Qualcomm® Trusted Execution Environment (TEE) Software Cryptographic Library
Qualcomm® Trusted Execution Environment (TEE) Software Cryptographic Library, from Qualcomm Technologies, Inc., holds FIPS 140-3 certificate #4809 at overall level 1. The validation is active, with a sunset date of 2029-09-22. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: Interim validation. When operated in the approved mode and installed, initialized and configured as specified in Section 11.5 of the Security Policy with bound module Qualcomm® Pseudo Random Number Generator validated to FIPS 140-3 under Cert. #4778
This caveat mentions binding. A bound module inherits the earliest sunset of the modules it binds to, so the sunset date above can be optimistic.
Certificate
| Certificate number | 4809 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2029-09-22 |
| Overall level | 1 |
| Module type | Software-hybrid |
| Embodiment | Single Chip |
| Vendor | Qualcomm Technologies, Inc. · website |
| Software versions | 513b121d8d789b1e5a7fd22743994650a94b222d108c33b0d82c98ff282bac64 |
| Hardware versions | 513b121d8d789b1e5a7fd22743994650a94b222d108c33b0d82c98ff282bac64 |
Module description
Quoted from the NIST CMVP entry for this certificate.
Qualcomm Trusted Execution Environment (TEE) Software Cryptographic Library provides various software cryptographic functionalities to the 64bit Qualcomm Trusted Execution Environment Trusted Applications.
Security level exceptions
- Physical security: Level 2
- Non-invasive security: N/A
- Life-cycle assurance: Level 2
Approved algorithms (27)
| Algorithm | CAVP certificates |
|---|---|
| AES-CBC | A2940 |
| AES-CBC-CS2 | A2940 |
| AES-CCM | A2940 |
| AES-CFB128 | A2940 |
| AES-CTR | A2940 |
| AES-ECB | A2940 |
| AES-OFB | A2940 |
| AES-XTS Testing Revision 2.0 | A2940 |
| ECDSA KeyGen (FIPS186-4) | A2940 |
| ECDSA SigGen (FIPS186-4) | A2940 |
| ECDSA SigVer (FIPS186-4) | A2940 |
| Hash DRBG | A2945 |
| HMAC-SHA-1 | A2940 |
| HMAC-SHA2-224 | A2940 |
| HMAC-SHA2-256 | A2940 |
| HMAC-SHA2-384 | A2940 |
| HMAC-SHA2-512 | A2940 |
| PBKDF | A2940 |
| RSA KeyGen (FIPS186-4) | A2940 |
| RSA SigGen (FIPS186-4) | A2940 |
| RSA Signature Primitive | A2940 |
| RSA SigVer (FIPS186-4) | A2940 |
| SHA-1 | A2940 |
| SHA2-224 | A2940 |
| SHA2-256 | A2940, A2945, A2949 |
| SHA2-384 | A2940 |
| SHA2-512 | A2940 |
Tested configurations
- Qualcomm Trusted Execution Environment (TEE) TZ.XF.5.24 running on Snapdragon 8 Gen 2 Mobile Platform with PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2024-09-23 | Initial | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2024-09-23