This page was not yet optimized for use on mobile devices.

Apple corecrypto Module v13.0 [Intel, User, Software, SL1]

Certificate details

Certificate ID	#4948
Status	historical
Historical reason	Replaced by certificate #5348
Validation dates	23.01.2025
Standard	FIPS 140-3
Security level	1
Type	Software
Embodiment	Multi-Chip Stand Alone
Caveat	Interim validation. When operated in approved mode
Exceptions	Physical security: N/A Non-invasive security: N/A Mitigation of other attacks: N/A
Description	The Apple corecrypto User Space Module for Intel is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.
Tested configurations	macOS Ventura 13 running on iMac Pro with an Intel Xeon W-2140B (Skylake) with PAA macOS Ventura 13 running on iMac Pro with an Intel Xeon W-2140B (Skylake) without PAA macOS Ventura 13 running on iMac Pro with an Intel Xeon W-3223 (Cascade Lake) with PAA macOS Ventura 13 running on iMac Pro with an Intel Xeon W-3223 (Cascade Lake) without PAA. macOS Ventura 13 running on iMac with an Intel i5-8257U (Coffee Lake) with PAA macOS Ventura 13 running on iMac with an Intel i5-8257U (Coffee Lake) without PAA macOS Ventura 13 running on iMac with an Intel i7-10700K (Comet Lake) with PAA macOS Ventura 13 running on iMac with an Intel i7-10700K (Comet Lake) without PAA macOS Ventura 13 running on MacBook Air with an Intel i5-8210Y (Amber Lake) with PAA macOS Ventura 13 running on MacBook Air with an Intel i5-8210Y (Amber Lake) without PAA macOS Ventura 13 running on MacBook Air with an Intel i7-1060NG7 (Ice Lake) with PAA macOS Ventura 13 running on MacBook Air with an Intel i7-1060NG7 (Ice Lake) without PAA macOS Ventura 13 running on MacBook Pro with an Intel i7-8700B (Coffee Lake) with PAA macOS Ventura 13 running on MacBook Pro with an Intel i7-8700B (Coffee Lake) without PAA macOS Ventura 13 running on MacBook Pro with an Intel i9-9880H (Coffee Lake) with PAA macOS Ventura 13 running on MacBook Pro with an Intel i9-9880H (Coffee Lake) without PAA
Vendor	Apple Inc. http://www.apple.com
Lab	Lightship Security, Inc.
Algorithms	AES-CBCA3509 AES-CCMA3511 AES-CFB128A3509 AES-CFB8A3509 AES-CMACA3509 AES-CTRA3511 AES-ECBA3511 AES-GCMA3511 AES-KWA3509 AES-OFBA3509 AES-XTS Testing Revision 2.0A3509 Counter DRBGA3511 ECDSA KeyGen (FIPS186-4)A3509 ECDSA KeyVer (FIPS186-4)A3509 ECDSA SigGen (FIPS186-4)A3509 ECDSA SigVer (FIPS186-4)A3509 HMAC DRBGA3509 HMAC-SHA-1A3512 HMAC-SHA2-224A3512 HMAC-SHA2-256A3512 HMAC-SHA2-384A3512 HMAC-SHA2-512/256A3509 HMAC-SHA2-512A3512 KAS-ECC-SSC Sp800-56Ar3A3509 KAS-FFC-SSC Sp800-56Ar3A3509 KDF SP800-108A3509 PBKDFA3509 RSA KeyGen (FIPS186-4)A3509 RSA SigGen (FIPS186-4)A3509 RSA SigVer (FIPS186-4)A3509 Safe Primes Key GenerationA3509 SHA-1A3512 SHA2-224A3512 SHA2-256A3512 SHA2-384A3512 SHA2-512/256A3509 SHA2-512A3512 TDES-ECBA3509
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy

Security policy PDF TXT

Extracted keywords

Symmetric Algorithms

AES, AES-, AES-128, AES-256, AES256, CAST5, CAST, RC4, RC2, DES, Triple-DES, TDEA, Blowfish, HMAC, HMAC-SHA-256, HMAC-SHA-512, CMAC, CBC-MAC

