Qualcomm® Crypto Engine Core

Certificate details

Certificate ID #5553
Status active
Validation dates 19.10.2026
Sunset date 18-10-2031
Standard FIPS 140-3
Security level 1
Type Hardware
Embodiment SingleChip
Caveat When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Exceptions
  • Software/Firmware security: N/A
  • Operational environment: N/A
  • Physical security: Level 2
  • Non-invasive security: N/A
  • Life-cycle assurance: Level 2
  • Mitigation of other attacks: N/A
Description Qualcomm Crypto Engine Core is a general purpose cryptographic hardware engine capable of securely processing various confidentiality and integrity algorithms across multiple execution environments.
Vendor Qualcomm Technologies, Inc. http://www.qualcomm.com
Lab atsec information security corporation
Algorithms
  • AES-CBC-CS2A6506
  • AES-CBCA6506
  • AES-CCMA6506
  • AES-CMACA6506
  • AES-CTRA6506
  • AES-ECBA6506
  • AES-XTS Testing Revision 2.0A6506
  • HMAC-SHA-1A6506
  • HMAC-SHA2-256A6506
  • HMAC-SHA2-384A6506
  • HMAC-SHA2-512A6506
  • HMAC-SHA3-224A6506
  • HMAC-SHA3-256A6506
  • HMAC-SHA3-384A6506
  • HMAC-SHA3-512A6506
  • SHA-1A6506
  • SHA2-256A6506
  • SHA2-384A6506
  • SHA2-512A6506
  • SHA3-224A6506
  • SHA3-256A6506
  • SHA3-384A6506
  • SHA3-512A6506
  • TDES-CBCA6506
  • TDES-ECBA6506
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-, CAST, DES, TDES, Triple-DES, TDEA, SM4, HMAC, CMAC
Hash functions
SHA-1, SHA1, SHA2, SHA3-256, SHA3-384, SHA3-512, SHA3-224, SHA3, SHA-3
Schemes
MAC, AEAD
Randomness
RBG
Block cipher modes
ECB, CBC, CTR, CCM, XEX, XTS

Vendor
Qualcomm

Security level
Level 1, Level 2

Creation date D:20261015082004-04'00'
Modification date D:20261015082004-04'00'
Pages 36
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5553,
  "dgst": "068cdb9d2f72bda1",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "SHA3-224A6506",
        "SHA2-512A6506",
        "TDES-CBCA6506",
        "HMAC-SHA2-512A6506",
        "AES-CBCA6506",
        "#A6506",
        "SHA3-512A6506",
        "HMAC-SHA3-256A6506",
        "HMAC-SHA3-512A6506",
        "SHA3-256A6506",
        "HMAC-SHA-1A6506",
        "AES-ECBA6506",
        "AES-CBC-CS2A6506",
        "HMAC-SHA3-384A6506",
        "SHA-1A6506",
        "HMAC-SHA3-224A6506",
        "AES-CCMA6506",
        "SHA2-256A6506",
        "SHA3-384A6506",
        "HMAC-SHA2-256A6506",
        "SHA2-384A6506",
        "AES-XTS Testing Revision 2.0A6506",
        "AES-CMACA6506",
        "AES-CTRA6506",
        "HMAC-SHA2-384A6506",
        "TDES-ECBA6506"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 1,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-CBC-CS2",
            "cavpCertName": "A6506",
            "properties": "Direction - decrypt, encrypt Key Length - 128, 256 Payload Length - Payload Length: 128- 65536 Increment 8",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CBC, AES-ECB",
            "cavpCertName": "A6506",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CCM",
            "cavpCertName": "A6506",
            "properties": "Key Length - 128, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 0, 256 AAD Length - AAD Length: 256, 65536",
            "reference": "SP 800-38C"
          },
          {
            "algorithm": "AES-CMAC",
            "cavpCertName": "A6506",
            "properties": "Direction - Generation, Verification Key Length - 128, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8- 524288 Increment 8",
            "reference": "SP 800-38B"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A6506",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128 Supports Counter larger than maximum",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "",
            "cavpCertName": "",
            "properties": "value - Yes Incremental Counter - Yes Counter Tests Performed - Yes",
            "reference": ""
          },
          {
            "algorithm": "AES-XTS Testing Revision 2.0",
            "cavpCertName": "A6506",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128- 65536 Increment 8 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "HMAC-SHA-1",
            "cavpCertName": "A6506",
            "properties": "MAC - MAC: 160 Key Length - Key Length: 512",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256, HMAC- SHA3-256",
            "cavpCertName": "A6506",
            "properties": "MAC - MAC: 256 Key Length - Key Length: 512",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-384, HMAC- SHA3-384",
            "cavpCertName": "A6506",
