Qualcomm® Crypto Engine Core

Certificate details

Certificate ID #5547
Status active
Validation dates 09.10.2026
Sunset date 08-10-2031
Standard FIPS 140-3
Security level 1
Type Hardware
Embodiment SingleChip
Caveat When operated in approved mode. No assurance of minimum security of SSPs (e.g. keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Exceptions
  • Software/Firmware security: N/A
  • Operational environment: N/A
  • Physical security: Level 2
  • Non-invasive security: N/A
  • Life-cycle assurance: Level 2
  • Mitigation of other attacks: N/A
Description Qualcomm Crypto Engine Core is a general purpose cryptographic hardware engine capable of securely processing various confidentiality and integrity algorithms across multiple execution environments.
Vendor Qualcomm Technologies, Inc. http://www.qualcomm.com
Lab atsec information security corporation
Algorithms
  • AES-CBC-CS2A6448
  • AES-CBCA6448
  • AES-CCMA6448
  • AES-CMACA6448
  • AES-CTRA6448
  • AES-ECBA6448
  • AES-XTS Testing Revision 2.0A6448
  • HMAC-SHA-1A6448
  • HMAC-SHA2-256A6448
  • HMAC-SHA2-384A6448
  • HMAC-SHA2-512A6448
  • HMAC-SHA3-224A6448
  • HMAC-SHA3-256A6448
  • HMAC-SHA3-384A6448
  • HMAC-SHA3-512A6448
  • SHA-1A6448
  • SHA2-256A6448
  • SHA2-384A6448
  • SHA2-512A6448
  • SHA3-224A6448
  • SHA3-256A6448
  • SHA3-384A6448
  • SHA3-512A6448
  • SHAKE-128A6448
  • SHAKE-256A6448
  • TDES-CBCA6448
  • TDES-ECBA6448
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-, CAST, DES, TDES, Triple-DES, TDEA, SM4, HMAC, KMAC, CMAC
Hash functions
SHA-1, SHA1, SHA2, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA3, SHA-3
Schemes
MAC, AEAD
Randomness
RBG
Block cipher modes
ECB, CBC, CTR, CCM, XEX, XTS

Vendor
Qualcomm

Security level
Level 1, Level 2

Creation date D:20260928081218-04'00'
Modification date D:20260928081218-04'00'
Pages 37
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5547,
  "dgst": "f2ac0b4ca7b0e481",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "TDES-CBCA6448",
        "TDES-ECBA6448",
        "HMAC-SHA2-384A6448",
        "SHA2-512A6448",
        "HMAC-SHA2-256A6448",
        "SHA3-224A6448",
        "SHA2-256A6448",
        "AES-CMACA6448",
        "SHA3-512A6448",
        "HMAC-SHA2-512A6448",
        "AES-CCMA6448",
        "HMAC-SHA3-256A6448",
        "AES-XTS Testing Revision 2.0A6448",
        "SHAKE-256A6448",
        "SHA2-384A6448",
        "AES-CBCA6448",
        "HMAC-SHA3-224A6448",
        "AES-ECBA6448",
        "HMAC-SHA3-384A6448",
        "SHA-1A6448",
        "#A6448",
        "HMAC-SHA-1A6448",
        "HMAC-SHA3-512A6448",
        "AES-CTRA6448",
        "SHA3-256A6448",
        "AES-CBC-CS2A6448",
        "SHA3-384A6448",
        "SHAKE-128A6448"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 0,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A6448",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CBC-CS2",
            "cavpCertName": "A6448",
            "properties": "Direction - decrypt, encrypt Key Length - 128, 256 Payload Length - Payload Length: 128-65536 Increment 8",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CCM",
            "cavpCertName": "A6448",
            "properties": "Key Length - 128, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 0, 256 AAD Length - AAD Length: 256, 65536",
            "reference": "SP 800-38C"
          },
          {
            "algorithm": "AES-CMAC",
            "cavpCertName": "A6448",
            "properties": "Direction - Generation, Verification Key Length - 128, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8-524288 Increment 8",
            "reference": "SP 800-38B"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A6448",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128 Supports Counter larger than maximum value - Yes Incremental Counter - Yes Counter Tests Performed - Yes",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A6448",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-XTS Testing Revision 2.0",
            "cavpCertName": "A6448",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128-65536 Increment 8 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "HMAC-SHA-1",
            "cavpCertName": "A6448",
            "properties": "MAC - MAC: 160 Key Length - Key Length: 512",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A6448",
            "properties": "MAC - MAC: 256 Key Length - Key Length: 512",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-384",
            "cavpCertName": "A6448",
            "properties": "MAC - MAC: 384 Key Length - Key Length: 512",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-512",
