Page 1 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
Qualcomm Technologies, Inc.
Qualcomm® Pseudo Random Number Generator
FIPS 140-3 Non-Proprietary Security Policy
Document Version 1.0
Last update: 2026-03-31
Prepared by:
atsec information security corporation
4516 Seton Center Pkwy, Suite 250
Austin, TX 78759
https://www.atsec.com
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 2 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
Snapdragon and Qualcomm branded products are products of Qualcomm Technologies, Inc. and/or its subsidiaries.
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 3 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
Table of Contents
1 General.......................................................................................................................................................................6
1.1 Overview ............................................................................................................................................................6
1.2 Security Levels....................................................................................................................................................6
1.3 Additional Information......................................................................................................................................6
2 Cryptographic Module Specification........................................................................................................................7
2.1 Description .........................................................................................................................................................7
2.2 Tested and Vendor Affirmed Module Version and Identification ..................................................................9
2.3 Excluded Components .....................................................................................................................................12
2.4 Modes of Operation..........................................................................................................................................12
2.5 Algorithms........................................................................................................................................................12
2.6 Security Function Implementations................................................................................................................13
2.7 Algorithm Specific Information ......................................................................................................................13
2.8 RBG and Entropy .............................................................................................................................................13
2.9 Key Generation ................................................................................................................................................14
2.10 Key Establishment..........................................................................................................................................14
2.11 Industry Protocols..........................................................................................................................................14
Not Applicable. There are no industry protocols implemented. .........................................................................14
3 Cryptographic Module Interfaces...........................................................................................................................15
3.1 Ports and Interfaces..........................................................................................................................................15
4 Roles, Services, and Authentication .......................................................................................................................16
4.1 Authentication Methods..................................................................................................................................16
4.2 Roles..................................................................................................................................................................16
4.3 Approved Services............................................................................................................................................16
4.4 Non-Approved Services ...................................................................................................................................18
4.5 External Software/Firmware Loaded...............................................................................................................18
5 Software/Firmware Security ...................................................................................................................................19
5.1 Integrity Techniques........................................................................................................................................19
5.2 Initiate on Demand ..........................................................................................................................................19
6 Operational Environment .......................................................................................................................................20
6.1 Operational Environment Type and Requirements .......................................................................................20
6.2 Configuration Settings and Restrictions..........................................................................................................20
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 4 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
7 Physical Security .....................................................................................................................................................21
7.1 Mechanisms and Actions Required.................................................................................................................21
8 Non-Invasive Security.............................................................................................................................................22
8.1 Mitigation Techniques .....................................................................................................................................22
9 Sensitive Security Parameters Management ..........................................................................................................23
9.1 Storage Areas....................................................................................................................................................23
9.2 SSP Input-Output Methods .............................................................................................................................23
9.3 SSP Zeroization Methods.................................................................................................................................23
9.4 SSPs...................................................................................................................................................................23
10 Self-Tests................................................................................................................................................................25
10.1 Pre-Operational Self-Tests.............................................................................................................................25
10.2 Conditional Self-Tests....................................................................................................................................25
10.3 Periodic Self-Test Information ......................................................................................................................25
10.4 Error States .....................................................................................................................................................26
10.5 Operator Initiation of Self-Tests....................................................................................................................26
