Qualcomm® Inline Crypto Engine (UFS)

Certificate details

Certificate ID #5338
Status active
Validation dates 17.06.2026
Sunset date 24-07-2029
Standard FIPS 140-3
Security level 1
Type Hardware
Embodiment SingleChip
Caveat When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs
Exceptions
  • Software/Firmware security: N/A
  • Operational environment: N/A
  • Physical security: Level 2
  • Non-invasive security: N/A
  • Life-cycle assurance: Level 2
  • Mitigation of other attacks: N/A
Description Qualcomm® Inline Crypto Engine (UFS) provides high throughput storage data encryption and decryption. Inline Crypto Engine (UFS) versions 3.2.0 [1], 3.2.1 [2], 4.0.1 [3] and 4.0.2 [4] are supported by various Qualcomm platforms including Qualcomm QCM6490 [1], Qualcomm QCM4490 [2], Qualcomm QCS6490 [1], Qualcomm QCS4490 [2], Snapdragon® 695 5G Mobile Platform [1], Snapdragon 8 Gen 2 Mobile Platform [3], Snapdragon 8+ Gen 1 Mobile Platform [2], Snapdragon 4 Gen 2 Mobile Platform [2], Snapdragon 6 Gen 1 Mobile Platform [2], Snapdragon 7 Gen 1 Mobile Platform [2], Snapdragon 8 Gen 1 Mobile Platform [2], and Snapdragon 8 Gen 3 Mobile Platform [4].
Vendor Qualcomm Technologies, Inc. http://www.qualcomm.com
Lab atsec information security corporation
Algorithms
  • AES-ECBA4288
  • AES-XTS Testing Revision 2.0A4288
  • AES-XTSA772
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-, CAST
Randomness
RBG
Block cipher modes
ECB, XTS

Vendor
Qualcomm

Security level
Level 1, Level 2

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

Feed
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5338,
  "dgst": "0a95ca5e3efad73c",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "AES-XTS Testing Revision 2.0A4288",
        "#A2886",
        "#A2116",
        "#A2887",
        "#A4288",
        "#A2117",
        "#A4287",
        "AES-ECBA4288",
        "#A772",
        "AES-XTSA772",
        "#A771"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 1,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A2116",
            "properties": "Direction - Encrypt Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A2117",
            "properties": "Direction - Decrypt Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A2886",
            "properties": "Direction - Encrypt Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A2887",
            "properties": "Direction - Decrypt Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A4287",
            "properties": "Direction - Encrypt Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A4288",
            "properties": "Direction - Decrypt Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A771",
            "properties": "Direction - Encrypt Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A772",
            "properties": "Direction - Decrypt Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-XTS",
            "cavpCertName": "A771",
            "properties": "Direction - Encrypt Key Length - 128, 256 Payload Length - Payload Length: 512, 1024, 2048, 4096, 8192, 16384, 32768, 65536 Tweak Mode - Number",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "AES-XTS",
            "cavpCertName": "A772",
            "properties": "Direction - Decrypt Key Length - 128, 256 Payload Length - Payload Length: 512, 1024, 2048, 4096, 8192, 16384, 32768, 65536 Tweak Mode - Number",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "AES-XTS Testing Revision 2.0",
            "cavpCertName": "A2116",
            "properties": "Direction - Encrypt Key Length - 128, 256 Payload Length - Payload Length: 512, 1024, 2048, 4096, 8192, 16384, 32768, 65536 Tweak Mode - Number Data Unit Length Matches Payload Length - Yes",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "AES-XTS Testing Revision 2.0",
            "cavpCertName": "A2117",
            "properties": "Direction - Decrypt Key Length - 128, 256 Payload Length - Payload Length: 512, 1024, 2048, 4096, 8192, 16384, 32768, 65536 Tweak Mode - Number Data Unit Length Matches Payload Length - Yes",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "AES-XTS Testing Revision 2.0",
            "cavpCertName": "A2886",
            "properties": "Direction - Encrypt Key Length - 128, 256 Payload Length - Payload Length: 512, 1024, 2048, 4096, 8192, 16384, 32768, 65536 Tweak Mode - Number Data Unit Length Matches Payload Length - Yes",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "AES-XTS Testing Revision 2.0",
            "cavpCertName": "A2887",
            "properties": "Direction - Decrypt Key Length - 128, 256 Payload Length - Payload Length: 512, 1024, 2048,",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "",
            "cavpCertName": "",
            "properties": "4096, 8192, 16384, 32768, 65536 Tweak Mode - Number Data Unit Length Matches Payload Length - Yes",
            "reference": ""
