start – saving time, effort, and reducing risk in their own approval processes.
The L4Re Secure Separation Kernel CC 1.0.1 is one of a very few software products in Germany with such a high certification level. Thanks to a Trusted Computing Base (TCB) that contains only 30,000 lines of code and the capability-based Mandatory Access Control (MAC), the L4Re Secure Separation Kernel CC 1.0.1 is perfectly tailored to Zero Trust architecture. From the beginning it was developed strictly following the principle of “security by design”. The strong separation of system components with different security levels is particularly relevant for security-critical applications, which makes L4Re the ideal choice for industries and environments where security can’t be compromised – such as government agencies, defense, or critical infrastructure.
The Common Criteria EAL4+ certificate for the L4Re Secure Separation Kernel CC 1.0.1 is the reward of a strenuous process we started several years ago. We are thankful to the BSI-accredited testing laboratory atsec information security GmbH and the German Federal Office for Information Security for helping us get here.