Asymmetric Algorithms

ECDH, ECDSA, EdDSA, ECIES, ECC, DH, Diffie-Hellman, DSA

Hash functions

SHA-1, SHA-256, SHA-384, SHA-512, MD4, MD5, RIPEMD, PBKDF

Schemes

MAC, Key Agreement

Protocols

TLS v1.0, TLS, TLS 1.2, IKE, IPsec

Randomness

DRBG

Elliptic Curves

P-224, P-256, P-384, P-521, Curve P-192, curve P-192, P-192, Curve25519, Ed25519

Block cipher modes

ECB, CBC, CTR, CFB, OFB, GCM, CCM, XEX, XTS

JavaCard API constants

X25519

Trusted Execution Environments

SSC

Security level

Level 1, level 1

Title	Apple corecrypto 13 Security Policy
Subject	FIPS 140-3 Validations
Author	Brent Hyde
Creation date	D:20250115131515-05'00'
Modification date	D:20250115131515-05'00'
Pages	37
Creator	Microsoft® Word for Microsoft 365
Producer	Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

23.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'is_br1_format': False, 'br1_deviations': 0, 'br1_tables': None}.

The keywords property was updated, with the {'fips_certlike': {'__update__': {'Certlike': {'__update__': {'SHA2-512': 3}, '__delete__': ['SHA2-512 112', 'SHA2-512 160', 'AES key 128']}}}, 'symmetric_crypto': {'__update__': {'constructions': {'__update__': {'MAC': {'__update__': {'HMAC': 15}}}}}}, 'asymmetric_crypto': {'__update__': {'ECC': {'__update__': {'ECDSA': {'__update__': {'ECDSA': 30}}}}}}, 'hash_function': {'__update__': {'PBKDF': {'__update__': {'PBKDF': 16}}}}} data.
21.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'module_algorithms': {'_type': 'Set', 'elements': ['ECDSA KeyGen (FIPS186-4)A3509', 'HMAC-SHA2-256A3512', 'AES-CCMA3511', 'SHA2-512/256A3509', 'RSA SigGen (FIPS186-4)A3509', 'HMAC-SHA2-512/256A3509', 'AES-XTS Testing Revision 2.0A3509', 'KDF SP800-108A3509', 'ECDSA SigVer (FIPS186-4)A3509', 'RSA KeyGen (FIPS186-4)A3509', 'HMAC-SHA2-512A3512', 'PBKDFA3509', 'AES-CBCA3509', 'Safe Primes Key GenerationA3509', 'SHA2-256A3512', 'SHA-1A3512', 'ECDSA KeyVer (FIPS186-4)A3509', 'AES-CMACA3509', 'AES-CTRA3511', 'SHA2-384A3512', 'HMAC-SHA-1A3512', 'SHA2-224A3512', 'KAS-FFC-SSC Sp800-56Ar3A3509', 'AES-KWA3509', 'Counter DRBGA3511', 'AES-CFB128A3509', 'HMAC DRBGA3509', 'HMAC-SHA2-384A3512', 'RSA SigVer (FIPS186-4)A3509', 'ECDSA SigGen (FIPS186-4)A3509', 'AES-OFBA3509', 'AES-CFB8A3509', 'AES-GCMA3511', 'AES-ECBA3511', 'TDES-ECBA3509', 'SHA2-512A3512', 'HMAC-SHA2-224A3512', 'KAS-ECC-SSC Sp800-56Ar3A3509']}, 'policy_algorithms': {'_type': 'Set', 'elements': ['#A3501', '#A3502', '#A3506', '#A3503', '#A3505', '#A3511', '#A3512', '#A3504', '#A3509', '#A3507', '#A3508', '#A3510']}}.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__update__': {'Level 1': 1}}}}, 'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'RSA 6': 1, 'AES256': 1}, '__delete__': ['RSA6', 'AES- 256', 'PAA 2', 'PAA 3', 'PAA 4', 'PAA 5', 'PAA 6', 'PAA 7', 'PAA 8', 'PAA 9']}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__insert__': {'AES256': 1}, '__update__': {'AES-': 4}}}}}}, 'asymmetric_crypto': {'__update__': {'ECC': {'__update__': {'ECDSA': {'__update__': {'ECDSA': 28}}}}, 'FF': {'__insert__': {'DSA': {'DSA': 1}}, '__update__': {'DH': {'__update__': {'Diffie-Hellman': 6}}}}}}, 'crypto_scheme': {'__update__': {'KA': {'__update__': {'Key Agreement': 9}}}}, 'crypto_protocol': {'__update__': {'TLS': {'__update__': {'TLS': {'__update__': {'TLS': 7}}}}}}, 'randomness': {'__update__': {'PRNG': {'__update__': {'DRBG': 23}}}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS186-4': 6}}, 'RFC': {'__delete__': ['RFC 3526']}}}} data.

