808bits

Qualcomm® Crypto Engine Core

FIPS 140-3 certificate #4748 · Qualcomm Technologies, Inc. · data as of 2026-10-21

Qualcomm® Crypto Engine Core, from Qualcomm Technologies, Inc., holds FIPS 140-3 certificate #4748 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5467. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated in approved mode.

Certificate

Certificate number4748
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeHardware
EmbodimentSingle Chip
VendorQualcomm Technologies, Inc. · website
Hardware versions5.7.0[1], 5.7.2[2] and 5.7.3[3]

Module description

Quoted from the NIST CMVP entry for this certificate.

Qualcomm Crypto Engine Core is a general purpose cryptographic hardware engine capable of securely processing various confidentiality and integrity algorithms across multiple execution environments.

Security level exceptions

  • Software/Firmware security: N/A
  • Operational environment: N/A
  • Physical security: Level 2
  • Non-invasive security: N/A
  • Life-cycle assurance: Level 2
  • Mitigation of other attacks: N/A

Approved algorithms (14)

AlgorithmCAVP certificates
AES-CBCA2908, A3694, A4464
AES-CCMA2908, A3694, A4464
AES-CMACA2908, A3694, A4464
AES-CTRA2908, A3694, A4464
AES-ECBA2908, A3694, A4464
AES-XTS Testing Revision 2.0A2908, A3694, A4464
HMAC-SHA-1A2908, A3694, A4464
HMAC-SHA2-256A2908, A3694, A4464
HMAC-SHA2-384A2908, A3694, A4464
HMAC-SHA2-512A2908, A3694, A4464
SHA-1A2908, A3694, A4464
SHA2-256A2908, A3694, A4464
SHA2-384A2908, A3694, A4464
SHA2-512A2908, A3694, A4464

Tested configurations

  • Snapdragon(R) 8 Gen 2 Mobile Platform[1], Qualcomm(R) QCM4490[3], Qualcomm(R) QCS4490[3], Snapdragon(R) 4 Gen 2 Mobile Platform[3] and Snapdragon(R) XR2 Gen 2 Platform[2]

Validation history

DateTypeLab
2024-08-01Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-08-01

Source documents