🖥️Computerworld•Stalecollected in 49m
Apple releases post-quantum encryption code for public review
💡Learn how Apple is preparing for the post-quantum era with formally verified, open-source cryptographic libraries.
⚡ 30-Second TL;DR
What Changed
Apple open-sourced corecrypto library code on GitHub including ML-KEM and ML-DSA algorithms.
Why It Matters
This release sets a new benchmark for high-assurance security engineering, forcing other tech giants to adopt similar formal verification standards for their cryptographic stacks.
What To Do Next
Review the corecrypto GitHub repository to integrate these quantum-secure algorithms into your own security-sensitive applications using CryptoKit.
Who should care:Developers & AI Engineers
Key Points
- •Apple open-sourced corecrypto library code on GitHub including ML-KEM and ML-DSA algorithms.
- •The implementation is formally verified to ensure mathematical proof of quantum-resistant protection.
- •Collaboration with Galois allows third-party security researchers to audit and test the cryptographic library.
- •Post-quantum protections are already integrated into iMessage, VPN, and TLS networking across 2.5 billion devices.
🧠 Deep Insight
Web-grounded analysis with 14 cited sources.
🔑 Enhanced Key Takeaways
- •Apple's public post-quantum cryptography (PQC) efforts commenced in 2024 with the introduction of the iMessage PQ3 protocol, which provides quantum-secure protection both at the initiation of a conversation and during subsequent key refreshes.
- •To ensure high assurance across its diverse product lineup and custom Apple silicon designs, Apple developed its own formal verification tools and a unique approach, including a Cryptol-to-Isabelle translator built in collaboration with Galois.
- •Beyond the core ML-KEM and ML-DSA algorithms, the open-sourced corecrypto library on GitHub also includes comprehensive tests, performance tools, build targets, and a dedicated formal verification folder containing the mathematical proof work.
- •Apple has integrated quantum-secure APIs into its CryptoKit framework across iOS 26, iPadOS 26, macOS 26, tvOS 26, and watchOS 26, offering developers ML-KEM 768/1024 for key encapsulation and ML-DSA-65/87 for digital signatures, enabling them to implement PQC in their own applications.
- •While Apple has extensively rolled out client-side PQC, full quantum-secure encryption is only activated when a device connects to a server that also supports the relevant post-quantum protocols, indicating a significant dependency on broader server-side adoption across the internet.
🛠️ Technical Deep Dive
- ML-KEM (Module Lattice-based Key Encapsulation Mechanism): This algorithm, based on CRYSTALS-Kyber, is standardized under FIPS 203 and is used for establishing a shared secret key. Apple's implementation offers ML-KEM 768 and ML-KEM 1024 parameters.
- ML-DSA (Module Lattice-based Digital Signature Algorithm): Derived from CRYSTALS-Dilithium, this algorithm is standardized under FIPS 204 and is utilized for digital signatures. Apple's implementation provides ML-DSA-65 and ML-DSA-87 parameters.
- Hybrid Cryptography: Apple employs a hybrid approach, combining classical cryptographic algorithms with the new post-quantum algorithms. This strategy ensures that data remains secure even if a newly adopted PQC algorithm is later found to be vulnerable to non-quantum attacks.
- Implementation Details: Apple's corecrypto library includes both portable C code and hand-optimized ARM64 assembly code, specifically designed to leverage the performance capabilities of Apple's custom processors.
- Formal Verification Process: The verification process involves translating the NIST specifications (FIPS 203 and FIPS 204) and Apple's own implementations into formal mathematics. This allows for the demonstration of functional correctness through a series of incremental proofs applied to both optimized C and ARM64 assembly implementations.
- Verification Tools: Key tools used in this rigorous formal verification include Isabelle, a powerful formal language and proof assistant, and a custom Cryptol-to-Isabelle translator developed in collaboration with Galois.
- Corecrypto Library: This library serves as the foundational cryptographic component within Apple's operating systems, supporting the Security framework, CryptoKit, and CommonCrypto for various cryptographic operations like encryption, hashing, random number generation, and digital signatures.
🔮 Future ImplicationsAI analysis grounded in cited sources
Widespread adoption of post-quantum cryptography will accelerate across the tech industry.
Apple's open-sourcing of its formally verified PQC implementation, coupled with NIST standardization, provides a robust, auditable blueprint that other organizations can leverage, reducing implementation barriers and increasing trust.
The 'Harvest Now, Decrypt Later' threat will become a more pressing concern for organizations that delay PQC migration.
The article and search results emphasize that nation-state actors are already collecting encrypted data to decrypt with future quantum computers, making timely PQC adoption critical for long-term data confidentiality.
Interoperability challenges will emerge as different entities adopt PQC at varying paces and with potentially diverse implementations.
While Apple has rolled out client-side PQC, full quantum-secure encryption only activates when servers also support the protocols, indicating a need for broader ecosystem-wide upgrades and coordination.
⏳ Timeline
2016
NIST launched a public competition to solicit, evaluate, and standardize new post-quantum cryptographic schemes.
2022
NIST announced the selection of the first algorithms to be standardized for post-quantum cryptography.
2023
Signal Protocol began using Post-Quantum Extended Diffie–Hellman (PQXDH).
2024
Apple introduced the iMessage PQ3 protocol in iOS 17.4, marking its first major public step in post-quantum security. NIST published the final standards for ML-KEM, ML-DSA, and SLH-DSA. Apple also added post-quantum encryption to its corecrypto library.
2025
NIST was expected to finalize the FALCON standard (FN-DSA).
2026-05-22
Apple published its corecrypto library source code on GitHub, including ML-KEM and ML-DSA algorithms, along with detailed formal verification information. Concurrently, Apple added PQC support to CryptoKit and enabled quantum-secure TLS, VPN, SSH, and Apple Watch connections by default in OS 26 versions.
📎 Sources (14)
Factual claims are grounded in the sources below. Forward-looking analysis is AI-generated interpretation.
📰
Weekly AI Recap
Read this week's curated digest of top AI events →
👉Related Updates
AI-curated news aggregator. All content rights belong to original publishers.
Original source: Computerworld ↗