The computed heuristics were updated.

The algorithms property was updated, with the {'_type': 'Set', 'elements': ['#A3501', '#A3502', '#A3506', '#A3503', '#A3505', '#A3511', '#A3512', '#A3504', '#A3509', '#A3507', '#A3508', '#A3510']} values added.

The state was updated.

The policy property was updated, with the {'txt_hash': '098e2a7c34dc7e3fd8ec325ef650a017d409423cd0808d333a852d7a8823e068', 'json_hash': '9a952a84fa46699472909c328c6089da0048cec58e26f07437b15cf8e0761a00'} data.
20.06.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/January 2025-signed.pdf.

The status property was set to historical.

The historical_reason property was set to Replaced by certificate #5348.

The date_sunset property was set to None.
15.12.2025

The certificate data changed.
Certificate changed

The state was updated.

The following values were inserted: {'policy_json_hash': None}.

The following properties were deleted: ['policy_convert_garbage'].
24.11.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The date_sunset property was set to 2030-01-22.
20.10.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated.
08.09.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated.
24.02.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The exceptions property was updated.
27.01.2025

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4948,
  "dgst": "25b99b9c636ea2d7",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC DRBGA3509",
        "HMAC-SHA2-256A3512",
        "#A3509",
        "PBKDFA3509",
        "#A3508",
        "KDF SP800-108A3509",
        "AES-GCMA3511",
        "#A3502",
        "SHA2-512A3512",
        "Counter DRBGA3511",
        "RSA SigGen (FIPS186-4)A3509",
        "AES-XTS Testing Revision 2.0A3509",
        "ECDSA SigVer (FIPS186-4)A3509",
        "HMAC-SHA2-224A3512",
        "RSA SigVer (FIPS186-4)A3509",
        "SHA2-256A3512",
        "HMAC-SHA2-384A3512",
        "SHA2-384A3512",
        "ECDSA KeyVer (FIPS186-4)A3509",
        "AES-CTRA3511",
        "#A3511",
        "HMAC-SHA2-512/256A3509",
        "KAS-ECC-SSC Sp800-56Ar3A3509",
        "TDES-ECBA3509",
        "AES-OFBA3509",
        "HMAC-SHA-1A3512",
        "Safe Primes Key GenerationA3509",
        "#A3510",
        "AES-CCMA3511",
        "SHA2-512/256A3509",
        "AES-CFB128A3509",
        "#A3504",
        "#A3505",
        "#A3512",
        "AES-CFB8A3509",
        "HMAC-SHA2-512A3512",
        "RSA KeyGen (FIPS186-4)A3509",
        "#A3503",
        "AES-CMACA3509",
        "#A3507",
        "ECDSA SigGen (FIPS186-4)A3509",
        "AES-KWA3509",
        "KAS-FFC-SSC Sp800-56Ar3A3509",
        "#A3501",
        "AES-ECBA3511",
        "ECDSA KeyGen (FIPS186-4)A3509",
        "SHA-1A3512",
        "SHA2-224A3512",
        "#A3506",
        "AES-CBCA3509"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "13.0"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 0,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 2
          },
          "ECDH": {
            "ECDH": 1
          },
          "ECDSA": {
            "ECDSA": 30
          },
          "ECIES": {
            "ECIES": 3
          },
          "EdDSA": {
            "EdDSA": 1
          }
        },
        "FF": {
          "DH": {
            "DH": 12,
            "Diffie-Hellman": 6
          },
          "DSA": {
            "DSA": 1
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 5
        },
        "CCM": {
          "CCM": 4
        },
        "CFB": {
          "CFB": 2
        },
        "CTR": {
          "CTR": 3
        },
        "ECB": {
          "ECB": 4
        },
        "GCM": {
          "GCM": 9
        },
        "OFB": {
          "OFB": 3
        },
        "XEX": {
          "XEX": 1
        },
        "XTS": {
          "XTS": 5
