Common Criteria, FIPS 140, security certification, sec-certs,
vulnerability analysis