The TOE is Apple macOS 14 Sonoma: FileVault, which is a Full Drive Encryption (FDE) solution including both Authorization Acquisition (AA) and Encryption Engine (EE) components. The TOE is a built-in security feature providing data-at-rest protection on Apple Mac computers. It is a hybrid FDE implementation based on a single vendor's combination of hardware and software.
\r\nThe Mac computers run Apple macOS operating system. Apple macOS is a POSIX-compliant operating system (OS) built on top of the XNU kernel. The TOE is part of the macOS operating system which leverages the Apple silicon System on Chip (SoC) or the Apple T2 Security Chip. Included in the Apple silicon SoC and the Apple T2 Security Chip are Apple Secure Enclave and DMA Storage Controller. The Secure Enclave is a dedicated secure subsystem where all FDE cryptographic key handling occurs. The DMA Storage Controller provides a dedicated AES crypto engine built into the Direct Memory Access (DMA) path between the storage and main memory, making data encryption with AES-XTS efficient. A special channel from the Secure Enclave securely transfers necessary keying material to the AES engine.
","evaluation_configuration":"The evaluation covers the following Apple Mac devices.
\r\n| \r\n Marketing Name \r\n | \r\n\r\n Model # \r\n | \r\n\r\n Model Identifier \r\n | \r\n\r\n SoC/Processor \r\n | \r\n\r\n MicroArch \r\n | \r\n\r\n SEP core \r\n | \r\n\r\n \r\n | \r\n
| \r\n 2023 \r\n | \r\n||||||
| \r\n MacBook Pro (14-inch, Nov 2023) \r\n | \r\n\r\n A2992 \r\n | \r\n\r\n Mac15,10 \r\nMac15,8 \r\n | \r\n\r\n M3 Max \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n Mac15,6 \r\n | \r\n\r\n M3 Pro \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n||
| \r\n A2918 \r\n | \r\n\r\n Mac15,3 \r\n | \r\n\r\n M3 \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n|
| \r\n MacBook Pro (16-inch, Nov 2023) \r\n | \r\n\r\n A2991 \r\n | \r\n\r\n Mac15,11 \r\nMac15,9 \r\n | \r\n\r\n M3 Max \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n Mac15,7 \r\n | \r\n\r\n M3 Pro \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n||
| \r\n iMac (24-inch, 2023, Two ports) \r\n | \r\n\r\n A2784 \r\n | \r\n\r\n Mac15,4 \r\n | \r\n\r\n M3 \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n iMac (24-inch, 2023, Four ports) \r\n | \r\n\r\n A2783 \r\n | \r\n\r\n Mac15,5 \r\n | \r\n\r\n M3 \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n Mac Studio (2023) \r\n | \r\n\r\n A2901 \r\n | \r\n\r\n Mac14,4 \r\n | \r\n\r\n M2 Ultra \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n Mac14,13 \r\n | \r\n\r\n M2 Max \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n||
| \r\n Mac Pro (2023) \r\n | \r\n\r\n A2786 \r\n | \r\n\r\n Mac14,8 \r\n | \r\n\r\n M2 Ultra \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n Mac Pro (Rack, 2023) \r\n | \r\n\r\n A2787 \r\n | \r\n\r\n Mac14,8 \r\n | \r\n\r\n M2 Ultra \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n MacBook Air (15-inch, M2, 2023) \r\n | \r\n\r\n A2941 \r\n | \r\n\r\n Mac14,15 \r\n | \r\n\r\n M2 \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n MacBook Pro (16-inch, 2023) \r\n | \r\n\r\n A2780 \r\n | \r\n\r\n Mac14,6 \r\n | \r\n\r\n M2 Max \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n Mac14,10 \r\n | \r\n\r\n M2 Pro \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n||
