808bits

Apple corecrypto Module v11.1 [Apple silicon, User, Software]

FIPS 140-3 certificate #4391 · Apple Inc. · data as of 2026-08-28
Active. Sunset date 2027-12-06, 464 days away.
Caveat: When operated in approved mode

Certificate

Certificate number4391
StandardFIPS 140-3
Statusactive
Sunset date2027-12-06
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorApple Inc. · website
Software versions11.1

Module description

The Apple corecrypto User Space Module for Apple silicon is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA916
AES-CBCA919
AES-CBCA920
AES-CBCA921
AES-CCMA918
AES-CCMA919
AES-CCMA921
AES-CFB128A916
AES-CFB128A919
AES-CFB128A921
AES-CFB8A919
AES-CFB8A921
AES-CMACA919
AES-CTRA918
AES-CTRA919
AES-CTRA921
AES-ECBA916
AES-ECBA918
AES-ECBA919
AES-ECBA921
AES-GCMA918
AES-GCMA919
AES-GCMA921
AES-KWA919
AES-KWA921
AES-OFBA916
AES-OFBA919
AES-OFBA921
AES-XTSA916
AES-XTSA919
AES-XTSA921
Counter DRBGA918
Counter DRBGA919
Counter DRBGA921
ECDSA KeyGen (FIPS186-4)A917
ECDSA KeyGen (FIPS186-4)A919
ECDSA KeyVer (FIPS186-4)A917
ECDSA KeyVer (FIPS186-4)A919
ECDSA SigGen (FIPS186-4)A917
ECDSA SigGen (FIPS186-4)A919
ECDSA SigVer (FIPS186-4)A917
ECDSA SigVer (FIPS186-4)A919
HMAC DRBGA917
HMAC DRBGA919
HMAC-SHA-1A917
HMAC-SHA-1A919
HMAC-SHA2-224A917
HMAC-SHA2-224A919
HMAC-SHA2-256A917
HMAC-SHA2-256A919
HMAC-SHA2-256A922
HMAC-SHA2-384A917
HMAC-SHA2-384A919
HMAC-SHA2-512A917
HMAC-SHA2-512A919
HMAC-SHA2-512/256A917
HMAC-SHA2-512/256A919
KAS-ECC-SSC Sp800-56Ar3A919
KAS-FFC-SSC Sp800-56Ar3A919
KDF SP800-108A917
KDF SP800-108A919
PBKDFA917
PBKDFA919
RSA KeyGen (FIPS186-4)A917
RSA KeyGen (FIPS186-4)A919
RSA SigGen (FIPS186-4)A917
RSA SigGen (FIPS186-4)A919
RSA SigVer (FIPS186-4)A917
RSA SigVer (FIPS186-4)A919
Safe Primes Key GenerationA919
SHA-1A917
SHA-1A919
SHA2-224A917
SHA2-224A919
SHA2-256A917
SHA2-256A919
SHA2-256A922
SHA2-384A917
SHA2-384A919
SHA2-512A917
SHA2-512A919
SHA2-512/256A917
SHA2-512/256A919

Tested configurations

  • iOS 14.2 running on iPhone 11 Pro with an Apple A Series A13 Bionic with PAA
  • iOS 14.2 running on iPhone 11 Pro with an Apple A Series A13 Bionic without PAA
  • iOS 14.2 running on iPhone 12 with an Apple A Series A14 Bionic with PAA
  • iOS 14.2 running on iPhone 12 with an Apple A Series A14 Bionic without PAA
  • iOS 14.2 running on iPhone 6S with an Apple A Series A9 with PAA
  • iOS 14.2 running on iPhone 6S with an Apple A Series A9 without PAA
  • iOS 14.2 running on iPhone 7 Plus with an Apple A Series A10 Fusion with PAA
  • iOS 14.2 running on iPhone 7 Plus with an Apple A Series A10 Fusion without PAA
  • iOS 14.2 running on iPhone X with an Apple A Series A11 Bionic with PAA
  • iOS 14.2 running on iPhone X with an Apple A Series A11 Bionic without PAA
  • iOS 14.2 running on iPhone XS Max with an Apple A Series A12 Bionic with PAA
  • iOS 14.2 running on iPhone XS Max with an Apple A Series A12 Bionic without PAA
  • iPadOS 14.2 running on iPad (5th generation) with an Apple A Series A9 with PAA
  • iPadOS 14.2 running on iPad (5th generation) with an Apple A Series A9 without PAA
  • iPadOS 14.2 running on iPad (7th generation) with an Apple A Series A10 Fusion with PAA
  • iPadOS 14.2 running on iPad (7th generation) with an Apple A Series A10 Fusion without PAA
  • iPadOS 14.2 running on iPad Air (4th generation) with an Apple A Series A14 Bionic with PAA
  • iPadOS 14.2 running on iPad Air (4th generation) with an Apple A Series A14 Bionic without PAA
  • iPadOS 14.2 running on iPad mini (5th generation) with an Apple A Series A12 Bionic with PAA
  • iPadOS 14.2 running on iPad mini (5th generation) with an Apple A Series A12 Bionic without PAA
  • iPadOS 14.2 running on iPad Pro 10.5 inch with an Apple A Series A10X Fusion with PAA
  • iPadOS 14.2 running on iPad Pro 10.5 inch with an Apple A Series A10X Fusion without PAA
  • iPadOS 14.2 running on iPad Pro 11-inch (1st generation) with an Apple A Series A12X Bionic with PAA
  • iPadOS 14.2 running on iPad Pro 11-inch (1st generation) with an Apple A Series A12X Bionic without PAA
  • iPadOS 14.2 running on iPad Pro 11-inch (2nd generation) with an Apple A Series A12Z Bionic with PAA
  • iPadOS 14.2 running on iPad Pro 11-inch (2nd generation) with an Apple A Series A12Z Bionic without PAA
  • iPadOS 14.2 running on iPad Pro 9.7-inch with an Apple A Series A9X with PAA
  • iPadOS 14.2 running on iPad Pro 9.7-inch with an Apple A Series A9X without PAA
  • macOS Big Sur 11.0.1 running on MacBook Air with an Apple M Series M1 with PAA
  • macOS Big Sur 11.0.1 running on MacBook Air with an Apple M Series M1 without PAA
  • tvOS 14.2 running on Apple TV 4K with an Apple A Series A10X Fusion with PAA
  • tvOS 14.2 running on Apple TV 4K with an Apple A Series A10X Fusion without PAA
  • TxFW 11.0.1 running on Apple Security Chip T2 with an Apple T Series T2 with PAA
  • TxFW 11.0.1 running on Apple Security Chip T2 with an Apple T Series T2 without PAA
  • watchOS 7.1 running on Apple Watch Series S3 with an Apple S Series S3 with PAA
  • watchOS 7.1 running on Apple Watch Series S3 with an Apple S Series S3 without PAA
  • watchOS 7.1 running on Apple Watch Series S4 with an Apple S Series S4 with PAA
  • watchOS 7.1 running on Apple Watch Series S4 with an Apple S Series S4 without PAA
  • watchOS 7.1 running on Apple Watch Series S5 with an Apple S Series S5 with PAA
  • watchOS 7.1 running on Apple Watch Series S5 with an Apple S Series S5 without PAA
  • watchOS 7.1 running on Apple Watch Series S6 with an Apple S Series S6 with PAA
  • watchOS 7.1 running on Apple Watch Series S6 with an Apple S Series S6 without PAA

Validation history

DateTypeLab
2022-12-07Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2022-12-07

Source documents