808bits

Apple corecrypto Module v12 [Intel, User, Software]

FIPS 140-3 certificate #4951 · Apple, Inc. · data as of 2026-08-28
Active. Sunset date 2027-01-26, 150 days away.
Caveat: Interim validation. When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.

Certificate

Certificate number4951
StandardFIPS 140-3
Statusactive
Sunset date2027-01-26
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorApple, Inc. · website
Software versions12
EntropyENT (P)

Module description

The Apple corecrypto User module is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA2812
AES-CBCA2813
AES-CBCA2814
AES-CBCA2815
AES-CBCA2819
AES-CBCA2820
AES-CCMA2814
AES-CCMA2815
AES-CCMA2820
AES-CCMA2821
AES-CCMA2822
AES-CFB128A2814
AES-CFB128A2815
AES-CFB128A2820
AES-CFB8A2814
AES-CFB8A2815
AES-CFB8A2820
AES-CMACA2820
AES-CTRA2814
AES-CTRA2815
AES-CTRA2820
AES-CTRA2821
AES-CTRA2822
AES-ECBA2812
AES-ECBA2813
AES-ECBA2814
AES-ECBA2815
AES-ECBA2820
AES-ECBA2821
AES-ECBA2822
AES-GCMA2814
AES-GCMA2815
AES-GCMA2820
AES-GCMA2821
AES-GCMA2822
AES-KWA2814
AES-KWA2815
AES-KWA2820
AES-OFBA2814
AES-OFBA2815
AES-OFBA2820
AES-XTS Testing Revision 2.0A2812
AES-XTS Testing Revision 2.0A2813
AES-XTS Testing Revision 2.0A2814
AES-XTS Testing Revision 2.0A2815
AES-XTS Testing Revision 2.0A2820
Counter DRBGA2814
Counter DRBGA2815
Counter DRBGA2820
Counter DRBGA2821
Counter DRBGA2822
ECDSA KeyGen (FIPS186-4)A2816
ECDSA KeyGen (FIPS186-4)A2817
ECDSA KeyGen (FIPS186-4)A2818
ECDSA KeyGen (FIPS186-4)A2820
ECDSA KeyVer (FIPS186-4)A2816
ECDSA KeyVer (FIPS186-4)A2817
ECDSA KeyVer (FIPS186-4)A2818
ECDSA KeyVer (FIPS186-4)A2820
ECDSA SigGen (FIPS186-4)A2816
ECDSA SigGen (FIPS186-4)A2817
ECDSA SigGen (FIPS186-4)A2818
ECDSA SigGen (FIPS186-4)A2820
ECDSA SigVer (FIPS186-4)A2816
ECDSA SigVer (FIPS186-4)A2817
ECDSA SigVer (FIPS186-4)A2818
ECDSA SigVer (FIPS186-4)A2820
HMAC DRBGA2816
HMAC DRBGA2817
HMAC DRBGA2818
HMAC DRBGA2820
HMAC-SHA-1A2816
HMAC-SHA-1A2817
HMAC-SHA-1A2818
HMAC-SHA-1A2820
HMAC-SHA-1A2823
HMAC-SHA2-224A2816
HMAC-SHA2-224A2817
HMAC-SHA2-224A2818
HMAC-SHA2-224A2820
HMAC-SHA2-224A2823
HMAC-SHA2-256A2816
HMAC-SHA2-256A2817
HMAC-SHA2-256A2818
HMAC-SHA2-256A2820
HMAC-SHA2-256A2823
HMAC-SHA2-384A2816
HMAC-SHA2-384A2817
HMAC-SHA2-384A2818
HMAC-SHA2-384A2820
HMAC-SHA2-384A2823
HMAC-SHA2-512A2816
HMAC-SHA2-512A2817
HMAC-SHA2-512A2818
HMAC-SHA2-512A2820
HMAC-SHA2-512A2823
HMAC-SHA2-512/256A2816
HMAC-SHA2-512/256A2817
HMAC-SHA2-512/256A2818
HMAC-SHA2-512/256A2820
KAS-ECC-SSC Sp800-56Ar3A2820
KAS-FFC-SSC Sp800-56Ar3A2820
KDF SP800-108A2816
KDF SP800-108A2817
KDF SP800-108A2818
KDF SP800-108A2820
PBKDFA2816
PBKDFA2817
PBKDFA2818
PBKDFA2820
RSA KeyGen (FIPS186-4)A2816
RSA KeyGen (FIPS186-4)A2817
RSA KeyGen (FIPS186-4)A2818
RSA KeyGen (FIPS186-4)A2820
RSA SigGen (FIPS186-4)A2816
RSA SigGen (FIPS186-4)A2817
RSA SigGen (FIPS186-4)A2818
RSA SigGen (FIPS186-4)A2820
RSA SigVer (FIPS186-4)A2816
RSA SigVer (FIPS186-4)A2817
RSA SigVer (FIPS186-4)A2818
RSA SigVer (FIPS186-4)A2820
Safe Primes Key GenerationA2820
SHA-1A2816
SHA-1A2817
SHA-1A2818
SHA-1A2820
SHA-1A2823
SHA2-224A2816
SHA2-224A2817
SHA2-224A2818
SHA2-224A2820
SHA2-224A2823
SHA2-256A2816
SHA2-256A2817
SHA2-256A2818
SHA2-256A2820
SHA2-256A2823
SHA2-384A2816
SHA2-384A2817
SHA2-384A2818
SHA2-384A2820
SHA2-384A2823
SHA2-512A2816
SHA2-512A2817
SHA2-512A2818
SHA2-512A2820
SHA2-512A2823
SHA2-512/256A2816
SHA2-512/256A2817
SHA2-512/256A2818
SHA2-512/256A2820

Tested configurations

  • macOS Monterey 12 running on iMac Pro with Xeon W (Sky Lake) with PAA
  • macOS Monterey 12 running on iMac Pro with Xeon W (Sky Lake) without PAA
  • macOS Monterey 12 running on iMac with an Intel i5 (Comet Lake) with PAA
  • macOS Monterey 12 running on iMac with an Intel i5 (Comet Lake) without PAA
  • macOS Monterey 12 running on iMac with an Intel i7 (Comet Lake) with PAA
  • macOS Monterey 12 running on iMac with an Intel i7 (Comet Lake) without PAA
  • macOS Monterey 12 running on Mac Pro with Xeon W (Cascade Lake) with PAA
  • macOS Monterey 12 running on Mac Pro with Xeon W (Cascade Lake) without PAA (single-user mode)
  • macOS Monterey 12 running on MacBook Air with an Intel i5 (Amber Lake) with PAA
  • macOS Monterey 12 running on MacBook Air with an Intel i5 (Amber Lake) without PAA
  • macOS Monterey 12 running on MacBook Air with an Intel i7 (Ice Lake) with PAA
  • macOS Monterey 12 running on MacBook Air with an Intel i7 (Ice Lake) without PAA
  • macOS Monterey 12 running on MacBook Pro with an Intel i7 (Coffee Lake) with PAA
  • macOS Monterey 12 running on MacBook Pro with an Intel i7 (Coffee Lake) without PAA
  • macOS Monterey 12 running on MacBook Pro with an Intel i9 (Coffee Lake) with PAA
  • macOS Monterey 12 running on MacBook Pro with an Intel i9 (Coffee Lake) without PAA

Validation history

DateTypeLab
2025-01-27InitialAcumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2025-01-27

Source documents