808bits

Apple corecrypto Module v11.1 [Apple silicon, Secure Key Store, Hardware] (SL2)

FIPS 140-3 certificate #4756 · Apple Inc. · data as of 2026-10-09

Apple corecrypto Module v11.1 [Apple silicon, Secure Key Store, Hardware] (SL2), from Apple Inc., holds FIPS 140-3 certificate #4756 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated in approved mode

Certificate

Certificate number4756
StandardFIPS 140-3
Statushistorical
Overall level2
Module typeHardware
EmbodimentSingle Chip
VendorApple Inc. · website
Hardware versions2.0
Firmware versions11.1
EntropyENT (P)

Module description

Quoted from the NIST CMVP entry for this certificate.

The Apple corecrypto Module v11.1 [Apple silicon, Secure Key Store, Hardware] (SL2) is a Hardware module implemented as a sub-chip running on a single-chip processor.

Security level exceptions

  • Operational environment: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (16)

AlgorithmCAVP certificates
AES-CBCA510, A1342, A1343, A1344, A1345, C314, C315, C317, C318, C319, C320, C322, C326, C330, C358
AES-ECBA501, A510, A1342, A1343, A1345, A1346, AES 5261, AES 5272, AES 5273, AES 5274, AES 5275, AES 5278, AES 5279, C314, C315, C317, C318, C319, C320, C322, C323, C324, C326, C330, C331, C358
AES-KWA1343, A1345
Counter DRBGA501, C323, C324, C331, DRBG 2014, DRBG 2022, DRBG 2023, DRBG 2024, DRBG 2025, DRBG 2028, DRBG 2029
HMAC-SHA-1A1340, A1345
HMAC-SHA2-224A1340, A1345
HMAC-SHA2-256A1340, A1341, A1345
HMAC-SHA2-384A1340, A1345
HMAC-SHA2-512A1340, A1345
HMAC-SHA2-512/256A1340
SHA-1A1340, A1345
SHA2-224A1340, A1345
SHA2-256A1340, A1341, A1345
SHA2-384A1340, A1345
SHA2-512A1340, A1345
SHA2-512/256A1340

Tested configurations

  • sepOS distributed with iOS14.2 running on iPhone 6S with an Apple A9
  • sepOS distributed with iOS14.2 running on iPhone 7 Plus with an Apple A10 Fusion
  • sepOS distributed with iOS14.2 running on iPhone X with an Apple A11 Bionic
  • sepOS distributed with iOS14.2 running on iPhone XS Max with an Apple A12 Bionic
  • sepOS distributed with iPadOS 14.2 running on iPad (5th generation) with an Apple A9
  • sepOS distributed with iPadOS 14.2 running on iPad (7th generation) with an Apple A10 Fusion
  • sepOS distributed with iPadOS 14.2 running on iPad mini (5th generation) with an Apple A12 Bionic
  • sepOS distributed with iPadOS 14.2 running on iPad Pro 10.5 inch with an Apple A10X Fusion
  • sepOS distributed with iPadOS 14.2 running on iPad Pro 11-inch (1st generation) with an Apple A12X Bionic
  • sepOS distributed with iPadOS 14.2 running on iPad Pro 11-inch (2nd generation) with an Apple A12Z Bionic
  • sepOS distributed with iPadOS 14.2 running on iPad Pro 9.7-inch with an Apple A9X
  • sepOS distributed with tvOS 14.2 running on Apple TV 4K with an Apple A10X Fusion
  • sepOS distributed with TxFW 11.0.1 running on Apple Security Chip T2 with an Apple T2.
  • sepOS distributed with watchOS 7.1 running on Apple Watch Series S3 with an Apple S3
  • sepOS distributed with watchOS 7.1 running on Apple Watch Series S4 with an Apple S4
  • sepOS distributed with watchOS 7.1 running on Apple Watch Series S5 with an Apple S5
  • sepOS distributed with watchOS 7.1 running on Apple Watch Series S6 with an Apple S6

Validation history

DateTypeLab
2024-08-09Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-08-09

Source documents