The TOE is the Apple macOS 13 Ventura: FileVault full drive encryption product which supports an Authorization Acquisition and Encryption Engine. The TOE is part of the macOS operating system. The macOS operating system is a Unix-based OS which leverages the Apple Secure Enclave, found in the Apple silicon System on a Chip (SoCs) and in the Apple T2 Security Chip, to perform full drive encryption. The TOE also leverages an AES cryptographic implementation built into the Direct Memory Access (DMA) controller chip. The operating system core is a POSIX-compliant operating system built on top of the XNU kernel with standard Unix facilities available from the command line interface.
\r\nThe TOE type is an authorization and encryption engine product. It meets all the criteria of the collaborative Protection Profiles listed above.
\r\nThe tested version of the TOE is Apple macOS 13.2.1.
","evaluation_configuration":"| \r\n Marketing Name \r\n | \r\n\r\n Model # \r\n | \r\n\r\n Model Identifier \r\n | \r\n\r\n SoC/Processor \r\n | \r\n\r\n microArch \r\n | \r\n\r\n Security Chip \r\n | \r\n
| \r\n 2023 \r\n | \r\n|||||
| \r\n MacBook Pro (16-inch, 2023) \r\n | \r\n\r\n A2780 \r\n | \r\n\r\n Mac14,6 \r\n | \r\n\r\n M2 Max \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac14,10 \r\n | \r\n\r\n M2 Pro \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n||
| \r\n MacBook Pro (14-inch, 2023) \r\n | \r\n\r\n A2779 \r\n | \r\n\r\n Mac14,5 \r\n | \r\n\r\n M2 Max \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac14,9 \r\n | \r\n\r\n M2 Pro \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n||
| \r\n Mac mini (M2 Pro, 2023) \r\n | \r\n\r\n A2816 \r\n | \r\n\r\n Mac14,12 \r\n | \r\n\r\n M2 Pro \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac mini (M2, 2023) \r\n | \r\n\r\n A2686 \r\n | \r\n\r\n Mac14,3 \r\n | \r\n\r\n M2 \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n 2022 \r\n | \r\n|||||
| \r\n MacBook Pro (13-inch, M2, 2022) \r\n | \r\n\r\n A2338 \r\n | \r\n\r\n Mac14,7 \r\n | \r\n\r\n M2 \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n MacBook Air (M2, 2022) \r\n | \r\n\r\n A2861 \r\n | \r\n\r\n Mac14,2 \r\n | \r\n\r\n M2 \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac Studio \r\n | \r\n\r\n A2615 \r\n | \r\n\r\n Mac13,2 \r\n | \r\n\r\n M1 Ultra \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n A2615 \r\n | \r\n\r\n Mac13,1 \r\n | \r\n\r\n M1 Max \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n|
| \r\n 2021 \r\n | \r\n|||||
| \r\n MacBook Pro (16-inch, 2021) \r\n | \r\n\r\n A2485 \r\n | \r\n\r\n MacBookPro18,2 \r\n | \r\n\r\n M1 Max \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n MacBookPro18,1 \r\n | \r\n\r\n M1 Pro \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n||
| \r\n MacBook Pro (14-inch, 2021) \r\n | \r\n\r\n A2442 \r\n | \r\n\r\n MacBookPro18,4 \r\n | \r\n\r\n M1 Max \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n MacBookPro18,3 \r\n | \r\n\r\n M1 Pro \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n||
| \r\n iMac (24-inch, M1, 2021) \r\n | \r\n\r\n A2438 \r\n | \r\n\r\n iMac21,1 \r\n | \r\n\r\n M1 \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n A2439 \r\n | \r\n\r\n iMac21,2 \r\n | \r\n\r\n M1 \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n|
| \r\n 2020 \r\n | \r\n|||||
| \r\n Mac mini (M1, 2020) \r\n | \r\n\r\n A2348 \r\n | \r\n\r\n Macmini9,1 \r\n | \r\n\r\n M1 \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n MacBook Air (M1, 2020) \r\n | \r\n\r\n A2337 \r\n | \r\n\r\n MacBookAir10,1 \r\n | \r\n\r\n M1 \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n MacBook Pro (13-inch, M1, 2020) \r\n | \r\n\r\n A2338 \r\n | \r\n\r\n MacBookPro17,1 \r\n | \r\n\r\n M1 \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n MacBook Air (Retina, 13-inch, 2020) \r\n | \r\n\r\n A2179 \r\n | \r\n\r\n MacBookAir9,1 \r\n | \r\n\r\n Core i5-1030NG7 | \r\n\r\n Ice Lake \r\n | \r\n\r\n T2 \r\n | \r\n
