Folks,
This stuff is easy to look up for yourselves. The NIST CMVP (NIST Cryptographic Module Validation Program) maintains a list of modules that are in the process of being validated, and a list of which modules have received their validation certificate.
The NIST CMVP " Modules In Process" list is updated every Monday and shows what modules are presently undergoing validation.
Apple is in the process of validating (click the link above, click the PDF report link, scroll to bottom of page 2): - Apple iOS CoreCrypto Module … for iOS 6 … currently in "Coordination" phase
- Apple iOS CoreCrypto Kernel Module … for iOS 6 … currently in "Finalization" phase
- Apple OS X CoreCrypto Module … for OS X 10.8 … currently in "Coordination" phase
- Apple OS X CoreCrypto Kernel Module ... for OS X 10.8 … currently in "Coordination" phase
It includes certificate numbers and all relevant supporting documentation for each validated module.
Please click these links and bookmark them, or save this message. The NIST CMVP maintains a very thorough website. You can even read all of the supporting documentation about the FIPS validation program and the process vendors go through to receive validation certificates.
Disclaimer: In presenting this information, I in no way represent NIST. I am an interested user like everyone else on this list.
Walter
-- Walter Rowe, Hosting ServicesEnterprise Systems / OISMEmail: email@hiddenWork: 301-975-2885
On Apr 30, 2013, at 10:24 PM, Neal Emerald < email@hidden> wrote: Peter and company,
On Apr 30, 2013, at 10:00 AM, "Link, Peter R." < email@hidden> wrote:
I'm still around--
Walter is correct. Because it takes so long for the NIST process to complete, there's no reason to even attempt to go backwards. Remember, CoreCrypto is brand new so it hasn't been in OSX
CoreCrypto / CoreCrypto Kernel is being validated for use under OS X 10.8
and was just released in iOS. From what I understand, once CoreCrypto
is approved, the next versions will be much easier to get new/upgrade approvals for. With iOS7 coming, getting the original CoreCrypto approved is a huge deal.
I am assuming the other three modules will move to the finalization step by next week or so. Once all four modules have been approved, Mac/iOS users should be able to go to their DAAs, CIOs, and IT managers and declare they are compliant!!!!!
On Apr 30, 2013, at 6:06 AM, "Rowe, Walter" < email@hidden> wrote:
Shawn has posted this many, many, many times now. This covers iOS6 only. No prior iOS version is covered.
--
Walter Rowe, Hosting Services
Enterprise Systems / OISM
Email: email@hidden
Work: 301-975-2885
On Apr 30, 2013, at 8:23 AM, "Milto, Jim W" < email@hidden> wrote:
Thanks this is good news.
So does what iOS versions does this crypto cover? Just the current iOS6? If not how far back?
-----Original Message-----
From: fed-talk-bounces+james.milto=email@hidden [mailto:fed-talk-bounces+james.milto=email@hidden]
On Behalf Of William Cerniuk
Sent: Monday, April 29, 2013 7:11 PM
To: Fed Talk
Subject: [Fed-Talk] NIST & iOS CoreCrypto Kernel Module
Entered stage 5. That is signatures and the assignment of the number. Victory dance on the device encryption!
|