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 1
        },
        "IPsec": {
          "IPsec": 2
        },
        "TLS": {
          "TLS": {
            "TLS": 7,
            "TLS 1.2": 1,
            "TLS v1.0": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 9
        },
        "MAC": {
          "MAC": 14
        }
      },
      "device_model": {},
      "ecc_curve": {
        "Curve": {
          "Curve25519": 1
        },
        "Edwards": {
          "Ed25519": 11
        },
        "NIST": {
          "Curve P-192": 4,
          "P-192": 15,
          "P-224": 8,
          "P-256": 6,
          "P-384": 4,
          "P-521": 4,
          "curve P-192": 3
        }
      },
      "eval_facility": {
        "Lightship": {
          "Lightship Security": 2
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES-128": 1,
          "AES-256": 1,
          "AES256": 1,
          "HMAC-SHA-1": 10,
          "HMAC-SHA-256": 2,
          "HMAC-SHA-512": 2,
          "HMAC-SHA256": 2,
          "PKCS#1": 16,
          "RSA 6": 1,
          "SHA- 224": 1,
          "SHA-1": 8,
          "SHA-256": 7,
          "SHA-384": 1,
          "SHA-512": 3,
          "SHA2-256": 3,
          "SHA2-512": 3
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "level 1": 2
        }
      },
      "hash_function": {
        "MD": {
          "MD4": {
            "MD4": 2
          },
          "MD5": {
            "MD5": 4
          }
        },
        "PBKDF": {
          "PBKDF": 16
        },
        "RIPEMD": {
          "RIPEMD": 2
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 8
          },
          "SHA2": {
            "SHA-256": 7,
            "SHA-384": 1,
            "SHA-512": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {
        "curves": {
          "X25519": 5
        }
      },
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 23
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 55,
          "FIPS 180-4": 2,
          "FIPS 186-4": 2,
          "FIPS 197": 10,
          "FIPS 198-1": 2,
          "FIPS PUB 140-3": 2,
          "FIPS140-3": 1,
          "FIPS180-4": 1,
          "FIPS186-4": 6,
          "FIPS197": 1,
          "FIPS198-1": 1
        },
        "ISO": {
          "ISO/IEC 19790:2012": 1
        },
        "NIST": {
          "NIST SP 800-140B": 2,
          "NIST SP 800-140F": 1,
          "NIST SP 800-90B": 1,
          "SP 800-108": 3,
          "SP 800-132": 5,
          "SP 800-140": 1,
          "SP 800-140A": 1,
          "SP 800-140B": 1,
          "SP 800-140C": 1,
          "SP 800-140D": 1,
          "SP 800-140E": 1,
          "SP 800-140F": 1,
          "SP 800-140x": 1,
          "SP 800-38A": 6,
          "SP 800-38C": 3,
          "SP 800-38D": 2,
          "SP 800-38E": 2,
          "SP 800-38F": 3,
          "SP 800-56C": 2,
          "SP 800-57": 1,
          "SP 800-90B": 1
        },
        "PKCS": {
          "PKCS#1": 8
        },
        "RFC": {
          "RFC 4106": 1,
          "RFC 5288": 1,
          "RFC3394": 1,
          "RFC5649": 1,
          "RFC6637": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 27,
            "AES-": 4,
            "AES-128": 1,
            "AES-256": 1,
            "AES256": 1
          },
          "CAST": {
            "CAST": 15,
            "CAST5": 2
          },
          "RC": {
            "RC2": 2,
            "RC4": 2
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 1,
            "Triple-DES": 6
          },
          "DES": {
            "DES": 2
          }
        },
        "constructions": {
          "MAC": {
            "CBC-MAC": 1,
            "CMAC": 3,
            "HMAC": 15,
            "HMAC-SHA-256": 1,
            "HMAC-SHA-512": 1
          }
        },
        "miscellaneous": {