            "cavpCertName": "A6448",
            "properties": "MAC - MAC: 512 Key Length - Key Length: 512",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA3-224",
            "cavpCertName": "A6448",
            "properties": "MAC - MAC: 224 Key Length - Key Length: 512",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA3-256",
            "cavpCertName": "A6448",
            "properties": "MAC - MAC: 256 Key Length - Key Length: 512",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA3-384",
            "cavpCertName": "A6448",
            "properties": "MAC - MAC: 384 Key Length - Key Length: 512",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA3-512",
            "cavpCertName": "A6448",
            "properties": "MAC - MAC: 512 Key Length - Key Length: 512",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "SHA-1",
            "cavpCertName": "A6448",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A6448",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A6448",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512",
            "cavpCertName": "A6448",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA3-224",
            "cavpCertName": "A6448",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "SHA3-256",
            "cavpCertName": "A6448",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "SHA3-384",
            "cavpCertName": "A6448",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "SHA3-512",
            "cavpCertName": "A6448",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "SHAKE-128",
            "cavpCertName": "A6448",
            "properties": "Supports Bit-Oriented Messages - No Supports Empty Message - No Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "SHAKE-256",
            "cavpCertName": "A6448",
            "properties": "Supports Bit-Oriented Messages - No Supports Empty Message - No Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "TDES-CBC",
            "cavpCertName": "A6448",
            "properties": "Direction - Decrypt, Encrypt Keying Option - 1",
            "reference": "SP 800-67 Rev. 2"
          },
          {
            "algorithm": "TDES-ECB",
            "cavpCertName": "A6448",
            "properties": "Direction - Decrypt, Encrypt Keying Option - 1",
            "reference": "SP 800-67 Rev. 2"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Perform data encryption",
            "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bits 0 and 2 set to 0",
            "inputs": "AES Key, Plaint ext",
            "name": "AES Encrypti on",
            "outputs": "Ciphertext, Success/Fail",
            "rolesSspAccess": "Cry pto Offi cer - AES key: W, E",
            "secFunImpl": "AES- CBC AES- CTR AES- ECB AES- XTS AES- CBC-"
          },
          {
            "description": "Perform data decryption",
            "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bits 0 and 2 set to 0",
            "inputs": "AES Key, Cipher text",
            "name": "AES Decrypti on",
            "outputs": "Plaintext, Success/Fail",
            "rolesSspAccess": "Cry pto Offi cer - AES key: W, E",
            "secFunImpl": "CS2 AES- CBC AES- CTR AES- ECB AES- XTS AES- CBC- CS2"
          },
          {
            "description": "Perform data encryption",
            "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bit 1 set to 0",
            "inputs": "AES Key, Plaint ext, IV",
            "name": "AES Authenti cated Encrypti on",
            "outputs": "Ciphertext, tag, Success/Fail",
            "rolesSspAccess": "Cry pto Offi cer - AES key: W, E",
            "secFunImpl": "AES- CCM"
          },
          {
            "description": "Perform data decryption",
            "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bit 1 set to 0",
            "inputs": "AES Key, Cipher text, tag, IV",
            "name": "AES Authenti cated Decrypti on",
            "outputs": "Plaintext, Success/Fail",
            "rolesSspAccess": "Cry pto Offi cer - AES key: W,",
            "secFunImpl": "AES- CCM"
          },
          {
            "description": "Message Authentication",
            "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bit 13 set to 0",
            "inputs": "AES Key, Input data",
            "name": "CMAC Message Authenti cation",
            "outputs": "CMAC value",
            "rolesSspAccess": "E Cry pto Offi cer - AES key: W, E",
            "secFunImpl": "AES- CMA C"
          },
          {
            "description": "Decrypt data which was encrypted with 3- key TDES prior to the sunset date provided in IG C.M",
