Sample CodeReviewed 2026-07-21View on Apple Developer

Performing Common Cryptographic Operations

At a glance

Item Summary
Purpose Use CryptoKit to carry out operations like hashing, key generation, and encryption.
App architecture A Swift sample centered on Contents, with direct use of CryptoKit.
Main patterns No named application pattern supported by the extracted structure
Project style 8 scanned source file(s) across Swift, organized around ranked entry, type, and file boundaries.
Execution model No structured execution marker indexed; callback threading requires source review.
State/event model No structured observation or publisher-scheduling marker indexed.
Key frameworks/packages CryptoKit, Foundation; these are source dependencies, not architecture labels.

Project structure

Source bundle/
└── Performing-Common-Cryptographic-Operations.playground/
    └── Pages/
        ├── Authenticating Data with HMAC.xcplaygroundpage/
        │   └── Contents.swift
        ├── Creating and Verifying Signatures.xcplaygroundpage/
        │   └── Contents.swift
        ├── Encrypting Data.xcplaygroundpage/
        │   └── Contents.swift
        ├── Encrypting and Signing with Public-Key Cryptography.xcplaygroundpage/
        │   └── Contents.swift
        ├── Hashing Data.xcplaygroundpage/
        │   └── Contents.swift
        ├── LICENSE.xcplaygroundpage/
        │   └── Contents.swift
        ├── Performing Key Agreement.xcplaygroundpage/
        │   └── Contents.swift
        └── Table of Contents.xcplaygroundpage/
            └── Contents.swift

Structure observations

  • Architecturally prominent files are ranked from entry points and role-named declarations; resource-only paths are omitted.
  • Primary languages: Swift.
  • The verified tree contains 0 project/configuration file(s) and 0 source declaration(s).

Overall architecture

Reference code

Performing-Common-Cryptographic-Operations.playground/Pages/Authenticating Data with HMAC.xcplaygroundpage/Contents.swift:1 — architecture anchor

/*
See the LICENSE.txt file for this sample’s licensing information.

Abstract:
Shows how to authenticate data with HMAC.
*/

Interpretation

The arrows summarize the source-visible entry, role-named types or folders, and framework direction; when nodes come from structural folders, the sequence is a high-level interpretation rather than proof that every adjacent node calls the next. Ownership is claimed only where the next section cites a stored property or assignment. The diagram is intentionally limited to the dominant path into Apple CryptoKit.

Ownership and state

Ownership evidence

Performing-Common-Cryptographic-Operations.playground/Pages/Authenticating Data with HMAC.xcplaygroundpage/Contents.swift:21 — stored dependency or nearest verified ownership anchor

let filePath = Bundle.main.path(forResource: "ThemeSong", ofType: "aif")!
Owner Object or state Relationship Mutation authority
Contents Bundle (filePath) stores or receives Initialized by the owner; the binding is immutable
Contents FileManager (audioData) stores or receives Initialized by the owner; the binding is immutable
Contents SymmetricKey (key) creates and retains Initialized by the owner; the binding is immutable
Contents Authenticationcode (authenticationCode) stores or receives Initialized by the owner; the binding is immutable

Composition arrows indicate a source-visible construction expression or locally owned value state; aggregation means the owner stores or receives a dependency without proving exclusive lifetime ownership.

Concurrency, scheduling, and thread safety

Evidence limit: actor isolation, async/await, or Task creation does not by itself prove background-thread execution; Sendable conformance alone does not prove thread-safe mutation.

No source-visible execution, scheduling, or synchronization boundary was found in the indexed source.

@MainActor/MainActor.run, DispatchQueue.main, and RunLoop.main are reported as distinct isolation, queue, and event-loop mechanisms. A plain Task is kept separate from Task.detached; neither is labeled as a background thread.

State propagation, frameworks, and dependencies

Evidence limit: an import proves a source-level compilation dependency at the cited line; it does not prove runtime use, architectural adoption, or whether a Swift package is a direct application dependency.