11 Life-Cycle Assurance.............................................................................................................................................27
11.1 Installation, Initialization, and Startup Procedures......................................................................................27
11.2 Administrator Guidance ................................................................................................................................27
11.3 Non-Administrator Guidance........................................................................................................................27
11.4 End of Life ......................................................................................................................................................27
12 Mitigation of Other Attacks..................................................................................................................................28
12.1 Attack List.......................................................................................................................................................28
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 5 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
List of Tables
Table 1: Security Levels................................................................................................................................................6
Table 2: Tested Module Identification – Software, Firmware, Hybrid (Executable Code Sets) .............................10
Table 3: Tested Module Identification – Hybrid Disjoint Hardware.......................................................................10
Table 4: Tested Operational Environments - Software, Firmware, Hybrid ............................................................11
Table 5: Modes List and Description .........................................................................................................................12
Table 6: Approved Algorithms...................................................................................................................................13
Table 7: Security Function Implementations............................................................................................................13
Table 8: Entropy Certificates .....................................................................................................................................14
Table 9: Entropy Sources............................................................................................................................................14
Table 10: Ports and Interfaces....................................................................................................................................15
Table 11: Roles............................................................................................................................................................16
Table 12: Approved Services......................................................................................................................................17
Table 13: Mechanisms and Actions Required ...........................................................................................................21
Table 14: Storage Areas ..............................................................................................................................................23
Table 15: SSP Zeroization Methods...........................................................................................................................23
Table 16: SSP Table 1 .................................................................................................................................................23
Table 17: SSP Table 2 .................................................................................................................................................24
Table 18: Pre-Operational Self-Tests.........................................................................................................................25
Table 19: Pre-Operational Periodic Information......................................................................................................25
Table 20: Conditional Periodic Information .............................................................................................................25
Table 21: Error States .................................................................................................................................................26
List of Figures
Figure 1: Block Diagram...............................................................................................................................................8
Figure 2: Qualcomm DragonwingTM
Q-6690 with modem ........................................................................................8
Figure 3: Qualcomm DragonwingTM
Q-6690 without modem...................................................................................9
Figure 4: Snapdragon 6 Gen 4 Mobile Platform..........................................................................................................9
Figure 5: Snapdragon 7s Gen 3 Mobile Platform ........................................................................................................9
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 6 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
1 General
1.1 Overview
This Security Policy describes the features and design of the module named Qualcomm®
Pseudo Random
Number Generator using the terminology contained in the FIPS 140-3 specification. The FIPS 140-3 Security
Requirements for Cryptographic Modules specifies the security requirements that will be satisfied by a
cryptographic module utilized within a security system protecting sensitive but unclassified information. The
NIST/CCCS Cryptographic Module Validation Program (CMVP) validates cryptographic modules to FIPS 140-3.
Validated products are accepted by the Federal agencies of both the USA and Canada for the protection of
sensitive or designated information.
This Non-Proprietary Security Policy may be reproduced and distributed, but only whole and intact and
including this notice. Other documentation is proprietary to their authors.
1.2 Security Levels
Section Title Security Level
1 General 1
2 Cryptographic module specification 1
3 Cryptographic module interfaces 1
4 Roles, services, and authentication 1
5 Software/Firmware security 1
6 Operational environment N/A
7 Physical security 2
8 Non-invasive security N/A
9 Sensitive security parameter management 1
10 Self-tests 1
11 Life-cycle assurance 2
12 Mitigation of other attacks N/A
Overall Level 1
Table 1: Security Levels
1.3 Additional Information
In preparing the Security Policy document, the laboratory formatted the vendor-supplied documentation for
consolidation without altering the technical statements therein contained. The further refining of the Security
Policy document was conducted iteratively throughout the conformance testing, wherein the Security Policy
was submitted to the vendor, who would then edit, modify, and add technical contents. The vendor would also
supply additional documentation, which the laboratory formatted into the existing Security Policy, and
resubmitted to the vendor for their final editing.
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 7 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
2 Cryptographic Module Specification
2.1 Description
Purpose and Use:
The Qualcomm Pseudo Random Number Generator is classified as a single chip firmware-hybrid module for
the purpose of FIPS 140-3 validation. It is designed to provide random numbers. The Qualcomm Pseudo
Random Number Generator is a collection of hardware and firmware components contained within the
Snapdragon® 6 Gen 4 Mobile Platform, Snapdragon® 7s Gen 3 Mobile Platform, Qualcomm DragonwingTM
Q-
6690 with modem and Qualcomm DragonwingTM
Q-6690 without modem SoCs. The Qualcomm Pseudo
Random Number Generator version 3.2.0 implements a SHA2-256 Hash_DRBG as defined in SP 800-90Ar1.
The firmware component of the module controls the entropy and DRBG configuration parameters. The
configuration is fixed for a given version of the firmware and cannot be altered by the operator of the module.
Module Type: Firmware-hybrid
Module Embodiment: Single Chip
Cryptographic Boundary:
The physical perimeter of the Qualcomm Pseudo Random Number Generator is the physical perimeter of the
Number Generator is a collection of hardware and firmware components contained within the Snapdragon® 6
Gen 4 Mobile Platform, Snapdragon® 7s Gen 3 Mobile Platform, Qualcomm DragonwingTM
Q-6690 with
modem and Qualcomm DragonwingTM
Q-6690 without modem that contains the components which
implement the Qualcomm Pseudo Random Number Generator. Consequently, the embodiment of the
Qualcomm Pseudo Random Number Generator is a single-chip cryptographic module. Below is an illustrative
diagram.
Tested Operational Environment’s Physical Perimeter (TOEPP):
The tested operational environment’s physical perimeter is the single chip. The tested operational environment
contains an ESV-validated entropy source which is used by the module to obtain entropy.
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 8 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
Figure 1: Block Diagram
Figure 2: Qualcomm DragonwingTM
Q-6690 with modem
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 9 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
Figure 3: Qualcomm DragonwingTM
Q-6690 without modem
Figure 4: Snapdragon 6 Gen 4 Mobile Platform
Figure 5: Snapdragon 7s Gen 3 Mobile Platform
2.2 Tested and Vendor Affirmed Module Version and Identification
Tested Module Identification – Software, Firmware, Hybrid (Executable Code Sets):
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 10 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
Package or
File Name
Software/ Firmware Version Feat
ures
Inte
grity
Test
hybrid_pr
ng_library
935aa1d4674936888e02b54bdb0ebac0f8071357acf691bda2e180776aa8cc40dd258
ddd44163c90afe68b7a1766da625533f1f12e9819dade4cdf913dd7138d
N/A SHA
-256
Table 2: Tested Module Identification – Software, Firmware, Hybrid (Executable Code Sets)
Tested Module Identification – Hybrid Disjoint Hardware:
Model and/or Part Number Hardware
Version
Firmware
Version
Processors Features
Single Chip: Qualcomm -
Qualcomm DragonwingTM Q-6690
with modem
Sub-Chip Disjoint Hardware: Hash-
DRBG
3.2.0 N/A Qualcomm DragonwingTM
Q-6690 with modem
N/A
Single Chip: Qualcomm -
Qualcomm DragonwingTM Q-6690
without modem
Sub-Chip Disjoint Hardware: Hash-
DRBG
3.2.0 N/A Qualcomm DragonwingTM
Q-6690 without modem
N/A
Single Chip: Qualcomm -
Snapdragon® 6 Gen 4 Mobile
Platform
Sub-Chip Disjoint Hardware: Hash-
DRBG
3.2.0 N/A Snapdragon® 6 Gen 4
Mobile Platform
N/A
Single Chip: Qualcomm -
Snapdragon® 7s Gen 3 Mobile
Platform
Sub-Chip Disjoint Hardware: Hash-
DRBG
3.2.0 N/A Snapdragon® 7s Gen 3
Mobile Platform
N/A
Table 3: Tested Module Identification – Hybrid Disjoint Hardware
Tested Operational Environments - Software, Firmware, Hybrid:
Oper
ating
Syste
m
Hardw
are
Platfor
m
Proces
sors
PA
A/P
AI
Hyp
ervis
or or
Host
OS
Version(s)
Qualc
omm
®
Qualco
mm
Drago
Qualco
mm
Drago
No N/A 935aa1d4674936888e02b54bdb0ebac0f8071357acf691bda2e180776
aa8cc40dd258ddd44163c90afe68b7a1766da625533f1f12e9819dade
4cdf913dd7138d
