This page was not yet optimized for use on mobile devices.
Samsung CryptoCore Cryptographic Module
Certificate details
| Certificate ID | #4787 |
|---|---|
| Status | active |
| Validation dates | 03.09.2024 |
| Sunset date | 02-09-2029 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | No assurance of the minimum strength of generated SSPs (e.g., keys) and random strings. |
| Exceptions |
|
| Description | The Samsung CryptoCore Cryptographic Module is a software library implementing general-purpose cryptographic algorithms. |
| Vendor | Samsung Electronics Co., Ltd. https://www.samsung.com/sec |
| Lab | TUVIT Evaluation Body for IT Security |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, CAST, HMAC, CMACAsymmetric Algorithms
ECDSA, ECCHash functions
SHA-256Schemes
MACRandomness
DRBG, RBGElliptic Curves
P-224, P-256, P-384, P-192, P-521Block cipher modes
CTRTrusted Execution Environments
PSPVendor
SamsungSecurity level
Level 1Standards
FIPS 140-3, FIPS PUB 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 180-4, FIPS 186-5, SP 800-38A, SP 800-38B, SP 800-90A, SP 800-56A, SP 800-186, PKCS 1Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4787,
"dgst": "22046fca3d05f073",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"KAS-ECC CDH-Component SP800-56Ar3A4968",
"AES-CBCA4968",
"SHA2-224A4968",
"SHA2-384A4968",
"RSA KeyGen (FIPS186-4)A4968",
"AES-ECBA4968",
"AES-CMACA4968",
"AES-CFB128A4968",
"HMAC-SHA2-512A4968",
"SHA2-256A4968",
"ECDSA SigGen (FIPS186-4)A4968",
"HMAC-SHA2-256A4968",
"ECDSA SigVer (FIPS186-4)A4968",
"RSA SigGen (FIPS186-4)A4968",
"ECDSA KeyVer (FIPS186-4)A4968",
"SHA2-512A4968",
"HMAC-SHA2-224A4968",
"AES-OFBA4968",
"HMAC DRBGA4968",
"RSA SigVer (FIPS186-4)A4968",
"AES-CTRA4968",
"HMAC-SHA2-384A4968",
"ECDSA KeyGen (FIPS186-4)A4968",
"#A4968"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A4968",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A4968",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4968",
"properties": "Direction - Generation, Verification Key Length - 128",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4968",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4968",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A4968",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4968",
"properties": "Curve - P-224, P-256, P-384, P- 521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A4968",
"properties": "Curve - P-192, P-224, P-256, P- 384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4968",
"properties": "Curve - P-224, P-256, P-384, P- 521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4968",
"properties": "Curve - P-192, P-224, P-256, P- 384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A4968",
"properties": "Prediction Resistance - No Mode - SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4968",
"properties": "Key Length - Key Length: 112, 504, 512, 520, 2048",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4968",
"properties": "Key Length - Key Length: 112, 504, 512, 520, 2048",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4968",
"properties": "Key Length - Key Length: 112, 504, 1024, 1032, 2048",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4968",
"properties": "Key Length - Key Length: 112, 504, 1024, 1032, 2048",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC CDH-Component SP800-56Ar3 (CVL)",
"cavpCertName": "A4968",
"properties": "-",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A4968",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4968",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4968",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4968",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4968",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4968",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A4968",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Encrypt a plaintext",
"indicator": "The successful completion of a service is an implicit indicator for the use of an approved service",
