Product security certifications, validations, and guidance for T2 Firmware

This article contains references for key product certifications, cryptographic validations, and security guidance for T2 Firmware. Contact us at security-certifications@apple.com if you have any questions.

Cryptographic module validations

All Apple FIPS 140-2 Conformance Validation Certificates are on the CMVP vendor page. Apple actively engages in the validation of the CoreCrypto and CoreCrypto Kernel modules for each major release of T2 Firmware. Validation can only be performed against a final module release version and formally submitted upon OS public release. CMVP now maintains validation status of cryptographic modules under two separate lists depending on their current status. The modules begin in the Implementation Under Test List and then proceed to the Modules in Process List.