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 11 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
Oper
ating
Syste
m
Hardw
are
Platfor
m
Proces
sors
PA
A/P
AI
Hyp
ervis
or or
Host
OS
Version(s)
Trust
ed
Exec
ution
Envir
onme
nt
(TEE)
TZ.X
F.5.2
8
nwing
TM Q-
6690
with
mode
m
nwing
TM Q-
6690
with
mode
m
Qualc
omm
TEE
TZ.X
F.5.2
8
Qualco
mm
Drago
nwing
TM Q-
6690
witho
ut
mode
m
Qualco
mm
Drago
nwing
TM Q-
6690
witho
ut
mode
m
No N/A 935aa1d4674936888e02b54bdb0ebac0f8071357acf691bda2e180776
aa8cc40dd258ddd44163c90afe68b7a1766da625533f1f12e9819dade
4cdf913dd7138d
Qualc
omm
TEE
TZ.X
F.5.2
8
Snapdr
agon®
6 Gen
4
Mobile
Platfor
m
Snapdr
agon®
6 Gen
4
Mobile
Platfor
m
No N/A 935aa1d4674936888e02b54bdb0ebac0f8071357acf691bda2e180776
aa8cc40dd258ddd44163c90afe68b7a1766da625533f1f12e9819dade
4cdf913dd7138d
Qualc
omm
TEE
TZ.X
F.5.2
8
Snapdr
agon®
7s Gen
3
Mobile
Platfor
m
Snapdr
agon®
7s Gen
3
Mobile
Platfor
m
No N/A 935aa1d4674936888e02b54bdb0ebac0f8071357acf691bda2e180776
aa8cc40dd258ddd44163c90afe68b7a1766da625533f1f12e9819dade
4cdf913dd7138d
Table 4: Tested Operational Environments - Software, Firmware, Hybrid
Vendor-Affirmed Operational Environments - Software, Firmware, Hybrid:
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 12 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
N/A for this module.
2.3 Excluded Components
There are no excluded components.
2.4 Modes of Operation
Modes List and Description:
Mode Name Description Types of
Services
Status Indicator
Approved
mode of
operation
Implicit approved mode of
operation always assumed
by the module.
Approved The register
'RNG_CM_PRNG_CHAR_STATUS' has the
bit 1 set to zero .
Table 5: Modes List and Description
The Qualcomm Pseudo Random Number Generator supports only an approved mode which is entered without
any human assistance. When the Qualcomm Pseudo Random Number Generator is powered on, the pre-
operational self-test and cryptographic algorithm self-tests are executed automatically without any operator
intervention. The Qualcomm Pseudo Random Number Generator enters the operational mode automatically if
all self-tests complete successfully.
If any of self-tests fail during power-up, the Qualcomm Pseudo Random Number Generator goes into error
state. All cryptographic services are prohibited while in error state. When an error state is entered, the
Qualcomm Pseudo Random Number Generator can be reset to reinitialize itself.
The status of the Qualcomm Pseudo Random Number Generator module can be determined by its availability.
If the Qualcomm Pseudo Random Number Generator is available, it has passed all self-tests. If it is unavailable,
it is in the error state.
2.5 Algorithms
Approved Algorithms:
Algorithm CAVP Cert Properties Reference
Hash
DRBG
A3756 Prediction Resistance - No
Supports Reseed - No
Mode - SHA2-256
Entropy Input - Entropy Input: 256
Nonce - Nonce: 128
Personalization String Length - Personalization String
Length: 0, 32
Additional Input - Additional Input: 0, 0
Returned Bits - 1024
SP 800-90A
Rev. 1
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 13 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
Algorithm CAVP Cert Properties Reference
SHA2-256 A3755, A3756,
A6829
Message Length - Message Length: 8-65536 Increment
8
FIPS 180-4
Table 6: Approved Algorithms
Vendor-Affirmed Algorithms:
N/A for this module.