            "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bit 3 set to 0",
            "inputs": "Triple -DES key, cipher text",
            "name": "TDES Decrypti on (Legacy Use)",
            "outputs": "Plaintext",
            "rolesSspAccess": "Cry pto Offi cer - Trip le- DES Key : W, E",
            "secFunImpl": "TDES -ECB (Lega cy Use) TDES -CBC (Lega cy Use)"
          },
          {
            "description": "Message Authentication",
            "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bits 9- 12, 18-21 set to 0",
            "inputs": "HMA C Key, input data",
            "name": "HMAC Message Authenti cation",
            "outputs": "HMAC value",
            "rolesSspAccess": "Cry pto Offi cer -",
            "secFunImpl": "HMA C- SHA- 1 HMA"
          },
          {
            "description": "Description",
            "indicator": "Indicator",
            "inputs": "Inputs",
            "name": "Name",
            "outputs": "Outputs",
            "rolesSspAccess": "SSP Acc ess",
            "secFunImpl": "Secur ity Funct"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "HM AC key: W, E",
            "secFunImpl": "ions C- SHA2 -256 HMA C- SHA2 -384 HMA C- SHA2 -512 HMA C- SHA3 -224 HMA C- SHA3 -256 HMA C- SHA3 -384 HMA C- SHA3 -512"
          },
          {
            "description": "Hashing",
            "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bits 5- 8, 14-17 set to 0",
            "inputs": "Input data",
            "name": "Hash",
            "outputs": "Hash output",
            "rolesSspAccess": "Cry pto Offi cer",
            "secFunImpl": "SHA- 1 SHA2 -256 SHA2 -384 SHA2 -512 SHA3 -224 SHA3 -256 SHA3 -384 SHA3 -512"
          },
          {
            "description": "Extendable output function",
            "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bit 22 set to 0",
            "inputs": "Input data, output length",
            "name": "XOF",
            "outputs": "XOF output",
            "rolesSspAccess": "Cry pto Offi cer",
            "secFunImpl": "SHA KE- 128 SHA KE- 256"
          },
          {
            "description": "Return code read from CRYPTO0_CRYPTO_ BIST_STATUS",
            "indicator": "None",
            "inputs": "N/A",
            "name": "Show Status",
            "outputs": "Zero (operational) or non-zero (error)",
            "rolesSspAccess": "Cry pto Offi cer",
            "secFunImpl": "None"
          },
          {
            "description": "Self-Tests are executed automatically when device is booted or restarted",
            "indicator": "None",
            "inputs": "None",
            "name": "Self-Test",
            "outputs": "Self-test Success/Fail",
            "rolesSspAccess": "Cry pto Offi cer",
            "secFunImpl": "AES- ECB AES- CBC AES- CCM AES- CMA C AES- XTS HMA C- SHA- 1 HMA C- SHA2 -256 HMA C- SHA2 -384 HMA C- SHA2 -512 HMA C- SHA3 -256 HMA C- SHA3 -512"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "",
            "secFunImpl": "TDES -ECB (Lega cy Use) TDES -CBC (Lega cy Use) SHA KE- 256"
          },
          {
            "description": "Zeroizes all SSPs",
            "indicator": "None",
            "inputs": "None",
            "name": "Zeroizati on",
            "outputs": "None",
            "rolesSspAccess": "Cry pto Offi cer - AES key: Z - HM AC key: Z - Trip le- DES Key : Z",
            "secFunImpl": "None"
          },
          {
            "description": "Configures the keys for Crypto Officer role",
            "indicator": "None",
            "inputs": "AES Key, HMA C Key, Triple -DES Key",
            "name": "Configur e keys for use by Crypto Officer",
            "outputs": "Success/Fail",
            "rolesSspAccess": "Cry pto Offi cer - AES key: W - HM AC key: W",
            "secFunImpl": "None"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- Trip le- DES Key : W",
            "secFunImpl": ""
          },
          {
            "description": "Show the module\u0027s identifier and version",
            "indicator": "None",
            "inputs": "None",
            "name": "Show identifie r and version",
            "outputs": "Module identifier and version read from registers CRYPTO0_CRYPT O_FIPS_ID and CRYPTO0_CRYPT O_VERSION",
            "rolesSspAccess": "Cry pto Offi cer",
            "secFunImpl": "None"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "AES-ECB (A6448) - Encryption",
            "condition": "Performed during module power-up",
            "details": "Encryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A6448) - Decryption",
            "condition": "Performed during module power-up",