          },
          {
            "algorithm": "AES-XTS Testing Revision 2.0",
            "cavpCertName": "A4287",
            "properties": "Direction - Encrypt Key Length - 128, 256 Payload Length - Payload Length: 512, 1024, 2048, 4096, 8192, 16384, 32768, 65536 Tweak Mode - Number Data Unit Length Matches Payload Length - Yes",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "AES-XTS Testing Revision 2.0",
            "cavpCertName": "A4288",
            "properties": "Direction - Decrypt Key Length - 128, 256 Payload Length - Payload Length: 512, 1024, 2048, 4096, 8192, 16384, 32768, 65536 Tweak Mode - Number Data Unit Length Matches Payload Length - Yes",
            "reference": "SP 800-38E"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Perform data encryption",
            "indicator": "UFS_MEM_ICE_PARA METERS_4 register bits 0 and 1 indicating value 00",
            "inputs": "AES Key, Plainte xt",
            "name": "AES Encrypt ion",
            "outputs": "Ciphertext, Success/Fail",
            "rolesSspAccess": "Cryp to Offi cer - AES key: W,E",
            "secFunImpl": "AES- ECB AES- XTS"
          },
          {
            "description": "Perform data decryption",
            "indicator": "UFS_MEM_ICE_PARA METERS_4 register bits 0 and 1 indicating value 00",
            "inputs": "AES Key, Cipher text",
            "name": "AES Decrypt ion",
            "outputs": "Plaintext, Success/Fail",
            "rolesSspAccess": "Cryp to Offi cer - AES key: W,E",
            "secFunImpl": "AES- ECB AES- XTS"
          },
          {
            "description": "Return code read from register UFS_MEM_ICE_BIST _STATUS",
            "indicator": "None",
            "inputs": "N/A",
            "name": "Show Status",
            "outputs": "Module status",
            "rolesSspAccess": "Cryp to Offi cer",
            "secFunImpl": "None"
          },
          {
            "description": "Self-Tests are executed automatically when",
            "indicator": "None",
            "inputs": "None",
            "name": "Self- Test",
            "outputs": "Self-test Success/Fail",
            "rolesSspAccess": "Cryp to",
            "secFunImpl": "None"
          },
          {
            "description": "device is booted or restarted",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "Offi cer",
            "secFunImpl": ""
          },
          {
            "description": "Zeroizes all SSPs",
            "indicator": "None",
            "inputs": "None",
            "name": "Zeroiza tion",
            "outputs": "None",
            "rolesSspAccess": "Cryp to Offi cer - AES key: Z",
            "secFunImpl": "None"
          },
          {
            "description": "Configures the keys for Crypto Officer role",
            "indicator": "None",
            "inputs": "AES Key",
            "name": "Configu re keys for use by Crypto Officer",
            "outputs": "Success/Fail",
            "rolesSspAccess": "Cryp to Offi cer - AES key: W",
            "secFunImpl": "None"
          },
          {
            "description": "Show the version and name of the module",
            "indicator": "None",
            "inputs": "None",
            "name": "Show version",
            "outputs": "Name and Version information read from register UFS_MEM_ICE_V ERSION",
            "rolesSspAccess": "Cryp to Offi cer",
            "secFunImpl": "None"
          },
          {
            "description": "Configuring the keys to be used by module",
            "indicator": "None",
            "inputs": "AES Key",
            "name": "Setting encrypt ion and decrypt ion keys",
            "outputs": "None",
            "rolesSspAccess": "Cryp to Offi cer - AES key: W",
            "secFunImpl": "None"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "AES-ECB (A2116)",
            "condition": "Performed during module power-up",
            "details": "Encryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A2117)",
            "condition": "Performed during module power-up",
            "details": "Decryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A2886)",
            "condition": "Performed during module power-up",
            "details": "Encryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A2887)",
            "condition": "Performed during module power-up",
            "details": "Decryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A4287)",
            "condition": "Performed during module power-up",
            "details": "Encryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A4288)",
            "condition": "Performed during module power-up",
            "details": "Decryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A771)",
            "condition": "Performed during module power-up",