Non-Approved, Allowed Algorithms:
N/A for this module.
Non-Approved, Allowed Algorithms with No Security Claimed:
N/A for this module.
Non-Approved, Not Allowed Algorithms:
N/A for this module.
2.6 Security Function Implementations
Name Type Description Properties Algorithms
HW Hash-
DRBG
DRBG provides random numbers Hash DRBG:
(A3756)
HW Hash for
DRBG
SHA provides hash for DRBG SHA2-256: (A3756,
A3755)
FW Hash SHA SHA-256 SHA2-256: (A6829)
HW ESV ENT-
ESV
Entropy Source of the Qualcomm Pseudo
random Number Generator
Table 7: Security Function Implementations
2.7 Algorithm Specific Information
Not applicable.
2.8 RBG and Entropy
Cert Number Vendor Name
E236 Qualcomm Technologies, Inc.
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 14 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
Table 8: Entropy Certificates
Name Type Operational
Environment
Sample
Size
Entropy per
Sample
Conditioning
Component
Entropy Source of the
Qualcomm® Pseudo Random
Number Generator
Physical See Table 3 4 bits 0.266145
bits
N/A
Table 9: Entropy Sources
The DRBG used to generate random bits is an SP 800-90Ar1 compliant SHA2-256 Hash_DRBG without
prediction resistance. It processes a personalization string that is written by the calling application into a
hardware register for use by the module. The calling application has read/write access to the hardware register
that holds the personalization string. The DRBG obtains 1536 samples of 4 bits each to form the seed, from the
entropy source. These 1536 samples provide 408 bits of entropy.
2.9 Key Generation
The module does not provide any SSP generation service or perform SSP generation for any of its approved
algorithms. The caller of the DRBG could use the random strings output for SSP generation, but this service is
not explicitly provided by the module.
2.10 Key Establishment
The module does not provide any kind of SSP establishment, entry, or output.
2.11 Industry Protocols
Not Applicable. There are no industry protocols implemented.
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 15 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
3 Cryptographic Module Interfaces
3.1 Ports and Interfaces
Physical Port Logical Interface(s) Data That Passes
Registers Data Input Input parameters for data
Data Out Registers Data Output Output parameters for data
Registers Control Input Input parameters for control
Registers Status Output status values
Physical power connector Power N/A
Table 10: Ports and Interfaces
Communication between the firmware component and the disjoint hardware component of the module is
considered as controlled communication because QTEE (which is the module’s operational environment) is
designed to separate this communication from rest of the peripherals outside of the module’s cryptographic
boundary.
The module does not implement a control output interface.
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 16 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
4 Roles, Services, and Authentication
4.1 Authentication Methods
N/A for this module.
The Crypto Officer role is implicitly assumed by the entity accessing services implemented by the module. It
does not allow concurrent operators.
4.2 Roles
Name Type Operator Type Authentication Methods
Crypto Officer Role CO None
Table 11: Roles
4.3 Approved Services
Name Description Indicator Inputs Outputs Securit
y
Functio
ns
SSP Access
Hash-
DRBG
The hardware
component
provides
random
numbers
The register
'RNG_CM_PRNG_CHAR_S
TATUS' has the bit 1 set to
zero.
