Introduction

The DBMS-iTC is publishing Public Review Draft 1 of the DBMS PP-Modules for general public comment. This review package includes the DBMS Cryptographic Functions Module, the DBMS in the Cloud Module, their Supporting Documents, and the PP-Configurations that compose those modules with the DBMS Base PP. The Crypto Module formally consumes CCDB-018 Catalogue components and provides General-Purpose and optional Enterprise Enhanced cryptographic use cases. Because the companion Catalogue Evaluation Methods were not publicly available at the publication date, the Crypto SD also proposes a transitional mechanism for using Certification Body-recognized CAVP, CMVP, or equivalent validation results as evidence for covered algorithm-correctness objectives.

Please send review comments to dbms.itc@gmail.com.

Review Status

Publication Date

30 June 2026

End of Comment Period

To be announced

Review Phase

Public Review Draft 1

Publication Track

The DBMS Cryptographic Functions Module and DBMS in the Cloud Module are intended for the first module publication set. The DBMS DBaaS Module and DBaaS PP-Configuration are on a later publication track; working drafts are available in the repository.

Module Documents for Review

Table 1. Module Review Draft Set
Title Version Publication Track Links

collaborative PP-Module for DBMS Cryptographic Functions

0.4

First module publication set

PDF
HTML
AsciiDoc

Supporting Document: Evaluation Activities for collaborative PP-Module for DBMS Cryptographic Functions

0.4

First module publication set

PDF
HTML
AsciiDoc

collaborative PP-Module for DBMS in the Cloud

0.4

First module publication set

PDF
HTML
AsciiDoc

Supporting Document: Evaluation Activities for collaborative PP-Module for DBMS in the Cloud

0.4

First module publication set

PDF
HTML
AsciiDoc

PP-Configurations for Review

Table 2. PP-Configuration Review Draft Set
Title Version Publication Track Links

PP-Configuration for cPP_DBMS and DBMS Cryptographic Functions Module

0.4

First module publication set

PDF
HTML
AsciiDoc

PP-Configuration for cPP_DBMS, DBMS in the Cloud Module, and DBMS Cryptographic Functions Module

0.4

First module publication set

PDF
HTML
AsciiDoc

Base PP

These modules and PP-Configurations are designed for use with the DBMS Base PP Version 2.0. The DBMS Version 2.0 public review draft is available at DBMS Version 2.0 Public Review Draft 1.

Review Focus

Reviewers are encouraged to focus on:

  • Whether the DBMS Cryptographic Functions Module correctly owns the shared DBMS cryptographic requirements, including FDP_DIT_EXT.1.

  • Whether the Crypto Module clearly distinguishes Catalogue-derived SFRs, ECDs, dependencies, and Evaluation Activities from DBMS-iTC-originated integration requirements.

  • Whether the Crypto SD’s transitional validation-evidence mechanism provides sufficient implementation, operating-environment, capability-coverage, residual-testing, and reporting controls without treating CAVP or CMVP as a substitute for DBMS integration activities.

  • Whether the optional Enterprise Enhanced use case appropriately constrains only the in-scope Catalogue selections needed for FIPS 140-3, NIAP, and CNSA 2.0 alignment.

  • Whether symmetric key encryption without an integrity mechanism (FCS_COP.1/SKC) should remain a permitted DEK-protection option in FCS_CKM_EXT.1.2 under the General-Purpose use case, or whether key wrapping or authenticated encryption should be required for all conforming TOEs. The Enterprise Enhanced use case already requires key wrapping or authenticated encryption for stored DEKs.

  • Whether the transitional use of CMVP (FIPS 140-3) module-validation evidence for the RBG self-test and failure-behavior iterations (FPT_TST.1/RBG, FPT_FLS.1/RBG), pending publication of the Catalogue Evaluation Methods, provides sufficient assurance under appropriate Certification Body control.

  • Whether the DBMS in the Cloud Module contains only cloud-specific refinements, integration checks, and deployment-channel mapping.

  • Whether the PP-Configurations correctly compose the Base PP and required modules without creating contradictory conformance paths.