Module Name
Apple corecrypto Kernel Space Module for Intel (ccv10)
Caveat
When operated in FIPS mode
Security Level Exceptions
Embodiment
Multi-Chip Stand Alone
Description
The Apple corecrypto Kernel Space Module for Intel (ccv10) is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.
Tested Configuration(s)
- macOS Catalina 10.15 running on iMac Pro with Intel Xeon W with PAA
- macOS Catalina 10.15 running on iMac Pro with Intel Xeon W without PAA
- macOS Catalina 10.15 running on Mac mini with Intel Core i5 with PAA
- macOS Catalina 10.15 running on Mac mini with Intel Core i5 without PAA
- macOS Catalina 10.15 running on MacBook Pro with Intel Core i7 with PAA
- macOS Catalina 10.15 running on MacBook Pro with Intel Core i7 without PAA
- macOS Catalina 10.15 running on MacBook Pro with Intel Core i9 with PAA
- macOS Catalina 10.15 running on MacBook Pro with Intel Core i9 without PAA
- macOS Catalina 10.15 running on MacBook with Intel Core M with PAA
- macOS Catalina 10.15 running on MacBook with Intel Core M without PAA (single-user mode)
Approved Algorithms
| AES |
Certs. #A13, #A15, #A20, #A23, #A24 and #A28 |
| DRBG |
Certs. #A13, #A15, #A23, #A26, #A28, #A30 and #A34 |
| ECDSA |
Certs. #A26, #A30 and #A34 |
| HMAC |
Certs. #A26, #A30, #A32 and #A34 |
| KTS |
AES Certs. #A13, #A15, #A23 and #A28; key establishment methodology provides between 128 and 256 bits of encryption strength |
| PBKDF |
vendor affirmed |
| RSA |
Certs. #A26, #A30 and #A34 |
| SHS |
Certs. #A26, #A30, #A32 and #A34 |
| Triple-DES |
Cert. #A16 |
Allowed Algorithms
MD5; NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 152 bits of encryption strength)
