The TOE is the Apple macOS 13 Ventura general purpose operating system (GPOS). The TOE is tightly integrated with hardware and runs on Apple iMac, MacBook Air, MacBook Pro, Mac mini, Mac Pro, and Mac Studio computers. The macOS Ventura operating system is a Unix-based graphical operating system. The macOS core is a POSIX compliant operating system built on top of the XNU kernel with standard Unix facilities available from the command line interface. The TOE includes Bluetooth communication—both Bluetooth Basic Rate/Enhanced Data Rate (BR/EDR) and Low Energy (LE).
","evaluation_configuration":"The evaluation covers the following hardware platforms.
\r\n| \r\n Marketing Name \r\n | \r\n\r\n Model # \r\n | \r\n\r\n Model Identifier \r\n | \r\n\r\n Processor \r\n | \r\n\r\n microArch \r\n | \r\n\r\n Security Chip \r\n | \r\n\r\n BT \r\n | \r\n\r\n BT Chip \r\n | \r\n
| \r\n 2023 \r\n | \r\n|||||||
| \r\n MacBook Pro (16-inch, 2023) \r\n | \r\n\r\n A2780 \r\n | \r\n\r\n Mac14,6 \r\n | \r\n\r\n M2 Max \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.3 \r\n | \r\n\r\n 4388 \r\n | \r\n
| \r\n Mac14,10 \r\n | \r\n\r\n M2 Pro \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.3 \r\n | \r\n\r\n 4388 \r\n | \r\n||
| \r\n MacBook Pro (14-inch, 2023) \r\n | \r\n\r\n A2779 \r\n | \r\n\r\n Mac14,5 \r\n | \r\n\r\n M2 Max \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.3 \r\n | \r\n\r\n 4388 \r\n | \r\n
| \r\n Mac14,9 \r\n | \r\n\r\n M2 Pro \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.3 \r\n | \r\n\r\n 4388 \r\n | \r\n||
| \r\n Mac mini (M2 Pro, 2023) \r\n | \r\n\r\n A2816 \r\n | \r\n\r\n Mac14,12 \r\n | \r\n\r\n M2 Pro \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.3 \r\n | \r\n\r\n 4388 \r\n | \r\n
| \r\n Mac mini (M2, 2023) \r\n | \r\n\r\n A2686 \r\n | \r\n\r\n Mac14,3 \r\n | \r\n\r\n M2 \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.3 \r\n | \r\n\r\n 4388 \r\n | \r\n
| \r\n 2022 \r\n | \r\n|||||||
| \r\n MacBook Pro (13-inch, M2, 2022) \r\n | \r\n\r\n A2338 \r\n | \r\n\r\n Mac14,7 \r\n | \r\n\r\n M2 \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4378 \r\n | \r\n
| \r\n MacBook Air (M2, 2022) \r\n | \r\n\r\n A2861 \r\n | \r\n\r\n Mac14,2 \r\n | \r\n\r\n M2 \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4387 \r\n | \r\n
| \r\n Mac Studio \r\n | \r\n\r\n A2615 \r\n | \r\n\r\n Mac13,2 \r\n | \r\n\r\n M1 Ultra \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4387 \r\n | \r\n
| \r\n A2615 \r\n | \r\n\r\n Mac13,1 \r\n | \r\n\r\n M1 Max \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4387 \r\n | \r\n|
| \r\n 2021 \r\n | \r\n|||||||
| \r\n MacBook Pro (16-inch, 2021) \r\n | \r\n\r\n A2485 \r\n | \r\n\r\n MacBookPro18,2 \r\n | \r\n\r\n M1 Max \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4387 \r\n | \r\n
| \r\n MacBookPro18,1 \r\n | \r\n\r\n M1 Pro \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4387 \r\n | \r\n||
| \r\n MacBook Pro (14-inch, 2021) \r\n | \r\n\r\n A2442 \r\n | \r\n\r\n MacBookPro18,4 \r\n | \r\n\r\n M1 Max \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4387 \r\n | \r\n
| \r\n MacBookPro18,3 \r\n | \r\n\r\n M1 Pro \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4387 \r\n | \r\n||
| \r\n iMac (24-inch, M1, 2021) \r\n | \r\n\r\n A2438 \r\n | \r\n\r\n iMac21,1 \r\n | \r\n\r\n M1 \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4378 \r\n | \r\n
| \r\n A2439 \r\n | \r\n\r\n iMac21,2 \r\n | \r\n\r\n M1 \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4378 \r\n | \r\n|
| \r\n 2020 \r\n | \r\n|||||||
| \r\n Mac mini (M1, 2020) \r\n | \r\n\r\n A2348 \r\n | \r\n\r\n Macmini9,1 \r\n | \r\n\r\n M1 \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4378 \r\n | \r\n
| \r\n MacBook Air (M1, 2020) \r\n | \r\n\r\n A2337 \r\n | \r\n\r\n MacBookAir10,1 \r\n | \r\n\r\n M1 \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4378 \r\n | \r\n
| \r\n MacBook Pro (13-inch, M1, 2020) \r\n | \r\n\r\n A2338 \r\n | \r\n\r\n MacBookPro17,1 \r\n | \r\n\r\n M1 \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4364 \r\n | \r\n
| \r\n MacBook Air (Retina, 13-inch, 2020) \r\n | \r\n\r\n A2179 \r\n | \r\n\r\n MacBookAir9,1 \r\n | \r\n\r\n Core i5-1030NG7 | \r\n\r\n Ice Lake \r\n | \r\n\r\n T2 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4377 \r\n | \r\n