            "properties": "MAC - MAC: 384 Key Length - Key Length: 512",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-512, HMAC- SHA3-512",
            "cavpCertName": "A6506",
            "properties": "MAC - MAC: 512 Key Length - Key Length: 512",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA3-224",
            "cavpCertName": "A6506",
            "properties": "MAC - MAC: 224 Key Length - Key Length: 512",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "SHA-1, SHA2-256, SHA2-384, SHA2-512",
            "cavpCertName": "A6506",
            "properties": "Message Length - Message Length: 0- 65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA3-224, SHA3-256, SHA3- 384, SHA3-512",
            "cavpCertName": "A6506",
            "properties": "Message Length - Message Length: 0- 65536 Increment 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "TDES-CBC, TDES-ECB",
            "cavpCertName": "A6506",
            "properties": "Direction - Decrypt, Encrypt Keying Option - 1",
            "reference": "SP 800-67 Rev. 2"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Perform data encryption",
            "indicator": "CRYPTO0_CRYPT O_STATUS4 bits 16-18 set to 0",
            "inputs": "AES Key, Plaint ext",
            "name": "AES Encrypti on",
            "outputs": "Ciphertext, Success/Fail",
            "rolesSspAccess": "Cry pto Offi cer - AES key: W,E",
            "secFunImpl": "AES- CBC AES- CBC- CS2 AES- CCM AES- CTR AES- ECB AES-"
          },
          {
            "description": "Perform data decryption",
            "indicator": "CRYPTO0_CRYPT O_STATUS4 bits 16-18 set to 0",
            "inputs": "AES Key, Cipher text",
            "name": "AES Decrypti on",
            "outputs": "Plaintext, Success/Fail",
            "rolesSspAccess": "Cry pto Offi cer - AES key: W,E",
            "secFunImpl": "XTS AES- CBC AES- CBC- CS2 AES- CCM AES- CTR AES-"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "",
            "secFunImpl": "ECB AES- XTS"
          },
          {
            "description": "Perform data encryption",
            "indicator": "CRYPTO0_CRYPT O_STATUS4 bits 16-18 set to 0",
            "inputs": "AES Key, Plaint ext",
            "name": "AES Authenti cated Encrypti on",
            "outputs": "Ciphertext, Success/Fail",
            "rolesSspAccess": "Cry pto Offi cer - AES key: W,E",
            "secFunImpl": "AES- CCM"
          },
          {
            "description": "Perform data decryption",
            "indicator": "CRYPTO0_CRYPT O_STATUS4 bits 16-18 set to 0",
            "inputs": "AES Key, Cipher text",
            "name": "AES Authenti cated Decrypti on",
            "outputs": "Plaintext, Success/Fail",
            "rolesSspAccess": "Cry pto Offi cer - AES key: W,E",
            "secFunImpl": "AES- CCM"
          },
          {
            "description": "Message Authentication",
            "indicator": "CRYPTO0_CRYPT O_STATUS4 bit 29 set to 0",
            "inputs": "AES Key, Input data",
            "name": "CMAC Message Authenti cation",
            "outputs": "CMAC value",
            "rolesSspAccess": "Cry pto Offi cer - AES key: W,E",
            "secFunImpl": "AES- CMA C"
          },
          {
            "description": "Decrypt data which was encrypted with 3- key TDES prior to the sunset date provided in IG C.M",
            "indicator": "CRYPTO0_CRYPT O_STATUS4 bit 19 set to 0",
            "inputs": "Triple -DES key, cipher text",
            "name": "TDES Decrypti on (Legacy Use)",
            "outputs": "Plaintext",
            "rolesSspAccess": "Cry pto Offi cer - Trip le- DES Key: W,E",
            "secFunImpl": "TDES -ECB (Lega cy Use) TDES -CBC (Lega cy"
          },
          {
            "description": "Message Authentication",
            "indicator": "CRYPTO0_CRYPT O_STATUS4 bits 25-28 set to 0",
            "inputs": "HMA C Key, input data",
            "name": "HMAC Message Authenti cation",
            "outputs": "HMAC value",
            "rolesSspAccess": "Cry pto Offi cer - HM AC",
            "secFunImpl": "Use) HMA C- SHA- 1 HMA C- SHA2"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "key: W,E",
            "secFunImpl": "-256 HMA C- SHA2 -384 HMA C- SHA2 -512 HMA C- SHA3 -224 HMA C- SHA3 -256 HMA C- SHA3 -384 HMA C- SHA3 -512"
          },
          {
            "description": "Hashing",
            "indicator": "CRYPTO0_CRYPT O_STATUS4 bits 21-24 set to 0",
            "inputs": "Input data",
            "name": "Hash",
            "outputs": "Hash output",
            "rolesSspAccess": "Cry pto Offi cer",
