Qualcomm® Trusted Execution Environment (TEE) Software Cryptographic Library
Caveat: Interim validation. When operated in the approved mode and installed, initialized and configured as specified in Section 11.5 of the Security Policy with bound module Qualcomm® Pseudo Random Number Generator validated to FIPS 140-3 under Cert. #4778
This caveat mentions binding. A bound module inherits the earliest sunset of the modules it binds to, so the sunset date above can be optimistic.
Certificate
| Certificate number | 4809 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2029-09-22 |
| Overall level | 1 |
| Module type | Software-hybrid |
| Embodiment | Single Chip |
| Vendor | Qualcomm Technologies, Inc. · website |
| Software versions | 513b121d8d789b1e5a7fd22743994650a94b222d108c33b0d82c98ff282bac64 |
| Hardware versions | 513b121d8d789b1e5a7fd22743994650a94b222d108c33b0d82c98ff282bac64 |
Module description
Qualcomm Trusted Execution Environment (TEE) Software Cryptographic Library provides various software cryptographic functionalities to the 64bit Qualcomm Trusted Execution Environment Trusted Applications.
Security level exceptions
- Physical security: Level 2
- Non-invasive security: N/A
- Life-cycle assurance: Level 2
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES-CBC | A2940 |
| AES-CBC-CS2 | A2940 |
| AES-CCM | A2940 |
| AES-CFB128 | A2940 |
| AES-CTR | A2940 |
| AES-ECB | A2940 |
| AES-OFB | A2940 |
| AES-XTS Testing Revision 2.0 | A2940 |
| ECDSA KeyGen (FIPS186-4) | A2940 |
| ECDSA SigGen (FIPS186-4) | A2940 |
| ECDSA SigVer (FIPS186-4) | A2940 |
| Hash DRBG | A2945 |
| HMAC-SHA-1 | A2940 |
| HMAC-SHA2-224 | A2940 |
| HMAC-SHA2-256 | A2940 |
| HMAC-SHA2-384 | A2940 |
| HMAC-SHA2-512 | A2940 |
| PBKDF | A2940 |
| RSA KeyGen (FIPS186-4) | A2940 |
| RSA SigGen (FIPS186-4) | A2940 |
| RSA Signature Primitive | A2940 |
| RSA SigVer (FIPS186-4) | A2940 |
| SHA-1 | A2940 |
| SHA2-224 | A2940 |
| SHA2-256 | A2940 |
| SHA2-256 | A2945 |
| SHA2-256 | A2949 |
| SHA2-384 | A2940 |
| SHA2-512 | A2940 |
Tested configurations
- Qualcomm Trusted Execution Environment (TEE) TZ.XF.5.24 running on Snapdragon 8 Gen 2 Mobile Platform with PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2024-09-23 | Initial | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2024-09-23