"inputs": "Key, plain text, mode, padding method, initialization vector",
"name": "Symmetric encryption",
"outputs": "Cipher text",
"rolesSspAccess": "Crypto Officer - AES keys: R,E",
"secFunImpl": "AES encryption"
},
{
"description": "Decrypt a cipher text",
"indicator": "The successful completion of a service is an implicit indicator for the use of an approved service",
"inputs": "Key, cipher text, mode, padding, initialization vector",
"name": "Symmetric decryption",
"outputs": "Plain text",
"rolesSspAccess": "Crypto Officer - AES keys: R,E",
"secFunImpl": "AES decryption"
},
{
"description": "Generate asymmetric RSA and ECC key pair",
"indicator": "The successful completion of a service is an implicit indicator for the use of an approved service",
"inputs": "RSA: padding method, modulus length, optionally fixed private key, entropy input string; ECDSA: curve, entropy input string",
"name": "Asymmetric key generation",
"outputs": "Key pair",
"rolesSspAccess": "Crypto Officer - RSA private key: G,R,W - RSA public key: G,W - ECDSA private key: G,W - ECDSA public key: G,W - ECC CDH private key: G,W - ECC CDH public key: G,W - Intermediate key generation",
"secFunImpl": "RSA key pair generation ECC key generation"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "values: G,E,Z - Entropy input string: R - DRBG V: G,E - DRBG Key: G,E - Entropy buffer: E",
"secFunImpl": ""
},
{
"description": "Generate digital signature",
"indicator": "The successful completion of a service is an implicit indicator for the use of an approved service",
"inputs": "RSA: private key, message, modulus, padding method; ECDSA: public key, message, curve",
"name": "Digital signature generation",
"outputs": "Signature",
"rolesSspAccess": "Crypto Officer - RSA private key: R,E - ECDSA private key: R,E",
"secFunImpl": "RSA signature generation ECDSA signature generation"
},
{
"description": "Verify digital signature",
"indicator": "The successful completion of a service is an implicit indicator for the use of an approved service",
"inputs": "RSA: public key, message, signature, modulus, padding method; ECDSA: public key, message, signature, curve",
"name": "Digital signature verification",
"outputs": "Verification result",
"rolesSspAccess": "Crypto Officer - RSA public key: R,E - ECDSA public key: R,E",
"secFunImpl": "RSA signature generation ECDSA signature verification ECDSA public key validation"
},
{
"description": "Generate message digest",
"indicator": "The successful completion of a service is an implicit indicator for the use of an approved service",
"inputs": "Message, algorithm",
"name": "Message digest generation",
"outputs": "Message digest",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Hash generation"
},
{
"description": "Generate message",
"indicator": "The successful completion of a service is an",
"inputs": "Message, algorithm, key",
"name": "MAC generation",
"outputs": "MAC",
"rolesSspAccess": "Crypto Officer - CMAC keys: R,E",
"secFunImpl": "HMAC generation"
},
{
"description": "authentication code",
"indicator": "implicit indicator for the use of an approved service",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- HMAC keys: R,E",
"secFunImpl": "CMAC generation"
},
{
"description": "Generate random number",
"indicator": "The successful completion of a service is an implicit indicator for the use of an approved service",
"inputs": "Entropy input string, Personalization string, additional input",
"name": "Random number generation",
"outputs": "Random bits",
"rolesSspAccess": "Crypto Officer - Entropy input string: R - DRBG V: G,E - DRBG Key: G,E - Entropy buffer: E",
"secFunImpl": "DRBG"
},
{
"description": "Compute shared secret",
"indicator": "The successful completion of a service is an implicit indicator for the use of an approved service",
"inputs": "Received public key, private key",
"name": "Shared secret computation",
"outputs": "Shared secret",
"rolesSspAccess": "Crypto Officer - ECC CDH received public key: R,E - ECC CDH private key: R,E - Shared secret: G,W",
"secFunImpl": "Shared secret computation"
},
{