| \r\n MacBook Pro (13-inch, 2020, Four Thunderbolt 3 ports) \r\n | \r\n\r\n A2251 \r\n | \r\n\r\n MacBookPro16,2 \r\n | \r\n\r\n Core i5-1038NG7 | \r\n\r\n Ice Lake \r\n | \r\n\r\n T2 \r\n | \r\n
| \r\n MacBook Pro (13-inch, 2020, Two Thunderbolt 3 ports) \r\n | \r\n\r\n A2289 \r\n | \r\n\r\n MacBookPro16,3 \r\n | \r\n\r\n Core i5-8257U | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 \r\n | \r\n
| \r\n iMac (Retina 5K, 27-inch, 2020) \r\n | \r\n\r\n A2115 \r\n | \r\n\r\n iMac20,1 | \r\n\r\n Core i5-10500 | \r\n\r\n Comet Lake \r\n | \r\n\r\n T2 \r\n | \r\n
| \r\n 2019 \r\n | \r\n|||||
| \r\n MacBook Air (Retina, 13-inch, 2019) \r\n | \r\n\r\n A1932 \r\n | \r\n\r\n MacBookAir8,2 \r\n | \r\n\r\n Core i5-8210Y \r\n | \r\n\r\n Amber Lake \r\n | \r\n\r\n T2 \r\n | \r\n
| \r\n MacBook Pro (13-inch, 2019, Four Thunderbolt 3 ports) \r\n | \r\n\r\n A1989 \r\n | \r\n\r\n MacBookPro15,2 \r\n | \r\n\r\n Core i5-8279U | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 \r\n | \r\n
| \r\n MacBook Pro (13-inch, 2019, Two Thunderbolt 3 ports) \r\n | \r\n\r\n A2159 \r\n | \r\n\r\n MacBookPro15,4 \r\n | \r\n\r\n Core i5-8257U | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 \r\n | \r\n
| \r\n MacBook Pro (15-inch, 2019) \r\n | \r\n\r\n A1990 \r\n | \r\n\r\n MacBookPro15,1 | \r\n\r\n Core i7-9750H | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 \r\n | \r\n
| \r\n MacBook Pro (16-inch, 2019) \r\n | \r\n\r\n A2141 \r\n | \r\n\r\n MacBookPro16,1 | \r\n\r\n Core i7-9750H | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 \r\n | \r\n
| \r\n Mac Pro (2019) \r\n | \r\n\r\n A1991 \r\n | \r\n\r\n MacPro7,1 \r\n | \r\n\r\n Xeon W-3223 | \r\n\r\n Cascade Lake \r\n | \r\n\r\n T2 \r\n | \r\n
| \r\n Mac Pro (2019 Rack) \r\n | \r\n\r\n A2304 \r\n | \r\n\r\n MacPro7,1 \r\n | \r\n\r\n Xeon W-3223 | \r\n\r\n Cascade Lake \r\n | \r\n\r\n T2 \r\n | \r\n
| \r\n 2018 \r\n | \r\n|||||
| \r\n MacBook Air (Retina, 13-inch, 2018) \r\n | \r\n\r\n A1932 \r\n | \r\n\r\n MacBookAir8,1 \r\n | \r\n\r\n Core i5-8210Y \r\n | \r\n\r\n Amber Lake \r\n | \r\n\r\n T2 \r\n | \r\n
| \r\n Mac mini (2018) \r\n | \r\n\r\n A1993 \r\n | \r\n\r\n Macmini8,1 \r\n | \r\n\r\n Core i5-8500B | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 \r\n | \r\n
| \r\n MacBook Pro (15-inch, 2018) \r\n | \r\n\r\n A1990 \r\n | \r\n\r\n MacBookPro15,1 | \r\n\r\n Core i7-8750H | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 \r\n | \r\n
| \r\n MacBook Pro (13-inch, 2018, Four Thunderbolt 3 ports) \r\n | \r\n\r\n A1989 \r\n | \r\n\r\n MacBookPro15,2 \r\n | \r\n\r\n Core i5-8259U | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 \r\n | \r\n
| \r\n 2017 \r\n | \r\n|||||
| \r\n iMac Pro (2017) \r\n | \r\n\r\n A1862 \r\n | \r\n\r\n iMacPro1,1 \r\n | \r\n\r\n Xeon W-2140B | \r\n\r\n Skylake \r\n | \r\n\r\n T2 \r\n | \r\n
","security_evaluation_summary":"
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process. The criteria against which the Apple macOS 13 Ventura: FileVault was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 R5. The evaluation methodology used by the evaluation team to conduct the evaluation was the Common Methodology for Information Technology Security Evaluation, Version 3.1, R5 supplemented by that found in the Protection Profiles cited above. The product, when delivered and configured as identified in the Apple macOS 13 Ventura: FileVault Common Criteria Configuration Guide, meets the requirements defined in the Security Target.
