CC Certificate 

Security Target 

Validation Report 

Assurance Activity 

Administrative Guide 

The Target of Evaluation (TOE) is Samsung Knox File Encryption 1.4 - Fall.  The TOE is a software service built into Samsung Android 12 with Knox 3.8 to provide file encryption. Samsung Knox File Encryption is designed to provide a second encryption layer similar to and on top of the FBE layer for the entire device.

The Knox File Encryption service runs in the background and utilizes Samsung Android cryptographic modules to provide file encryption services. The service is designed to run without any user intervention as all files will be encrypted automatically.

The evaluated configuration consists of the Samsung Knox File Encryption 1.4- Fall (the version is listed as “DualDAR”) on the following devices:

Note the Galaxy Tab Active3 and Galaxy XCover6 Pro were both fully tested. The Galaxy Tab Active4 Pro is being claimed as equivalent as it has the same processor, TEE OS, Knox version and DualDAR version as the Galaxy XCover6 Pro.

The evaluation was carried out in accordance to the Common Criteria Evaluation and Validation Scheme (CCEVS) requirements and guidance.  The evaluation demonstrated that the TOE meets the security requirements contained in the Security Target.  The criteria against which the TOE was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1, Revision 5, April 2017. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Evaluation Methodology, Version 3.1, Revision 5, April 2017.  The product, when delivered and configured as identified in the Samsung File Encryption 1.4 Administrator Guide, Version 1.4, August 31, 2022 document, satisfies all of the security functional requirements stated in the Samsung Electronics Co., Ltd. Samsung Knox File Encryption 1.4 – Fall Security Target, Version 0.3, October 7, 2022.  The project underwent CCEVS Validator review.  The evaluation was completed in October 2022.  Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report (report number CCEVS-VR-VID11308-2022) prepared by CCEVS.

Environmental Strengths:

The logical boundaries of the Samsung Knox File Encryption are realized in the security functions that it implements. Each of these security functions is summarized below.

Cryptographic support:

The TOE runs as part of Samsung Android 12 with Knox 3.8 and includes several cryptographic libraries for encryption/decryption/cryptographic hashing functions for securing file contents and TOE keys.

User data protection:

Depending on the FEB configuration, the TOE either protects all user data within the Knox work profile or the entire device by providing an automatic encryption service for all stored files; applications do not have to be made aware of the Knox File Encryption service to be protected. All keys are either AES 128-bit (FEKs) or 256-bit (for Master key), using AES-GCM for FEK protection and AES-CBC for file content protection.

Identification and authentication:

Depending on the FEB configuration, the TOE either utilizes the authentication services provided by the Knox work profile or its own authentication dialog to unlock the Master Key. Unsuccessful authentication will prevent the Master Key from being unlocked, and hence no encrypted files can be accessed.

Security management:

The services provided by the TOE are not available until either a Knox File Encryption has been enabled. Authentication management and the work profile lock settings are handled by the Knox work profile management and are generic for all Knox work profile configurations. When the whole device is configured for encryption authentication settings are handled by a combination of the device authentication settings and additional Knox File Encryption settings. In either case, these settings cannot be managed directly on the device but must be configured from the MDM.

Privacy:

The TOE does not transmit Personally Identifiable Information over any network interfaces nor does it request access to any applications that may contain such information.

Protection of the TSF:

The TOE relies on the physical boundary of the evaluated platform as well as the Samsung Android operating system for the protection of the TOE’s components.

The TOE relies on the Samsung Android operating system to provide updates as the software is incorporated as part of the device image. The version of the Knox File Encryption software can be seen in the About Device page with the Knox version information (as the DualDAR version).

The TOE is a Samsung component, and all code is maintained solely by Samsung. Only documented APIs available in Samsung Android (which includes the Knox work profile and Samsung cryptographic libraries) are used.

Trusted path/channels:

The TOE does not transmit Personally Identifiable Information over any network interfaces.

Vendor Information