request
ed
numbe
r of bits
Random
numbers
HW
Hash-
DRBG
Crypto
Officer
- entropy
input string:
W,E
- DRBG seed:
G,E
- DRBG
internal state
V and C:
G,W,E
Self-Test Triggered by
rebooting/restar
ting the
module. This
service is the
on-demand
initiation
method of the
pre-operational
integrity test,
SHA KATs,
DRBG KAT,
and start-up
entropy source
health tests, as
No explicit indicator N/A Pass/Fail HW
Hash-
DRBG
FW
Hash
HW
Hash
for
DRBG
HW
ESV
Crypto
Officer
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 17 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
Name Description Indicator Inputs Outputs Securit
y
Functio
ns
SSP Access
these tests are
executed
automatically
when the
device is booted
or restarted
Show
Status
Show status
(provided by
the hardware
component) of
the module
state
No explicit indicator N/A Status None Crypto
Officer
Show
Version
Show the
version
(provided by
both the
hardware and
firmware
components) of
the module
No explicit indicator N/A version
informati
on
None Unauthentic
ated
Zeroizati
on
Zeroizes all
SSPs in the
module (done
by hardware
component)
No explicit indicator N/A N/A None Crypto
Officer
- entropy
input string:
Z
- DRBG seed:
Z
- DRBG
internal state
V and C: Z
Table 12: Approved Services
The Qualcomm Pseudo Random Number Generator does not support bypass capability. It provides random
data from the SHA2-256 Hash_DRBG. The table above describes the services available in approved mode. The
following access rights are used in the table:
• G = Generate: The module generates or derives the SSP.
• R = Read: The SSP is read from the module (e.g. the SSP is output).
• W = Write: The SSP is updated, imported, or written to the module.
• E = Execute: The module uses the SSP in performing a cryptographic operation.
• Z = Zeroise: The module zeroises the SSP.
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 18 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
4.4 Non-Approved Services
N/A for this module.
4.5 External Software/Firmware Loaded
Not applicable.
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 19 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
5 Software/Firmware Security
5.1 Integrity Techniques
The integrity of the firmware component of the module is verified by using SHA2-256 value stored in the
module that was computed at build time.
5.2 Initiate on Demand
Integrity tests are performed as part of the Pre-Operational Self-Tests. A reset of the cryptographic module can
be used to perform the "on-demand" integrity test.
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 20 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
6 Operational Environment
6.1 Operational Environment Type and Requirements
Type of Operational Environment: Limited
How Requirements are Satisfied:
The Qualcomm Pseudo Random Number Generator is a single chip firmware-hybrid module at security level 1.
The operational environment is non-modifiable.
6.2 Configuration Settings and Restrictions
There are no security rules, settings or restrictions to the configuration of the operational environment.
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 21 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
7 Physical Security
7.1 Mechanisms and Actions Required
Mechanism Inspection Frequency Inspection Guidance
Tamper evident coating N/A N/A
Table 13: Mechanisms and Actions Required
The Qualcomm Pseudo Random Number Generator Cryptographic Module is a single-chip firmware-hybrid
module which conforms to the level 2 requirements for physical security. The Qualcomm Pseudo Random
Number Generator is a single chip enclosed in a production grade component.
At the time of manufacturing, the die is embedded within a printed circuit board (PCB), which prevents
visibility into the internal circuity of the Qualcomm Pseudo Random Number Generator hardware component.
The layering process which is used to embed the die into the PCB also prevents tampering of the physical
components without leaving tamper evidence.
The Qualcomm Pseudo Random Number Generator hardware component is further protected by being
enclosed in a commercial off-the-shelf mobile device utilizing production-grade, commercially available
components. The device enclosure completely surrounds the Qualcomm Pseudo Random Number Generator
hardware component.
There are no steps required to ensure that physical security is maintained.
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 22 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
8 Non-Invasive Security
8.1 Mitigation Techniques
The Qualcomm Pseudo Random Number Generator does not support any non-invasive security techniques, this
section is not applicable.
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 23 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
9 Sensitive Security Parameters Management
9.1 Storage Areas
Storage Area Name Description Persistence Type
Hardware Registers Holds the SSP data for the module Dynamic
Table 14: Storage Areas
9.2 SSP Input-Output Methods
N/A for this module.
There are no SSPs entered into or output from the Qualcomm Pseudo Random Number Generator. The entropy
input string is obtained from entropy source within the cryptographic boundary.
