Samsung S20 Security Chip: Sold to Other Makers?
No, Samsung does not sell the dedicated security chip introduced with the Galaxy S20 series to other smartphone manufacturers. The chip, branded as the S3K250AF, is designed and produced by Samsung’s own System LSI division and is currently used exclusively in Samsung’s flagship Galaxy devices, starting with the S20 lineup.
Background: Why the S20 Security Chip Exists
Smartphone security has traditionally relied on a combination of software encryption and the main application processor (AP). However, a dedicated security chip moves critical operations—like storing cryptographic keys and verifying boot integrity—into a physically separate, tamper-resistant component. Samsung introduced the S3K250AF with the Galaxy S20 series in early 2020, positioning it as a hardware root of trust. It is certified to Common Criteria EAL5+, a high assurance level for security evaluation, which is significantly stronger than the EAL4+ commonly found in earlier secure elements. The chip’s purpose is to protect against physical attacks, such as probing or glitching, and to isolate sensitive data even if the main operating system is compromised.
How the S3K250AF Works
The S3K250AF is a standalone secure element, not a system-on-chip (SoC) component. It has its own processor, memory, and cryptographic accelerators, and it communicates with the main AP over a secure interface. When you set a PIN, password, or pattern, the verification happens inside this chip, not in the main CPU. The chip also stores private keys for Samsung Pay, secure folder, and other credential-based services. It generates and stores keys internally, and the private keys never leave the chip. The boot process is also verified by the chip, ensuring that the firmware has not been tampered with before the operating system loads. This architecture means that even if an attacker gains root access to the Android OS, they cannot extract the keys stored in the secure element.
Why Samsung Keeps It Exclusive
There are several strategic reasons Samsung does not sell this chip to competitors. First, it is a differentiator: the secure element is a marketing point for the Galaxy S20 and later models, appealing to enterprise users and privacy-conscious consumers. Second, the chip is tightly integrated with Samsung’s own software stack, including Knox, Samsung Pay, and Secure Folder. Selling the chip to other makers would require Samsung to provide extensive software support and documentation, which could dilute its competitive advantage. Third, the chip is manufactured using Samsung’s foundry process, and the company may prefer to reserve its advanced security IP for its own products. Finally, the smartphone security market is already served by established players like NXP and Infineon, so Samsung would face a crowded field if it tried to become a merchant supplier.
Comparisons: Samsung’s Chip vs. Other Secure Elements
Other smartphone makers use secure elements from third-party vendors. For example, many Android devices use NXP’s PN80T or similar chips for NFC and secure transactions, and Apple uses its own Secure Enclave in the A-series processors. The key difference is that Samsung’s S3K250AF is a discrete chip, while Apple’s Secure Enclave is integrated into the main SoC. A discrete chip can be more easily replaced or upgraded, but it also takes up more board space. In terms of certification, the S3K250AF’s EAL5+ rating is among the highest for consumer devices. Apple’s Secure Enclave does not publicly disclose its EAL rating, but it is widely considered to be highly secure. For Android users, Samsung’s chip provides a level of hardware security that is comparable to Apple’s, but it is not available to other Android manufacturers, which means those users must rely on other secure elements that may have lower certification levels.
Common Misconceptions and Questions
One common misconception is that the S20’s security chip is the same as the Trusted Platform Module (TPM) found in PCs. While both are secure elements, they serve different roles. A TPM is typically used for platform integrity and disk encryption, while the S3K250AF is focused on mobile-specific functions like payment and biometric authentication. Another misconception is that the chip is only useful for enterprise users. In reality, it protects everyday consumers by securing mobile payments and preventing unauthorized access to personal data. Some users also wonder if the chip can be bypassed. While no system is completely unbreakable, the EAL5+ certification means that physical attacks require specialized equipment and significant expertise, making it impractical for most attackers. Finally, some ask if the chip slows down the phone. The chip operates independently and has its own dedicated resources, so it does not impact the performance of the main processor.
How to Choose a Phone with Strong Hardware Security
If hardware security is a priority, there are a few factors to consider beyond just the presence of a secure element. Look for the certification level: EAL5+ is currently the highest common rating for consumer devices, but EAL4+ is still respectable. Check whether the secure element is discrete or integrated into the SoC; both can be secure, but discrete chips are easier to audit. Also consider the software ecosystem: a secure element is only as good as the software that uses it. For example, a phone with a secure element but no secure boot or verified boot is less secure overall. Finally, consider the manufacturer’s track record for security updates. A secure element cannot protect against unpatched software vulnerabilities. For most consumers, the practical difference between EAL4+ and EAL5+ is minimal, but for high-risk individuals, the extra assurance may be worth seeking out.
Costs and Availability
Because Samsung does not sell the S3K250AF to other makers, it is not available as a standalone component for purchase. The chip is only found inside Samsung Galaxy S20, S21, S22, and later flagship devices, as well as some Galaxy A series models. There is no public pricing for the chip itself, as it is bundled with the phone. For other manufacturers, the cost of implementing a similar secure element would include the chip price, development time, and certification costs. These expenses are typically passed on to the consumer, which is why phones with high-end secure elements tend to be more expensive. For consumers, the cost of the security chip is not a separate line item; it is part of the phone’s overall price. If you are comparing phones, the presence of a certified secure element is a feature that adds value, but it is not the only factor to consider.
Alternatives to Samsung’s Secure Element
If you are not using a Samsung phone, you still have options for hardware-backed security. Google’s Pixel phones use the Titan M2 chip, which is a dedicated secure element that provides similar functions, including verified boot and key storage. Apple’s iPhone uses the Secure Enclave, which is integrated into the A-series chip. Both are highly regarded, and both are also exclusive to their respective brands. For Android phones from other manufacturers, you may find secure elements from NXP, Infineon, or other vendors, but their certification levels vary. Some budget phones may not have a dedicated secure element at all, relying instead on software-based security, which is less robust. When choosing a phone, check the manufacturer’s security page or the device’s spec sheet for mentions of “secure element,” “SE,” or “hardware security module.” If you need a specific certification level, you may need to contact the manufacturer directly, as this information is not always publicly listed.
Frequently Asked Questions
Is the Samsung S20 security chip the same as the one in the S21 or S22?
No, Samsung has updated its secure element over time. The S20 uses the S3K250AF, while later models may use newer versions with improved features. However, the core function remains the same: to provide a hardware root of trust for sensitive operations.
Can I buy the Samsung security chip separately to add to another phone?
No, the chip is not sold as a standalone component. It is embedded in the phone’s motherboard and is not user-replaceable. Attempting to remove and reinstall it would likely damage the chip or the phone.
Does the security chip protect against malware?
The chip protects against physical attacks and helps ensure the integrity of the boot process, but it does not protect against all malware. Malware that runs within the operating system can still access user data that is not encrypted with keys stored in the chip. However, the chip can help limit the damage by preventing malware from stealing cryptographic keys.
Is the S20 security chip better than the one in the iPhone?
Both are highly secure, but they are designed differently. Samsung’s chip is discrete and certified to EAL5+, while Apple’s Secure Enclave is integrated into the SoC and does not have a public EAL rating. In practice, both provide strong protection against most threats, and the choice between them is less important than the overall security posture of the device.
Will Samsung ever license the chip to other makers?
There is no public indication that Samsung plans to license the S3K250AF to other manufacturers. The chip is a key differentiator for Samsung’s own devices, and selling it would reduce that advantage. It is more likely that Samsung will continue to develop the chip for its own use.
Related
Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.