            "details": "Decryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CTR (A6448) - Encryption",
            "condition": "Performed during module power-up",
            "details": "Encryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CTR (A6448) - Decryption",
            "condition": "Performed during module power-up",
            "details": "Decryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC (A6448) - Encryption",
            "condition": "Performed during module power-up",
            "details": "Encryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC (A6448) - Decryption",
            "condition": "Performed during module power-up",
            "details": "Decryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-XTS Testing Revision 2.0 (A6448) - Encryption",
            "condition": "Performed during module power-up",
            "details": "Encryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-XTS Testing Revision 2.0 (A6448) - Decryption",
            "condition": "Performed during module power-up",
            "details": "Decryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CCM (A6448) - Encryption",
            "condition": "Performed during module power-up",
            "details": "Encryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CCM (A6448) - Decryption",
            "condition": "Performed during module power-up",
            "details": "Decryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CMAC (A6448)",
            "condition": "Performed during module power-up",
            "details": "MAC tag computation and verification",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "TDES-ECB (A6448)",
            "condition": "Performed during module power-up",
            "details": "Decryption (Legacy)",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "168 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "TDES-CBC (A6448)",
            "condition": "Performed during module power-up",
            "details": "Decryption (Legacy)",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "168 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA-1 (A6448)",
            "condition": "Performed during module power-up",
            "details": "MAC tag computation and verification",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "512 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A6448)",
            "condition": "Performed during module power-up",
            "details": "MAC tag computation and verification",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "512 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 512 (A6448)",
            "condition": "Performed during module power-up",
            "details": "MAC tag computation and verification",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "512 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 384 (A6448)",
            "condition": "Performed during module power-up",
            "details": "MAC tag computation and verification",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "SHA2-384",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA3- 512 (A6448)",
            "condition": "Performed during module power-up",
            "details": "MAC tag computation and verification",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "512 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA3- 256 (A6448)",
            "condition": "Performed during module power-up",
            "details": "MAC tag computation and verification",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "SHA3-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHAKE-256 (A6448)",
            "condition": "Performed during module power-up",
            "details": "Encryption",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "N/A",
            "type": "CAST"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "KAT failure",
            "description": "No cryptographic operation can be performed. No data input or output is possible.",
            "indicator": "CRYPTO0_CRYPTO_BIST_STATUS register is non-zero",
            "name": "Error",
            "recoveryMethod": "Power cycling"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [
          {
            "inspectFreq": "N/A",
            "inspectGuidance": "N/A",
            "mechanism": "Tamper evident coating"
          }
        ],
        "found": true,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [
          {
            "description": "Automatically entered whenever an approved service is requested",
            "name": "Approved mode of operation",
