Apple

On Apr 5, 2016, at 6:46 PM, William Cerniuk <email@hidden> wrote:

Outstanding, thank you Shawn!

--
R/Wm.

On Apr 5, 2016, at 18:14, Shawn A. Geddis <email@hidden> wrote:

FIPS 140-2 Validation Interested Communities,

Apple is pleased to announce the FIPS 140-2 Level 1 Validations for the two Cryptographic Modules used by both iOS 9 & OS X El Capitan v10.11 were all completed! (3/29/16; 4/05/16)

Knowledge Base References

There are Apple Support Knowledge Base Articles for iOS and OS X resources relating to ALL Validations and Certifications including FIPS 140-2, Common Criteria Certification, Security Guidance Resources, and requesting Volatility Statements. There may be a brief delay in page updates for this recent announcement, but keep the following URLs handy to check back shortly.

iOS product security: Validations and guidance https://support.apple.com/en-us/HT202739

OS X: Security certifications and validations https://support.apple.com/en-us/HT201159

Posted FIPS 140-2 Resources

Apple posts Knowledge Base Articles and Crypto Officer Role Guides explaining FIPS 140-2 Compliance for iOS and OS X.

Review all resources for questions you may have related to the validations and platform compliance. If you still have any questions, please direct them to email@hidden.

Certificate # - Validated Module

2594 - Apple iOS CoreCrypto Module v6.0

2609 - Apple iOS CoreCrypto Kernel Module v6.0

2610 - Apple OS X CoreCrypto Module, v6.0

2597 - Apple OS X CoreCrypto Kernel Module v6.0

-------------------------------------------------------------------------------------------------------------------------------------------------------------

NIST/CMVP FIPS 10-2 Vendor List

-------------------------------------------------------------------------------------------------------------------------------------------------------------

http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401vend.htm

The vendor list provides a list of all Vendors and their complete list of FIPS 140-2 Validation Certificates with direct links to each.

Apple Inc. Modules Validated for iOS 9 & OS X El Capitan v10.11:
2594 - Apple iOS CoreCrypto Module v6.0
2609 - Apple iOS CoreCrypto Kernel Module v6.0
2610 - Apple OS X CoreCrypto Module, v6.0
2597 - Apple OS X CoreCrypto Kernel Module v6.0

Modules Validated for iOS 8 & OS X Yosemite v10.10:
2396 - Apple iOS CoreCrypto Module v5.0
2407 - Apple iOS CoreCrypto Kernel Module v5.0
2408 - Apple OS X CoreCrypto Module, v5.0
2411 - Apple OS X CoreCrypto Kernel Module v5.0

Modules Validated for iOS 7 & OS X Mavericks v10.9:
2020 - Apple iOS CoreCrypto Module, v4.0
2021 - Apple iOS CoreCrypto Kernel Module, v4.0
2015 - Apple OS X CoreCrypto Module, v4.0
2016 - Apple OS X CoreCrypto Kernel Module, v4.0

Modules Validated for iOS 6 & OS X Mountain Lion v10.8:
1963 - Apple iOS CoreCrypto Module, v3.0
1944 - Apple iOS CoreCrypto Kernel Module, v3.0
1964 - Apple OS X CoreCrypto Module, v3.0
1956 - Apple OS X CoreCrypto Kernel Module, v3.0

-----------------------------------------------------------------------------------------------------------------------------------------------------------------

Additional Helpful References for those unfamiliar or needing a refresher on FIPS 140-2 Requirements

-----------------------------------------------------------------------------------------------------------------------------------------------------------------

FIPS - Federal Information Processing Standard

http://csrc.nist.gov/publications/PubsFIPS.html

http://en.wikipedia.org/wiki/Federal_Information_Processing_Standards

FIPS 140-2 - Security Requirements for Cryptographic Modules

http://csrc.nist.gov/groups/STM/cmvp/standards.html

CMVP - Cryptographic Module Validation Program

http://csrc.nist.gov/groups/STM/cmvp/

Modules In Process

http://csrc.nist.gov/groups/STM/cmvp/inprocess.html (webpage with explanation)

http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140InProcess.pdf (PDF of current Module status List)

Module Validation List (completed)

http://csrc.nist.gov/groups/STM/cmvp/validation.html

Module Validation List (by vendor)

http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401vend.htm

CAVP - Cryptographic Algorithm Validation Program

http://csrc.nist.gov/groups/STM/cavp/

Each Algorithm validated receives a Certificate

http://csrc.nist.gov/groups/STM/cavp/validation.html

Appreciation

Apple would like to acknowledge and express appreciation for the frequently under appreciated work performed by the CAVP and CMVP (NIST/CSE) Validation Staff who face a never ending backlog of cryptographic algorithms and modules everyone here uses on a daily basis. Through sincere willingness and efforts towards process improvements, I hope we all will see shorter processing times moving forward.

___________________________________________
Shawn Geddis    email@hidden
Security and Certifications Engineer
 Platform Security / CoreOS

_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden

_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden