#AppleCryptoUpdate As of May 2025, Apple continues to enhance CryptoKit, its Swift-based framework for cryptographic operations across iOS, macOS, watchOS, and tvOS. While there haven't been major feature additions announced in 2025, several key improvements and discussions have emerged:([Medium][1])
### 🔐 Key Enhancements and Features
* **Support for PEM and DER Formats**: CryptoKit now allows direct initialization of public and private keys from PEM and DER formats, eliminating the need for external conversion tools. This streamlines key management and integration with external systems. ([Apple Developer][2])
* **HKDF API Expansion**: The framework has introduced standalone APIs for HMAC-based Extract-and-Expand Key Derivation Functions (HKDF), providing developers with more flexibility in deriving cryptographic keys from master secrets. ([Apple Developer][2])
* **Swift Crypto Integration**: For cross-platform development, Swift Crypto serves as an open-source counterpart to CryptoKit. On Apple platforms, Swift Crypto defers directly to CryptoKit, while on other platforms, it utilizes a new implementation built on top of the BoringSSL library. ([Hacker News][3])
### 🛡️ Security Considerations
Apple has addressed several security vulnerabilities in 2025, including zero-day exploits in its WebKit engine. While these patches are part of broader system updates, they underscore Apple's commitment to maintaining a secure cryptographic environment for developers and users alike. ([Security Affairs][4])
### 🧰 Developer Discussions
The Apple Developer Forums have seen active discussions on topics such as Secure Enclave key persistence, importing cryptographic keys, and interoperability between CryptoKit and other cryptographic libraries. These conversations highlight the community's engagement in leveraging CryptoKit for robust security implementations.