Samsung Kernel Cryptographic Module
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 4097 |
|---|---|
| Standard | FIPS 140-2 |
| Status | active |
| Sunset date | 2026-09-21 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Samsung Electronics Co., Ltd. · website |
| Software versions | 2.2 |
Module description
Provides general purpose cryptographic services to services in the Linux kernel and user-space applications, intended to protect data in transit and at rest.
Security level exceptions
- Physical Security: N/A
- EMI/EMC: Level 3
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | A969, A970, A1455, A1456 |
| HMAC | A969, A970, A1455, A1456 |
| SHS | A969, A970, A1455, A1456 |
Tested configurations
- Linux Kernel 4.19 running on Samsung Galaxy A52 with Qualcomm Snapdragon 750 with PAA, Linux Kernel 4.19 running on Samsung Galaxy A52 with Qualcomm Snapdragon 750 without PAA, Linux Kernel 4.19 running on Samsung Watch4 Classic with Samsung Electronics Exynos W920 with PAA, Linux Kernel 4.19 running on Samsung Watch4 Classic with Samsung Electronics Exynos W920 without PAA, Linux Kernel 5.4 running on Samsung Galaxy S21+ with Samsung Electronics Exynos 2100 with PAA, Linux Kernel 5.4 running on Samsung Galaxy S21+ with Samsung Electronics Exynos 2100 without PAA, Linux Kernel 5.4 running on Samsung Galaxy S21+ with Qualcomm Snapdragon 888 with PAA, Linux Kernel 5.4 running on Samsung Galaxy S21+ with Qualcomm Snapdragon 888 without PAA, Linux Kernel 5.10 running on Samsung Galaxy A53 with Samsung Electronics Exynos 1280 with PAA, Linux Kernel 5.10 running on Samsung Galaxy A53 with Samsung Electronics Exynos 1280 without PAA, Linux Kernel 5.10 running on Samsung Galaxy S22+ with Samsung Electronics Exynos 2200 with PAA, Linux Kernel 5.10 running on Samsung Galaxy S22+ with Samsung Electronics Exynos 2200 without PAA, Linux Kernel 5.10 running on Samsung Galaxy S22+ with Qualcomm Snapdragon 898 with PAA, Linux Kernel 5.10 running on Samsung Galaxy S22+ with Qualcomm Snapdragon 898 without PAA
- Linux Kernel 5.10 running on Samsung Galaxy Z Flip 4 with Qualcomm Snapdragon 8+ Gen 1 with PAA
- Linux Kernel 5.10 running on Samsung Galaxy Z Flip 4 with Qualcomm Snapdragon 8+ Gen 1 without PAA (single-user mode)
- Linux Kernel 5.4 running on Samsung Galaxy XCover6 Pro with Qualcomm Snapdragon 778G with PAA
- Linux Kernel 5.4 running on Samsung Galaxy XCover6 Pro with Qualcomm Snapdragon 778G without PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2021-12-11 | Initial | CYGNACOM SOLUTIONS INC |
| 2022-06-22 | Update | Gossamer Security Solutions |
| 2022-11-08 | Update | Gossamer Security Solutions |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2021-12-11, 2022-06-22, 2022-11-08