            "secFunImpl": "SHA- 1 SHA2 -256 SHA2 -384 SHA2 -512 SHA3 -224 SHA3 -256 SHA3 -384 SHA3 -512"
          },
          {
            "description": "Return code read from CRYPTO0_CRYPTO_B IST_STATUS",
            "indicator": "None",
            "inputs": "N/A",
            "name": "Show Status",
            "outputs": "Zero (operational) or non-zero (error)",
            "rolesSspAccess": "Cry pto Offi cer",
            "secFunImpl": "None"
          },
          {
            "description": "Self-Tests are executed automatically when device is booted or restarted",
            "indicator": "None",
            "inputs": "None",
            "name": "Self-Test",
            "outputs": "Self-test Success/Fail",
            "rolesSspAccess": "Cry pto Offi cer",
            "secFunImpl": "AES- CCM AES- CMA C AES- ECB HMA C- SHA- 1 HMA C- SHA2 -256 HMA C- SHA2 -512 HMA C- SHA3 -512 TDES -ECB (Lega cy Use)"
          },
          {
            "description": "Zeroizes all SSPs",
            "indicator": "None",
            "inputs": "None",
            "name": "Zeroizati on",
            "outputs": "None",
            "rolesSspAccess": "Cry pto Offi cer - AES key: Z - HM",
            "secFunImpl": "None"
          },
          {
            "description": "Configures the keys for Crypto Officer role",
            "indicator": "None",
            "inputs": "AES Key, HMA C Key,",
            "name": "Configur e keys for use by",
            "outputs": "Success/Fail",
            "rolesSspAccess": "AC key: Z Cry pto Offi cer",
            "secFunImpl": "None"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "Triple -DES Key",
            "name": "Crypto Officer",
            "outputs": "",
            "rolesSspAccess": "- AES key: W - HM AC key: W - Trip le- DES Key: W",
            "secFunImpl": ""
          },
          {
            "description": "Show the module\u0027s identifier and version",
            "indicator": "None",
            "inputs": "None",
            "name": "Show identifier and version",
            "outputs": "Module identifier and version read from registers CRYPTO0_CRYPT O_FIPS_ID and CRYPTO0_CRYPT O_VERSION",
            "rolesSspAccess": "Cry pto Offi cer",
            "secFunImpl": "None"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "AES-CCM (A6506) - Encryption",
            "condition": "Performed during module power-up",
            "details": "Encryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CCM (A6506) - Decryption",
            "condition": "Performed during module power-up",
            "details": "Decryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A6506) - Encryption",
            "condition": "Performed during module power-up",
            "details": "Encryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A6506) - Decryption",
            "condition": "Performed during module power-up",
            "details": "Decryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CMAC (A6506)",
            "condition": "Performed during module power-up",
            "details": "MAC tag computation and verification",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA-1 (A6506)",
            "condition": "Performed during module power-up",
            "details": "MAC tag computation and verification",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "512 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A6506)",
            "condition": "Performed during module power-up",
            "details": "MAC tag computation and verification",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "512 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 512 (A6506)",
            "condition": "Performed during module power-up",
            "details": "MAC tag computation and verification",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "512 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA3- 512 (A6506)",
            "condition": "Performed during module power-up",
            "details": "MAC tag computation and verification",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "512 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "TDES-ECB (A6506)",
            "condition": "Performed during module power-up",
            "details": "Decryption (Legacy)",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "168 bit key",
            "type": "CAST"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "KAT failure",
            "description": "No cryptographic operation can be performed. No data input or output is possible.",
