Apple CoreCrypto Kernel Module v8.0 for Intel
Caveat: When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
Certificate
| Certificate number | 3156 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Apple Inc. · website |
| Software versions | 8.0 |
Module description
The Apple CoreCrypto Kerenl Module v8.0 for Intel is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.
Security level exceptions
- Physical Security: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 4985, 4986, 4987, 4988, 4989, 4990, 4991, 4992, 4993, 4994, 4995, 4996, 5054, 5055, 5056, 5057, 5063, 5065, 5071, 5072 |
| DRBG | 1804, 1805, 1806, 1807, 1808, 1809, 1810, 1811, 1812, 1813, 1814, 1815, 1816, 1817, 1818, 1819, 1872, 1873, 1874, 1875, 1876, 1877, 1878, 1882, 1883, 1885, 1888, 1889 |
| ECDSA | 1308, 1309, 1310, 1313 |
| HMAC | 3308, 3311, 3312, 3313, 3314, 3315, 3316, 3317, 3318, 3319, 3375, 3376, 3377, 3382 |
| KTS | |
| PBKDF | vendor affirmed |
| RSA | 2740, 2741, 2742, 2748 |
| SHS | 4051, 4052, 4053, 4054, 4055, 4056, 4057, 4058, 4059, 4060, 4061, 4062, 4120, 4121, 4122, 4127 |
| Triple-DES | 2613, 2614, 2615, 2618 |
Allowed algorithms
MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)
Tested configurations
- macOS High Sierra 10.13 running on iMac Pro with Xeon CPU with PAA
- macOS High Sierra 10.13 running on iMac Pro with Xeon CPU without PAA
- macOS High Sierra 10.13 running on Mac mini with i5 CPU with PAA
- macOS High Sierra 10.13 running on Mac mini with i5 CPU without PAA
- macOS High Sierra 10.13 running on MacBook Pro with i7 CPU with PAA
- macOS High Sierra 10.13 running on MacBook Pro with i7 CPU without PAA
- macOS High Sierra 10.13 running on MacBook with Core M CPU with PAA
- macOS High Sierra 10.13 running on MacBook with Core M CPU without PAA (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2018-03-22 | Initial | atsec information security corporation |
| 2021-03-11 | Update | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2018-03-22, 2021-03-11