No argument, it may just be something that shops that must use FIPS 140-2 validated encryption may need to know about.
If it turns out that the processor validation is important for getting FIPS 140-2 validation (which is something I'll admit I don't know), there may need to be guidance provided with regards to the 2015 MacBook.
Thanks,
Rich
On Apr 13, 2015, at 9:21 AM, Benjamin, Charles (NIH/CIT) [E] < email@hidden> wrote:
Hey Rich,
I doubt that there is much Mac or otherwise certified with the M yet since it is so new.
Chuck Benjamin
NIH/CIT
Desktop Engineering
From: Trouton, Rich R [mailto:email@hidden]
Sent: Monday, April 13, 2015 9:18 AM
To: Rowe, Walter
Cc: email@hidden Talk
Subject: Re: [Fed-Talk] OS X 10.10 / iOS 8 / CoreCrypto 5.0 / FIPS 140-2
The 2015 MacBook uses a Core M processor, which is not on the list of validated CPUs. Hopefully that won't affect the FIPS 140-2 validation for CoreCrypto running on Core M-using Macs.
On Apr 13, 2015, at 9:10 AM, Rowe, Walter < email@hidden> wrote:
The following CAVP algorithm certificates were issued to Apple on 10 Apr 2015 for algorithms included in CoreCrypto Kernel 5.0. The span of nine certificate numbers for each algorithm covers CoreCrypto Kernel
5.0 across six iOS CPUs and three OS X CPUs. This explains why Apple had to go through FIPS 140-2 again for CoreCrypto 5.0 in iOS 8 and OS X 10.10.
AES - 04/10/2015 - certificates #3317-#3325 (CoreCrypto 5.0 Kernel)
3DES - 04/10/2015 - certificates #1889-#1897 (CoreCrypto 5.0 Kernel)
RSA - 04/10/2015 - certificates #1698-#1706 (CoreCrypto 5.0 Kernel)
ECDSA - 04/10/2015 - certificates #646-#654 (CoreCrypto 5.0 Kernel)
SHS - 04/10/2015 - certificates #2749-#2757 (CoreCrypto 5.0 Kernel)
DRBG - 04/10/2015 - certificates #763-#771 (CoreCrypto 5.0 Kernel)
HMAC - 04/10/2015 - cerficates #2108-#2116 (CoreCrypto 5.0 Kernel)
For iOS 8, the validated CPUs include A5, A5X, A6, A6X, A7, A8.
For OS X 10.10, the validated CPUs include Intel i5, Intel i7, Intel Xeon.
--
Walter Rowe, Application Hosting
Infrastructure Services / OISM / NIST
US Department of Commerce
Email: email@hidden
Office: 301.975.2885
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list ( email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
The best way to get in touch with me is through email.
---
JRC Help Desk
phone: x4030
The best way to get in touch with me is through email.
|