"description": "Show status of the module",
"indicator": "N/A",
"inputs": "None",
"name": "Show status",
"outputs": "Status information",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Show the versioning information of the module",
"indicator": "N/A",
"inputs": "None",
"name": "Show module\u0027s versioning information",
"outputs": "Module name and version",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Zeroize SSP",
"indicator": "N/A",
"inputs": "None",
"name": "Zeroization",
"outputs": "None",
"rolesSspAccess": "Crypto Officer - AES keys: Z - CMAC keys: Z - HMAC keys:",
"secFunImpl": "None"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Z - RSA private key: Z - RSA public key: Z - ECDSA private key: Z - ECDSA public key: Z - ECC CDH private key: Z - ECC CDH public key: Z - Entropy buffer: Z - DRBG V: Z - DRBG Key: Z",
"secFunImpl": ""
},
{
"description": "Initiate cryptographic algorithm self-test and integrity test",
"indicator": "The successful completion of a service is an implicit indicator for the use of an approved service",
"inputs": "Entropy input string",
"name": "Cryptographic algorithm self- test and integrity test",
"outputs": "Status information",
"rolesSspAccess": "Crypto Officer - Entropy input string: R - DRBG V: G,E - DRBG Key: G,E - Entropy buffer: E",
"secFunImpl": "AES decryption HMAC generation CMAC generation Hash generation RSA signature generation RSA signature verification ECDSA"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "signature generation ECDSA signature verification ECDSA public key validation DRBG Shared secret computation"
},
{
"description": "Run cryptographic algorithm self-test and integrity test at the module start-up",
"indicator": "The successful completion of a service is an implicit indicator for the use of an approved service",
"inputs": "Entropy input string",
"name": "Module start-up",
"outputs": "Status information",
"rolesSspAccess": "Crypto Officer - Entropy input string: R - DRBG V: G,E - DRBG Key: G,E - Entropy buffer: E",
"secFunImpl": "AES decryption HMAC generation CMAC generation Hash generation RSA signature generation RSA signature verification ECDSA signature generation ECDSA signature verification ECDSA"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "public key validation DRBG Shared secret computation"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-ECB (A4968)",
"condition": "During module start- up or on-",
"details": "AES decryption",
"indicator": "When the test passes, get_fips_status_reason() returns",
"testMethod": "KAT",
"testProps": "Key length: 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "demand using fips_post()",
"details": "",
"indicator": "FIPS_STATUS_SUCCESS, otherwise it returns FIPS_STATUS_SELFTEST_FAIL",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-CMAC (A4968)",
"condition": "During module start- up or on- demand using fips_post()",
"details": "CMAC generation",
"indicator": "When the test passes, get_fips_status_reason() returns FIPS_STATUS_SUCCESS, otherwise it returns FIPS_STATUS_SELFTEST_FAIL",
"testMethod": "KAT",
"testProps": "Key length: 128 bits",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4968)",
"condition": "During module start- up or on- demand using fips_post()",
"details": "Hash generation",
"indicator": "When the test passes, get_fips_status_reason() returns FIPS_STATUS_SUCCESS, otherwise it returns FIPS_STATUS_SELFTEST_FAIL",
"testMethod": "KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4968)",
"condition": "During module start- up or on- demand using fips_post()",
"details": "Hash generation",
"indicator": "When the test passes, get_fips_status_reason() returns FIPS_STATUS_SUCCESS, otherwise it returns FIPS_STATUS_SELFTEST_FAIL",
"testMethod": "KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A4968)",
"condition": "During module start- up or on- demand using fips_post()",
"details": "Hash generation",
"indicator": "When the test passes, get_fips_status_reason() returns FIPS_STATUS_SUCCESS, otherwise it returns FIPS_STATUS_SELFTEST_FAIL",
