Certificate 2407 - Apple iOS CoreCrypto Kernel Module v5.0
intCertNum 2407
strVendorName Apple Inc.
strURL http://www.apple.com
strAddress1 1 Infinite Loop
strAddress2
strAddress3
strCity Cupertino
strStateProv CA
strPostalCode 95041
strCountry 95041
strContact Shawn Geddis
strEmail geddis@apple.com
strPhone (669)227-3579
strFax (866)315-1954
strContact2
strEmail2
strFax2
strPhone2
intCertNum 2407
strModuleName Apple iOS CoreCrypto Kernel Module v5.0
strPartNumber Software Version: 5.0
memModuleNotes When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
str140Version 140-2
_sp_ Security Policy   [pdf][html][txt]
_cert_ Certificate   [pdf]
strPURL
strModuleType Software
strValidationDate 07/22/2015
intOverallLevel 1
memIndividualLevelNotes -Physical Security: N/A ;;;-Operational Environment: Tested as meeting Level 1 with iOS 8.0 running on iPhone4S with Apple A5 CPU; iOS 8.0 running on iPhone5 with Apple A6 CPU; iOS 8.0 running on iPad (3rd generation) with Apple A5X CPU; iOS 8.0 running on iPad (4th generation) with Apple A6X CPU; iOS 8.0 running on iPhone5S with Apple A7 CPU; iOS 8.0 running on iPhone6 (iPhone6 and iPhone6 Plus) with Apple A8 CPU; iOS 8.0 running on iPad Air 2 with Apple A8X CPU (single-user mode)
strFIPSAlgorithms Triple-DES (Certs. #1889, #1890, #1891, #1892, #1893, #1894 and #1919);
AES (Certs. #3096, #3097, #3098, #3099, #3100, #3101, #3317, #3318, #3319, #3320, #3321, #3322, #3371 and #3380);
RSA (Certs. #1698, #1699, #1700, #1701, #1702, #1703 and #1735);
SHS (Certs. #2558, #2559, #2560, #2561, #2562, #2587, #2749, #2750, #2751, #2752, #2753, #2754, #2795 and #2798);
ECDSA (Certs. #646, #647, #648, #649, #650, #651 and #671);
HMAC (Certs. #1939, #1940, #1941, #1942, #1943, #1968, #2108, #2109, #2110, #2111, #2112, #2113, #2150 and #2153);
DRBG (Certs. #763, #764, #765, #766, #767, #768 and #803);
PBKDF (vendor affirmed)
strOtherAlgorithms AES (non-compliant);
ECDSA (non-compliant);
RSA (key wrapping;
key establishment methodology provides between 128 and 150 bits of encryption strength;
non-compliant less than 112 bits of encryption strength);
DES;
Triple-DES (non-compliant);
MD2;
MD4;
MD5;
RIPEMD;
Ed25519;
CAST5;
ANSI X9.63 KDF;
RFC6637 KDF;
KBKDF (non-compliant);
SP800-56C KDF;
Blowfish;
RC2;
RC4;
CMAC AES 128;
OMAC;
HMAC DRBG (non-compliant);
Hash DRBG (non-compliant);
Integrated Encryption Scheme on elliptic curves
strConfiguration Multi-chip standalone
memModuleDescription The Apple iOS CoreCrypto Kernel Module is a software cryptographic module running on a multi-chip standalone mobile device and provides services intended to protect data in transit and at rest.
intModuleCount 1
memAdditionalNotes
strFirstValidtionDate 07/22/15 00:00:00
strLabName atsec
strValidationYear 2015