          "Blowfish": {
            "Blowfish": 2
          }
        }
      },
      "tee_name": {
        "IBM": {
          "SSC": 4
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC DRBGA3509",
        "HMAC-SHA2-256A3512",
        "PBKDFA3509",
        "KDF SP800-108A3509",
        "AES-GCMA3511",
        "SHA2-512A3512",
        "Counter DRBGA3511",
        "RSA SigGen (FIPS186-4)A3509",
        "AES-XTS Testing Revision 2.0A3509",
        "ECDSA SigVer (FIPS186-4)A3509",
        "HMAC-SHA2-224A3512",
        "RSA SigVer (FIPS186-4)A3509",
        "SHA2-256A3512",
        "HMAC-SHA2-384A3512",
        "SHA2-384A3512",
        "ECDSA KeyVer (FIPS186-4)A3509",
        "AES-CTRA3511",
        "HMAC-SHA2-512/256A3509",
        "KAS-ECC-SSC Sp800-56Ar3A3509",
        "TDES-ECBA3509",
        "AES-OFBA3509",
        "HMAC-SHA-1A3512",
        "Safe Primes Key GenerationA3509",
        "AES-CCMA3511",
        "SHA2-512/256A3509",
        "AES-CFB128A3509",
        "AES-CFB8A3509",
        "HMAC-SHA2-512A3512",
        "RSA KeyGen (FIPS186-4)A3509",
        "AES-CMACA3509",
        "ECDSA SigGen (FIPS186-4)A3509",
        "AES-KWA3509",
        "KAS-FFC-SSC Sp800-56Ar3A3509",
        "AES-ECBA3511",
        "ECDSA KeyGen (FIPS186-4)A3509",
        "SHA-1A3512",
        "SHA2-224A3512",
        "AES-CBCA3509"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A3510",
        "#A3509",
        "#A3508",
        "#A3501",
        "#A3504",
        "#A3505",
        "#A3512",
        "#A3503",
        "#A3506",
        "#A3502",
        "#A3511",
        "#A3507"
      ]
    },
    "policy_metadata": {
      "/Author": "Brent Hyde",
      "/CreationDate": "D:20250115131515-05\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20250115131515-05\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "/Subject": "FIPS 140-3 Validations",
      "/Title": "Apple corecrypto 13 Security Policy",
      "pdf_file_size_bytes": 614591,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
          "https://csrc.nist.gov/publications/detail/sp/800-140c/final",
          "http://www.ietf.org/rfc/rfc5649.txt",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf",
          "http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
          "https://www.apple.com/legal/intellectual-property/trademark/appletmlist.html",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
          "https://csrc.nist.gov/publications/detail/sp/800-140d/final",
          "https://csrc.nist.gov/publications/detail/sp/800-140b/final",
          "http://www.ietf.org/rfc/rfc3394.txt",
          "http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
          "http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
          "http://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
          "http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf",
          "https://support.apple.com/guide/security/welcome/web",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-%20announcements",
          "http://www.ietf.org/rfc/rfc3447.txt",
          "https://csrc.nist.gov/publications/detail/sp/800-140/final",
          "http://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf",
          "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/entropy/E14_PublicUse.pdf",
          "https://csrc.nist.gov/publications/detail/sp/800-140f/final",
          "https://www.lightshipsec.com/",
          "http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
          "http://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf",
          "https://doi.org/10.6028/NIST.FIPS.140-3",
          "http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r5.pdf",
          "https://csrc.nist.gov/publications/detail/sp/800-140e/final",