            "indicator": "CRYPTO0_CRYPTO_BIST_STATUS register is non-zero",
            "name": "Error",
            "recoveryMethod": "Power cycling"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [
          {
            "inspectFreq": "N/A",
            "inspectGuidance": "N/A",
            "mechanism": "Tamper evident coating"
          }
        ],
        "found": true,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [
          {
            "name": "AES-GCM (external IV)",
            "use": "encryption, decryption"
          },
          {
            "name": "DES-CBC",
            "use": "encryption, decryption"
          },
          {
            "name": "DES-ECB",
            "use": "encryption, decryption"
          },
          {
            "name": "TDES (two independent keys)",
            "use": "encryption, decryption"
          },
          {
            "name": "TDES Encryption (three independent keys)",
            "use": "encryption"
          },
          {
            "name": "HMAC SHA-1 with key size other than 512 bits",
            "use": "message authentication code"
          },
          {
            "name": "HMAC SHA2-256 with key sizes other than 512 bits",
            "use": "message authentication code"
          },
          {
            "name": "HMAC SHA2-384 with key sizes other than 512 bits",
            "use": "message authentication code"
          },
          {
            "name": "HMAC SHA2-512 with key sizes other than 512 bits",
            "use": "message authentication code"
          },
          {
            "name": "HMAC SHA3-224 with key sizes other than 512 bits",
            "use": "message authentication code"
          },
          {
            "name": "HMAC SHA3-256 with key sizes other than 512 bits",
            "use": "message authentication code"
          },
          {
            "name": "HMAC SHA3-384 with key sizes other than 512 bits",
            "use": "message authentication code"
          },
          {
            "name": "HMAC SHA3-512 with key sizes other than 512 bits",
            "use": "message authentication code"
          },
          {
            "name": "AEAD-SHA-1 AES-CBC",
            "use": "encryption, decryption (with message authentication code)"
          },
          {
            "name": "AEAD-SHA-1 AES-CTR",
            "use": "encryption, decryption (with message authentication code)"
          },
          {
            "name": "AEAD-SHA-1 DES-CBC",
            "use": "encryption, decryption (with message authentication code)"
          },
          {
            "name": "AEAD-SHA-1 TDES-CBC",
            "use": "encryption, decryption (with message authentication code)"
          },
          {
            "name": "SM3",
            "use": "hashing"
          },
          {
            "name": "SM4",
            "use": "encryption, decryption"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [
          {
            "alg_accessed": "AES-GCM (external IV) DES-CBC DES-ECB TDES (two independent keys) TDES Encryption (three independent keys) SM4",
            "description": "Encrypts data using symmetric cryptography",
            "name": "Encryption",
            "role": "CO"
          },
          {
            "alg_accessed": "AES-GCM (external IV) DES-CBC DES-ECB",
            "description": "Decrypts data using symmetric cryptography",
            "name": "Decryption",
            "role": "CO"
          },
          {
            "alg_accessed": "TDES (two independent keys) SM4",
            "description": "",
            "name": "",
            "role": ""
          },
          {
            "alg_accessed": "SM3",
            "description": "Hashing algorithm",
            "name": "Hash",
            "role": "CO"
          },
          {
            "alg_accessed": "HMAC SHA-1 with key size other than 512 bits HMAC SHA2-256 with key sizes other than 512 bits HMAC SHA2-384 with key sizes other than 512 bits HMAC SHA2-512 with key sizes other than 512 bits HMAC SHA3-224 with key sizes other than 512 bits HMAC SHA3-256 with key sizes other than 512 bits HMAC SHA3-384 with key sizes other than 512 bits HMAC SHA3-512 with key sizes other than 512 bits",
            "description": "Computes the MAC value of data",
            "name": "Message Authentication",
            "role": "CO"
          },
          {
            "alg_accessed": "AEAD-SHA-1 AES-CBC AEAD-SHA-1 AES-CTR AEAD-SHA-1 DES-CBC AEAD-SHA-1 TDES-CBC",
            "description": "Encrypts or decrypts data using symmetric cryptography",