            "statusIndicator": "Equivalent to the indicator of the requested service",
            "type": "Approved"
          },
          {
            "description": "Automatically entered whenever a non-approved service is requested",
            "name": "Non-approved mode of operation",
            "statusIndicator": "Non-approved services are not explicitly indicated. The absence of an explicit indicator is an implicit indicator of non- approved services.",
            "type": "Non- Approved"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [
          {
            "name": "AES-GCM (external IV)",
            "use": "encryption, decryption"
          },
          {
            "name": "AES-SIV",
            "use": "encryption, decryption"
          },
          {
            "name": "DES-CBC",
            "use": "encryption, decryption"
          },
          {
            "name": "DES-ECB",
            "use": "encryption, decryption"
          },
          {
            "name": "TDES (two independent keys)",
            "use": "encryption, decryption"
          },
          {
            "name": "TDES Encryption (three independent keys)",
            "use": "encryption"
          },
          {
            "name": "HMAC SHA-1 with key sizes less than 112 bits",
            "use": "message authentication code"
          },
          {
            "name": "HMAC SHA2-256 with key sizes less than 112 bits",
            "use": "message authentication code"
          },
          {
            "name": "HMAC SHA2-384 with key sizes less than 112 bits",
            "use": "message authentication code"
          },
          {
            "name": "HMAC SHA2-512 with key sizes less than 112 bits",
            "use": "message authentication code"
          },
          {
            "name": "HMAC SHA3-224 with key sizes less than 112 bits",
            "use": "message authentication code"
          },
          {
            "name": "HMAC SHA3-256 with key sizes less than 112 bits",
            "use": "message authentication code"
          },
          {
            "name": "HMAC SHA3-384 with key sizes less than 112 bits",
            "use": "message authentication code"
          },
          {
            "name": "HMAC SHA3-512 with key sizes less than 112 bits",
            "use": "message authentication code"
          },
          {
            "name": "AEAD-SHA-1 AES-CBC",
            "use": "encryption, decryption (with message authentication code)"
          },
          {
            "name": "AEAD-SHA-1 AES-CTR",
            "use": "encryption, decryption (with message authentication code)"
          },
          {
            "name": "AEAD-SHA-1 DES-CBC",
            "use": "encryption, decryption (with message authentication code)"
          },
          {
            "name": "AEAD-SHA-1 TDES-CBC",
            "use": "encryption, decryption (with message authentication code)"
          },
          {
            "name": "SM3",
            "use": "hashing"
          },
          {
            "name": "SM4",
            "use": "encryption, decryption"
          },
          {
            "name": "cSHAKE (not CAVP tested)",
            "use": "extendable output function"
          },
          {
            "name": "KMAC (not CAVP tested)",
            "use": "message authentication code"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [
          {
            "alg_accessed": "AES-GCM (external IV) AES-SIV DES-CBC DES-ECB TDES (two independent keys) TDES Encryption (three independent keys) SM4",
            "description": "Encrypts data using symmetric cryptography",
            "name": "Encryption",
            "role": "CO"
          },
          {
            "alg_accessed": "AES-GCM (external IV) AES-SIV DES-CBC DES-ECB TDES (two independent keys) SM4",
            "description": "Decrypts data using symmetric cryptography",
            "name": "Decryption",
            "role": "CO"
          },
          {
            "alg_accessed": "SM3",
            "description": "Hashing algorithm",
            "name": "Hash",
            "role": "CO"
          },
          {
            "alg_accessed": "HMAC SHA-1 with key sizes less than 112 bits",
            "description": "Computes the MAC value of data",
            "name": "Message Authentication",
            "role": "CO"
          },
          {
            "alg_accessed": "HMAC SHA2-256 with key sizes less than 112 bits HMAC SHA2-384 with key sizes less than 112 bits HMAC SHA2-512 with key sizes less than 112 bits HMAC SHA3-224 with key sizes less than 112 bits HMAC SHA3-256 with key sizes less than 112 bits HMAC SHA3-384 with key sizes less than 112 bits HMAC SHA3-512 with key sizes less than 112 bits KMAC (not CAVP tested)",
