Swift Security & Keychain Expert
Implements and audits secure credential storage, biometric authentication, and CryptoKit cryptography for Apple platforms.
This skill provides domain-specific guidance for managing sensitive data on iOS and macOS, covering Keychain Services, Secure Enclave, and modern cryptographic protocols via CryptoKit. It ensures compliance with OWASP MASVS/MASTG standards by enforcing verified patterns for biometric gates (Face ID/Touch ID), certificate pinning, and secure migration from insecure storage like UserDefaults. Designed for security-conscious development, it helps engineers avoid common anti-patterns while future-proofing applications for post-quantum environments and Apple's latest security APIs.
Key Features
016 GitHub stars
02OWASP MASVS/MASTG mobile compliance mapping and auditing
03Keychain-bound biometric authentication (Face ID/Touch ID)
04Migration paths from insecure stores like UserDefaults and plists
05Modern cryptography with CryptoKit (AES-GCM, HPKE, ML-KEM)
06Secure Keychain Services implementation with OSStatus error handling
Use Cases
01Implementing hardware-backed biometric protection for sensitive user data
02Migrating sensitive API keys and OAuth tokens from legacy storage to the system Keychain
03Auditing Swift codebases for common security anti-patterns and compliance gaps