swtransparencyd
executablemacOS2.9 MBx86_64, arm64
Security credential manager — handles encryption keys, certificates, and cryptographic operations
Manages device encryption keys and cryptographic credentials stored in the Keychain and device key bag. Performs cryptographic operations for signing, encryption, and certificate validation. Exposes five XPC services for inter-process communication with system components and applications requiring secure credential access. Evaluates feature flags to control functionality and maintains private storage for sensitive data. Communicates with 14 network endpoints and collects 24 telemetry signals for operational monitoring.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 2.9 MB
- UUID
- 0E10EC26-06B1-374F-93D2-FCF2E3215D82
- Analyzed
- 2026-04-09T10:07:03Z
- CDHash
- c1ced3005dbddd5995b7892ccc19d1d8d3c2f2a83084eb62bcde1664b126adbb
Capabilities
KeychainDevice key bag (encryption keys)
/System/Library/PrivateFrameworks/MobileKeyBag.framework/Versions/A/MobileKeyBagNetworkModern networking framework (NWConnection)
/System/Library/Frameworks/Network.framework/Versions/A/NetworkIpcRestricted application group access
com.apple.private.security.restricted-application-groupsIpcShared application group container access
com.apple.security.application-groupsSecurityCryptographic operations
/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKitSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecuritySystemFeature flag evaluation
/System/Library/PrivateFrameworks/FeatureFlags.framework/Versions/A/FeatureFlagsFrameworks28
loginMobileKeyBagCloudTelemetryCombineTransparencyFoundationPrivateCloudComputeOSAnalyticslibobjc.A.dyliblibSystem.B.dylibCoreFoundationCryptoKitNetworkSecurityArgumentParserInternalCoreFollowUp(weak)FeatureFlagslibsqlite3.dyliblibswiftCore.dyliblibswiftCoreFoundation.dylib(weak)libswiftDispatch.dyliblibswiftIOKit.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dyliblibswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)libswift_Concurrency.dyliblibswiftos.dylib
Entitlements11
Interesting Strings
Bundle IDs(62)
File Paths(23)
/System/Library/Frameworks/Combine.framework/Versions/A/Combine/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation/System/Library/Frameworks/Network.framework/Versions/A/Network
telemetry(24)
Network Surface
Networking Frameworks
Endpoints(14)
Hostnameinit-kt.apple.com
Hostnameinit-kt-qa1.ess.apple.com
Hostnameinit-kt-qa2.ess.apple.com
Hostnamewww.apple.com
Hostnametype.googleapis.com
Ipv60:8:16
Hostnamemacosx26.1.internal
Hostnamecrl.apple.com
DNA Capability Vector
Location
0
Keychain
1
Network
1
Storage
1
Hardware
0
IPC
2
Analytics
0
Security
2
System
1
Behavioral Profile
URL Endpoints
10
Telemetry Strings
24
File Paths
23
Bundle IDs
62
IOKit Constants
0
Library Functions
1
Structural HashesSHA-256
Static Libraries1 / 6006 functions identified
Identified Libraries
Functions(6006)
0x100001a98-[PatInclusionProof dataStore]
0x100001aa4-[PatInclusionProof setDataStore:]
0x100001ab4-[PatInclusionProof verifier]
0x100001ac0-[PatInclusionProof setVerifier:]
0x100001ad0-[PatInclusionProof metadata]
0x100001adc-[PatInclusionProof setMetadata:]
0x100001aec-[PatInclusionProof setMetadataValue:key:]
0x100001bb4-[PatInclusionProof patSigningKeyWithError:]
0x100001f58sub_100001f58
0x100001fa0sub_100001fa0
0x100001fe8sub_100001fe8
0x100002030-[PatInclusionProof vrfPublicKeyWithError:]
0x100002364sub_100002364
0x1000023acsub_1000023ac
0x1000023f4-[PatInclusionProof earliestNextTreeVersionWithError:]
0x1000026a8sub_1000026a8
0x1000026f0sub_1000026f0
0x100002738-[PatInclusionProof shutdownTimeStamp:]
0x1000029ecsub_1000029ec
0x100002a34sub_100002a34
Imports893 symbols from 20 dylibs
Exports1
_mh_execute_header0x0