"testMethod": "KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4968)",
"condition": "During module start- up or on- demand using fips_post()",
"details": "Hash generation",
"indicator": "When the test passes, get_fips_status_reason() returns FIPS_STATUS_SUCCESS, otherwise it returns FIPS_STATUS_SELFTEST_FAIL",
"testMethod": "KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A4968)",
"condition": "During module start- up or on- demand using fips_post()",
"details": "HMAC generation",
"indicator": "When the test passes, get_fips_status_reason() returns FIPS_STATUS_SUCCESS, otherwise it returns FIPS_STATUS_SELFTEST_FAIL",
"testMethod": "KAT",
"testProps": "Key length: 1024 bits",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4968)",
"condition": "During module start- up or on- demand using fips_post()",
"details": "RSA digital signature generation",
"indicator": "When the test passes, get_fips_status_reason() returns FIPS_STATUS_SUCCESS, otherwise it returns FIPS_STATUS_SELFTEST_FAIL",
"testMethod": "KAT",
"testProps": "Key length: 2048 bits, Padding: PKCS-v1.5",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4968)",
"condition": "During module start- up or on- demand using fips_post()",
"details": "RSA digital signature verification",
"indicator": "When the test passes, get_fips_status_reason() returns FIPS_STATUS_SUCCESS, otherwise it returns FIPS_STATUS_SELFTEST_FAIL",
"testMethod": "KAT",
"testProps": "Key length: 2048 bits, Padding: PKCS-v1.5",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4968)",
"condition": "During module start- up or on- demand using fips_post()",
"details": "ECDSA digital signature generation",
"indicator": "When the test passes, get_fips_status_reason() returns FIPS_STATUS_SUCCESS, otherwise it returns FIPS_STATUS_SELFTEST_FAIL",
"testMethod": "KAT",
"testProps": "Curve: P- 224, Hash function: SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4968)",
"condition": "During module start- up or on- demand using fips_post()",
"details": "ECDSA digital signature verification",
"indicator": "When the test passes, get_fips_status_reason() returns FIPS_STATUS_SUCCESS, otherwise it returns FIPS_STATUS_SELFTEST_FAIL",
"testMethod": "KAT",
"testProps": "Curve: P- 224, Hash function: SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC CDH- Component",
"condition": "During module start- up or on-",
"details": "Shared secret computation",
"indicator": "When the test passes, get_fips_status_reason() returns",
"testMethod": "KAT",
"testProps": "Curve: P- 224",
"type": "CAST"
},
{
"algorithmOrTest": "SP800- 56Ar3 (A4968)",
"condition": "demand using fips_post()",
"details": "",
"indicator": "FIPS_STATUS_SUCCESS, otherwise it returns FIPS_STATUS_SELFTEST_FAIL",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC DRBG (A4968)",
"condition": "During module start- up or on- demand using fips_post()",
"details": "KAT of instantiation, reseeding, generate, and generate calls in one sweep according to SP 800-90Ar1, Sec. 11.3 and 7. of IG 10.3.A",
"indicator": "When the test passes, get_fips_status_reason() returns FIPS_STATUS_SUCCESS, otherwise it returns FIPS_STATUS_SELFTEST_FAIL",
"testMethod": "KAT",
"testProps": "MAC: HMAC- SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A4968)",
"condition": "Every 400 generate calls of an DRBG instance",
"details": "Same as test above, but the tested MAC variant is chosen based on the one used by the current HMAC instance. The instance state is untouched",
"indicator": "When the test passes, get_fips_status_reason() returns FIPS_STATUS_SUCCESS, otherwise it returns FIPS_STATUS_DRBG_HEALTH_FAIL",
"testMethod": "KAT",
"testProps": "MAC: HMAC- SHA2-256 or HMAC- SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "RSA (FIPS186-4) (A4968)",
"condition": "After each RSA key pair generation and key pair import",
"details": "RSA signature generation and verification of a fixed 32-byte message",
"indicator": "When the test passes, get_fips_status_reason() returns FIPS_STATUS_SUCCESS, otherwise it returns FIPS_STATUS_RSA_PCT_FAIL",
