7.1.1。s ecurity Audit生成（FAU_GEN.1，FAU_GEN.1/IPS，FAU_GEN.1/VPN，FAU_GEN.2，FPT_STM_EXT.1）S ECURITY AUDIT STORAGE (FAU_STG.1, FAU_STG_EXT.1, FAU_STG_EXT.4, FAU_STG_EXT.5) ...................... 66 7.1.3.c ryptography支持 - 密钥管理（FCS_CKM.1，fcs_ckm.1/ike，fcs_ckm.2，fcs_ckm.4，fcs_rbg_ext.1，fmt_mtd.1，fmt_mtd.1/c rypto k eys，fpt_skp_ext.1） 7.1.4。c ryptography支持 - 算法（fcs_cop.1/d ata e ncryption，fcs_cop.1/s ig g en，fcs_cop.1/h ash，fcs_cop.1/k eied h ash h ash）.........................................................................................................c ryptography支持 - P折叠（FCS_HTTPS_EXT.1，FCS_IPSEC_EXT.1，FCS_NTP_EXT.1，FCS_TLSS_EXT.1，FCS_SSHS_EXT.EXT.EXT.1）C RYPTOGRAPHIC SUPPORT – S ELF TESTS (FPT_TST_EXT.1, FPT_TST_EXT.3, FPT_FLS.1/S ELF T EST ) .......................... 74 7.1.7.i牙列化和身份验证 - p Assword身份验证（FIA_AFL.1，FIA_UAU_EXT.1，FIA_UIA_EXT.1，FIA_PMG_EXT.1，FPT_APW_EXT.1，FPT_APW_EXT.1）i牙列化和身份验证 - VPN（FIA_X509_EXT.1/R EV，FIA_X509_EXT.2，FIA_X509_EXT.3）...... 77 7.1.9。s ecurity管理（fmt_mtd.1/core d ata，fmt_mof.1/f unctions，fmt_mof.1/s ervices，fmt_smf.1，fmt_smf.1，fmt_smf.1/vpn ................................................................................. 79 7.1.10。T RUSTED UPDATE (FPT_TUD_EXT.1, FMT_MOF.1/M ANUAL U PDATE ) ............................................................... 80 7.1.11.TOE ACCESS (FTA_SSL_EXT.1, FTA_SSL.3, FTA_SSL.4, FTA_TAB.1) ............................................................ 81 7.1.12.T RUSTED PATH / CHANNEL COMMUNICATIONS (FCO_CPC_EXT.1, FTP_ITC.1, FTP_ITC.1/VPN, FTP_TRP.1/A DMIN ) .................................................................................................................................................. 81 7.1.13.tateful流量过滤（FPF_RUL_EXT.1，FFW_RUL_EXT.1，FDP_RIP.2）..................................................................................................................................................................................................................................................................................................................................................................... 82 7.1.0。i nTrusion检测和预防（ips_abd_ext.1，ips_ipb_ext.1，ips_nta_ext.1，ips_sbd_ext.1）... 87 7.2。NIST CAVP CERTIFICATES ....................................................................................................................................... 91 7.3.C RITICAL SECURITY PARAMETERS ............................................................................................................................... 97 7.4.IP V 4和IP V 6传输层协议............................................................................................................................................................................................................................................................................................................................................................................................................. 99