Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #3438

Details

Module Name
Apple CoreCrypto Kernel Module v9.0 for ARM
Standard
FIPS 140-2
Status
Active
Sunset Date
4/22/2024
Overall Level
1
Caveat
When operated in FIPS Mode. The module generates cryptographic keys whose strengths are modified by available entropy
Security Level Exceptions
  • Physical Security: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
The Apple CoreCrypto Kernel Module v9.0 for ARM is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.
Tested Configuration(s)
  • iOS 12 running on iPad Air 2 with Apple A8X CPU with PAA
  • iOS 12 running on iPad Air 2 with Apple A8X CPU without PAA
  • iOS 12 running on iPad Pro with Apple A10X Fusion CPU with PAA
  • iOS 12 running on iPad Pro with Apple A10X Fusion CPU without PAA
  • iOS 12 running on iPad Pro with Apple A12X Bionic CPU with PAA
  • iOS 12 running on iPad Pro with Apple A12X Bionic CPU without PAA
  • iOS 12 running on iPad Pro with Apple A9X CPU with PAA
  • iOS 12 running on iPad Pro with Apple A9X CPU without PAA
  • iOS 12 running on iPhone 5S with Apple A7 CPU with PAA
  • iOS 12 running on iPhone 5S with Apple A7 CPU without PAA
  • iOS 12 running on iPhone 6 (iPhone 6 and iPhone 6 Plus) with Apple A8 CPU with PAA
  • iOS 12 running on iPhone 6 (iPhone 6 and iPhone 6 Plus) with Apple A8 CPU without PAA
  • iOS 12 running on iPhone 6S (iPhone 6S and iPhone 6S Plus) with Apple A9 CPU with PAA
  • iOS 12 running on iPhone 6S (iPhone 6S and iPhone 6S Plus) with Apple A9 CPU without PAA
  • iOS 12 running on iPhone 7 (iPhone 7 and iPhone 7 Plus) with Apple A10 Fusion CPU with PAA
  • iOS 12 running on iPhone 7 (iPhone 7 and iPhone 7 Plus) with Apple A10 Fusion CPU without PAA
  • iOS 12 running on iPhone 8 (iPhone 8, iPhone 8 Plus) and iPhone X with Apple A11 Bionic CPU with PAA
  • iOS 12 running on iPhone 8 (iPhone 8, iPhone 8 Plus) and iPhone X with Apple A11 Bionic CPU without PAA
  • iOS 12 running on iPhone XS (iPhone XR, iPhone XS and iPhone XS Max) with Apple A12 Bionic CPU with PAA
  • iOS 12 running on iPhone XS (iPhone XR, iPhone XS and iPhone XS Max) with Apple A12 Bionic CPU without PAA
  • tvOS 12 running on Apple TV 4K with Apple A10X Fusion CPU with PAA
  • tvOS 12 running on Apple TV 4K with Apple A10X Fusion CPU without PAA
  • TxFW 16P374 running on Apple iMac Pro with Apple T2 with PAA
  • TxFW 16P374 running on Apple iMac Pro with Apple T2 without PAA
  • TxFW 16P374 running on Apple MacBook Pro with Apple T2 with PAA
  • TxFW 16P374 running on Apple MacBook Pro with Apple T2 without PAA (single-user mode)
  • watchOS 5 running on Apple Watch Series 1 with Apple S1P CPU with PAA
  • watchOS 5 running on Apple Watch Series 1 with Apple S1P CPU without PAA
  • watchOS 5 running on Apple Watch Series 3 with Apple S3 CPU with PAA
  • watchOS 5 running on Apple Watch Series 3 with Apple S3 CPU without PAA
  • watchOS 5 running on Apple Watch Series 4 with Apple S4 CPU with PAA
  • watchOS 5 running on Apple Watch Series 4 with Apple S4 CPU without PAA
Approved Algorithms
AES Certs. #5741, #5742, #5743, #5744, #5745, #5746, #5747, #5748, #5750, #5751, #5752, #5753, #5754, #5755, #5756, #5757, #5758, #5759, #5760, #5761, #5762, #5763, #5764, #5765, #5883, #5884, #5885, #C19, #C103, #C104, #C147, #C149, #C150, #C178, #C179, #C182, #C183, #C184, #C185, #C249, #C252, #C254, #C255, #C257 and #C434
DRBG Certs. #2336, #2337, #2338, #2339, #2340, #2341, #2342, #2343, #2345, #2346, #2347, #2348, #2349, #2350, #2351, #2352, #2353, #2354, #2355, #2356, #2357, #2358, #2359, #2360, #2446, #2447, #2448, #C20, #C103, #C104, #C127, #C128, #C129, #C130, #C131, #C132, #C133, #C134, #C135, #C147, #C149, #C178, #C179, #C180, #C181, #C184, #C185, #C198, #C209, #C248, #C249, #C250, #C251, #C252, #C253, #C255, #C256, #C434, #C437 and #C438
ECDSA Certs. #C127, #C128, #C129, #C130, #C131, #C132, #C133, #C134, #C135, #C209, #C248, #C250, #C251, #C437 and #C438
HMAC Certs. #3806, #3807, #3808, #3809, #3810, #3811, #3812, #3813, #3862, #C20, #C127, #C128, #C129, #C130, #C131, #C132, #C133, #C134, #C135, #C180, #C181, #C198, #C209, #C248, #C250, #C251, #C253, #C256, #C437 and #C438
KTS AES Certs. #5741, #5742, #5743, #5744, #5745, #5746, #5747, #5748, #5883, #C103, #C147, #C184, #C185, #C249 and #C434; key establishment methodology provides between 128 and 256 bits of encryption strength
PBKDF vendor affirmed
RSA Certs. #C127, #C128, #C129, #C130, #C131, #C132, #C133, #C134, #C135, #C209, #C248, #C250, #C251, #C437 and #C438
SHS Certs. #4579, #4580, #4581, #4582, #4583, #4584, #4585, #4586, #4637, #C20, #C127, #C128, #C129, #C130, #C131, #C132, #C133, #C134, #C135, #C180, #C181, #C198, #C209, #C248, #C250, #C251, #C253, #C256, #C437 and #C438
Triple-DES Certs. #C127, #C128, #C129, #C130, #C131, #C132, #C133, #C134, #C135, #C209, #C248, #C250, #C251, #C437 and #C438
Allowed Algorithms
MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)
Software Versions
9.0
Product URL
http://support.apple.com/guide/sccc/welcome

Vendor

Apple Inc.
One Apple Park Way
MS: 927-1CPS
Cupertino, CA 95014
USA

Shawn Geddis
security-certifications@apple.com
Phone: 669-227-3579
 Fiona Pattinson
security-certifications@apple.com
Phone: 737-219-4141

Related Files

Security Policy
Consolidated Certificate

Validation History

Date Type Lab
4/23/2019 Initial ATSEC INFORMATION SECURITY CORP
3/11/2021 Update ATSEC INFORMATION SECURITY CORP