            "name": "Authenticated Encryption/Decryption [AEAD]",
            "role": "CO"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "All input data",
            "logicalInterface": "Data Input",
            "physicalPort": "Data In FIFO and Registers"
          },
          {
            "data": "All data output except Status information",
            "logicalInterface": "Data Output",
            "physicalPort": "Data Out FIFO"
          },
          {
            "data": "Command input",
            "logicalInterface": "Control Input",
            "physicalPort": "Registers"
          },
          {
            "data": "Status information",
            "logicalInterface": "Status Output",
            "physicalPort": "Registers"
          },
          {
            "data": "Power from SoC power port",
            "logicalInterface": "Power",
            "physicalPort": "Physical power connector"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "None",
            "name": "Crypto Officer",
            "operatorType": "CO",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "1",
            "section": "1",
            "title": "General"
          },
          {
            "level": "1",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "1",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "1",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "N/A",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "N/A",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "2",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "1",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "1",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "2",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "N/A",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "1",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [],
        "found": false,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "Hardware FIFO and Registers",
            "distribution": "N/A",
            "entry": "N/A",
            "format": "Plaintext",
            "name": "Input parameter",
            "sfiAlgo": "",
            "source": "Caller within the physical perimeter"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "All SSPs will be zeroized",
            "method": "Power-off",
            "operatorId": "Operator can initiate this zeroization method by powering off the module",
            "rationale": "The registers holding the SSPs are set to all zeroes"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "Temporary storage for SSPs used by the module as part of service execution",
            "name": "Hardware FIFO",
            "persistance": "Dynamic"
          },
          {
            "description": "Temporary storage for SSPs used by the module as part of service execution",
            "name": "Registers",
            "persistance": "Dynamic"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "5.8.2",
            "modelPartNum": "Qualcomm Dragonwing(TM) Q-6690 with modem",
            "processors": "N/A"
          },
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "5.8.2",
            "modelPartNum": "Qualcomm Dragonwing(TM) Q-6690 without modem",
            "processors": "N/A"
          },
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "5.8.2",
            "modelPartNum": "Snapdragon\u00ae 6 Gen 4 Mobile Platform",
            "processors": "N/A"
          },
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "5.8.2",
            "modelPartNum": "Snapdragon\u00ae 7s Gen 3 Mobile Platform",
            "processors": "N/A"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {},
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 5
        },
        "CCM": {
          "CCM": 8
        },
        "CTR": {
          "CTR": 3
        },
        "ECB": {
          "ECB": 4
        },
        "XEX": {
          "XEX": 1
        },
        "XTS": {
          "XTS": 8
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "AEAD": {
          "AEAD": 1
        },
        "MAC": {
          "MAC": 22
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "atsec": {
          "atsec": 2
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "HMAC SHA-1": 2,
          "HMAC- SHA-1": 1,
          "HMAC-SHA- 1": 2,
          "HMAC-SHA-1": 6,
          "SHA- 1": 3,
          "SHA-1": 12,
          "SHA-3": 1,
          "SHA1": 1,
          "SHA2": 1,
          "SHA2 -256": 1,
          "SHA2 -384": 2,
          "SHA2 -512": 2,
          "SHA2- 256": 1,
          "SHA2- 384": 1,
