Samsung BoringCrypto Android
Caveat: No assurance of the minimum strength of generated SSPs (e.g., keys). When operated in approved mode.
Certificate
| Certificate number | 5012 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2029-07-22 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Samsung Electronics Co., Ltd. · website |
| Software versions | 2022061300 |
Module description
A software library that contains cryptographic functionality to serve BoringSSL and other user-space applications.
Security level exceptions
- Physical security: N/A
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES-CBC | A3285 |
| AES-CCM | A3285 |
| AES-CTR | A3285 |
| AES-ECB | A3285 |
| AES-GCM | A3285 |
| AES-KW | A3285 |
| AES-KWP | A3285 |
| Counter DRBG | A3285 |
| ECDSA KeyGen (FIPS186-4) | A3285 |
| ECDSA KeyVer (FIPS186-4) | A3285 |
| ECDSA SigGen (FIPS186-4) | A3285 |
| ECDSA SigVer (FIPS186-4) | A3285 |
| HMAC-SHA-1 | A3285 |
| HMAC-SHA2-224 | A3285 |
| HMAC-SHA2-256 | A3285 |
| HMAC-SHA2-384 | A3285 |
| HMAC-SHA2-512 | A3285 |
| KAS-ECC-SSC Sp800-56Ar3 | A3285 |
| KDF TLS | A3285 |
| RSA KeyGen (FIPS186-4) | A3285 |
| RSA SigGen (FIPS186-4) | A3285 |
| RSA SigVer (FIPS186-4) | A3285 |
| SHA-1 | A3285 |
| SHA2-224 | A3285 |
| SHA2-256 | A3285 |
| SHA2-384 | A3285 |
| SHA2-512 | A3285 |
| SHA2-512/256 | A3285 |
Tested configurations
- Android 13 running on A52 on Snapdragon 750G with PAA
- Android 13 running on A52 on Snapdragon 750G without PAA
- Android 13 running on A53 on Exynos 1280 with PAA
- Android 13 running on A53 on Exynos 1280 without PAA
- Android 13 running on A71 5G (US) on Snapdragon 765G with PAA
- Android 13 running on A71 5G (US) on Snapdragon 765G without PAA
- Android 13 running on Galaxy S20+ 5G SM-G986B/DS on Exynos 990 with PAA
- Android 13 running on Galaxy S20+ 5G SM-G986B/DS on Exynos 990 without PAA
- Android 13 running on Galaxy S20+ 5G SM-G986U on Snapdragon 865 with PAA
- Android 13 running on Galaxy S20+ 5G SM-G986U on Snapdragon 865 without PAA
- Android 13 running on Galaxy S21+ 5G SM-G996B/DS on Exynos 2100 with PAA
- Android 13 running on Galaxy S21+ 5G SM-G996B/DS on Exynos 2100 without PAA
- Android 13 running on Galaxy S21+ 5G SM-G996U on Snapdragon 888 with PAA
- Android 13 running on Galaxy S21+ 5G SM-G996U on Snapdragon 888 without PAA
- Android 13 running on Galaxy S22 Ultra SM-S908B on Exynos 2200 with PAA
- Android 13 running on Galaxy S22 Ultra SM-S908B on Exynos 2200 without PAA
- Android 13 running on S22 on Snapdragon 8 Gen1 with PAA
- Android 13 running on S22 on Snapdragon 8 Gen1 without PAA
- Android 13 running on S23 on Snapdragon 8 Gen2 with PAA
- Android 13 running on S23 on Snapdragon 8 Gen2 without PAA
- Android 13 running on Tab Active3 on Exynos 9810 with PAA
- Android 13 running on Tab Active3 on Exynos 9810 without PAA
- Android 13 running on TAB S9 FE on Exynos 1380 with PAA
- Android 13 running on TAB S9 FE on Exynos 1380 without PAA
- Android 13 running on XCover, G715FN on Exynos 9611 with PAA
- Android 13 running on XCover, G715FN on Exynos 9611 without PAA
- Android 13 running on XCover6 Pro on Snapdragon 778G with PAA
- Android 13 running on XCover6 Pro on Snapdragon 778G without PAA
- Android 13 running on Z Flip 4 F721U on Snapdragon 8+ Gen1 with PAA
- Android 13 running on Z Flip 4 F721U on Snapdragon 8+ Gen1 without PAA
- Android 13 running on Z-FLIP on Snapdragon 855+ with PAA
- Android 13 running on Z-FLIP on Snapdragon 855+ without PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2025-04-29 | Initial | Acumen Security |
| 2025-09-19 | Update | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2025-04-29