808bits

Apple corecrypto Module v12 [Intel, User, Software]

FIPS 140-3 certificate #4951 · Apple, Inc. · data as of 2026-09-03

Apple corecrypto Module v12 [Intel, User, Software], from Apple, Inc., holds FIPS 140-3 certificate #4951 at overall level 1. The validation is active, with a sunset date of 2027-01-26. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Active. Sunset date 2027-01-26, 144 days away.
Caveat: Interim validation. When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.

Certificate

Certificate number4951
StandardFIPS 140-3
Statusactive
Sunset date2027-01-26
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorApple, Inc. · website
Software versions12
EntropyENT (P)

Module description

Quoted from the NIST CMVP entry for this certificate.

The Apple corecrypto User module is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (37)

AlgorithmCAVP certificates
AES-CBCA2812, A2813, A2814, A2815, A2819, A2820
AES-CCMA2814, A2815, A2820, A2821, A2822
AES-CFB128A2814, A2815, A2820
AES-CFB8A2814, A2815, A2820
AES-CMACA2820
AES-CTRA2814, A2815, A2820, A2821, A2822
AES-ECBA2812, A2813, A2814, A2815, A2820, A2821, A2822
AES-GCMA2814, A2815, A2820, A2821, A2822
AES-KWA2814, A2815, A2820
AES-OFBA2814, A2815, A2820
AES-XTS Testing Revision 2.0A2812, A2813, A2814, A2815, A2820
Counter DRBGA2814, A2815, A2820, A2821, A2822
ECDSA KeyGen (FIPS186-4)A2816, A2817, A2818, A2820
ECDSA KeyVer (FIPS186-4)A2816, A2817, A2818, A2820
ECDSA SigGen (FIPS186-4)A2816, A2817, A2818, A2820
ECDSA SigVer (FIPS186-4)A2816, A2817, A2818, A2820
HMAC DRBGA2816, A2817, A2818, A2820
HMAC-SHA-1A2816, A2817, A2818, A2820, A2823
HMAC-SHA2-224A2816, A2817, A2818, A2820, A2823
HMAC-SHA2-256A2816, A2817, A2818, A2820, A2823
HMAC-SHA2-384A2816, A2817, A2818, A2820, A2823
HMAC-SHA2-512A2816, A2817, A2818, A2820, A2823
HMAC-SHA2-512/256A2816, A2817, A2818, A2820
KAS-ECC-SSC Sp800-56Ar3A2820
KAS-FFC-SSC Sp800-56Ar3A2820
KDF SP800-108A2816, A2817, A2818, A2820
PBKDFA2816, A2817, A2818, A2820
RSA KeyGen (FIPS186-4)A2816, A2817, A2818, A2820
RSA SigGen (FIPS186-4)A2816, A2817, A2818, A2820
RSA SigVer (FIPS186-4)A2816, A2817, A2818, A2820
Safe Primes Key GenerationA2820
SHA-1A2816, A2817, A2818, A2820, A2823
SHA2-224A2816, A2817, A2818, A2820, A2823
SHA2-256A2816, A2817, A2818, A2820, A2823
SHA2-384A2816, A2817, A2818, A2820, A2823
SHA2-512A2816, A2817, A2818, A2820, A2823
SHA2-512/256A2816, A2817, A2818, A2820

Tested configurations

  • macOS Monterey 12 running on iMac Pro with Xeon W (Sky Lake) with PAA
  • macOS Monterey 12 running on iMac Pro with Xeon W (Sky Lake) without PAA
  • macOS Monterey 12 running on iMac with an Intel i5 (Comet Lake) with PAA
  • macOS Monterey 12 running on iMac with an Intel i5 (Comet Lake) without PAA
  • macOS Monterey 12 running on iMac with an Intel i7 (Comet Lake) with PAA
  • macOS Monterey 12 running on iMac with an Intel i7 (Comet Lake) without PAA
  • macOS Monterey 12 running on Mac Pro with Xeon W (Cascade Lake) with PAA
  • macOS Monterey 12 running on Mac Pro with Xeon W (Cascade Lake) without PAA (single-user mode)
  • macOS Monterey 12 running on MacBook Air with an Intel i5 (Amber Lake) with PAA
  • macOS Monterey 12 running on MacBook Air with an Intel i5 (Amber Lake) without PAA
  • macOS Monterey 12 running on MacBook Air with an Intel i7 (Ice Lake) with PAA
  • macOS Monterey 12 running on MacBook Air with an Intel i7 (Ice Lake) without PAA
  • macOS Monterey 12 running on MacBook Pro with an Intel i7 (Coffee Lake) with PAA
  • macOS Monterey 12 running on MacBook Pro with an Intel i7 (Coffee Lake) without PAA
  • macOS Monterey 12 running on MacBook Pro with an Intel i9 (Coffee Lake) with PAA
  • macOS Monterey 12 running on MacBook Pro with an Intel i9 (Coffee Lake) without PAA

Validation history

DateTypeLab
2025-01-27InitialAcumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2025-01-27

Source documents