Samsung OpenSSL Cryptographic Module
Certificate
| Certificate number | 2120 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-chip standalone |
| Vendor | Samsung Electronics Co., Ltd. · website |
| Software versions | SecOpenSSL2.0.3 |
Module description
Provides general purpose cryptographic services to user-space applications on the mobile platform for the protection of data in transit.
Security level exceptions
- Physical Security: N/A
- EMI/EMC: Level 3
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 2351, 2411 |
| CVL | 56, 72 |
| DRBG | 299, 321 |
| DSA | 735, 753 |
| ECDSA | 386, 396 |
| HMAC | 1458, 1496 |
| RNG | 1171, 1190 |
| RSA | 1212, 1245 |
| SHS | 2026, 2069 |
| Triple-DES | 1471, 1501 |
Other algorithms
RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength); EC Diffie-Hellman (key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of encryption strength); Blowfish; Triple-DES-CTR (non-compliant); AES-CTR (non-compliant); MD4; MD5; MDC-2; RC2; RC4; RIPEMD-160; Diffie-Hellman; md_rand.c; DRBG (Certs. #299 and #321; DUAL-EC; non-compliant)
Tested configurations
- Android Jelly Bean 4.1 running on Samsung Galaxy Note II
- Android Jelly Bean 4.2 running on Samsung Galaxy S4 (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2014-03-28 | Initial | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2014-03-28