The TOE is Apple macOS 26 Tahoe: FileVault which is a Full Drive Encryption (FDE) solution including both Authorization Acquisition (AA) and Encryption Engine (EE) components. The TOE is a built-in security feature providing data-at-rest protection on Apple Mac computers with Apple silicon. It is a hybrid FDE implementation based on a single vendor’s combination of hardware and software.
\r\n\r\n
The Mac computers run Apple macOS operating system. The TOE is part of the macOS operating system, which leverages the Apple silicon System on Chip (SoC). Included in the Apple silicon SoC are Apple Secure Enclave and Direct Memory Access (DMA) Storage Controller. The Secure Enclave is a dedicated secure subsystem where all FDE cryptographic key handling occurs. The DMA Storage Controller provides a dedicated AES-XTS crypto engine built into the DMA path between the storage and main memory, making data encryption with AES-XTS efficient. A special channel from the Secure Enclave securely transfers necessary keying material to the AES-XTS engine.
\r\n| \r\n Marketing Name \r\n | \r\n\r\n Model Identifier \r\n | \r\n\r\n Processor | \r\n\r\n Security Chip \r\n | \r\n
| \r\n MacBook Pro (14-inch, M5) \r\n | \r\n\r\n Mac17,2 \r\n | \r\n\r\n M5 (ARMv9.3-A) \r\n | \r\n\r\n SEP v3.0 \r\n | \r\n
| \r\n MacBook Air (15-inch, M4, 2025) \r\n | \r\n\r\n Mac16,13 \r\n | \r\n\r\n M4 (ARMv9.2-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n MacBook Air (13-inch, M4, 2025) \r\n | \r\n\r\n Mac16,12 \r\n | \r\n\r\n M4 (ARMv9.2-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac Studio (2025) \r\n | \r\n\r\n Mac16,9 \r\n | \r\n\r\n M4 Max (ARMv9.2-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac Studio (2025) \r\n | \r\n\r\n Mac15,14 \r\n | \r\n\r\n M3 Ultra (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n MacBook Pro (14-inch, 2024) \r\n | \r\n\r\n Mac16,8 \r\n | \r\n\r\n M4 Pro (ARMv9.2-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac16,6 \r\n | \r\n\r\n M4 Max (ARMv9.2-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n|
| \r\n Mac16,1 \r\n | \r\n\r\n M4 (ARMv9.2-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n|
| \r\n MacBook Pro (16-inch, 2024) \r\n | \r\n\r\n Mac16,7 \r\n | \r\n\r\n M4 Pro (ARMv9.2-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac16,5 \r\n | \r\n\r\n M4 Max (ARMv9.2-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n|
| \r\n iMac (24-inch, 2024, Two ports) \r\n | \r\n\r\n Mac16,3 \r\n | \r\n\r\n M4 (ARMv9.2-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac16,2 \r\n | \r\n\r\n M4 (ARMv9.2-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n|
| \r\n Mac mini (2024) \r\n | \r\n\r\n Mac16,11 \r\n | \r\n\r\n M4 Pro (ARMv9.2-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac16,10 \r\n | \r\n\r\n M4 (ARMv9.2-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n|
| \r\n MacBook Air (15-inch, M3, 2024) \r\n | \r\n\r\n Mac15,13 \r\n | \r\n\r\n M3 (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n MacBook Air (13-inch, M3, 2024) \r\n | \r\n\r\n Mac15,12 \r\n | \r\n\r\n M3 (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n MacBook Pro (14-inch, Nov 2023) \r\n | \r\n\r\n Mac15,10 \r\n | \r\n\r\n M3 Max (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac15,8 \r\n | \r\n\r\n M3 Max (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n|
| \r\n Mac15,6 \r\n | \r\n\r\n M3 Pro (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n|
| \r\n Mac15,3 \r\n | \r\n\r\n M3 (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n|
| \r\n MacBook Pro (16-inch, Nov 2023) \r\n | \r\n\r\n Mac15,11 \r\n | \r\n\r\n M3 Max (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac15,9 \r\n | \r\n\r\n M3 Max (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n|
| \r\n Mac15,7 \r\n | \r\n\r\n M3 Pro (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n|
