robustness against attacks of, and lack of vulnerabilities in, the software
that implements those security functions. With this as its objective, it is not
surprising that the CC evaluation does not include analysis or testing of the TOE
for implementation faults that may lead to vulnerabilities.