808bits

Apple CoreCrypto Module v9.0 for Intel

FIPS 140-2 certificate #3402 · Apple Inc. · data as of 2026-10-21

Apple CoreCrypto Module v9.0 for Intel, from Apple Inc., holds FIPS 140-2 certificate #3402 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. SP 800-56Arev3 transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode.

Certificate

Certificate number3402
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorApple Inc. · website
Software versions9.0

Module description

Quoted from the NIST CMVP entry for this certificate.

The Apple CoreCrypto Module v9.0 for Intel is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.

Security level exceptions

  • Physical Security: N/A

Approved algorithms (11)

AlgorithmCAVP certificates
AES5769, 5770, 5771, 5772, 5773, 5774, 5775, 5776, 5777, 5778, 5779, 5780, 5781, 5782, 5783, 5784, 5785, 5786, 5787, 5788, 5789, 5790, 5791, 5792, 5793, 5800, 5801, 5802, 5803, 5804, 5805, 5806, 5807, 5808, 5809, 5810, 5811, 5812, 5813, 5814
CVL2092, 2093, 2095, 2096, 2097, 2105, 2106, 2107, 2108, 2109
DRBG2364, 2365, 2366, 2367, 2368, 2369, 2370, 2371, 2372, 2373, 2374, 2375, 2376, 2377, 2378, 2379, 2380, 2381, 2382, 2383, 2384, 2385, 2386, 2387, 2388, 2393, 2394, 2395, 2396, 2397, 2398, 2399, 2400, 2401, 2402
DSA1468, 1469, 1470, 1471, 1472
ECDSA1553, 1554, 1555, 1556, 1557
HMAC3817, 3818, 3819, 3820, 3821, 3822, 3823, 3824, 3825, 3826, 3827, 3828, 3829, 3830, 3831, 3835, 3836, 3837, 3838, 3839
KTSvendor affirmed
PBKDFvendor affirmed
RSA3073, 3074, 3075, 3076, 3077
SHS4592, 4593, 4594, 4595, 4596, 4597, 4598, 4599, 4600, 4601, 4602, 4603, 4604, 4605, 4606, 4610, 4611, 4612, 4613, 4614
Triple-DES2856, 2857, 2858, 2859, 2860

Allowed algorithms

Diffie-Hellman (CVL Certs. #2092, #2093, #2095, #2096 and #2097, key agreement; key establishment methodology provides 112 or 128 bits of encryption strength); EC Diffie-Hellman (CVL Certs. #2092, #2093, #2095, #2096 and #2097, key agreement; key establishment methodology provides 128 or 256 bits of encryption strength); MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)

Tested configurations

  • macOS Mojave 10.14 running on iMac Pro with Xeon CPU with PAA
  • macOS Mojave 10.14 running on iMac Pro with Xeon CPU without PAA
  • macOS Mojave 10.14 running on Mac mini with i5 CPU with PAA
  • macOS Mojave 10.14 running on Mac mini with i5 CPU without PAA
  • macOS Mojave 10.14 running on MacBook Pro with i7 CPU with PAA
  • macOS Mojave 10.14 running on MacBook Pro with i7 CPU without PAA
  • macOS Mojave 10.14 running on MacBook Pro with i9 CPU with PAA
  • macOS Mojave 10.14 running on MacBook Pro with i9 CPU without PAA
  • macOS Mojave 10.14 running on MacBook with Core M CPU with PAA
  • macOS Mojave 10.14 running on MacBook with Core M CPU without PAA (single-user mode)

Validation history

DateTypeLab
2019-03-13Initialatsec information security corporation
2019-04-12Updateatsec information security corporation
2021-03-11Updateatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2019-03-13, 2019-04-12, 2021-03-11

Source documents