kcgend

Security credential management — handles Touch ID, Face ID, authentication, and Secure Enclave operations

Manages biometric and password authentication flows, coordinating with Touch ID, Face ID, and the Secure Enclave through hardware-level keychain access. Performs code signing validation, certificate management, and cryptographic operations using hardware security features. Reads and writes system NVRAM variables to persist security-related configuration. Exposes four XPC services for other system components to request authentication, certificate validation, and keychain operations. Includes telemetry endpoints and network connectivity for potential certificate validation or trust evaluation against remote services.AI