Good reminder. The process is underway though and this is a good sign.
Shawn,
So I don’t speak out of turn, can you clarify the certification vs the processor issue please? Is the processor certified along with the module or is it simply a foot note as to what was used in testing the module and the module remains certified as long as it is unchanged on any given processor of a given class of machine code.
-- Best Regards, Wm. Cerniuk
Ph: 703.594.7616 Time is Short, and the Water Rises On 14-Apr-2015, at 12:27, Rowe, Walter < email@hidden> wrote:
Another clarification .. these are certificates for algorithms. These are NOT certificates for modules. iOS 8 and OS X 10.10 do not have certificates for CoreCrypto Kernel Module v5.0 and CoreCrypto Module v5.0. The Kernel modules are in Review (step 3 of 5)
and the non-Kernel modules are in Review Pending (step 2 of 5).
Walter
--
Walter Rowe, Application Hosting
Infrastructure Services / OISM / NIST
US Department of Commerce
Email: email@hidden
Office: 301.975.2885
On Apr 13, 2015, at 9:32 AM, Trouton, Rich R < email@hidden> wrote:
No argument, it may just be something that shops that must use FIPS 140-2 validated encryption may need to know about.
If it turns out that the processor validation is important for getting FIPS 140-2 validation (which is something I'll admit I don't know), there may need to be guidance provided with regards to the 2015 MacBook.
Thanks,
Rich
On Apr 13, 2015, at 9:21 AM, Benjamin, Charles (NIH/CIT) [E] < email@hidden> wrote:
Hey Rich,
I doubt that there is much Mac or otherwise certified with the M yet since it is so new.
Chuck Benjamin
NIH/CIT
Desktop Engineering
From: Trouton, Rich R [mailto:email@hidden]
Sent: Monday, April 13, 2015 9:18 AM
To: Rowe, Walter
Cc: email@hidden Talk
Subject: Re: [Fed-Talk] OS X 10.10 / iOS 8 / CoreCrypto 5.0 / FIPS 140-2
The 2015 MacBook uses a Core M processor, which is not on the list of validated CPUs. Hopefully that won't affect the FIPS 140-2 validation for CoreCrypto running on Core M-using Macs.
On Apr 13, 2015, at 9:10 AM, Rowe, Walter < email@hidden> wrote:
The following CAVP algorithm certificates were issued to Apple on 10 Apr 2015 for algorithms included in CoreCrypto Kernel 5.0. The span of nine certificate numbers for each algorithm covers CoreCrypto
Kernel 5.0 across six iOS CPUs and three OS X CPUs. This explains why Apple had to go through FIPS 140-2 again for CoreCrypto 5.0 in iOS 8 and OS X 10.10.
AES - 04/10/2015 - certificates #3317-#3325 (CoreCrypto 5.0 Kernel)
3DES - 04/10/2015 - certificates #1889-#1897 (CoreCrypto 5.0 Kernel)
RSA - 04/10/2015 - certificates #1698-#1706 (CoreCrypto 5.0 Kernel)
ECDSA - 04/10/2015 - certificates #646-#654 (CoreCrypto 5.0 Kernel)
SHS - 04/10/2015 - certificates #2749-#2757 (CoreCrypto 5.0 Kernel)
DRBG - 04/10/2015 - certificates #763-#771 (CoreCrypto 5.0 Kernel)
HMAC - 04/10/2015 - cerficates #2108-#2116 (CoreCrypto 5.0 Kernel)
For iOS 8, the validated CPUs include A5, A5X, A6, A6X, A7, A8.
For OS X 10.10, the validated CPUs include Intel i5, Intel i7, Intel Xeon.
--
Walter Rowe, Application Hosting
Infrastructure Services / OISM / NIST
US Department of Commerce
Email: email@hidden
Office: 301.975.2885
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list ( email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
The best way to get in touch with me is through email.
---
JRC Help Desk
phone: x4030
The best way to get in touch with me is through email.
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
|