"testMethod": "PCT",
"testProps": "Padding: none",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA (FIPS186-4) (A4968)",
"condition": "After each ECDSA key pair generation",
"details": "ECDSA signature generation and verification of a fixed 32-byte message",
"indicator": "When the test passes, get_fips_status_reason() returns FIPS_STATUS_SUCCESS, otherwise it returns FIPS_STATUS_ECDSA_PCT_FAIL",
"testMethod": "PCT",
"testProps": "N/A",
"type": "PCT"
},
{
"algorithmOrTest": "Algorithm or Test",
"condition": "Conditions",
"details": "Details",
"indicator": "Indicator",
"testMethod": "Test Method",
"testProps": "Test",
"type": "Test Type"
},
{
"algorithmOrTest": "",
"condition": "and key pair",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "Properties",
"type": ""
},
{
"algorithmOrTest": "",
"condition": "import",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Any failure in context of the execution of the implemented self-tests during module start-up or the self-test service",
"description": "The module\u0027s only error state",
"indicator": "get_fips_status() returns FIPS_STATUS_FAIL",
"name": "Error",
"recoveryMethod": "Reloading the module or using fips_post()"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "The module\u0027s only mode of operation in which all approved services are available",
"name": "Approved Mode",
"statusIndicator": "",
"type": "Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [],
"found": false,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API input parameters",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "API output parameters",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "API function calls",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "API return codes, log messages",
"logicalInterface": "Status Output",
"physicalPort": "N/A"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC- SHA2-256 (A4968)",
"details": "This test is performed after the CASTs for SHA2- 256 and HMAC- SHA2-512",
"indicator": "When the test passes, get_fips_status() returns FIPS_STATUS_SUCCESS, otherwise it returns FIPS_STATUS_FAIL and get_fips_status_reason() returns FIPS_STATUS_INTEGRITY_FAIL",
"testMethod": "See (*) below the table.",
"testProps": "Key length: 256 bits",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Volatile memory",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API input",
"sfiAlgo": "",
"source": "Linked application in the TOEPP"
},
{
"dest": "Linked application in the TOEPP",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API output",
"sfiAlgo": "",
"source": "Volatile memory"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "CryptoCoreContainer destructor zeroises all SSPs stored in its context struct",
"method": "Destructor",
"operatorId": "Using destroy_CryptoCoreContainer()",
"rationale": "SSPs are actively overwritten with zeroes and thus not recoverable"
},
{
"description": "Intermediate and temporary SSPs are automatically zeroized by the module before a function returns",
"method": "Intermediate",
"operatorId": "No, done automatically by the module",
"rationale": "SSPs are actively overwritten with zeroes and thus not recoverable"
},
{
"description": "The module\u0027s entropy buffer SSP storing the user-provided entropy is zeroized",
"method": "Entropy buffer zeroization",
"operatorId": "Using fips_cleanup_entropy_buffer() or by unloading the module",
"rationale": "SSPs are actively overwritten with zeroes and thus not recoverable"
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "The OE\u0027s volatile memory (RAM) shared with the linked application, but under the module\u0027s control",
"name": "Volatile memory",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [
{
"features": "",
"integrityTest": "HMAC-SHA2-256",
"packageFileName": "cryptocore.0.2.9.FIPS.1.o",
"swFwVersion": "0.2.9.FIPS.1"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Samsung Smart TV Q70B",
"hypervisorHostOs": "",
"operatingSystem": "Tizen 7.0",
"paa_pai": "No",
"processors": "Pontus-M",
