Apple OS X CoreCrypto Kernel Module, v4.0: FIPS 140-2 cert #2016

Apple OS X CoreCrypto Kernel Module, v4.0, from Apple Inc., holds FIPS 140-2 certificate #2016 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	2016
Standard	FIPS 140-2
Status	historical
Overall level	1
Module type	Software
Embodiment	Multi-chip standalone
Vendor	Apple Inc. · website
Software versions	4.0

Module description

Quoted from the NIST CMVP entry for this certificate.

The Apple iOS CoreCrypto Kernel Module is a software cryptographic module running on a multi-chip standalone mobile device and provides services intended to protect data in transit and at rest.

Approved algorithms (7)

Algorithm	CAVP certificates
AES	2511, 2512, 2513, 2514, 2515, 2516, 2517, 2518
DRBG	358, 359, 360, 361, 362, 363
ECDSA	430, 431
HMAC	1546, 1547, 1548, 1549, 1550, 1551
PBKDF	vendor affirmed
SHS	2124, 2125, 2126, 2127, 2128, 2129
Triple-DES	1532, 1533

Other algorithms

RSA (non-compliant); ECDSA (P-192, P-224 and P-521; non-compliant); DES; MD5; CAST5; Blowfish; BitGen1; BitGen2; BitGen3; RC4; OMAC

Tested configurations

OS X 10.9 running on iMac with i7 CPU with PAA
OS X 10.9 running on iMac with i7 CPU without PAA (single-user mode)
OS X 10.9 running on Mac mini with i5 CPU with PAA
OS X 10.9 running on Mac mini with i5 CPU without PAA

Validation history

Date	Type	Lab
2013-11-07	Initial	atsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2013-11-07

Apple OS X CoreCrypto Kernel Module, v4.0