| \r\n MacBook Pro (14-inch, 2023) \r\n | \r\n\r\n A2779 \r\n | \r\n\r\n Mac14,5 \r\n | \r\n\r\n M2 Max \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n Mac14,9 \r\n | \r\n\r\n M2 Pro \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n||
| \r\n Mac mini (M2 Pro, 2023) \r\n | \r\n\r\n A2816 \r\n | \r\n\r\n Mac14,12 \r\n | \r\n\r\n M2 Pro \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n Mac mini (M2, 2023) \r\n | \r\n\r\n A2686 \r\n | \r\n\r\n Mac14,3 \r\n | \r\n\r\n M2 \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n 2022 \r\n | \r\n||||||
| \r\n MacBook Pro (13-inch, M2, 2022) \r\n | \r\n\r\n A2338 \r\n | \r\n\r\n Mac14,7 \r\n | \r\n\r\n M2 \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n MacBook Air (M2, 2022) \r\n | \r\n\r\n A2861 \r\n | \r\n\r\n Mac14,2 \r\n | \r\n\r\n M2 \r\n | \r\n\r\n ARMv8.6-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n Mac Studio (2022) \r\n | \r\n\r\n A2615 \r\n | \r\n\r\n Mac13,2 \r\n | \r\n\r\n M1 Ultra \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n Mac13,1 \r\n | \r\n\r\n M1 Max \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n||
| \r\n 2021 \r\n | \r\n||||||
| \r\n MacBook Pro (16-inch, 2021) \r\n | \r\n\r\n A2485 \r\n | \r\n\r\n MacBookPro18,2 \r\n | \r\n\r\n M1 Max \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n MacBookPro18,1 \r\n | \r\n\r\n M1 Pro \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n||
| \r\n MacBook Pro (14-inch, 2021) \r\n | \r\n\r\n A2442 \r\n | \r\n\r\n MacBookPro18,4 \r\n | \r\n\r\n M1 Max \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n MacBookPro18,3 \r\n | \r\n\r\n M1 Pro \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n||
| \r\n iMac (24-inch, M1, 2021) \r\n | \r\n\r\n A2438 \r\n | \r\n\r\n iMac21,1 \r\n | \r\n\r\n M1 \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n A2439 \r\n | \r\n\r\n iMac21,2 \r\n | \r\n\r\n M1 \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n|
| \r\n 2020 \r\n | \r\n||||||
| \r\n Mac mini (M1, 2020) \r\n | \r\n\r\n A2348 \r\n | \r\n\r\n Macmini9,1 \r\n | \r\n\r\n M1 \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n MacBook Air (M1, 2020) \r\n | \r\n\r\n A2337 \r\n | \r\n\r\n MacBookAir10,1 \r\n | \r\n\r\n M1 \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n MacBook Pro (13-inch, M1, 2020) \r\n | \r\n\r\n A2338 \r\n | \r\n\r\n MacBookPro17,1 \r\n | \r\n\r\n M1 \r\n | \r\n\r\n ARMv8.5-A \r\n | \r\n\r\n Built-in \r\n | \r\n\r\n \r\n | \r\n
| \r\n MacBook Air (Retina, 13-inch, 2020) \r\n | \r\n\r\n A2179 \r\n | \r\n\r\n MacBookAir9,1 \r\n | \r\n\r\n Core i7-1060NG7 \r\n | \r\n\r\n Ice Lake \r\n | \r\n\r\n T2 chip \r\n | \r\n\r\n \r\n | \r\n
| \r\n MacBook Pro (13-inch, 2020, Four Thunderbolt 3 ports) \r\n | \r\n\r\n A2251 \r\n | \r\n\r\n MacBookPro16,2 \r\n | \r\n\r\n Core i7-1068NG7 \r\n | \r\n\r\n Ice Lake \r\n | \r\n\r\n T2 chip \r\n | \r\n\r\n \r\n | \r\n
| \r\n MacBook Pro (13-inch, 2020, Two Thunderbolt 3 ports) \r\n | \r\n\r\n A2289 \r\n | \r\n\r\n MacBookPro16,3 \r\n | \r\n\r\n Core i5-8257U | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 chip \r\n | \r\n\r\n \r\n | \r\n
| \r\n iMac (Retina 5K, 27-inch, 2020) \r\n | \r\n\r\n A2115 \r\n | \r\n\r\n iMac20,1 \r\n | \r\n\r\n Core i5-10500 | \r\n\r\n Comet Lake \r\n | \r\n\r\n T2 chip \r\n | \r\n\r\n \r\n | \r\n
| \r\n iMac20,2 \r\n | \r\n\r\n Core i7-10700K | \r\n\r\n Comet Lake \r\n | \r\n\r\n T2 chip \r\n | \r\n\r\n \r\n | \r\n||
