Certificate 2408 - Apple OS X CoreCrypto Module, v5.0
intCertNum 2408
strVendorName Apple Inc.
strURL http://www.apple.com
strAddress1 1 Infinite Loop
strAddress2
strAddress3
strCity Cupertino
strStateProv CA
strPostalCode 95041
strCountry 95041
strContact Shawn Geddis
strEmail geddis@apple.com
strPhone (669) 227-3579
strFax (866) 315-1954
strContact2
strEmail2
strFax2
strPhone2
intCertNum 2408
strModuleName Apple OS X CoreCrypto Module, v5.0
strPartNumber Software Version: 5.0
memModuleNotes When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
str140Version 140-2
_sp_ Security Policy   [pdf][html][txt]
_cert_ Certificate   [pdf]
strPURL
strModuleType Software
strValidationDate 07/22/2015
intOverallLevel 1
memIndividualLevelNotes -Physical Security: N/A ;;;-Operational Environment: Tested as meeting Level 1 with OS X 10.10 running on Mac mini with i5 CPU with PAA; OS X 10.10 running on Mac mini with i5 CPU without PAA; OS X 10.10 running on iMac with i7 CPU with PAA; OS X 10.10 running on iMac with i7 CPU without PAA; OS X 10.10 running on MacPro with Xeon CPU with PAA; OS X 10.10 running on MacPro with Xeon CPU without PAA; OS X 10.10 running on MacBook with Core M CPU with PAA; OS X 10.10 running on MacBook with Core M CPU without PAA (single-user mode)
strFIPSAlgorithms Triple-DES (Certs. #1847, #1848, #1849, #1850, #1851, #1855, #1922 and #1923);
AES (Certs. #3042, #3043, #3044, #3045, #3046, #3047, #3048, #3049, #3051, #3052, #3053, #3054, #3055, #3056, #3057, #3058, #3059, #3060, #3061, #3062, #3063, #3064, #3065, #3121, #3257, #3259, #3260, #3261, #3262, #3266, #3386, #3387, #3388, #3389, #3390, #3391, #3392, #3393, #3394 and #3395);
RSA (Certs. #1658, #1659, #1660, #1661, #1662, #1666, #1738 and #1739);
SHS (Certs. #2535, #2536, #2537, #2538, #2539, #2540, #2541, #2542, #2588, #2589, #2590, #2591, #2592, #2593, #2594, #2595, #2596, #2597, #2695, #2697, #2698, #2699, #2700, #2704, #2805,# 2806, #2807, #2808, #2809, #2810, #2811 and #2812);
ECDSA (Certs. #614, #615, #616, #617, #618, #622, #674 and #675);
HMAC (Certs. #1919, #1920, #1921, #1922, #1923, #1924, #1925, #1926, #1969, #1970, #1971, #1972, #1973, #1974, #1975, #1976, #1977, #1978, #2056, #2058, #2059, #2060, #2061, #2065, #2160, #2161, #2162, #2163, #2164, #2165, #2166 and #2167);
DRBG (Certs. #586, #587, #588, #589, #590, #591, #592, #593, #594, #595, #596, #597, #716, #718, #719, #720, #721, #725, #807, #808, #809, #810, #811 and #812);
PBKDF (vendor affirmed)
strOtherAlgorithms AES (non-compliant);
AES-CMAC (non-compliant);
RSA (key wrapping;
key establishment methodology provides between 112 and 150 bits of encryption strength;
non-compliant less than 112 bits of encryption strength);
RSA (non-compliant);
ECDSA (non-compliant);
Diffie-Hellman (key agreement: key establishment methodology provides between 112 and 150 bits of encryption strength;
non-compliant less than 112 bits of encryption strength);
EC Diffie-Hellman (key agreement: key establishment methodology provides 128 or 160 bits of encryption strength);
Integrated Encryption Scheme on elliptic curves;
DES;
TDES (non-compliant);
MD2;
MD4;
MD5;
CAST5;
RIPEMD;
Blowfish;
RC2;
RC4;
HMAC-DRBG (non-compliant);
Hash-DRBG (non-compliant);
OMAC (One-Key CBC MAC);
KBKDF (non-compliant);
ed25519;
RFC6637 KDF;
ANSI X9.63 KDF
strConfiguration Multi-chip standalone
memModuleDescription The Apple OS X CoreCrypto Module is a software cryptographic module running on a multi-chip standalone mobile device and provides services intended to protect data in transit and at rest.
intModuleCount 1
memAdditionalNotes
strFirstValidtionDate 07/22/15 00:00:00
strLabName atsec
strValidationYear 2015