| \r\n MacBook Pro (13-inch, 2020, Four Thunderbolt 3 ports) \r\n | \r\n\r\n A2251 \r\n | \r\n\r\n MacBookPro16,2 \r\n | \r\n\r\n Core i5-1038NG7 | \r\n\r\n Ice Lake \r\n | \r\n\r\n T2 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4377 \r\n | \r\n
| \r\n MacBook Pro (13-inch, 2020, Two Thunderbolt 3 ports) \r\n | \r\n\r\n A2289 \r\n | \r\n\r\n MacBookPro16,3 \r\n | \r\n\r\n Core i5-8257U | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4377 \r\n | \r\n
| \r\n iMac (Retina 5K, 27-inch, 2020) \r\n | \r\n\r\n A2115 \r\n | \r\n\r\n iMac20,1 | \r\n\r\n Core i5-10500 | \r\n\r\n Comet Lake \r\n | \r\n\r\n T2 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4364 \r\n | \r\n
| \r\n 2019 \r\n | \r\n|||||||
| \r\n MacBook Air (Retina, 13-inch, 2019) \r\n | \r\n\r\n A1932 \r\n | \r\n\r\n MacBookAir8,2 \r\n | \r\n\r\n Core i5-8210Y \r\n | \r\n\r\n Amber Lake \r\n | \r\n\r\n T2 \r\n | \r\n\r\n 4.2 \r\n | \r\n\r\n 4355 \r\n | \r\n
| \r\n MacBook Pro (13-inch, 2019, Four Thunderbolt 3 ports) \r\n | \r\n\r\n A1989 \r\n | \r\n\r\n MacBookPro15,2 \r\n | \r\n\r\n Core i5-8279U | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4364 \r\n | \r\n
| \r\n MacBook Pro (13-inch, 2019, Two Thunderbolt 3 ports) \r\n | \r\n\r\n A2159 \r\n | \r\n\r\n MacBookPro15,4 \r\n | \r\n\r\n Core i5-8257U | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4377 \r\n | \r\n
| \r\n MacBook Pro (15-inch, 2019) \r\n | \r\n\r\n A1990 \r\n | \r\n\r\n MacBookPro15,1 | \r\n\r\n Core i7-9750H | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4364 \r\n | \r\n
| \r\n MacBook Pro (16-inch, 2019) \r\n | \r\n\r\n A2141 \r\n | \r\n\r\n MacBookPro16,1 | \r\n\r\n Core i7-9750H | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4377 \r\n | \r\n
| \r\n Mac Pro (2019) \r\n | \r\n\r\n A1991 \r\n | \r\n\r\n MacPro7,1 \r\n | \r\n\r\n Xeon W-3223 | \r\n\r\n Cascade Lake \r\n | \r\n\r\n T2 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4364 \r\n | \r\n
| \r\n Mac Pro (2019 Rack) \r\n | \r\n\r\n A2304 \r\n | \r\n\r\n MacPro7,1 \r\n | \r\n\r\n Xeon W-3223 | \r\n\r\n Cascade Lake \r\n | \r\n\r\n T2 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4364 \r\n | \r\n
| \r\n 2018 \r\n | \r\n|||||||
| \r\n MacBook Air (Retina, 13-inch, 2018) \r\n | \r\n\r\n A1932 \r\n | \r\n\r\n MacBookAir8,1 \r\n | \r\n\r\n Core i5-8210Y \r\n | \r\n\r\n Amber Lake \r\n | \r\n\r\n T2 \r\n | \r\n\r\n 4.2 \r\n | \r\n\r\n 4355 \r\n | \r\n
| \r\n Mac mini (2018) \r\n | \r\n\r\n A1993 \r\n | \r\n\r\n Macmini8,1 \r\n | \r\n\r\n Core i5-8500B | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4364 \r\n | \r\n
| \r\n MacBook Pro (15-inch, 2018) \r\n | \r\n\r\n A1990 \r\n | \r\n\r\n MacBookPro15,1 | \r\n\r\n Core i7-8750H | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4364 \r\n | \r\n
| \r\n MacBook Pro (13-inch, 2018, Four Thunderbolt 3 ports) \r\n | \r\n\r\n A1989 \r\n | \r\n\r\n MacBookPro15,2 \r\n | \r\n\r\n Core i5-8259U | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4364 \r\n | \r\n
| \r\n 2017 \r\n | \r\n|||||||
| \r\n iMac Pro (2017) \r\n | \r\n\r\n A1862 \r\n | \r\n\r\n iMacPro1,1 \r\n | \r\n\r\n Xeon W-2140B | \r\n\r\n Skylake \r\n | \r\n\r\n T2 \r\n | \r\n\r\n 5.0 \r\n | \r\n\r\n 4364 \r\n | \r\n
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process. The criteria against which the Apple macOS 13 Ventura was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 R5. The evaluation methodology used by the evaluation team to conduct the evaluation was the Common Methodology for Information Technology Security Evaluation, Version 3.1, R5 supplemented by that found in the Protection Profiles cited above. The evaluation was completed in February 2024. The product, when delivered and configured as identified in the Apple macOS 13 Ventura Common Criteria Configuration Guide, meets the requirements of the following:
\r\n· PP-Configuration for General Purpose Operating Systems and Bluetooth. Version 1.0 as of 2021-04-15; exact conformance
\r\no Protection Profile for General Purpose Operating Systems, Version 4.2.1
\r\no Protection Profile for Bluetooth, Version 1.0
\r\nThe product when configured as identified in the Apple macOS 13 Ventura Common Criteria Configuration Guide document satisfies all of the security functional requirements stated in the Apple macOS 13 Ventura Security Target. The evaluation was subject to CCEVS Validator review. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report number CCEVS-VR-VID11348-2024, prepared by CCEVS.
