Apple CoreCrypto Kernel Module v9.0 for Intel
Apple CoreCrypto Kernel Module v9.0 for Intel, from Apple Inc., holds FIPS 140-2 certificate #3431 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode.
Certificate
| Certificate number | 3431 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Apple Inc. · website |
| Software versions | 9.0 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Apple CoreCrypto Kernel Module v9.0 for Intel is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.
Security level exceptions
- Physical Security: N/A
Approved algorithms (9)
| Algorithm | CAVP certificates |
|---|---|
| AES | 5815, 5816, 5817, 5818, 5819, 5820, 5821, 5822, 5823, 5824, 5825, 5826, 5827, 5828, 5830, 5831, 5832, 5833, 5834, 5835, C171, C172, C173, C174, C175 |
| DRBG | 2403, 2404, 2405, 2406, 2408, 2409, 2410, 2411, 2412, 2413, 2414, 2415, 2416, 2417, 2418, 2419, 2420, 2421, 2422, 2423, 2424, 2425, 2426, 2427, 2428, C171, C172, C173, C174, C175, C176, C177, C236, C237, C238 |
| ECDSA | C176, C177, C236, C237, C238 |
| HMAC | 3841, 3842, 3843, 3844, 3845, 3846, 3847, 3848, 3849, 3850, 3851, 3852, 3853, 3854, 3855, C176, C177, C236, C237, C238 |
| KTS | |
| PBKDF | vendor affirmed |
| RSA | C176, C177, C236, C237, C238 |
| SHS | 4616, 4617, 4618, 4619, 4620, 4621, 4622, 4623, 4624, 4625, 4626, 4627, 4628, 4629, 4630, C176, C177, C236, C237, C238 |
| Triple-DES | C176, C177, C236, C237, C238 |
Allowed algorithms
MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)
Tested configurations
- macOS Mojave 10.14 running on iMac Pro with Intel Xeon CPU with PAA
- macOS Mojave 10.14 running on iMac Pro with Intel Xeon CPU without PAA
- macOS Mojave 10.14 running on Mac mini with Intel i5 CPU with PAA
- macOS Mojave 10.14 running on Mac mini with Intel i5 CPU without PAA
- macOS Mojave 10.14 running on MacBook Pro with Intel i7 CPU with PAA
- macOS Mojave 10.14 running on MacBook Pro with Intel i7 CPU without PAA
- macOS Mojave 10.14 running on MacBook Pro with Intel i9 CPU with PAA
- macOS Mojave 10.14 running on MacBook Pro with Intel i9 CPU without PAA
- macOS Mojave 10.14 running on MacBook with Intel Core M CPU with PAA
- macOS Mojave 10.14 running on MacBook with Intel Core M CPU without PAA (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2019-04-04 | Initial | atsec information security corporation |
| 2019-04-12 | Update | atsec information security corporation |
| 2021-03-11 | Update | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2019-04-04, 2019-04-12, 2021-03-11