kbrain

Samsung BoringSSL Cryptographic Module

[email protected] - FIPS 140 #3583

historicalLevel 1

Provides general purpose cryptographic services to user-space applications on the mobile platform for the protection of data.

Key facts

Scheme
FIPS 140
Certificate
3583
Standard
FIPS 140-2
Security level
Level 1
Status
historical
Status reason
SP 800-56Arev3 transition
Vendor
[email protected]
Module type
Software
Embodiment
Multi-Chip Stand Alone
Lab
Gossamer Security Solutions
First validated
December 13, 2019
Versions
1.3
Caveat
When operated in FIPS mode
Level exceptions
Design Assurance: Level 3; EMI/EMC: Level 3; Mitigation of Other Attacks: N/A; Physical Security: N/A

Algorithms

  • AES
  • CVL
  • DRBG
  • ECDSA
  • HMAC
  • KBKDF
  • KTS
  • RSA
  • SHS

Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.

Tested environments

  • Android 9 with processor Qualcomm MSM8996 running on Samsung Galaxy Tab S3
  • Android 9 with processor Qualcomm MSM8998 running on Samsung Galaxy S8+
  • Android 9 with processor Qualcomm SDM845 running on Samsung Galaxy S9+
  • Android 9 with processor Qualcomm SM8150 running on Samsung Galaxy S10+
  • Android 9 with processor Samsung Electronics Exynos8895 running on Samsung Galaxy S8
  • Android 9 with processor Samsung Electronics Exynos9810 running on Samsung Galaxy S9+
  • Android 9 with processor Samsung Electronics Exynos9820 running on Samsung Galaxy S10+
  • Android 9 with Qualcomm SDM450 running on Galaxy Tab A 10.5
  • Android 9 with Samsung Electronics Exynos7870 running on Galaxy Tab Active2
  • Android 9 with Samsung Electronics Exynos9825 running on Galaxy Note 10+ (single-user mode)

Operational environments the module was tested on, as listed by NIST CMVP.

CVEs that may affect this product

sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.

Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.

Documents and sources

Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP, the Common Criteria Portal and ENISA (EUCC) - dataset of September 21, 2026 - synced October 17, 2026

Check certifications from your AI assistant

The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.

Add the certifications brain