Samsung Kernel Cryptographic Module
Samsung Kernel Cryptographic Module, from Samsung Electronics Co., Ltd., holds FIPS 140-2 certificate #2974 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 2974 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Samsung Electronics Co., Ltd. · website |
| Software versions | 1.6.1 [1], 1.7.1 [2] and 1.8 [3] |
Module description
Quoted from the NIST CMVP entry for this certificate.
Provides general purpose cryptographic services to services in the Linux kernel and user-space applications, intended to protect data in transit and at rest.
Security level exceptions
- Physical Security: N/A
- EMI/EMC: Level 3
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms (3)
| Algorithm | CAVP certificates |
|---|---|
| AES | 4403, 4424, 4425, 4426, 4427, 4744, 4745 |
| HMAC | 2926, 2936, 2937, 2938, 2939, 3159, 3160 |
| SHS | 3630, 3641, 3642, 3643, 3644, 3888, 3889 |
Allowed algorithms
NDRNG
Tested configurations
- Android 6.0.1 (Kernel 3.10) running on Samsung Galaxy J3 [1]
- Android 7.0 (Kernel 4.4) running on Samsung Galaxy S8 with PAA [3]
- Android 7.0 (Kernel 4.4) running on Samsung Galaxy S8 without PAA [3] (single-user mode)
- Android 7.1 (Kernel 3.18) running on Samsung Tab Active2 with PAA [2]
- Android 7.1 (Kernel 3.18) running on Samsung Tab Active2 without PAA [2]
Validation history
| Date | Type | Lab |
|---|---|---|
| 2017-07-27 | Initial | CYGNACOM SOLUTIONS INC |
| 2017-11-29 | Update | CYGNACOM SOLUTIONS INC |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2017-07-27, 2017-11-29