Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #4956

Details

Module Name
Apple corecrypto Module v12 [Intel, Kernel, Software]
Standard
FIPS 140-3
Status
Active
Sunset Date
1/29/2027
Overall Level
1
Caveat
Interim validation. When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Security Level Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
The Apple corecrypto Kernel module is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.
Tested Configuration(s)
  • macOS Monterey 12 running on iMac Pro with Xeon W (Sky Lake) with PAA
  • macOS Monterey 12 running on iMac Pro with Xeon W (Sky Lake) without PAA
  • macOS Monterey 12 running on iMac with an Intel i5 (Comet Lake) with PAA
  • macOS Monterey 12 running on iMac with an Intel i5 (Comet Lake) without PAA
  • macOS Monterey 12 running on iMac with an Intel i7 (Comet Lake) with PAA
  • macOS Monterey 12 running on iMac with an Intel i7 (Comet Lake) without PAA
  • macOS Monterey 12 running on Mac Pro with Xeon W (Cascade Lake) with PAA
  • macOS Monterey 12 running on Mac Pro with Xeon W (Cascade Lake) without PAA (single-user mode)
  • macOS Monterey 12 running on MacBook Air with an Intel i5 (Amber Lake) with PAA
  • macOS Monterey 12 running on MacBook Air with an Intel i5 (Amber Lake) without PAA
  • macOS Monterey 12 running on MacBook Air with an Intel i7 (Ice Lake) with PAA
  • macOS Monterey 12 running on MacBook Air with an Intel i7 (Ice Lake) without PAA
  • macOS Monterey 12 running on MacBook Pro with an Intel i7 (Coffee Lake) with PAA
  • macOS Monterey 12 running on MacBook Pro with an Intel i7 (Coffee Lake) without PAA
  • macOS Monterey 12 running on MacBook Pro with an Intel i9 (Coffee Lake) with PAA
  • macOS Monterey 12 running on MacBook Pro with an Intel i9 (Coffee Lake) without PAA
Approved Algorithms
AES-CBC
AES-CBC
AES-CBC
AES-CBC
AES-CCM
AES-CCM
AES-CFB128
AES-CFB128
AES-CFB8
AES-CFB8
AES-CTR
AES-CTR
AES-CTR
AES-CTR
AES-ECB
AES-ECB
AES-ECB
AES-ECB
AES-ECB
AES-ECB
AES-GCM
AES-GCM
AES-KW
AES-KW
AES-OFB
AES-OFB
AES-XTS Testing Revision 2.0
AES-XTS Testing Revision 2.0
Counter DRBG
Counter DRBG
Counter DRBG
Counter DRBG
ECDSA KeyGen (FIPS186-4)
ECDSA KeyGen (FIPS186-4)
ECDSA KeyGen (FIPS186-4)
ECDSA KeyVer (FIPS186-4)
ECDSA KeyVer (FIPS186-4)
ECDSA KeyVer (FIPS186-4)
ECDSA SigGen (FIPS186-4)
ECDSA SigGen (FIPS186-4)
ECDSA SigGen (FIPS186-4)
ECDSA SigVer (FIPS186-4)
ECDSA SigVer (FIPS186-4)
ECDSA SigVer (FIPS186-4)
HMAC DRBG
HMAC DRBG
HMAC DRBG
HMAC-SHA-1
HMAC-SHA-1
HMAC-SHA-1
HMAC-SHA-1
HMAC-SHA2-224
HMAC-SHA2-224
HMAC-SHA2-224
HMAC-SHA2-224
HMAC-SHA2-256
HMAC-SHA2-256
HMAC-SHA2-256
HMAC-SHA2-256
HMAC-SHA2-384
HMAC-SHA2-384
HMAC-SHA2-384
HMAC-SHA2-384
HMAC-SHA2-512
HMAC-SHA2-512
HMAC-SHA2-512
HMAC-SHA2-512
HMAC-SHA2-512/256
HMAC-SHA2-512/256
HMAC-SHA2-512/256
KDF SP800-108
RSA KeyGen (FIPS186-4)
RSA KeyGen (FIPS186-4)
RSA KeyGen (FIPS186-4)
RSA SigGen (FIPS186-4)
RSA SigGen (FIPS186-4)
RSA SigGen (FIPS186-4)
RSA SigVer (FIPS186-4)
RSA SigVer (FIPS186-4)
RSA SigVer (FIPS186-4)
SHA-1
SHA-1
SHA-1
SHA-1
SHA2-224
SHA2-224
SHA2-224
SHA2-224
SHA2-256
SHA2-256
SHA2-256
SHA2-256
SHA2-384
SHA2-384
SHA2-384
SHA2-384
SHA2-512
SHA2-512
SHA2-512
SHA2-512
SHA2-512/256
SHA2-512/256
SHA2-512/256
Entropy
ENT (P)
Software Versions
12

Vendor

Apple, Inc.
One Apple Park Way
MS: 927-1CPS
Cupertino, CA 95014
USA

Nina Kominiak
security-certifications@apple.com
Phone: 1-408-996-1010

Related Files

Validation History

Date Type Lab
1/30/2025 Initial ACUMEN SECURITY, LLC