808bits

Apple corecrypto Module v12 [Intel, Kernel, Software]

FIPS 140-3 certificate #4956 · Apple, Inc. · data as of 2026-08-28
Active. Sunset date 2027-01-29, 153 days away.
Caveat: Interim validation. When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.

Certificate

Certificate number4956
StandardFIPS 140-3
Statusactive
Sunset date2027-01-29
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorApple, Inc. · website
Software versions12
EntropyENT (P)

Module description

The Apple corecrypto Kernel module is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA2850
AES-CBCA2851
AES-CBCA2852
AES-CBCA2853
AES-CCMA2858
AES-CCMA2859
AES-CFB128A2852
AES-CFB128A2853
AES-CFB8A2852
AES-CFB8A2853
AES-CTRA2852
AES-CTRA2853
AES-CTRA2858
AES-CTRA2859
AES-ECBA2850
AES-ECBA2851
AES-ECBA2852
AES-ECBA2853
AES-ECBA2858
AES-ECBA2859
AES-GCMA2858
AES-GCMA2859
AES-KWA2852
AES-KWA2853
AES-OFBA2852
AES-OFBA2853
AES-XTS Testing Revision 2.0A2850
AES-XTS Testing Revision 2.0A2851
Counter DRBGA2852
Counter DRBGA2853
Counter DRBGA2858
Counter DRBGA2859
ECDSA KeyGen (FIPS186-4)A2854
ECDSA KeyGen (FIPS186-4)A2855
ECDSA KeyGen (FIPS186-4)A2856
ECDSA KeyVer (FIPS186-4)A2854
ECDSA KeyVer (FIPS186-4)A2855
ECDSA KeyVer (FIPS186-4)A2856
ECDSA SigGen (FIPS186-4)A2854
ECDSA SigGen (FIPS186-4)A2855
ECDSA SigGen (FIPS186-4)A2856
ECDSA SigVer (FIPS186-4)A2854
ECDSA SigVer (FIPS186-4)A2855
ECDSA SigVer (FIPS186-4)A2856
HMAC DRBGA2854
HMAC DRBGA2855
HMAC DRBGA2856
HMAC-SHA-1A2854
HMAC-SHA-1A2855
HMAC-SHA-1A2856
HMAC-SHA-1A2860
HMAC-SHA2-224A2854
HMAC-SHA2-224A2855
HMAC-SHA2-224A2856
HMAC-SHA2-224A2860
HMAC-SHA2-256A2854
HMAC-SHA2-256A2855
HMAC-SHA2-256A2856
HMAC-SHA2-256A2860
HMAC-SHA2-384A2854
HMAC-SHA2-384A2855
HMAC-SHA2-384A2856
HMAC-SHA2-384A2860
HMAC-SHA2-512A2854
HMAC-SHA2-512A2855
HMAC-SHA2-512A2856
HMAC-SHA2-512A2860
HMAC-SHA2-512/256A2854
HMAC-SHA2-512/256A2855
HMAC-SHA2-512/256A2856
KDF SP800-108A2856
RSA KeyGen (FIPS186-4)A2854
RSA KeyGen (FIPS186-4)A2855
RSA KeyGen (FIPS186-4)A2856
RSA SigGen (FIPS186-4)A2854
RSA SigGen (FIPS186-4)A2855
RSA SigGen (FIPS186-4)A2856
RSA SigVer (FIPS186-4)A2854
RSA SigVer (FIPS186-4)A2855
RSA SigVer (FIPS186-4)A2856
SHA-1A2854
SHA-1A2855
SHA-1A2856
SHA-1A2860
SHA2-224A2854
SHA2-224A2855
SHA2-224A2856
SHA2-224A2860
SHA2-256A2854
SHA2-256A2855
SHA2-256A2856
SHA2-256A2860
SHA2-384A2854
SHA2-384A2855
SHA2-384A2856
SHA2-384A2860
SHA2-512A2854
SHA2-512A2855
SHA2-512A2856
SHA2-512A2860
SHA2-512/256A2854
SHA2-512/256A2855
SHA2-512/256A2856

Tested configurations

  • macOS Monterey 12 running on iMac Pro with Xeon W (Sky Lake) with PAA
  • macOS Monterey 12 running on iMac Pro with Xeon W (Sky Lake) without PAA
  • macOS Monterey 12 running on iMac with an Intel i5 (Comet Lake) with PAA
  • macOS Monterey 12 running on iMac with an Intel i5 (Comet Lake) without PAA
  • macOS Monterey 12 running on iMac with an Intel i7 (Comet Lake) with PAA
  • macOS Monterey 12 running on iMac with an Intel i7 (Comet Lake) without PAA
  • macOS Monterey 12 running on Mac Pro with Xeon W (Cascade Lake) with PAA
  • macOS Monterey 12 running on Mac Pro with Xeon W (Cascade Lake) without PAA (single-user mode)
  • macOS Monterey 12 running on MacBook Air with an Intel i5 (Amber Lake) with PAA
  • macOS Monterey 12 running on MacBook Air with an Intel i5 (Amber Lake) without PAA
  • macOS Monterey 12 running on MacBook Air with an Intel i7 (Ice Lake) with PAA
  • macOS Monterey 12 running on MacBook Air with an Intel i7 (Ice Lake) without PAA
  • macOS Monterey 12 running on MacBook Pro with an Intel i7 (Coffee Lake) with PAA
  • macOS Monterey 12 running on MacBook Pro with an Intel i7 (Coffee Lake) without PAA
  • macOS Monterey 12 running on MacBook Pro with an Intel i9 (Coffee Lake) with PAA
  • macOS Monterey 12 running on MacBook Pro with an Intel i9 (Coffee Lake) without PAA

Validation history

DateTypeLab
2025-01-30InitialAcumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2025-01-30

Source documents