            "description": "",
            "name": "",
            "role": ""
          },
          {
            "alg_accessed": "AEAD-SHA-1 AES-CBC AEAD-SHA-1 AES-CTR AEAD-SHA-1 DES-CBC AEAD-SHA-1 TDES-CBC",
            "description": "Encrypts or decrypts data using symmetric cryptography",
            "name": "Authenticated Encryption/Decryption (AEAD)",
            "role": "CO"
          },
          {
            "alg_accessed": "cSHAKE (not CAVP tested)",
            "description": "Extendable Output Function",
            "name": "Extendable Output Function (XOF)",
            "role": "CO"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "All input data",
            "logicalInterface": "Data Input",
            "physicalPort": "Data In FIFO and Registers"
          },
          {
            "data": "All data output except Status information",
            "logicalInterface": "Data Output",
            "physicalPort": "Data Out FIFO"
          },
          {
            "data": "Command input",
            "logicalInterface": "Control Input",
            "physicalPort": "Registers"
          },
          {
            "data": "Status information",
            "logicalInterface": "Status Output",
            "physicalPort": "Registers"
          },
          {
            "data": "N/A",
            "logicalInterface": "Power",
            "physicalPort": "Physical power connector"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "None",
            "name": "Crypto Officer",
            "operatorType": "CO",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "1",
            "section": "1",
            "title": "General"
          },
          {
            "level": "1",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "1",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "1",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "N/A",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "N/A",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "2",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "1",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "1",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "2",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "N/A",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "1",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [],
        "found": false,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "Hardware registers, hardware FIFOs",
            "distribution": "N/A",
            "entry": "N/A",
            "format": "Plaintext",
            "name": "Input parameter",
            "sfiAlgo": "",
            "source": "Caller within the physical perimeter"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "All SSPs will be zeroized",
            "method": "Power-off",
            "operatorId": "Operator can initiate this zeroization method by powering off the module",
            "rationale": "The registers holding the SSPs are set to all zeroes"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "Temporary storage for SSPs used by the module as part of service execution",
            "name": "Hardware FIFO",
            "persistance": "Dynamic"
          },
          {
            "description": "Temporary storage for SSPs used by the module as part of service execution",
            "name": "Registers",
            "persistance": "Dynamic"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "5.9.0",
            "modelPartNum": "Snapdragon\u00ae 8 Elite Mobile Platform",
            "processors": "N/A"
          },
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "5.9.0",
            "modelPartNum": "Snapdragon\u00ae 7 Gen 4 Mobile Platform",
            "processors": "N/A"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {},
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 5
        },
        "CCM": {
          "CCM": 6
        },
        "CTR": {
          "CTR": 3
        },
        "ECB": {
          "ECB": 4
        },
        "XEX": {
          "XEX": 1
        },
        "XTS": {
          "XTS": 9
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "AEAD": {
          "AEAD": 1
        },
        "MAC": {
          "MAC": 27
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "atsec": {
          "atsec": 2
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "HMAC SHA-1": 2,
          "HMAC- SHA-1": 1,
          "HMAC-SHA-1": 8,
          "SHA- 1": 4,
          "SHA-1": 11,
          "SHA-3": 1,
          "SHA1": 1,
          "SHA2 -256": 2,
          "SHA2 -384": 3,