Category Mechanism or module Verified role Evidence
Source import CryptoKit The cited file imports this module; runtime use and architectural role are not inferred. Performing-Common-Cryptographic-Operations.playground/Pages/Authenticating Data with HMAC.xcplaygroundpage/Contents.swift:18
Source import Foundation The cited file imports this module; runtime use and architectural role are not inferred. Performing-Common-Cryptographic-Operations.playground/Pages/Authenticating Data with HMAC.xcplaygroundpage/Contents.swift:19

receive(on:) describes downstream delivery scheduling, while subscribe(on:) describes upstream subscription/request/cancel scheduling. An import Combine alone establishes neither behavior nor a Store, reducer, Redux, or other application architecture.

Class and protocol design

Performing-Common-Cryptographic-Operations.playground/Pages/Creating and Verifying Signatures.xcplaygroundpage/Contents.swift:16 — representative type boundary

import CryptoKit
Type Responsibility Depends on or conforms to
No local class/protocol declaration Procedural or file-level feature logic Language module and imported APIs

No local protocol conformance is claimed as protocol-oriented design; external framework conformances are listed only as dependencies.

Access control

Symbol Access Verified effect Likely rationale
Contents (Performing-Common-Cryptographic-Operations.playground/Pages/Encrypting Data.xcplaygroundpage/Contents.swift:18) implicit internal No explicit modifier means the Swift declaration is internal to the module. Inference: app-target collaboration needs no exported library surface.

Reference code

Performing-Common-Cryptographic-Operations.playground/Pages/Encrypting Data.xcplaygroundpage/Contents.swift:18 — representative boundary

import CryptoKit

Swift declarations without a modifier are internal; explicit private, fileprivate, private(set), public, or open entries above are interpreted by language semantics. Objective-C/C samples instead rely on header and implementation boundaries, which are not equivalent to Swift lexical privacy.

Logic ownership and placement

Logic Owning type or file Placement rationale
Feature and framework orchestration Contents The sample keeps the demonstrated path in its primary concrete type.

Design patterns

Pattern Source evidence Purpose or tradeoff
No named application pattern Performing-Common-Cryptographic-Operations.playground/Pages/Authenticating Data with HMAC.xcplaygroundpage/Contents.swift:1 The verified source directly composes concrete framework types; this document avoids forcing a pattern name.

Naming conventions

  • Types: feature-specific names rather than reusable layer suffixes.
  • Protocols: no local protocol declaration in the scanned source.
  • Methods: no representative method name extracted from the architectural files.
  • Files: feature/project roles rather than a strict one-type-per-file rule.

Architecture takeaways

  • Contents is the main source-visible entry or composition anchor for this sample.
  • Framework work reaches CryptoKit through a deliberately small high-level chain; the detailed API graph remains inside the cited implementation files.
  • Stored-property evidence identifies lifecycle collaboration; it does not by itself prove exclusive object ownership.
  • Access-control conclusions separate verified language visibility from the likely design rationale.
  • The source does not justify labeling the design protocol-oriented.

Source map

Source file Relevant symbols
Performing-Common-Cryptographic-Operations.playground/Pages/Authenticating Data with HMAC.xcplaygroundpage/Contents.swift Contents, Cited implementation, CryptoKit, Foundation, Feature implementation
Performing-Common-Cryptographic-Operations.playground/Pages/Creating and Verifying Signatures.xcplaygroundpage/Contents.swift Contents, Feature implementation
Performing-Common-Cryptographic-Operations.playground/Pages/Encrypting Data.xcplaygroundpage/Contents.swift Contents, Feature implementation
Performing-Common-Cryptographic-Operations.playground/Pages/Encrypting and Signing with Public-Key Cryptography.xcplaygroundpage/Contents.swift Feature implementation
Performing-Common-Cryptographic-Operations.playground/Pages/Hashing Data.xcplaygroundpage/Contents.swift Feature implementation
Performing-Common-Cryptographic-Operations.playground/Pages/LICENSE.xcplaygroundpage/Contents.swift Feature implementation
Performing-Common-Cryptographic-Operations.playground/Pages/Performing Key Agreement.xcplaygroundpage/Contents.swift Feature implementation
Performing-Common-Cryptographic-Operations.playground/Pages/Table of Contents.xcplaygroundpage/Contents.swift Feature implementation