Apple corecrypto Module v12 [Intel, Kernel, Software]
Apple corecrypto Module v12 [Intel, Kernel, Software], from Apple, Inc., holds FIPS 140-3 certificate #4956 at overall level 1. The validation is active, with a sunset date of 2027-01-29. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: Interim validation. When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Certificate
| Certificate number | 4956 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2027-01-29 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Apple, Inc. · website |
| Software versions | 12 |
| Entropy | ENT (P) |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Apple corecrypto Kernel module is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.
Security level exceptions
- Physical security: N/A
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms (32)
| Algorithm | CAVP certificates |
|---|---|
| AES-CBC | A2850, A2851, A2852, A2853 |
| AES-CCM | A2858, A2859 |
| AES-CFB128 | A2852, A2853 |
| AES-CFB8 | A2852, A2853 |
| AES-CTR | A2852, A2853, A2858, A2859 |
| AES-ECB | A2850, A2851, A2852, A2853, A2858, A2859 |
| AES-GCM | A2858, A2859 |
| AES-KW | A2852, A2853 |
| AES-OFB | A2852, A2853 |
| AES-XTS Testing Revision 2.0 | A2850, A2851 |
| Counter DRBG | A2852, A2853, A2858, A2859 |
| ECDSA KeyGen (FIPS186-4) | A2854, A2855, A2856 |
| ECDSA KeyVer (FIPS186-4) | A2854, A2855, A2856 |
| ECDSA SigGen (FIPS186-4) | A2854, A2855, A2856 |
| ECDSA SigVer (FIPS186-4) | A2854, A2855, A2856 |
| HMAC DRBG | A2854, A2855, A2856 |
| HMAC-SHA-1 | A2854, A2855, A2856, A2860 |
| HMAC-SHA2-224 | A2854, A2855, A2856, A2860 |
| HMAC-SHA2-256 | A2854, A2855, A2856, A2860 |
| HMAC-SHA2-384 | A2854, A2855, A2856, A2860 |
| HMAC-SHA2-512 | A2854, A2855, A2856, A2860 |
| HMAC-SHA2-512/256 | A2854, A2855, A2856 |
| KDF SP800-108 | A2856 |
| RSA KeyGen (FIPS186-4) | A2854, A2855, A2856 |
| RSA SigGen (FIPS186-4) | A2854, A2855, A2856 |
| RSA SigVer (FIPS186-4) | A2854, A2855, A2856 |
| SHA-1 | A2854, A2855, A2856, A2860 |
| SHA2-224 | A2854, A2855, A2856, A2860 |
| SHA2-256 | A2854, A2855, A2856, A2860 |
| SHA2-384 | A2854, A2855, A2856, A2860 |
| SHA2-512 | A2854, A2855, A2856, A2860 |
| SHA2-512/256 | A2854, A2855, A2856 |
Tested configurations
- macOS Monterey 12 running on iMac Pro with Xeon W (Sky Lake) with PAA
- macOS Monterey 12 running on iMac Pro with Xeon W (Sky Lake) without PAA
- macOS Monterey 12 running on iMac with an Intel i5 (Comet Lake) with PAA
- macOS Monterey 12 running on iMac with an Intel i5 (Comet Lake) without PAA
- macOS Monterey 12 running on iMac with an Intel i7 (Comet Lake) with PAA
- macOS Monterey 12 running on iMac with an Intel i7 (Comet Lake) without PAA
- macOS Monterey 12 running on Mac Pro with Xeon W (Cascade Lake) with PAA
- macOS Monterey 12 running on Mac Pro with Xeon W (Cascade Lake) without PAA (single-user mode)
- macOS Monterey 12 running on MacBook Air with an Intel i5 (Amber Lake) with PAA
- macOS Monterey 12 running on MacBook Air with an Intel i5 (Amber Lake) without PAA
- macOS Monterey 12 running on MacBook Air with an Intel i7 (Ice Lake) with PAA
- macOS Monterey 12 running on MacBook Air with an Intel i7 (Ice Lake) without PAA
- macOS Monterey 12 running on MacBook Pro with an Intel i7 (Coffee Lake) with PAA
- macOS Monterey 12 running on MacBook Pro with an Intel i7 (Coffee Lake) without PAA
- macOS Monterey 12 running on MacBook Pro with an Intel i9 (Coffee Lake) with PAA
- macOS Monterey 12 running on MacBook Pro with an Intel i9 (Coffee Lake) without PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2025-01-30 | Initial | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2025-01-30