TThe Target of Evaluation (TOE) is Samsung Knox File Encryption 1.8.0 - Fall. The TOE is a service built into Samsung Knox that can provide an additional layer of file encryption when configured. This is available on devices with Android 16 and Knox 3.12. Knox File Encryption can be configured to encrypt files only in a Knox work profile or it can alternately be configured to encrypt the entire device and both are included as part of the evaluation.
\r\nThe TOE is a software service built into Samsung Android 16 with Knox 3.12 to provide file encryption. Samsung Knox File Encryption is designed to provide a second encryption layer similar to and on top of the file-based encryption (FBE) layer for the entire device. The Knox File Encryption service runs in the background and utilizes Samsung Android cryptographic modules to provide file encryption services. The service is designed to run without any user intervention as all files will be encrypted automatically.
\r\nKnox File Encryption can be configured to encrypt files only in a Knox work profile or it can alternately be configured to encrypt the entire device. When configured as part of a Knox work profile, the service relies on the Knox work profile to provide the user’s password for authentication (the password entered for the work profile), and then encrypts all files stored in the Knox work profile. When configured to encrypt all contents of the device, Knox File Encryption provides an authentication prompt (separate from the device lock screen). In this configuration all files stored on the device will be encrypted.
\r\nThe Master Key (MKDD) is protected by a Trusted App inside TrustZone by the user’s password. Each encrypted file is protected by a uniquely generated FEK which is encrypted by the Master Key as a KEK. The administrator can specify a period of inactivity after which the Master Key and all FEKs are wiped from memory to fully lock the encrypted files.
","evaluation_configuration":"The evaluated configuration consists of the Samsung Knox File Encryption 1.8.0 – Fall (the version is listed as “DualDAR”) on the following devices:
\r\n| \r\n\r\n | \r\n\r\n Chipset Vendor \r\n | \r\n\r\n SoC \r\n | \r\n\r\n Arch \r\n | \r\n\r\n Kernel \r\n | \r\n\r\n DualDAR Version \r\n | \r\n\r\n Build Number \r\n | \r\n
| \r\n Galaxy Z Flip7 5G \r\n | \r\n\r\n Samsung \r\n | \r\n\r\n Exynos 2500 (S5E9955) \r\n | \r\n\r\n ARMv8 \r\n | \r\n\r\n 6.12 \r\n | \r\n\r\n 1.8.0 \r\n | \r\n\r\n UP1A.231005.007 \r\n | \r\n
| \r\n Galaxy S25 Ultra 5G \r\n\r\n | \r\n\r\n Qualcomm \r\n | \r\n\r\n Snapdragon 8 Elite (SM8750) \r\n | \r\n\r\n ARMv8 \r\n | \r\n\r\n 6.6 \r\n | \r\n\r\n 1.8.0 \r\n | \r\n\r\n UP1A.231005.007 \r\n | \r\n
| \r\n Galaxy S24 Ultra 5G \r\n | \r\n\r\n Qualcomm \r\n | \r\n\r\n Snapdragon 8 Gen 3 \r\n | \r\n\r\n ARMv8 \r\n | \r\n\r\n 6.1 \r\n | \r\n\r\n 1.8.0 \r\n | \r\n\r\n UP1A.231005.007 \r\n | \r\n
| \r\n Galaxy S24 5G \r\n | \r\n\r\n Samsung \r\n | \r\n\r\n Exynos 2400 \r\n | \r\n\r\n ARMv8 \r\n | \r\n\r\n 6.1 \r\n | \r\n\r\n 1.8.0 \r\n | \r\n\r\n UP1A.231005.007 \r\n | \r\n
| \r\n Galaxy S23 Ultra 5G \r\n | \r\n\r\n Qualcomm \r\n | \r\n\r\n Snapdragon 8 Gen 2 Mobile Platform \r\n | \r\n\r\n ARMv8 \r\n | \r\n\r\n 5.15 \r\n | \r\n\r\n 1.8.0 \r\n | \r\n\r\n UP1A.231005.007 \r\n | \r\n
| \r\n Galaxy S22 Ultra 5G \r\n | \r\n\r\n Samsung \r\n | \r\n\r\n Exynos 2200 \r\n | \r\n\r\n ARMv8 \r\n | \r\n\r\n 5.10 \r\n | \r\n\r\n 1.8.0 \r\n | \r\n\r\n UP1A.231005.007 \r\n | \r\n
| \r\n Galaxy S22 5G \r\n | \r\n\r\n Qualcomm \r\n | \r\n\r\n Snapdragon 8 Gen 1 Mobile Platform \r\n | \r\n\r\n ARMv8 \r\n | \r\n\r\n 5.10 \r\n | \r\n\r\n 1.8.0 \r\n | \r\n\r\n UP1A.231005.007 \r\n | \r\n
\r\n
In addition to the evaluated devices, the following device models are claimed as equivalent with a note about the differences between the evaluated device and the equivalent models:
