The creation of tools to circumvent security measures that protect “data”, is punishable by up to 2 years in prison under vague conditions here.

So anything that would build skills towards being able to crack an iPhone is at least legally ambiguous.