          "SHA2 -512": 2,
          "SHA2-256": 7,
          "SHA2-384": 8,
          "SHA2-512": 7,
          "SHA3 -224": 2,
          "SHA3 -256": 2,
          "SHA3 -384": 2,
          "SHA3 -512": 2,
          "SHA3-224": 7,
          "SHA3-256": 8,
          "SHA3-384": 7,
          "SHA3-512": 7
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "Level 2": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 11,
            "SHA1": 1
          },
          "SHA2": {
            "SHA2": 9
          },
          "SHA3": {
            "SHA-3": 1,
            "SHA3": 10,
            "SHA3-224": 7,
            "SHA3-256": 8,
            "SHA3-384": 7,
            "SHA3-512": 7
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 46,
          "FIPS 180-4": 5,
          "FIPS 197": 1,
          "FIPS 198-1": 9,
          "FIPS 202": 7,
          "FIPS PUB 140-3": 1
        },
        "NIST": {
          "NIST SP 800-57": 1,
          "SP 800-133": 1,
          "SP 800-38A": 5,
          "SP 800-38B": 2,
          "SP 800-38C": 2,
          "SP 800-38E": 2,
          "SP 800-67": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 35,
            "AES-": 19
          },
          "CAST": {
            "CAST": 42
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 1,
            "TDES": 14,
            "Triple-DES": 1
          },
          "DES": {
            "DES": 5
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 5,
            "HMAC": 30,
            "KMAC": 2
          }
        },
        "miscellaneous": {
          "SM4": {
            "SM4": 3
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Qualcomm": {
          "Qualcomm": 108
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "TDES-CBCA6448",
        "TDES-ECBA6448",
        "HMAC-SHA2-384A6448",
        "SHA2-512A6448",
        "HMAC-SHA2-256A6448",
        "SHA3-224A6448",
        "SHA2-256A6448",
        "AES-CMACA6448",
        "SHA3-512A6448",
        "HMAC-SHA2-512A6448",
        "AES-CCMA6448",
        "HMAC-SHA3-256A6448",
        "AES-XTS Testing Revision 2.0A6448",
        "SHAKE-256A6448",
        "SHA2-384A6448",
        "AES-CBCA6448",
        "HMAC-SHA3-224A6448",
        "AES-ECBA6448",
        "HMAC-SHA3-384A6448",
        "SHA-1A6448",
        "HMAC-SHA-1A6448",
        "HMAC-SHA3-512A6448",
        "AES-CTRA6448",
        "SHA3-256A6448",
        "AES-CBC-CS2A6448",
        "SHA3-384A6448",
        "SHAKE-128A6448"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A6448"
      ]
    },
    "policy_metadata": {
      "/CreationDate": "D:20260928081218-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20260928081218-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 789534,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://doi.org/10.6028/NIST.SP.800-38B",
          "https://doi.org/10.6028/NIST.FIPS.140-3",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
          "https://doi.org/10.6028/NIST.SP.800-67r2",
          "https://doi.org/10.6028/NIST.FIPS.180-4",
          "https://doi.org/10.6028/NIST.FIPS.202",
          "https://doi.org/10.6028/NIST.FIPS.198-1",
          "https://doi.org/10.6028/NIST.SP.800-38E",
          "https://doi.org/10.6028/NIST.SP.800-38C",
          "https://doi.org/10.6028/NIST.FIPS.197-upd1",
          "https://doi.org/10.6028/NIST.SP.800-38A"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 37
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "14b3b51c5dbb60d05bb0cd9d9f86fa3ed32f874580a86b40a728f1bd75ba11e7",
      "source_hash": "a691a95c45459cd8a5068942e620f0e80ded1d750eae807f66ff5aa06b157aa6",
      "txt_hash": "6cb16e77b219e8603da94832d140b3f4a476c606a39b33487b2d615ee74db196"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode. No assurance of minimum security of SSPs (e.g. keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
    "certificate_pdf_url": null,
    "date_sunset": "2031-10-08",
    "description": "Qualcomm Crypto Engine Core is a general purpose cryptographic hardware engine capable of securely processing various confidentiality and integrity algorithms across multiple execution environments.",
    "embodiment": "SingleChip",
    "exceptions": [
      "Software/Firmware security: N/A",
      "Operational environment: N/A",
      "Physical security: Level 2",
      "Non-invasive security: N/A",
      "Life-cycle assurance: Level 2",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Qualcomm\u00ae Crypto Engine Core",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-10-09",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Qualcomm Technologies, Inc.",
    "vendor_url": "http://www.qualcomm.com"
  }
}