\r\n| \r\n\r\n | \r\n\r\n SoC \r\n | \r\n\r\n Equivalent Devices \r\n | \r\n\r\n Differences \r\n | \r\n
| \r\n Galaxy Z Flip7 5G \r\n | \r\n\r\n Exynos 2500 (S5E9955) \r\n | \r\n\r\n N/A \r\n | \r\n\r\n \r\n | \r\n
| \r\n Galaxy S25 Ultra 5G \r\n | \r\n\r\n Snapdragon 8 Elite \r\n | \r\n\r\n Galaxy S25+ 5G \r\n | \r\n\r\n S25 Ultra > S25+ > S25 in terms of display size \r\n | \r\n
| \r\n Galaxy S25 5G \r\n | \r\n\r\n | ||
| \r\n \r\n | \r\n\r\n \r\n | \r\n\r\n Galaxy Z Fold7 5G \r\nGalaxy Z TriFold \r\n | \r\n\r\n \r\n | \r\n
| \r\n Galaxy S24 Ultra 5G \r\n | \r\n\r\n Snapdragon 8 Gen 3 \r\n | \r\n\r\n Galaxy S24+ 5G \r\n | \r\n\r\n S24 Ultra > S24+ > S24 in terms of display size \r\n | \r\n
| \r\n Galaxy S24 5G \r\n | \r\n\r\n | ||
| \r\n Galaxy Z Fold6 5G \r\n | \r\n\r\n Z Fold6 & Z Fold SE & Z Flip6 have power button fingerprint sensor \r\n | \r\n||
| \r\n Galaxy Z Fold SE \r\n | \r\n\r\n | ||
| \r\n Galaxy Z Flip6 5G \r\n | \r\n\r\n | ||
| \r\n Galaxy S24 5G \r\n | \r\n\r\n Exynos 2400 \r\n | \r\n\r\n Galaxy S24+ 5G \r\n | \r\n\r\n S24 Ultra > S24+ > S24 in terms of display size \r\n | \r\n
| \r\n Galaxy S23 Ultra 5G \r\n | \r\n\r\n Snapdragon 8 Gen 2 \r\n | \r\n\r\n Galaxy S23+ 5G \r\n | \r\n\r\n S23 Ultra > S23+ > S23 in terms of display size \r\n | \r\n
| \r\n Galaxy S23 5G \r\n | \r\n\r\n | ||
| \r\n Galaxy Z Fold5 5G \r\n | \r\n\r\n Z Fold5 5G & Z Flip5 5G have power button fingerprint sensor \r\n | \r\n||
| \r\n Galaxy Z Flip5 5G \r\n | \r\n\r\n | ||
| \r\n Galaxy Tab S9 Ultra \r\n | \r\n\r\n Tab S9 devices are tablets (no voice calling) with S Pen \r\n | \r\n||
| \r\n Galaxy Tab S9+ \r\n | \r\n\r\n Tab S9 Ultra > Tab S9+ > Tab S9 in terms of display size \r\n | \r\n||
| \r\n Galaxy Tab S9 \r\n | \r\n\r\n Tab S9 Ultra & Tab S9+ have under screen image fingerprint sensor | \r\n||
| \r\n Galaxy S22 Ultra 5G \r\n | \r\n\r\n Exynos 2200 \r\n | \r\n\r\n Galaxy S22+ 5G \r\n | \r\n\r\n S22 Ultra > S22+ > S22 in terms of display size \r\n | \r\n
| \r\n Galaxy S22 5G \r\n | \r\n\r\n S22+ & S22 devices have S21 Ultra 5G Wi-Fi chip \r\n | \r\n||
| \r\n Galaxy S23 FE \r\n | \r\n\r\n | ||
| \r\n Galaxy S22 5G \r\n | \r\n\r\n S22+ & S22 devices have S21 Ultra 5G Wi-Fi chip \r\n | \r\n||
| \r\n Galaxy S22 5G \r\n | \r\n\r\n Snapdragon 8 Gen 1 \r\n | \r\n\r\n Galaxy S22 Ultra 5G \r\n | \r\n\r\n S22 Ultra > S22+ > S22 in terms of display size \r\n | \r\n
| \r\n Galaxy S22+ 5G \r\n | \r\n\r\n S22+ & S22 devices have S21 Ultra 5G Wi-Fi chip \r\n | \r\n||
| \r\n Galaxy Tab S8 Ultra \r\n | \r\n\r\n Tab S8 devices are tablets (no voice calling) with S Pen \r\n | \r\n||
| \r\n Galaxy Tab S8+ \r\n | \r\n\r\n Tab S8 Ultra > Tab S8+ > Tab S8 in terms of display size \r\n | \r\n||
| \r\n Galaxy Tab S8 \r\n | \r\n\r\n Tab S8 Ultra & Tab S8+ have under screen image fingerprint sensor | \r\n||
| \r\n Galaxy Z Flip4 5G \r\n | \r\n\r\n Z Flip4 & Z Fold4 have 2 displays & folding display \r\n | \r\n||
| \r\n Galaxy Z Fold4 5G \r\n | \r\n\r\n Z Flip4 & Z Fold4 have power button fingerprint sensor \r\n | \r\n||
| \r\n Galaxy S23 FE \r\n | \r\n\r\n | ||
| \r\n Galaxy S22+ 5G \r\n | \r\n\r\n S22+ & S22 devices have S21 Ultra 5G Wi-Fi chip \r\n | \r\n||
| \r\n Galaxy Tab S8 Ultra \r\n | \r\n\r\n Tab S8 devices are tablets (no voice calling) with S Pen \r\n | \r\n||
| \r\n Galaxy Tab S8+ \r\n | \r\n\r\n Tab S8 Ultra > Tab S8+ > Tab S7 in terms of display size \r\n | \r\n||
| \r\n Galaxy Tab S8 \r\n | \r\n\r\n Tab S8 Ultra & Tab S8+ have under screen image fingerprint sensor | \r\n||
| \r\n Galaxy Z Flip4 5G \r\n | \r\n\r\n Z Flip4 & Z Fold4 have 2 displays & folding display \r\n | \r\n||
| \r\n Galaxy Z Fold4 5G \r\n | \r\n\r\n Z Fold4 > Z Flip4 in terms of display size \r\n | \r\n
\r\n
The evaluation was carried out in accordance to the Common Criteria Evaluation and Validation Scheme (CCEVS) requirements and guidance. The evaluation demonstrated that the TOE meets the security requirements contained in the Security Target. The criteria against which the TOE was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1, Revision 5, April 2017. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Evaluation Methodology, Version 3.1, Revision 5, April 2017. The product, when delivered and configured as identified in the Samsung File Encryption 1.8.0 Administrator Guide, Version 1.8, December 10, 2025 document, satisfies all of the security functional requirements stated in the Samsung Electronics Co., Ltd. Samsung Knox File Encryption 1.8.0 - Fall Security Target, Version 0.2, 01/02/2026 . The project underwent CCEVS Validator review. The evaluation was completed in January 2026. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report (report number CCEVS-VR-VID11665-2026) prepared by CCEVS
","environmental_strengths":"The logical boundaries of the Samsung Knox File Encryption 1.8.0 - Fallare realized in the security functions that it implements. Each of these security functions is summarized below.
\r\n\r\n
Cryptographic support:
\r\nThe TOE runs as part of Samsung Android 16 with Knox 3.12 and includes several cryptographic libraries for encryption/decryption/cryptographic hashing functions for securing file contents and TOE keys.
\r\nUser data protection:
\r\nDepending on the FEB configuration, the TOE either protects all user data within the Knox work profile or the entire device by providing an automatic encryption service for all stored files; applications do not have to be made aware of the Knox File Encryption service to be protected. All keys are AES 256-bit, using AES-GCM for FEK protection and AES-CBC for file content protection.
\r\nIdentification and authentication:
\r\nDepending on the FEB configuration, the TOE either utilizes the authentication services provided by the Knox work profile or its own authentication dialog to unlock the Master Key. Unsuccessful authentication will prevent the Master Key from being unlocked, and hence no encrypted files can be accessed.
\r\nSecurity management:
\r\nThe services provided by the TOE are not available until either a Knox File Encryption has been enabled. Authentication management and the work profile lock settings are handled by the Knox work profile management and are generic for all Knox work profile configurations. When the whole device is configured for encryption authentication settings are handled by a combination of the device authentication settings and additional Knox File Encryption settings. In either case, these settings cannot be managed directly on the device but must be configured from the MDM.
\r\nPrivacy:
\r\nThe TOE does not transmit Personally Identifiable Information over any network interfaces nor does it request access to any applications that may contain such information.
\r\nProtection of the TSF:
\r\nThe TOE relies on the physical boundary of the evaluated platform as well as the Samsung Android operating system for the protection of the TOE’s components.
\r\nThe TOE relies on the Samsung Android operating system to provide updates as the software is incorporated as part of the device image. The version of the Knox File Encryption software can be seen in the About Device page with the Knox version information (as the DualDAR version).
\r\nThe TOE is a Samsung component, and all code is maintained solely by Samsung. Only documented APIs available in Samsung Android (which includes the Knox work profile and Samsung cryptographic libraries) are used.
\r\nTrusted path/channels:
\r\nThe TOE does not transmit Personally Identifiable Information over any network interfaces.
\r\n","features":[{"id":2677,"feature_name":"Application Software"},{"id":10,"feature_name":"File Encryption"},{"id":2700,"feature_name":"Keyed-hash message authentication"},{"id":2709,"feature_name":"PBKDF"},{"id":2708,"feature_name":"Symmetric Key Generation"}]}