808bits

Apple corecrypto Module v13.0 [Intel, Kernel, Software, SL1]

FIPS 140-3 certificate #4919 · Apple Inc. · data as of 2026-09-08

Apple corecrypto Module v13.0 [Intel, Kernel, Software, SL1], from Apple Inc., holds FIPS 140-3 certificate #4919 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5347. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated in approved mode

Certificate

Certificate number4919
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorApple Inc. · website
Software versionsv13.0

Module description

Quoted from the NIST CMVP entry for this certificate.

The Apple corecrypto Kernel Space Module for Intel is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (33)

AlgorithmCAVP certificates
AES-CBCA3618, A3619, A3620, A3621
AES-CCMA3626, A3627
AES-CFB128A3620, A3621
AES-CFB8A3620, A3621
AES-CTRA3620, A3621, A3626, A3627
AES-ECBA3618, A3619, A3620, A3621, A3626, A3627
AES-GCMA3626, A3627
AES-KWA3620, A3621
AES-OFBA3620, A3621
AES-XTS Testing Revision 2.0A3618, A3619
Counter DRBGA3620, A3621, A3627
ECDSA KeyGen (FIPS186-4)A3622, A3623, A3624
ECDSA KeyVer (FIPS186-4)A3622, A3623, A3624
ECDSA SigGen (FIPS186-4)A3622, A3623, A3624
ECDSA SigVer (FIPS186-4)A3622, A3623, A3624
HMAC DRBGA3622, A3623, A3624
HMAC-SHA-1A3622, A3623, A3624, A3628
HMAC-SHA2-224A3622, A3623, A3624, A3628
HMAC-SHA2-256A3622, A3623, A3624, A3628
HMAC-SHA2-384A3622, A3623, A3624, A3628
HMAC-SHA2-512A3622, A3623, A3624, A3628
HMAC-SHA2-512/256A3622, A3623, A3624
KDF SP800-108A3624
RSA KeyGen (FIPS186-4)A3622, A3623, A3624
RSA SigGen (FIPS186-4)A3622, A3623, A3624
RSA SigVer (FIPS186-4)A3622, A3623, A3624
SHA-1A3622, A3623, A3624, A3628
SHA2-224A3622, A3623, A3624, A3628
SHA2-256A3622, A3623, A3624, A3628
SHA2-384A3622, A3623, A3624, A3628
SHA2-512A3622, A3623, A3624, A3628
SHA2-512/256A3622, A3623, A3624
TDES-ECBA3625

Tested configurations

  • macOS Ventura 13 running on iMac Pro with an Intel Xeon W-2140B (Skylake) with PAA
  • macOS Ventura 13 running on iMac Pro with an Intel Xeon W-2140B (Skylake) without PAA
  • macOS Ventura 13 running on iMac Pro with an Intel Xeon W-3223 (Cascade Lake) with PAA
  • macOS Ventura 13 running on iMac Pro with an Intel Xeon W-3223 (Cascade Lake) without PAA
  • macOS Ventura 13 running on iMac with an Intel i5-8257U (Coffee Lake) with PAA
  • macOS Ventura 13 running on iMac with an Intel i5-8257U (Coffee Lake) without PAA
  • macOS Ventura 13 running on iMac with an Intel i7-10700K (Comet Lake) with PAA
  • macOS Ventura 13 running on iMac with an Intel i7-10700K (Comet Lake) without PAA
  • macOS Ventura 13 running on MacBook Air with an Intel i5-8210Y (Amber Lake) with PAA
  • macOS Ventura 13 running on MacBook Air with an Intel i5-8210Y (Amber Lake) without PAA
  • macOS Ventura 13 running on MacBook Air with an Intel i7-1060NG7 (Ice Lake) with PAA
  • macOS Ventura 13 running on MacBook Air with an Intel i7-1060NG7 (Ice Lake) without PAA
  • macOS Ventura 13 running on MacBook Pro with an Intel i7-8700B (Coffee Lake) with PAA
  • macOS Ventura 13 running on MacBook Pro with an Intel i7-8700B (Coffee Lake) without PAA
  • macOS Ventura 13 running on MacBook Pro with an Intel i9-9880H (Coffee Lake) with PAA
  • macOS Ventura 13 running on MacBook Pro with an Intel i9-9880H (Coffee Lake) without PAA

Validation history

DateTypeLab
2024-12-17InitialLightship Security, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-12-17

Source documents