Apple corecrypto Module v11.1 [Intel, Kernel, Software]
Apple corecrypto Module v11.1 [Intel, Kernel, Software], from Apple Inc., holds FIPS 140-3 certificate #4390 at overall level 1. The validation is active, with a sunset date of 2027-12-06. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in approved mode
Certificate
| Certificate number | 4390 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2027-12-06 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Apple Inc. · website |
| Software versions | 11.1 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Apple corecrypto Kernel Space Module for Intel is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.
Security level exceptions
- Physical security: N/A
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms (32)
| Algorithm | CAVP certificates |
|---|---|
| AES-CBC | A945, A976, A977, A978 |
| AES-CCM | A943, A973 |
| AES-CFB128 | A945, A976 |
| AES-CFB8 | A945, A976 |
| AES-CTR | A943, A945, A973, A976 |
| AES-ECB | A943, A945, A973, A976, A977, A978 |
| AES-GCM | A943, A973 |
| AES-KW | A945, A976 |
| AES-OFB | A945, A976 |
| AES-XTS | A977, A978 |
| Counter DRBG | A943, A945, A973, A976 |
| ECDSA KeyGen (FIPS186-4) | A974, A975, A990 |
| ECDSA KeyVer (FIPS186-4) | A974, A975, A990 |
| ECDSA SigGen (FIPS186-4) | A974, A975, A990 |
| ECDSA SigVer (FIPS186-4) | A974, A975, A990 |
| HMAC DRBG | A974, A975, A990 |
| HMAC-SHA-1 | A974, A975, A979, A990 |
| HMAC-SHA2-224 | A974, A975, A979, A990 |
| HMAC-SHA2-256 | A974, A975, A979, A990 |
| HMAC-SHA2-384 | A974, A975, A979, A990 |
| HMAC-SHA2-512 | A974, A975, A979, A990 |
| HMAC-SHA2-512/256 | A974, A975, A990 |
| KDF SP800-108 | A990 |
| RSA KeyGen (FIPS186-4) | A974, A975, A990 |
| RSA SigGen (FIPS186-4) | A974, A975, A990 |
| RSA SigVer (FIPS186-4) | A974, A975, A990 |
| SHA-1 | A974, A975, A979, A990 |
| SHA2-224 | A974, A975, A979, A990 |
| SHA2-256 | A974, A975, A979, A990 |
| SHA2-384 | A974, A975, A979, A990 |
| SHA2-512 | A974, A975, A979, A990 |
| SHA2-512/256 | A974, A975, A990 |
Tested configurations
- macOS Big Sur 11.0.1 running on iMac Pro with a Xeon W-2140B (Sky Lake) with PAA
- macOS Big Sur 11.0.1 running on iMac Pro with a Xeon W-2140B (Sky Lake) without PAA
- macOS Big Sur 11.0.1 running on Mac Pro with a Xeon W-3223 (Cascade Lake) with PAA
- macOS Big Sur 11.0.1 running on Mac Pro with a Xeon W-3223 (Cascade Lake) without PAA
- macOS Big Sur 11.0.1 running on MacBook Air with an Intel i5-8210Y (Amber Lake) with PAA
- macOS Big Sur 11.0.1 running on MacBook Air with an Intel i5-8210Y (Amber Lake) without PAA
- macOS Big Sur 11.0.1 running on MacBook Air with an Intel i7-1060NG7 (Ice Lake) with PAA
- macOS Big Sur 11.0.1 running on MacBook Air with an Intel i7-1060NG7 (Ice Lake) without PAA
- macOS Big Sur 11.0.1 running on MacBook Pro with an Intel i7-8850H (Coffee Lake) with PAA
- macOS Big Sur 11.0.1 running on MacBook Pro with an Intel i7-8850H (Coffee Lake) without PAA
- macOS Big Sur 11.0.1 running on MacBook Pro with an Intel i9-9880H (Coffee Lake) with PAA
- macOS Big Sur 11.0.1 running on MacBook Pro with an Intel i9-9880H (Coffee Lake) without PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2022-12-07 | Initial | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2022-12-07