          "SHA2- 512": 1,
          "SHA2-256": 7,
          "SHA2-384": 7,
          "SHA2-512": 7,
          "SHA3 -224": 2,
          "SHA3 -256": 1,
          "SHA3 -384": 2,
          "SHA3 -512": 2,
          "SHA3- 224": 1,
          "SHA3- 256": 1,
          "SHA3- 384": 2,
          "SHA3- 512": 1,
          "SHA3-224": 7,
          "SHA3-256": 8,
          "SHA3-384": 7,
          "SHA3-512": 8
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "Level 2": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 12,
            "SHA1": 1
          },
          "SHA2": {
            "SHA2": 8
          },
          "SHA3": {
            "SHA-3": 1,
            "SHA3": 9,
            "SHA3-224": 7,
            "SHA3-256": 8,
            "SHA3-384": 7,
            "SHA3-512": 8
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 45,
          "FIPS 180-4": 2,
          "FIPS 197": 1,
          "FIPS 198-1": 6,
          "FIPS 202": 2,
          "FIPS PUB 140-3": 1
        },
        "NIST": {
          "NIST SP 800-57": 1,
          "SP 800-38A": 4,
          "SP 800-38B": 2,
          "SP 800-38C": 2,
          "SP 800-38E": 2,
          "SP 800-67": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 34,
            "AES-": 19
          },
          "CAST": {
            "CAST": 22
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 1,
            "TDES": 13,
            "Triple-DES": 1
          },
          "DES": {
            "DES": 4
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 5,
            "HMAC": 30
          }
        },
        "miscellaneous": {
          "SM4": {
            "SM4": 3
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Qualcomm": {
          "Qualcomm": 113
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "SHA3-224A6506",
        "SHA2-512A6506",
        "TDES-CBCA6506",
        "HMAC-SHA2-512A6506",
        "AES-CBCA6506",
        "SHA3-512A6506",
        "HMAC-SHA3-256A6506",
        "HMAC-SHA3-512A6506",
        "SHA3-256A6506",
        "HMAC-SHA-1A6506",
        "AES-ECBA6506",
        "AES-CBC-CS2A6506",
        "HMAC-SHA3-384A6506",
        "SHA-1A6506",
        "HMAC-SHA3-224A6506",
        "AES-CCMA6506",
        "SHA2-256A6506",
        "SHA3-384A6506",
        "HMAC-SHA2-256A6506",
        "SHA2-384A6506",
        "AES-XTS Testing Revision 2.0A6506",
        "AES-CMACA6506",
        "AES-CTRA6506",
        "HMAC-SHA2-384A6506",
        "TDES-ECBA6506"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A6506"
      ]
    },
    "policy_metadata": {
      "/CreationDate": "D:20261015082004-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20261015082004-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 918249,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://doi.org/10.6028/NIST.FIPS.202",
          "https://doi.org/10.6028/NIST.SP.800-38C",
          "https://doi.org/10.6028/NIST.FIPS.197-upd1",
          "https://doi.org/10.6028/NIST.FIPS.180-4",
          "https://doi.org/10.6028/NIST.FIPS.198-1",
          "https://doi.org/10.6028/NIST.SP.800-38B",
          "https://doi.org/10.6028/NIST.SP.800-67r2",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
          "https://doi.org/10.6028/NIST.FIPS.140-3",
          "https://doi.org/10.6028/NIST.SP.800-38E",
          "https://doi.org/10.6028/NIST.SP.800-38A"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 36
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "778d5acc436a77f4223e0de6fb0c24b9eb981353e27b39639d89bd626c5d0963",
      "source_hash": "fc0d816b0c6c205b6f0ba6caef15982a069616f552e5d145fdbb74dc24a3a687",
      "txt_hash": "2f9e02b2a4ac4d70d9de5046e26017397e39c21d3e9b705d833c7a951154dd82"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
    "certificate_pdf_url": null,
    "date_sunset": "2031-10-18",
    "description": "Qualcomm Crypto Engine Core is a general purpose cryptographic hardware engine capable of securely processing various confidentiality and integrity algorithms across multiple execution environments.",
    "embodiment": "SingleChip",
    "exceptions": [
      "Software/Firmware security: N/A",
      "Operational environment: N/A",
      "Physical security: Level 2",
      "Non-invasive security: N/A",
      "Life-cycle assurance: Level 2",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Qualcomm\u00ae Crypto Engine Core",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-10-19",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Qualcomm Technologies, Inc.",
    "vendor_url": "http://www.qualcomm.com"
  }
}