| \r\n 2019 \r\n | \r\n||||||
| \r\n MacBook Air (Retina, 13-inch, 2019) \r\n | \r\n\r\n A1932 \r\n | \r\n\r\n MacBookAir8,2 \r\n | \r\n\r\n Core i5-8210Y \r\n | \r\n\r\n Amber Lake \r\n | \r\n\r\n T2 chip \r\n | \r\n\r\n \r\n | \r\n
| \r\n MacBook Pro (13-inch, 2019, Two Thunderbolt 3 ports) \r\n | \r\n\r\n A2159 \r\n | \r\n\r\n MacBookPro15,4 \r\n | \r\n\r\n Core i5-8257U | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 chip \r\n | \r\n\r\n \r\n | \r\n
| \r\n MacBook Pro (16-inch, 2019) \r\n | \r\n\r\n A2141 \r\n | \r\n\r\n MacBookPro16,1 | \r\n\r\n Core i7-9750H | \r\n\r\n Coffee Lake \r\n | \r\n\r\n T2 chip \r\n | \r\n\r\n \r\n | \r\n
| \r\n Mac Pro (2019) \r\n | \r\n\r\n A1991 \r\n | \r\n\r\n MacPro7,1 \r\n | \r\n\r\n Xeon W-3223 | \r\n\r\n Cascade Lake \r\n | \r\n\r\n T2 chip \r\n | \r\n\r\n \r\n | \r\n
| \r\n Mac Pro (2019 Rack) \r\n | \r\n\r\n A2304 \r\n | \r\n\r\n MacPro7,1 \r\n | \r\n\r\n Xeon W-3223 | \r\n\r\n Cascade Lake \r\n | \r\n\r\n T2 chip \r\n | \r\n\r\n \r\n | \r\n
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process. The criteria against which the Apple macOS 14 Sonoma: FileVault TOE was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 R5. The evaluation methodology used by the evaluation team to conduct the evaluation was the Common Methodology for Information Technology Security Evaluation, Version 3.1, R5 supplemented by that found in the Protection Profiles cited below. The product, when delivered and configured as identified in the Apple macOS 14 Sonoma: FileVault Common Criteria Configuration Guide, meets the requirements of the following:
\r\nConfiguration for Full Drive Encryption – Authorization Acquisition and Full Drive Encryption – Encryption Engine, Version 1.0. This PP-Configuration is comprised of the following components:
\r\nThe TOE uses the following cryptographic modules to satisfy the cryptographic requirements defined in the ST:
\r\nThe evaluation supports the following cryptographic algorithms along with their respective standards.
\r\n| \r\n Algorithms \r\n | \r\n\r\n Standards \r\n | \r\n
| \r\n AES-CBC \r\n | \r\n\r\n NIST SP 800-38A \r\n | \r\n
| \r\n AES-KW \r\n | \r\n\r\n NIST SP 800-38F \r\n | \r\n
| \r\n AES-XTS \r\n | \r\n\r\n NIST SP 800-38E \r\n | \r\n
| \r\n ECDSA \r\n | \r\n\r\n FIPS 186-4 \r\n | \r\n
| \r\n RSA \r\n | \r\n\r\n FIPS 186-4 \r\n | \r\n
| \r\n HMAC \r\n | \r\n\r\n FIPS 198-1 \r\n | \r\n
| \r\n SHA \r\n | \r\n\r\n FIPS 180-4 \r\n | \r\n
| \r\n CTR_DRBG (AES) \r\n | \r\n\r\n NIST SP 800-90A Rev. 1 \r\n | \r\n
The TOE encrypts all user data using the following algorithms:
\r\nWhen the host platform is provisioned at first run, the user is prompted to enable the TOE's embedded FDE encryption management program (FileVault) and enter a username and password. Once enabled, the storage drive of the host platform remains encrypted and protected from unauthorized access; even if the physical storage device is removed and connected to another host platform.
\r\nThe TOE can perform management functions. The administrator has full access to carry out all management functions, and the user has limited privilege. The System Settings >> Privacy & Security menu on macOS invokes management functionality of the Authorization Acquisition component. The Authorization Acquisition and Encryption Engine components together
\r\nThe TOE implements the following protection of TSF data:
\r\n\r\n