Thank you, Quinn. Your clarification is helpful.
I understand now that a numeric value for kSecAttrKeyType is not necessarily unexpected, and that I should distinguish the attribute dictionary key's type from its corresponding value's type.
To clarify the original question: during a read-only inspection of an existing Secure Enclave-related Keychain item, the returned attributes included:
kSecAttrKeyType: CFNumber
kSecAttrKeyClass: CFNumber
kSecAttrSynchronizable: CFNumber
My concern is not simply that numeric attributes exist. I am trying to determine whether these specific returned types are expected, particularly kSecAttrSynchronizable, whose documented value type is CFBoolean.
Could you clarify whether these representations may legitimately differ depending on the Security API or Keychain implementation used, and whether they are sufficient to validate the item's key metadata?
I can provide the exact read-only API call and Core Foundation type IDs for additional context.
Thank you for your guidance.
Topic:
Privacy & Security
SubTopic:
General
Tags: