The China Information Technology Security Evaluation Center and the National Administration of State Secret Protection recently jointly released the Announcement on Safe and Reliable Evaluation Results (No. 3, 2026), explicitly stating for the first time that the validity period of evaluation results is three years.
This means that safe and reliable evaluations are officially shifting from "one-time certification" to "dynamic supervision." Manufacturers must continuously invest in security R&D to maintain their ratings, accelerating the elimination of "check-the-box" Xinchuang products.
For the first time, Level III certification has been awarded in the general-purpose CPU category. Loongson 3A6000(C) and 3C3000 both received Level III certification, tying with Huawei HiSilicon Kunpeng 950 in the top tier. This marks the first time the LoongArch architecture has received the highest security rating, signifying a key breakthrough for domestic CPUs in terms of safety and reliability.
Zhaoxin KH-50000, Weixin H8100, Hygon C86-4G/H, and Kirin 9001X received Level II certification.
Notably, Huawei's Kirin 9001X only received Level II certification, reflecting a resource allocation strategy of "prioritizing servers over terminals" under sanction pressure.
The AI chip sector has also seen breakthroughs. The Ascend 950 received Level II certification, becoming the only AI training and inference chip to achieve this level in this round. It can be used in scenarios involving sensitive data, such as financial risk control and government large language models, but it is not yet eligible for top-secret systems.
Kunlunxin M100 received Level I certification, primarily targeting the general-purpose computing market. For the first time, the evaluation listed AI training and inference chips as a separate category, reflecting the growing emphasis on the security of AI computing infrastructure.
In the printer main controller chip category, Loongson 2P0300 and 2P0500 received Level II certification, with partner brands including Deli, Unis HanTu, Anlingxin, and some Pantum models. Beijing Ingenic, which previously participated in the evaluation, failed to make the list, putting pressure on its partner printer manufacturers such as Zhongying and ZhiXiang to adjust their chip supplies.
In the operating system sector, Kylin V11 SP1 (kernel 6.6) received Level II certification, while Dayuan Tianyuan (kernel 5.10) only received Level I. The difference in kernel versions creates a technological generational gap. The financial industry may see a "dual-track" pattern emerge: bank core systems are likely to favor the long-verified Dayuan Tianyuan, while securities firms and insurance companies' innovative businesses are more likely to choose Kylin, which supports confidential computing.
In the database sector, Huawei Cloud NetrixDB, Tencent Cloud TDSQL, and Yijing Shutong Xihe Database all received Level I certification. The entry of cloud providers marks their penetration from "service providers" to "infrastructure providers," posing new challenges for traditional database vendors in long-tail markets such as small and medium-sized banks and city commercial banks.