808bits

Apple corecrypto Module v11.1 [Intel, Kernel, Software]

FIPS 140-3 certificate #4390 · Apple Inc. · data as of 2026-08-28
Active. Sunset date 2027-12-06, 464 days away.
Caveat: When operated in approved mode

Certificate

Certificate number4390
StandardFIPS 140-3
Statusactive
Sunset date2027-12-06
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorApple Inc. · website
Software versions11.1

Module description

The Apple corecrypto Kernel Space Module for Intel is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA945
AES-CBCA976
AES-CBCA977
AES-CBCA978
AES-CCMA943
AES-CCMA973
AES-CFB128A945
AES-CFB128A976
AES-CFB8A945
AES-CFB8A976
AES-CTRA943
AES-CTRA945
AES-CTRA973
AES-CTRA976
AES-ECBA943
AES-ECBA945
AES-ECBA973
AES-ECBA976
AES-ECBA977
AES-ECBA978
AES-GCMA943
AES-GCMA973
AES-KWA945
AES-KWA976
AES-OFBA945
AES-OFBA976
AES-XTSA977
AES-XTSA978
Counter DRBGA943
Counter DRBGA945
Counter DRBGA973
Counter DRBGA976
ECDSA KeyGen (FIPS186-4)A974
ECDSA KeyGen (FIPS186-4)A975
ECDSA KeyGen (FIPS186-4)A990
ECDSA KeyVer (FIPS186-4)A974
ECDSA KeyVer (FIPS186-4)A975
ECDSA KeyVer (FIPS186-4)A990
ECDSA SigGen (FIPS186-4)A974
ECDSA SigGen (FIPS186-4)A975
ECDSA SigGen (FIPS186-4)A990
ECDSA SigVer (FIPS186-4)A974
ECDSA SigVer (FIPS186-4)A975
ECDSA SigVer (FIPS186-4)A990
HMAC DRBGA974
HMAC DRBGA975
HMAC DRBGA990
HMAC-SHA-1A974
HMAC-SHA-1A975
HMAC-SHA-1A979
HMAC-SHA-1A990
HMAC-SHA2-224A974
HMAC-SHA2-224A975
HMAC-SHA2-224A979
HMAC-SHA2-224A990
HMAC-SHA2-256A974
HMAC-SHA2-256A975
HMAC-SHA2-256A979
HMAC-SHA2-256A990
HMAC-SHA2-384A974
HMAC-SHA2-384A975
HMAC-SHA2-384A979
HMAC-SHA2-384A990
HMAC-SHA2-512A974
HMAC-SHA2-512A975
HMAC-SHA2-512A979
HMAC-SHA2-512A990
HMAC-SHA2-512/256A974
HMAC-SHA2-512/256A975
HMAC-SHA2-512/256A990
KDF SP800-108A990
RSA KeyGen (FIPS186-4)A974
RSA KeyGen (FIPS186-4)A975
RSA KeyGen (FIPS186-4)A990
RSA SigGen (FIPS186-4)A974
RSA SigGen (FIPS186-4)A975
RSA SigGen (FIPS186-4)A990
RSA SigVer (FIPS186-4)A974
RSA SigVer (FIPS186-4)A975
RSA SigVer (FIPS186-4)A990
SHA-1A974
SHA-1A975
SHA-1A979
SHA-1A990
SHA2-224A974
SHA2-224A975
SHA2-224A979
SHA2-224A990
SHA2-256A974
SHA2-256A975
SHA2-256A979
SHA2-256A990
SHA2-384A974
SHA2-384A975
SHA2-384A979
SHA2-384A990
SHA2-512A974
SHA2-512A975
SHA2-512A979
SHA2-512A990
SHA2-512/256A974
SHA2-512/256A975
SHA2-512/256A990

Tested configurations

  • macOS Big Sur 11.0.1 running on iMac Pro with a Xeon W-2140B (Sky Lake) with PAA
  • macOS Big Sur 11.0.1 running on iMac Pro with a Xeon W-2140B (Sky Lake) without PAA
  • macOS Big Sur 11.0.1 running on Mac Pro with a Xeon W-3223 (Cascade Lake) with PAA
  • macOS Big Sur 11.0.1 running on Mac Pro with a Xeon W-3223 (Cascade Lake) without PAA
  • macOS Big Sur 11.0.1 running on MacBook Air with an Intel i5-8210Y (Amber Lake) with PAA
  • macOS Big Sur 11.0.1 running on MacBook Air with an Intel i5-8210Y (Amber Lake) without PAA
  • macOS Big Sur 11.0.1 running on MacBook Air with an Intel i7-1060NG7 (Ice Lake) with PAA
  • macOS Big Sur 11.0.1 running on MacBook Air with an Intel i7-1060NG7 (Ice Lake) without PAA
  • macOS Big Sur 11.0.1 running on MacBook Pro with an Intel i7-8850H (Coffee Lake) with PAA
  • macOS Big Sur 11.0.1 running on MacBook Pro with an Intel i7-8850H (Coffee Lake) without PAA
  • macOS Big Sur 11.0.1 running on MacBook Pro with an Intel i9-9880H (Coffee Lake) with PAA
  • macOS Big Sur 11.0.1 running on MacBook Pro with an Intel i9-9880H (Coffee Lake) without PAA

Validation history

DateTypeLab
2022-12-07Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2022-12-07

Source documents