NetProof: Offline-first network auditing built with Swift Concurrency and CryptoKit

Community Showcase
, , , ,
1

Hi everyone,

I recently open sourced NetProof, a network auditing engine for iOS/macOS. The primary challenge was bridging the gap in opaque network diagnostics by generating cryptographically verifiable evidence of network quality entirely on device.

I wanted to share how it's built under the hood and get your thoughts on the architecture.

Core Swift Implementation:

  • Swift 5.10+ Concurrency: We heavily rely on async/await, @MainActor, and Task groups to keep the diagnostic probes non-blocking and the reactive UI fluid.

  • CryptoKit & Secure Enclave: Every diagnostic run produces a SHA-256 hash representing the network state. This is cryptographically signed using RSA-2048 keys managed directly within the Apple Secure Enclave/Keychain.

  • Foundation (URLSession): Used for building resilient, low overhead native diagnostic probes independent of external APIs.

We are actively working on refactoring massive engines into smaller, focused services and setting up XCTest integration. I would love any feedback from experienced Swift developers on our approach, or if anyone wants to tear apart the architecture:

If anyone is interested in offline first architectures or hardware backed security in Swift, I’d be happy to discuss our implementation details!

2 Likes