Post

Replies

Boosts

Views

Activity

Reply to Unexpected Core Foundation attribute types when inspecting an existing Secure Enclave-associated Keychain key on macOS
Thank you, Quinn. Your clarification is helpful. I understand now that a numeric value for kSecAttrKeyType is not necessarily unexpected, and that I should distinguish the attribute dictionary key's type from its corresponding value's type. To clarify the original question: during a read-only inspection of an existing Secure Enclave-related Keychain item, the returned attributes included: kSecAttrKeyType: CFNumber kSecAttrKeyClass: CFNumber kSecAttrSynchronizable: CFNumber My concern is not simply that numeric attributes exist. I am trying to determine whether these specific returned types are expected, particularly kSecAttrSynchronizable, whose documented value type is CFBoolean. Could you clarify whether these representations may legitimately differ depending on the Security API or Keychain implementation used, and whether they are sufficient to validate the item's key metadata? I can provide the exact read-only API call and Core Foundation type IDs for additional context. Thank you for your guidance.
Topic: Privacy & Security SubTopic: General Tags:
12h
Reply to Unexpected Core Foundation attribute types when inspecting an existing Secure Enclave-associated Keychain key on macOS
Thank you, Quinn. Your clarification is helpful. I understand now that a numeric value for kSecAttrKeyType is not necessarily unexpected, and that I should distinguish the attribute dictionary key's type from its corresponding value's type. To clarify the original question: during a read-only inspection of an existing Secure Enclave-related Keychain item, the returned attributes included: kSecAttrKeyType: CFNumber kSecAttrKeyClass: CFNumber kSecAttrSynchronizable: CFNumber My concern is not simply that numeric attributes exist. I am trying to determine whether these specific returned types are expected, particularly kSecAttrSynchronizable, whose documented value type is CFBoolean. Could you clarify whether these representations may legitimately differ depending on the Security API or Keychain implementation used, and whether they are sufficient to validate the item's key metadata? I can provide the exact read-only API call and Core Foundation type IDs for additional context. Thank you for your guidance.
Topic: Privacy & Security SubTopic: General Tags:
Replies
Boosts
Views
Activity
12h