            "details": "Encryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A772)",
            "condition": "Performed during module power-up",
            "details": "Decryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "KAT failure",
            "description": "No cryptographic operation can be performed. No data input or output is possible.",
            "indicator": "BIST_FAILURE indicator is set",
            "name": "Error",
            "recoveryMethod": "Power cycling"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [
          {
            "inspectFreq": "N/A",
            "inspectGuidance": "N/A",
            "mechanism": "Tamper evident coating"
          }
        ],
        "found": true,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [
          {
            "description": "Automatically entered whenever an approved service is requested",
            "name": "Approved mode of operation",
            "statusIndicator": "0",
            "type": "Approved"
          },
          {
            "description": "Automatically entered whenever a non-approved service is requested",
            "name": "Non-approved mode of operation",
            "statusIndicator": "1",
            "type": "Non- Approved"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [
          {
            "name": "AES bitlocker",
            "use": "encryption, decryption"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [
          {
            "alg_accessed": "AES bitlocker",
            "description": "Perform data encryption/decryption",
            "name": "Bitlocker Encryption/Decryption",
            "role": "CO"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "All input data",
            "logicalInterface": "Data Input",
            "physicalPort": "Data In FIFO/DMA, registers"
          },
          {
            "data": "All data output except Status information",
            "logicalInterface": "Data Output",
            "physicalPort": "Data Out FIFO/DMA"
          },
          {
            "data": "Command input",
            "logicalInterface": "Control Input",
            "physicalPort": "Registers, interrupts"
          },
          {
            "data": "Status information",
            "logicalInterface": "Status Output",
            "physicalPort": "Registers, interrupts"
          },
          {
            "data": "Power from SoC power port",
            "logicalInterface": "Power",
            "physicalPort": "Physical power connector"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "None",
            "name": "Crypto Officer",
            "operatorType": "CO",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "1",
            "section": "1",
            "title": "General"
          },
          {
            "level": "1",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "1",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "1",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "N/A",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "N/A",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "2",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "1",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "1",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "2",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "N/A",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "1",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [],
        "found": false,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "Hardware register",
            "distribution": "N/A",
            "entry": "N/A",
            "format": "Plaintext",
            "name": "Input parameter",
            "sfiAlgo": "",
            "source": "Caller within the physical perimeter"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "All SSPs will be zeroized",
            "method": "Power-off",
            "operatorId": "Operator can initiate this zeroization method by powering off the module",
            "rationale": "The registers holding the SSPs are set to all zeroes"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "Temporary storage for SSPs used by the module as part of service execution",
            "name": "Hardware register",
            "persistance": "Dynamic"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "3.2.1",
            "modelPartNum": "Snapdragon\u00ae 8 Gen 1 Mobile Platform",
            "processors": "Snapdragon\u00ae 8 Gen 1 Mobile Platform"
          },
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "3.2.1",
            "modelPartNum": "Snapdragon 8+ Gen 1 Mobile Platform",
            "processors": "Snapdragon 8+ Gen 1 Mobile Platform"
          },
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "3.2.0",
            "modelPartNum": "Qualcomm\u00ae QCM6490",
            "processors": "Qualcomm\u00ae QCM6490"
          },
