Qualcomm® Pseudo Random Number Generator

Certificate details

Certificate ID #5504
Status active
Validation dates 25.08.2026
Sunset date 24-08-2031
Standard FIPS 140-3
Security level 1
Type Firmware-Hybrid
Embodiment SingleChip
Caveat None
Exceptions
  • Operational environment: N/A
  • Physical security: Level 2
  • Non-invasive security: N/A
  • Life-cycle assurance: Level 2
  • Mitigation of other attacks: N/A
Description Qualcomm Pseudo Random Number Generator is a hardware random number generator that provides cryptographic functions through on-chip entropy sources and hash based DRBG.
Vendor Qualcomm Technologies, Inc. http://www.qualcomm.com
Lab atsec information security corporation
Algorithms
  • Hash DRBGA3756
  • SHA2-256A6829
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
CAST
Hash functions
SHA-256
Randomness
DRBG, RNG, RBG

Trusted Execution Environments
QTEE, TEE
Vendor
Qualcomm

Security level
Level 1, level 1, level 2

Creation date D:20260824094132-04'00'
Modification date D:20260824094132-04'00'
Pages 30
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5504,
  "dgst": "346d9762550ed756",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "SHA2-256A6829",
        "#A6829",
        "#A3756",
        "#A3755",
        "Hash DRBGA3756"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 0,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "Hash DRBG",
            "cavpCertName": "A3756",
            "properties": "Prediction Resistance - No Supports Reseed - No Mode - SHA2-256 Entropy Input - Entropy Input: 256 Nonce - Nonce: 128 Personalization String Length - Personalization String Length: 0, 32 Additional Input - Additional Input: 0, 0 Returned Bits - 1024",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A3755, A3756, A6829",
            "properties": "Message Length - Message Length: 8-65536 Increment 8",
            "reference": "FIPS 180-4"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "The hardware component provides random numbers",
            "indicator": "The register \u0027RNG_CM_PRNG_CHAR_S TATUS\u0027 has the bit 1 set to zero.",
            "inputs": "request ed numbe r of bits",
            "name": "Hash- DRBG",
            "outputs": "Random numbers",
            "rolesSspAccess": "Crypto Officer - entropy input string: W,E - DRBG seed: G,E - DRBG internal state V and C: G,W,E",
            "secFunImpl": "HW Hash- DRBG"
          },
          {
            "description": "Triggered by rebooting/restar ting the module. This service is the on-demand initiation method of the pre-operational integrity test, SHA KATs, DRBG KAT, and start-up entropy source health tests, as",
            "indicator": "No explicit indicator",
            "inputs": "N/A",
            "name": "Self-Test",
            "outputs": "Pass/Fail",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "HW Hash- DRBG FW Hash HW Hash for DRBG HW ESV"
          },
          {
            "description": "these tests are executed automatically when the device is booted or restarted",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "",
            "secFunImpl": ""
          },
          {
            "description": "Show status (provided by the hardware component) of the module state",
            "indicator": "No explicit indicator",
            "inputs": "N/A",
            "name": "Show Status",
            "outputs": "Status",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "None"
          },
          {
            "description": "Show the version (provided by both the hardware and firmware components) of the module",
            "indicator": "No explicit indicator",
            "inputs": "N/A",
            "name": "Show Version",
            "outputs": "version informati on",
            "rolesSspAccess": "Unauthentic ated",
            "secFunImpl": "None"
          },
          {
            "description": "Zeroizes all SSPs in the module (done by hardware component)",
            "indicator": "No explicit indicator",
            "inputs": "N/A",
            "name": "Zeroizati on",
            "outputs": "N/A",
            "rolesSspAccess": "Crypto Officer - entropy input string: Z - DRBG seed: Z - DRBG internal state V and C: Z",
            "secFunImpl": "None"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [],
        "found": false,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "Integrity or CAST failure in firmware CAST failure in Hardware Entropy health test failure",
            "description": "No cryptographic operation can be performed. No data input or output is possible.",
            "indicator": "TZBSP_ERR_FATAL_PRNG_FIPS_HYBRID_ERR; BIST_FAILURE indicator is set; TZ_TNG_STATUS__PRNG_PERMANENT_FAILURE is set",
            "name": "Error",
            "recoveryMethod": "Power cycling"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [
          {
            "inspectFreq": "N/A",
            "inspectGuidance": "N/A",
            "mechanism": "Tamper evident coating"
          }
        ],
        "found": true,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "Input parameters for data",
            "logicalInterface": "Data Input",
            "physicalPort": "Registers"
          },
          {
            "data": "Output parameters for data",
            "logicalInterface": "Data Output",
            "physicalPort": "Data Out Registers"
          },
          {
            "data": "Input parameters for control",
            "logicalInterface": "Control Input",
            "physicalPort": "Registers"
          },
          {
            "data": "status values",
            "logicalInterface": "Status Output",
            "physicalPort": "Registers"
          },
          {
            "data": "N/A",
            "logicalInterface": "Power",
            "physicalPort": "Physical power connector"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "None",
            "name": "Crypto Officer",
            "operatorType": "CO",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "1",
            "section": "1",
            "title": "General"
          },
          {