Apple macOS 13 Ventura: FileVault
\r\nThe Apple macOS 13 Ventura: FileVault Common Criteria Configuration Guide document satisfies all of the security functional requirements stated in the Apple macOS 13 Ventura: FileVault Security Target. The evaluation was subject to CCEVS Validator review. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report number CCEVS-VR-VID11348-2023, prepared by CCEVS.
","environmental_strengths":"The TOE uses the following cryptographic modules to satisfy the cryptographic requirements defined in the ST:
\r\n· Apple silicon
\r\no Apple corecrypto Module 13.0 [Apple ARM, User, Software, SL1]
\r\no Apple corecrypto Module 13.0 [Apple ARM, Kernel, Software, SL1]
\r\no Apple corecrypto Module 13.0 [Apple silicon, Secure Key Store, Hardware, SL2]
\r\no Apple DMA controller 2.0 [Hardware]
\r\n· Intel with T2
\r\no Apple corecrypto Module 13.0 [Intel, User, Software, SL1]
\r\no Apple corecrypto Module 13.0 [Intel, Kernel, Software, SL1]
\r\no Apple corecrypto Module 13.0 [Apple ARM, Secure Key Store, Hardware, SL2]
\r\no Apple DMA controller 1.0 [Hardware]
\r\nThe evaluation supports the following cryptographic algorithms along with their respective standards.
\r\n| \r\n Algorithms \r\n | \r\n\r\n Standards \r\n | \r\n
| \r\n AES \r\n | \r\n\r\n AES-CBC (as defined in NIST SP 800-38A) \r\n | \r\n
| \r\n AES \r\n | \r\n\r\n AES-KW (AES as specified in ISO/IEC 18033-3, [NIST SP 800-38F] \r\n | \r\n
| \r\n AES \r\n | \r\n\r\n AES-XTS (AES as specified in ISO/IEC 18033-3 and XTS as specified in IEEE 1619) \r\n | \r\n
| \r\n ECDSA \r\n | \r\n\r\n FIPS PUB 186-4 Digital Signature Standard (DSS), Section 6 and Appendix D \r\n | \r\n
| \r\n RSA \r\n | \r\n\r\n FIPS PUB 186-4 Digital Signature Standard (DSS), Appendix B.3 \r\n | \r\n
| \r\n HMAC \r\n | \r\n\r\n ISO/IEC 9797-2:2011, Section 7 “MAC Algorithm 2” \r\n | \r\n
| \r\n SHS \r\n | \r\n\r\n NIST FIPS Pub 180-4 \r\n | \r\n
| \r\n DRBG \r\n | \r\n\r\n CTR_DRBG (AES) \r\n | \r\n
The TOE encrypts all user data using the following algorithms:
\r\n· Apple silicon: AES-XTS-256 using two independent 256-bit keys
\r\n· Intel with T2: AES-XTS-128 using two independent 128-bit keys
\r\nWhen the host platform is provisioned at first run, the user is prompted to enable the TOE's embedded full disk encryption management program (FileVault) and enter a username and password. Once enabled, the storage drive of the host platform remains encrypted and protected from unauthorized access; even if the physical storage device is removed and connected to another host platform.
\r\nThe TOE can perform management functions. The administrator has full access to carry out all management functions, and the user has limited privilege. The System Settings >> Privacy & Security menu on macOS invokes management functionality of the Authorization Acquisition component which supports forwarding requests to change or cryptographically erase the Data Encryption Key (DEK) to the Encryption Engine component as well as configuring authorization factors. The Authorization Acquisition and Encryption Engine components together supports user initialization of the TOE firmware/software updates.
\r\nThe TOE implements the following protection of TSF data:
\r\n· Protection of key and key material—The TOE only stores keys in non-volatile memory when cryptographically wrapped.
\r\n· Power saving states and timing of power states—The TOE supports G2(S5) state (soft off), which is defined by the Advanced Configuration and Power Interface (ACPI) standard, as well as allowing the user to initiate the power saving state.
\r\n· TSF Testing—The TOE performs Known Answer Tests (KATs) to verify the correct operation of supported cryptographic functions.
\r\n· Trusted updates—Before installing the updates, the TOE’s Authorization Acquisition component validates the digital signature of the updates retrieved by the macOS operating system from the Apple Update Server.
","features":[]}