9.3 SSP Zeroization Methods
Zeroization
Method
Description Rationale Operator Initiation
Power-off
(Reset)
All SSPs will be
zeroized
The registers holding the
SSPs are set to all zeroes
Operator can initiate this zeroization
method by powering off the module
Table 15: SSP Zeroization Methods
9.4 SSPs
Name Description Size -
Strength
Type -
Category
Generated
By
Established
By
Used By
entropy
input string
entropy input string
used for seeding the
module's DRBG
6144 bits -
408 bits
Entropy Data
- CSP
HW
Hash-
DRBG
DRBG seed DRBG seed used for
seeding the module's
DRBG
440 bits -
256 bits
Entropy Data
- CSP
HW Hash-
DRBG
HW
Hash-
DRBG
DRBG
internal
state V and
C
DRBG internal state
V and C used for
random number
generation
V: 440 bits;
C: 440 bits -
256 bits
DRBG
internal state
values - CSP
HW Hash-
DRBG
HW
Hash-
DRBG
Table 16: SSP Table 1
Name Input -
Output
Storage Storage
Duration
Zeroization Related SSPs
entropy input
string
Hardware
Registers:Plaintext
Until module
is powered off
Power-off
(Reset)
DRBG internal state
V and C:Derives
DRBG seed:Derives
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 24 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
Name Input -
Output
Storage Storage
Duration
Zeroization Related SSPs
DRBG seed Hardware
Registers:Plaintext
Until module
is powered off
Power-off
(Reset)
DRBG internal state
V and C:Derives
DRBG
internal state
V and C
Hardware
Registers:Plaintext
Until module
is powered off
Power-off
(Reset)
DRBG seed:Derived
From
Table 17: SSP Table 2
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 25 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
10 Self-Tests
10.1 Pre-Operational Self-Tests
Algorithm or
Test
Test
Properties
Test
Method
Test Type Indicator Details
SHA2-256
(A6829)
SHA2-256 Hash SW/FW
Integrity
Module becomes operational and
services are available for use
Integrity
Test
Table 18: Pre-Operational Self-Tests
The firmware integrity test is run at startup of the module and is automatically performed without any operator
intervention. The CAST for SHA2-256 is performed before the integrity test.
10.2 Conditional Self-Tests
N/A for this module.
All self-tests are automatically performed without any operator intervention during power-up of the module.
While the module is executing the self-tests, services are not available, and input and output are inhibited.
10.3 Periodic Self-Test Information
Algorithm or Test Test
Method
Test Type Period Periodic Method
SHA2-256
(A6829)
Hash SW/FW
Integrity
On-
demand
Manually by invoking the Self-test
service
Table 19: Pre-Operational Periodic Information
Algorithm or Test Test Method Test Type Period Periodic Method
SHA2-256 (A3755) KAT CAST On-demand Manually by invoking the Self-test
service
SHA2-256 (A3756) KAT CAST On-demand Manually by invoking the Self-test
service
SHA2-256 (A6829) KAT CAST On-demand Manually by invoking the Self-test
service
Hash DRBG (A3756) KAT CAST On-demand Manually by invoking the Self-test
service
ESV startup APT and RCT CAST On-demand Manually by invoking the Self-test
service
ESV continuous APT and RCT CAST On-demand Manually by invoking the Self-test
service
Table 20: Conditional Periodic Information
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 26 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
10.4 Error States
Name Description Conditions Recovery
Method
Indicator
Error No
cryptographic
operation can
be performed.
No data input
or output is
possible.