          "http://csrc.nist.gov/publications/nistpubs/800-108/sp800-108.pdf",
          "https://support.apple.com/HT201159",
          "https://developer.apple.com/macos/",
          "http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
          "http://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-%20standards",
          "https://csrc.nist.gov/publications/detail/sp/800-140a/final",
          "http://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf",
          "http://csrc.nist.gov/publications/nistpubs/800-67-Rev1/SP-800-67-Rev1.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 37
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "9a952a84fa46699472909c328c6089da0048cec58e26f07437b15cf8e0761a00",
      "source_hash": "bfb47c6ba868358ceaef8de28da23ab60ff40fe1def7d6ea8d607fc9f3f7e8c4",
      "txt_hash": "098e2a7c34dc7e3fd8ec325ef650a017d409423cd0808d333a852d7a8823e068"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim validation. When operated in approved mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/January 2025-signed.pdf",
    "date_sunset": null,
    "description": "The Apple corecrypto User Space Module for Intel is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "Replaced by certificate #5348",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Apple corecrypto Module v13.0 [Intel, User, Software, SL1]",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "historical",
    "sw_versions": "v13.0",
    "tested_conf": [
      "macOS Ventura 13 running on iMac Pro with an Intel Xeon W-2140B (Skylake) with PAA",
      "macOS Ventura 13 running on iMac Pro with an Intel Xeon W-2140B (Skylake) without PAA",
      "macOS Ventura 13 running on iMac Pro with an Intel Xeon W-3223 (Cascade Lake) with PAA",
      "macOS Ventura 13 running on iMac Pro with an Intel Xeon W-3223 (Cascade Lake) without PAA.",
      "macOS Ventura 13 running on iMac with an Intel i5-8257U (Coffee Lake) with PAA",
      "macOS Ventura 13 running on iMac with an Intel i5-8257U (Coffee Lake) without PAA",
      "macOS Ventura 13 running on iMac with an Intel i7-10700K (Comet Lake) with PAA",
      "macOS Ventura 13 running on iMac with an Intel i7-10700K (Comet Lake) without PAA",
      "macOS Ventura 13 running on MacBook Air with an Intel i5-8210Y (Amber Lake) with PAA",
      "macOS Ventura 13 running on MacBook Air with an Intel i5-8210Y (Amber Lake) without PAA",
      "macOS Ventura 13 running on MacBook Air with an Intel i7-1060NG7 (Ice Lake) with PAA",
      "macOS Ventura 13 running on MacBook Air with an Intel i7-1060NG7 (Ice Lake) without PAA",
      "macOS Ventura 13 running on MacBook Pro with an Intel i7-8700B (Coffee Lake) with PAA",
      "macOS Ventura 13 running on MacBook Pro with an Intel i7-8700B (Coffee Lake) without PAA",
      "macOS Ventura 13 running on MacBook Pro with an Intel i9-9880H (Coffee Lake) with PAA",
      "macOS Ventura 13 running on MacBook Pro with an Intel i9-9880H (Coffee Lake) without PAA"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-01-23",
        "lab": "Lightship Security, Inc.",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Apple Inc.",
    "vendor_url": "http://www.apple.com"
  }
}

Sections

Apple corecrypto Module v13.0 [Intel, User, Software, SL1]

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Elliptic Curves

Block cipher modes

JavaCard API constants

Trusted Execution Environments

Security level

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

Apple corecrypto Module v13.0 [Intel, User, Software, SL1]

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Elliptic Curves

Block cipher modes

Device

JavaCard API constants

Trusted Execution Environments

Security

Security level

Other

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data