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "3.2.0",
            "modelPartNum": "Qualcomm\u00ae QCS6490",
            "processors": "Qualcomm\u00ae QCS6490"
          },
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "4.0.1",
            "modelPartNum": "Snapdragon 8 Gen 2 Mobile Platform",
            "processors": "Snapdragon 8 Gen 2 Mobile Platform"
          },
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "3.2.0",
            "modelPartNum": "Snapdragon 695 5G Mobile Platform",
            "processors": "Snapdragon 695 5G Mobile Platform"
          },
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "3.2.1",
            "modelPartNum": "Snapdragon\u00ae 6 Gen 1 Mobile Platform",
            "processors": "Snapdragon\u00ae 6 Gen 1 Mobile Platform"
          },
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "4.0.2",
            "modelPartNum": "Snapdragon\u00ae 8 Gen 3 Mobile Platform",
            "processors": "Snapdragon\u00ae 8 Gen 3 Mobile Platform"
          },
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "3.2.1",
            "modelPartNum": "Snapdragon\u00ae 7 Gen 1 Mobile Platform",
            "processors": "Snapdragon\u00ae 7 Gen 1 Mobile Platform"
          },
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "3.2.1",
            "modelPartNum": "Qualcomm\u00ae QCM4490",
            "processors": "Qualcomm\u00ae QCM4490"
          },
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "3.2.1",
            "modelPartNum": "Qualcomm\u00ae QCS4490",
            "processors": "Qualcomm\u00ae QC4490"
          },
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "3.2.1",
            "modelPartNum": "Snapdragon\u00ae 4 Gen 2 Mobile Platform",
            "processors": "Snapdragon\u00ae 4 Gen 2 Mobile Platform"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {},
      "certification_process": {},
      "cipher_mode": {
        "ECB": {
          "ECB": 5
        },
        "XTS": {
          "XTS": 8
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "atsec": {
          "atsec": 2
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {},
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "Level 2": 1
        }
      },
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RBG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 20,
          "FIPS 197": 1
        },
        "NIST": {
          "SP 800-38A": 8,
          "SP 800-38E": 9
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 27,
            "AES-": 6
          },
          "CAST": {
            "CAST": 16
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Qualcomm": {
          "Qualcomm": 81
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "AES-XTSA772",
        "AES-ECBA4288",
        "AES-XTS Testing Revision 2.0A4288"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A2886",
        "#A2116",
        "#A2887",
        "#A4288",
        "#A2117",
        "#A4287",
        "#A772",
        "#A771"
      ]
    },
    "policy_metadata": {
      "/Author": "Hawes, David J. (Fed)",
      "/CreationDate": "D:20260616134258-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20260616134258-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 1332423,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 31
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "ae58e9ec84ab0ed704a1ea3d625430b4ecce0cb579861b8ddcaf02502b399cda",
      "source_hash": "20d0b95377d7bf8689a9528ddbc48d80e3b91c11e9fd671964102032e200a918",
      "txt_hash": "e65e34f46b108833b57d7b1c4dec888661b3b69299550b1c7fa778b9b30d34d4"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf",
    "date_sunset": "2029-07-24",
    "description": "Qualcomm\u00ae Inline Crypto Engine (UFS) provides high throughput storage data encryption and decryption. Inline Crypto Engine (UFS) versions 3.2.0 [1], 3.2.1 [2], 4.0.1 [3] and 4.0.2 [4] are supported by various Qualcomm platforms including Qualcomm QCM6490 [1], Qualcomm QCM4490 [2], Qualcomm QCS6490 [1], Qualcomm QCS4490 [2], Snapdragon\u00ae 695 5G Mobile Platform [1], Snapdragon 8 Gen 2 Mobile Platform [3], Snapdragon 8+ Gen 1 Mobile Platform [2], Snapdragon 4 Gen 2 Mobile Platform [2], Snapdragon 6 Gen 1 Mobile Platform [2], Snapdragon 7 Gen 1 Mobile Platform [2], Snapdragon 8 Gen 1 Mobile Platform [2], and Snapdragon 8 Gen 3 Mobile Platform [4].",
    "embodiment": "SingleChip",
    "exceptions": [
      "Software/Firmware security: N/A",
      "Operational environment: N/A",
      "Physical security: Level 2",
      "Non-invasive security: N/A",
      "Life-cycle assurance: Level 2",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Qualcomm\u00ae Inline Crypto Engine (UFS)",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-06-17",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Qualcomm Technologies, Inc.",
    "vendor_url": "http://www.qualcomm.com"
  }
}