Integrity
or CAST
failure in
firmware
CAST
failure in
Hardware
Entropy
health test
failure
Power
cycling
TZBSP_ERR_FATAL_PRNG_FIPS_HYBRID_ERR;
BIST_FAILURE indicator is set;
TZ_TNG_STATUS__PRNG_PERMANENT_FAILURE
is set
Table 21: Error States
If any of the pre-operational self-tests or conditional self-tests fail, the Qualcomm Pseudo Random Number
Generator will enter the error state. Data output is prohibited, and no further cryptographic operation is
allowed in the error state. This is performed by the control logic and prevents external usage when an error is
detected.
To recover from the error state, re-initialization is possible by successful execution of the power up tests, which
can be triggered by either a power-off/power-on cycle or the receipt of a reset event. Once locked, the
Qualcomm Pseudo Random Number Generator will only respond to a reset which will cause it to re-execute
the power up tests. If the error persists, the Qualcomm Pseudo Random Number Generator will remain
unavailable.
10.5 Operator Initiation of Self-Tests
A power cycle or reset event is the methodology used to perform the pre-operational and conditional self-tests.
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 27 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
11 Life-Cycle Assurance
11.1 Installation, Initialization, and Startup Procedures
The Qualcomm Pseudo Random Number Generator is a single chip module in the SoCs listed in Table 2. The
chips are delivered from the vendor via a trusted delivery courier. Upon delivery, the customer can detect any
potential tampering by visually inspecting the chips. Any tampering will result in obvious damage or scratches
and will likely render the chips non-functional. Once the product is received by the customer and powered up
the self-tests defined in Section 10 will be executed.
11.2 Administrator Guidance
There is no specific crypto officer guidance required for the module.
11.3 Non-Administrator Guidance
There is no specific non-administrator guidance required for the module.
11.4 End of Life
As stated in Section 9.1, the module does not possess persistent storage of SSPs. The SSP value only exists in
volatile memory and that value is zeroized when the module is powered off. The procedure for secure
sanitization of the module at the end of life is simply to power it off, which zeroizes all SSPs as specified in
Section 9.3. As a result of this sanitization via power-off, all SSPs are removed from the module, so that the
module may either be distributed to other operators or disposed of.
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 28 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
12 Mitigation of Other Attacks
12.1 Attack List
The module does not implement security mechanisms to mitigate other attacks.
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 29 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
Appendix A. Glossary and Abbreviations
CAVP Cryptographic Algorithm Validation Program
CMT Cryptographic Module Testing
CMVP Cryptographic Module Validation Program
CSP Critical Security Parameter
CVT Component Verification Testing
DRBG Deterministic Random Bit Generator
FIPS Federal Information Processing Standards Publication
FSM Finite State Model
KAT Known Answer Test
NIST National Institute of Science and Technology
PR Prediction Resistance
RNG Random Number Generator
SHA Secure Hash Algorithm
SHS Secure Hash Standard
SoC System on a Chip
Qualcomm®
Pseudo Random Number Generator FIPS 140-3 Non-Proprietary Security Policy
Page 30 of 30
© Qualcomm Technologies, Inc. and/or its affiliated companies. All rights reserved. Snapdragon and Qualcomm branded products are
products of Qualcomm Technologies, Inc. and/or its subsidiaries.
Appendix B. References
FIPS140-3 FIPS PUB 140-3 - Security Requirements For Cryptographic Modules
March 2019
https://doi.org/10.6028/NIST.FIPS.140-3
FIPS140-3_IG Implementation Guidance for FIPS PUB 140-3 and the Cryptographic Module Validation
Program
March 26, 2024
https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-
announcements
FIPS180-4 Secure Hash Standard (SHS)
March 2012
http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf
SP800-90Ar1 NIST Special Publication 800-90A - Revision 1 - Recommendation for Random Number
Generation Using Deterministic Random Bit Generators
June 2015
http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf
SP800-90B (Second DRAFT) NIST Special Publication 800-90B - Recommendation for the Entropy
Sources Used for Random Bit Generation
January 2018
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf
SP800-140B NIST Special Publication 800-140B - CMVP Security Policy Requirements
November 2023
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140Br1.pdf