            "level": "1",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "1",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "1",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "1",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "N/A",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "2",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "1",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "1",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "2",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "N/A",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "1",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [
          {
            "algorithmOrTest": "SHA2-256 (A6829)",
            "details": "Integrity Test",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "Hash",
            "testProps": "SHA2-256",
            "type": "SW/FW Integrity"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [],
        "found": false,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "All SSPs will be zeroized",
            "method": "Power-off (Reset)",
            "operatorId": "Operator can initiate this zeroization method by powering off the module",
            "rationale": "The registers holding the SSPs are set to all zeroes"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "Holds the SSP data for the module",
            "name": "Hardware Registers",
            "persistance": "Dynamic"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "Qualco mm Drago",
            "hypervisorHostOs": "N/A",
            "operatingSystem": "Qualc omm \u00ae",
            "paa_pai": "No",
            "processors": "Qualco mm Drago",
            "version": "935aa1d4674936888e02b54bdb0ebac0f8071357acf691bda2e180776 aa8cc40dd258ddd44163c90afe68b7a1766da625533f1f12e9819dade 4cdf913dd7138d"
          },
          {
            "hardwarePlatform": "nwing TM Q- 6690 with mode m",
            "hypervisorHostOs": "",
            "operatingSystem": "Trust ed Exec ution Envir onme nt (TEE) TZ.X F.5.2 8",
            "paa_pai": "",
            "processors": "nwing TM Q- 6690 with mode m",
            "version": ""
          },
          {
            "hardwarePlatform": "Qualco mm Drago nwing TM Q- 6690 witho ut mode m",
            "hypervisorHostOs": "N/A",
            "operatingSystem": "Qualc omm TEE TZ.X F.5.2 8",
            "paa_pai": "No",
            "processors": "Qualco mm Drago nwing TM Q- 6690 witho ut mode m",
            "version": "935aa1d4674936888e02b54bdb0ebac0f8071357acf691bda2e180776 aa8cc40dd258ddd44163c90afe68b7a1766da625533f1f12e9819dade 4cdf913dd7138d"
          },
          {
            "hardwarePlatform": "Snapdr agon\u00ae 6 Gen 4 Mobile Platfor m",
            "hypervisorHostOs": "N/A",
            "operatingSystem": "Qualc omm TEE TZ.X F.5.2 8",
            "paa_pai": "No",
            "processors": "Snapdr agon\u00ae 6 Gen 4 Mobile Platfor m",
            "version": "935aa1d4674936888e02b54bdb0ebac0f8071357acf691bda2e180776 aa8cc40dd258ddd44163c90afe68b7a1766da625533f1f12e9819dade 4cdf913dd7138d"
          },
          {
            "hardwarePlatform": "Snapdr agon\u00ae 7s Gen 3 Mobile Platfor m",
            "hypervisorHostOs": "N/A",
            "operatingSystem": "Qualc omm TEE TZ.X F.5.2 8",
            "paa_pai": "No",
            "processors": "Snapdr agon\u00ae 7s Gen 3 Mobile Platfor m",
            "version": "935aa1d4674936888e02b54bdb0ebac0f8071357acf691bda2e180776 aa8cc40dd258ddd44163c90afe68b7a1766da625533f1f12e9819dade 4cdf913dd7138d"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {},
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "atsec": {
          "atsec": 2
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "DRBG 3": 4,
          "DRBG 440": 1,
          "DRBG 6144": 1,
          "SHA -256": 1,
          "SHA-256": 1,
          "SHA2-256": 13
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "level 1": 1,
          "level 2": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA2": {
            "SHA-256": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 41
        },
        "RNG": {
          "RBG": 2,
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 34,
          "FIPS 180-4": 1,
          "FIPS PUB 140-3": 1,
          "FIPS140-3": 1,
          "FIPS180-4": 1
        },
        "NIST": {
          "SP 800-90A": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "CAST": {
            "CAST": 9
          }
        }
      },
      "tee_name": {
        "other": {
          "QTEE": 1,
          "TEE": 4
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Qualcomm": {
          "Qualcomm": 167
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "Hash DRBGA3756",
        "SHA2-256A6829"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A3756",
        "#A6829",
        "#A3755"
      ]
    },
    "policy_metadata": {
      "/CreationDate": "D:20260824094132-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20260824094132-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 783379,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
          "http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 30
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "4438cdf992d787c8953d93fc52d92a335b5f7ccb4814b32d6477abad01053a87",
      "source_hash": "05469adf1b6a56a77de0cab3e47a6affadc5eae65ec08c3cc1552208b99b379e",
      "txt_hash": "d1bd4f4e108a03bbb470dcc0186490d1cba68049645d0d6fecbb86b8b6b6ca75"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "None",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/August 2026_020926_0917.pdf",
    "date_sunset": "2031-08-24",
    "description": "Qualcomm Pseudo Random Number Generator is a hardware random number generator that provides cryptographic functions through on-chip entropy sources and hash based DRBG.",
    "embodiment": "SingleChip",
    "exceptions": [
      "Operational environment: N/A",
      "Physical security: Level 2",
      "Non-invasive security: N/A",
      "Life-cycle assurance: Level 2",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Qualcomm\u00ae Pseudo Random Number Generator",
    "module_type": "Firmware-Hybrid",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-08-25",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Qualcomm Technologies, Inc.",
    "vendor_url": "http://www.qualcomm.com"
  }
}