| \r\n iMac (24-inch, 2023, Fourt ports) \r\n | \r\n\r\n Mac15,5 \r\n | \r\n\r\n M3 (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n iMac (24-inch, 2023, Two ports) \r\n | \r\n\r\n Mac15,4 \r\n | \r\n\r\n M3 (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac Pro (-/Rack 2023) \r\n | \r\n\r\n Mac14,8 \r\n | \r\n\r\n M2 Ultra (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n MacBook Air (15-inch, 2023) \r\n | \r\n\r\n Mac14,15 \r\n | \r\n\r\n M2 (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac Studio (2023) \r\n | \r\n\r\n Mac14,14 \r\n | \r\n\r\n M2 Ultra (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac14,13 \r\n | \r\n\r\n M2 Max (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n|
| \r\n MacBook Pro (16-inch, 2023) \r\n | \r\n\r\n Mac14,6 \r\n | \r\n\r\n M2 Max (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac14,10 \r\n | \r\n\r\n M2 Pro (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n|
| \r\n MacBook Pro (14-inch, 2023) \r\n | \r\n\r\n Mac14,5 \r\n | \r\n\r\n M2 Max (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac14,9 \r\n | \r\n\r\n M2 Pro (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n|
| \r\n Mac mini (M2 Pro, 2023) \r\n | \r\n\r\n Mac14,12 \r\n | \r\n\r\n M2 Pro (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n Mac mini (M2, 2023) \r\n | \r\n\r\n Mac14,3 \r\n | \r\n\r\n M2 (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n MacBook Pro (13-inch, M2, 2022) \r\n | \r\n\r\n Mac14,7 \r\n | \r\n\r\n M2 (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
| \r\n MacBook Air (M2, 2022) \r\n | \r\n\r\n Mac14,2 \r\n | \r\n\r\n M2 (ARMv8.6-A) \r\n | \r\n\r\n SEP v2.0 \r\n | \r\n
","security_evaluation_summary":"
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process. The criteria against which the Apple macOS 26 Tahoe: FileVault was evaluated are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 Revision 5. The evaluation methodology used by the evaluation team to conduct the evaluation was the Common Methodology for Information Technology Security Evaluation, Version 3.1, Revision 5 supplemented by that found in the Protection Profiles cited above. The evaluation was completed in August 2026. The product, when delivered and configured as identified in the Apple macOS 26 Tahoe: FileVault Common Criteria Guide, meets the requirements of the following:
\r\nPP-Configuration for Full Drive Encryption – Authorization Acquisition and Full Drive Encryption – Encryption Engine, Version 1.0. This PP-Configuration is comprised of the following components:
\r\nThe TOE includes version 26 of the Apple corecrypto cryptographic implementations and is supported by the onboard Apple Secure Enclave hardware for performing user space, kernel space, and Secure Enclave cryptographic operations. In addition, it uses a hardware-based noise source for entropy generation. The Apple DMA Storage Controller hardware implements the AES-XTS cryptographic algorithm supported for data-at-rest encryption.
\r\nThe TOE encrypts all user data using AES-XTS-256.
\r\nThe TOE can perform management functions. The administrator has full access to carry out all management functions, whereas the user has limited privileges.
\r\nProtection of the TSF
\r\nThe TOE implements the following protection of TOE Security Functionality (TSF) data:
\r\nThe macOS operating system retrieves the update package from the Apple Update Server and forwards the package to the AA component. The TOE validates the digital certificate for the package before it is installed.
","features":[{"id":5743,"feature_name":"Cryptographic Signature Verification"},{"id":5744,"feature_name":"DRBG"},{"id":5745,"feature_name":"Full Drive Encryption"},{"id":5746,"feature_name":"Hashing"},{"id":5747,"feature_name":"Key Destruction"},{"id":5748,"feature_name":"PBKDF"},{"id":5749,"feature_name":"Self Test Function"},{"id":5750,"feature_name":"Symmetric Key Generation"}]}