From: Shawn Geddis <
email@hidden>
Date: Tuesday, March 5, 2013 10:29 AM
To: "Oliver, John N JR CTR SPAWARSYSCEN-PACIFIC, 53223" <
email@hidden>
Cc: Apple Fed-Talk <
email@hidden>
Subject: Re: [Fed-Talk] Apple CoreCrypto FIPS Status
On Mar 5, 2013, at 12:06 PM, "Oliver, John N JR CTR SPAWARSYSCEN-PACIFIC, 53223" <
email@hidden> wrote:
Actually, I was thinking more along the lines of, when is CoreCrypto going to be the default out-of-the-box? When does the old OpenSSL go away?
OpenSSL was never the "default out-of-the-box" .
OpenSSL was deprecated in OS X 10.7
CoreCrypto / CoreCrypto Kernel is being validated for use under OS X 10.8
-- but was included in an
earlier form (not to be validated) in OS X 10.7.
One correction I need to note from previous snippets for people is that...
• Heimdal Kerberos in OS X 10.8.x does in fact use CoreCrypto, so will be covered by the validation as well.
-- It was an error of my email communication (copy/paste/fail to edit) previously.
- Shawn
________________________________________
Shawn Geddis
Security Consulting Engineer
Apple Enterprise Division