FIA_UAU.7 Protected authentication feedback
User application notes
This component addresses the feedback on the authentication process that will be provided to the user. In some systems the feedback consists of indicating how many characters have been typed but not showing the characters themselves, in other systems even this information might not be appropriate.
This component requires that the authentication data is not provided as-is back to the user. In a workstation environment, it could display a `dummy' (e.g. star) for each password character provided, and not the original character.
Operations
Assignment:
In FIA_UAU.7.1, the PP/ST author should specify the feedback related to the authentication process that will be provided to the user. An example of a feedback assignment is "the number of characters typed", another type of feedback is "the authentication mechanism that failed the authentication".