Page 79 of Mokard 2.2 (A smart card) security target :
The TSF shall be able to relate the identity of the originator of the information, and the application package contained in the information to which the evidence applies.
I want to know what is the reference of the word "evidence" in the above sentences?
In the other words, which one is correct:
- evidence applies to information, or
- evidence applies to the application package that contained in the information?