ssh-sk-helper

executablemacOS496.3 KBx86_64, arm64

System service — manages signed bundle identity and entitlement verification

Validates code signatures and entitlements for macOS applications and system bundles. Processes bundle identifiers and verifies cryptographic signatures against Apple's certificate chain to ensure software integrity. Communicates with network endpoints for certificate validation, revocation checking, and security policy updates. Enforces entitlement restrictions by cross-referencing bundle metadata against system security policies.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 496.3 KB
UUID: 47AB3D5C-90CE-3294-B473-89DD462BDF35
Analyzed: 2026-04-09T10:05:59Z
CDHash: d4c080d8a1a198355c0acc814fb7402b7eb8f43466d71a7ad09ce413417154d1

Frameworks11

Foundation Kerberos OpenDirectory libEndpointSecuritySystem.dylib(weak)libManagedConfigurationFiles.dylib(weak)libbsm.0.dylib libcrypto.46.dylib libpam.2.dylib libresolv.9.dylib libz.1.dylib libSystem.B.dylib

Entitlements1

com.apple.private.security.clear-library-validationtrue

Interesting Strings

Bundle IDs(13)

/AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/dlopen_lv.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/misc.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/msg.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/ssh-ed25519-sk.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/ssh-ed25519.c

File Paths(11)

/AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/dlopen_lv.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/misc.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/msg.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/ssh-ed25519-sk.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/ssh-ed25519.c

URLs & Endpoints(5)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><string>com.apple.compilers.llvm.clang.1_0</string>https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

Endpoints(9)

HostnameOpenSSH-354.0.3

Hostnameopenssh.com

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Hostnamemacosx26.1.internal

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

0

IPC

0

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

5

Telemetry Strings

0

File Paths

11

Bundle IDs

13

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code8d488ed12c9eb1043538114aa93bb73788999a40e1cfd96a6b94103240a04a9c

Imports15ada6798ba3a33bfbd9cf18b1d679dad71662ddfea0d195b1cf64065471712c

Frameworksf23114c2c58c78487879b82f97f2c6e3882992d6198ff8f21b1e35fa79f8ea9d

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlements9e4b070cc0eb71239a1778ab0a3dbc9ba374dd78308cac603e0ea313e8e83109

Symbols15ada6798ba3a33bfbd9cf18b1d679dad71662ddfea0d195b1cf64065471712c

Static Libraries0 / 224 functions identified

Functions(224)

0x1000009a0sub_1000009a0

0x100000dccsub_100000dcc

0x100000e68sub_100000e68

0x1000011b0sub_1000011b0

0x1000016fcsub_1000016fc

0x1000017e0sub_1000017e0

0x10000184csub_10000184c

0x10000189csub_10000189c

0x100001c0csub_100001c0c

0x100001d5csub_100001d5c

0x100001e38sub_100001e38

0x100001ea8sub_100001ea8

0x100001ef4sub_100001ef4

0x100002384sub_100002384

0x1000024b8sub_1000024b8

0x100003258sub_100003258

0x100003398sub_100003398

0x1000034b8sub_1000034b8

0x1000037a0sub_1000037a0

0x100003800sub_100003800

Imports158 symbols from 3 dylibs

libcrypto.46.dylib93 libSystem.B.dylib64 libresolv.9.dylib1

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

ssh-apple-pkcs11

ssh-pkcs11-helper