"version": "0.2.9.FIPS.1"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Type:Asymmetric RSA Modulo:2048, 3072, 4096",
"implName": "Samsung CryptoCore Cryptographic Module",
"name": "CKG: RSA",
"reference": "Section B.3.3 of FIPS 186-4 and Sections 4 / 5.1 of SP 800-133r2 (V is all zeroes)"
},
{
"algoPropList": "Type:Asymmetric ECC / ECDSA",
"implName": "Samsung CryptoCore Cryptographic Module",
"name": "CKG: ECC",
"reference": "Section B.4.2 of FIPS 186-4 respectively Section 5.6.1.2.2 of SP"
},
{
"algoPropList": "Curve:P-224, P-256, P-384, P-521",
"implName": "",
"name": "",
"reference": "800-56Ar3 and Sections 4, 5.1, and 5.2 of SP 800-133r2 (V is all zeroes)"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 40
},
"ECDSA": {
"ECDSA": 59
}
}
},
"certification_process": {},
"cipher_mode": {
"CTR": {
"CTR": 1
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {},
"crypto_scheme": {
"MAC": {
"MAC": 10
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-192": 4,
"P-224": 8,
"P-256": 10,
"P-384": 6,
"P-521": 6
}
},
"eval_facility": {},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 2,
"DRBG 256": 1,
"HMAC-SHA256": 2,
"HMAC-SHA512": 2,
"PKCS 1": 2,
"SHA-256": 1,
"SHA2- 256": 1,
"SHA2-224": 9,
"SHA2-256": 9,
"SHA2-384": 9,
"SHA2-512": 11
}
},
"fips_security_level": {
"Level": {
"Level 1": 2
}
},
"hash_function": {
"SHA": {
"SHA2": {
"SHA-256": 1
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 42
},
"RNG": {
"RBG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 7,
"FIPS 180-4": 4,
"FIPS 186-4": 13,
"FIPS 186-5": 1,
"FIPS 198-1": 4,
"FIPS PUB 140-3": 1,
"FIPS186-4": 25
},
"NIST": {
"SP 800-186": 1,
"SP 800-38A": 5,
"SP 800-38B": 1,
"SP 800-56A": 1,
"SP 800-90A": 1
},
"PKCS": {
"PKCS 1": 2
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 21
},
"CAST": {
"CAST": 30
}
},
"constructions": {
"MAC": {
"CMAC": 12,
"HMAC": 24
}
}
},
"tee_name": {
"AMD": {
"PSP": 4
}
},
"tls_cipher_suite": {},
"vendor": {
"Samsung": {
"Samsung": 42
}
},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"KAS-ECC CDH-Component SP800-56Ar3A4968",
"AES-CBCA4968",
"ECDSA KeyGen (FIPS186-4)A4968",
"SHA2-384A4968",
"RSA KeyGen (FIPS186-4)A4968",
"AES-ECBA4968",
"AES-CMACA4968",
"AES-CFB128A4968",
"HMAC-SHA2-512A4968",
"SHA2-256A4968",
"ECDSA SigGen (FIPS186-4)A4968",
"HMAC-SHA2-256A4968",
"ECDSA SigVer (FIPS186-4)A4968",
"RSA SigGen (FIPS186-4)A4968",
"ECDSA KeyVer (FIPS186-4)A4968",
"SHA2-512A4968",
"HMAC-SHA2-224A4968",
"AES-OFBA4968",
"HMAC DRBGA4968",
"RSA SigVer (FIPS186-4)A4968",
"AES-CTRA4968",
"HMAC-SHA2-384A4968",
"SHA2-224A4968"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A4968"
]
},
"policy_metadata": {
"/Author": "",
"/Comments": "",
"/Company": "",
"/CreationDate": "D:20240813164717-04\u002700\u0027",
"/Creator": "Acrobat PDFMaker 24 for Word",
"/Keywords": "",
"/ModDate": "D:20240813164807-04\u002700\u0027",
"/Producer": "Adobe PDF Library 24.2.159",
"/SourceModified": "",
"/Subject": "",
"/Title": "",
"pdf_file_size_bytes": 395202,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 33
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "5c173a57df9598411e8dbc3331b026baf697991cf645ec2c25cc482f0baeb74c",
"source_hash": "f561f79218f6aa453790f8c48db9271007a6c2455578e009dc7b5b42a525c8e2",
"txt_hash": "b573ad11111d823bc688bcc6e2daf81bc38ecd9b52046528c8c1b5e18240506b"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "No assurance of the minimum strength of generated SSPs (e.g., keys) and random strings.",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/September 2024_011024_0217.pdf",
"date_sunset": "2029-09-02",
"description": "The Samsung CryptoCore Cryptographic Module is a software library implementing general-purpose cryptographic algorithms.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Samsung CryptoCore Cryptographic Module",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2024-09-03",
"lab": "TUVIT Evaluation Body for IT Security",
"validation_type": "Initial"
}
],
"vendor": "Samsung Electronics Co., Ltd.",
"vendor_url": "https://www.samsung.com/sec"
}
}