","environmental_strengths":"The TOE generates audit records for the following auditable events:
\r\n· Start-up and shutdown of the audit functions
\r\n· Authentication events (success/failure)
\r\n· Use of privileged/special rights events (successful and unsuccessful security, audit, and configuration changes)
\r\n· Privilege or role escalation events (success/failure)
\r\nThe TOE also generates audit records for the following Bluetooth auditable events:
\r\n· Failed user authorization of Bluetooth device and for local Bluetooth service
\r\n· Initiation and failure of Bluetooth connection
\r\nThe TOE includes the Apple corecrypto v13.0 cryptographic libraries listed below for performing user space, kernel space, and Secure Enclave Processor (SEP) cryptographic operations. The TOE implements TLS 1.2 for secure communications with remote servers.
\r\nThe Bluetooth hardware implements the bulk AES-CCM-128 cryptographic functionality used when connecting to Bluetooth devices.
\r\n\r\n
Apple silicon
\r\n· Apple corecrypto Module v13.0 [Apple ARM, User, Software, SL1]
\r\n· Apple corecrypto Module v13.0 [Apple ARM, Kernel, Software, SL1]
\r\n· Apple corecrypto Module v13.0 [Apple silicon, Secure Key Store, Hardware, SL2]
\r\nIntel with T2
\r\n· Apple corecrypto Module v13.0 [Intel, User, Software, SL1]
\r\n· Apple corecrypto Module v13.0 [Intel, Kernel, Software, SL1]
\r\n· Apple corecrypto Module v13.0 [Apple ARM, Secure Key Store, Hardware, SL2]
\r\nThe TOE implements access controls that prevent unprivileged users from accessing files and directories owned by other users. The TOE uses the Apple File System (APFS), which provides access control to data. The TOE provides the file system security schemes including sandbox entitlements, POSIX access control lists (ACLs), Unix (BSD) permissions, and per-file BSD flags that override Unix permissions.
\r\nAll users must be authenticated to the TOE prior to carrying out any management actions. The TOE supports:
\r\n· Password-based authentication
\r\n· Authentication based on username and a PIN that releases an asymmetric key stored in Operational Environment (OE) protected storage
\r\nThe TOE supports Bluetooth Secure Simple Pairing (SSP). It requires user authorization and mutual authentication during pairing. It also discards pairing attempts and session initialization from Bluetooth devices to which an active session pre-exists. The TOE requires explicit user authorization when pairing with an untrusted device.
\r\nThe TOE can perform management functions specified in the Security Target. The administrator has full access to carry out all management functions, whereas the user will have limited privileges.
\r\nThe TOE can also perform Bluetooth management functions. The TOE supports both Bluetooth BR/EDR and LE and uses Secure Simple Pairing (SSP) for security.
\r\nProtection of the TSF
\r\nThe TOE implements the following protection of TSF data functions:
\r\n· Access controls
\r\n· Address space layout randomization (ASLR) with 16 bits of entropy
\r\n· Stack buffer overflow protection
\r\n· Verification of integrity of the bootchain and operating system executable code
\r\n· Trusted software updates using digital signatures
\r\nThe TOE displays an advisory warning message regarding unauthorized use of the OS prior to establishment of a user session.
\r\nThe TOE supports TLS 1.2 for trusted channel communications. The TOE uses TLS to securely communicate with the Apple Update Server. Applications may invoke the TOE-provided TLS to securely communicate with remote servers.
\r\nThe TOE provides a trusted path between itself and local users that provides assured identification of its endpoints.
\r\nThe TOE enforces encryption when transmitting data over Bluetooth for both BR/EDR and LE and terminates the connection if the connected device stops encrypting.
","features":[]}