Questions tagged [keychain]

A keychain is an encrypted container that holds passwords for multiple applications and secure services. Apple Inc. uses keychains as password management system in Mac OS and iOS.

Keychain is Apple Inc.'s password management system in Mac OS and iOS. It was introduced with Mac OS 8.6, and has been included in all subsequent versions of Mac OS, including Mac OS X. A Keychain can contain various types of data: passwords (for Websites, FTP servers, SSH accounts, network shares, wireless networks, groupware applications, encrypted disk images), private keys, certificates, and secure notes.

In Mac OS X, keychain files are stored in ~/Library/Keychains/, /Library/Keychains/, and /Network/Library/Keychains/, and the Keychain Access GUI application is located in the Utilities folder in the Applications folder. It is free, open source software released under the terms of the APSL. The command line equivalent of Keychain Access is /usr/bin/security. The keychain file(s) stores a variety of data fields including a title, URL, notes and password. Other than Secure Notes created with Keychain Access, only the password is encrypted, with Triple DES. The contents of Secure Notes are also encrypted.

Source: Keychain

1969 questions
15
votes
2 answers

Storing keys in KeyChain with KeyChainItemWrapper

I'm using KeyChainItemWrapper class, provided by Apple's Sample Code to save the authentication token to the keychain. KeychainItemWrapper *keychain = [[KeychainItemWrapper alloc] initWithIdentifier"JetTaxiApp_AuthToken" accessGroup:nil]; But…
Oksana
  • 13,442
  • 10
  • 53
  • 89
15
votes
4 answers

What encryption algorithm does the iOS keychain use to protect data?

After extensive googling I haven't managed to find an answer to this question1, which is surprising, since `security through obscurity' isn't really security at all... Is there a reliable source of an answer to this question (such as a certification…
James
  • 24,676
  • 13
  • 84
  • 130
15
votes
1 answer

GIDSignIn keychain error iOS 10 Xcode 8

In iOS 10 and xcode 8 when I try to sign in to google services I get "keychain error" func sign(_ signIn: GIDSignIn!, didSignInFor user: GIDGoogleUser!, withError error: Error!){ if error != nil { …
RyanTCB
  • 7,400
  • 5
  • 42
  • 62
15
votes
6 answers

How do I add authorizations to code sign an app from new keychain without any human interaction

I'm trying to automate the process of building iphone apps with a particular certificate. So imagine if different users uploaded their cert into the system and it was immediately available to code sign against. I want to do this without any…
cmos
  • 261
  • 1
  • 3
  • 7
15
votes
3 answers

Remove Apple Worldwide Developer Relations Certification Authority from System Keychain

Since the Apple Worldwide Developer Relations Certification Authority expired on February 14th, I need to install the new one. In order to do so, I have to delete the old one from both System and Login tabs in my keychain. Removing it from the login…
Elias Rahme
  • 2,226
  • 3
  • 28
  • 53
15
votes
5 answers

Getting Optional("") when trying to get value from KeyChain

When I try to get my keyChain value, it return a string containing: Optional("[thing in the KeyChain]") so, I tried to remove "Optional" by using a loop: var str = KeychainService.loadToken() for(var i = 0; i < 9 ; i++) { str[i] = "" } But…
Clément Bisaillon
  • 5,037
  • 8
  • 32
  • 53
15
votes
2 answers

Can the user access the keychain on iOS?

We're looking at storing some information (think the equivalent of usernames, passwords, etc) in our app that we don't want the user to be able to meddle with. One (bad) way to do this would be to put them in an encrypted file somewhere in the app's…
Colen
  • 13,428
  • 21
  • 78
  • 107
15
votes
1 answer

Android 4.3 keychain example

I am trying to understand the keychain concept in android 4.3 and I will really appreciate it if I can get a example to understand it.
Avijeet
  • 1,031
  • 1
  • 10
  • 27
15
votes
3 answers

iOS get Configuration Profiles that are installed

The app I am currently working on requires the use of Configuration Profiles in order to connect to a server to download XML. The certificates are distributed in the form of .p12 files, and they can be installed in the settings app in the iPhone…
David Skrundz
  • 13,067
  • 6
  • 42
  • 66
14
votes
3 answers

CLI: Switch keychains in order to sign an xcodebuild

I am trying to switch on a certain keychain, and close another one. I need this because our enterprise & appstore identities are called the same. Right now, I do a "security unlock-keychain" followed by a "security default-keychain" to open the…
Tycho Pandelaar
  • 7,367
  • 8
  • 44
  • 70
14
votes
5 answers

How to solve "entitlement 'keychain-access-groups' has value not permitted by a provisioning profile"

I am using keychain in my app and I get this error when run app as AdHoc. It doesn't appear when I run it with debugger (with developer provisioning profile). If app has already been installed on the device and I install it again on top of it from…
Kostia Kim
  • 469
  • 1
  • 6
  • 19
14
votes
1 answer

RSA Encryption-Decryption in iphone

I am developing Iphone application. I have used SecKeyGeneratePair method of Security/Security.h framework. I am getting public & private keys as SecKeyRef objects. Can I access the key or print its value to console? Can I get NSString or NSData…
Yogini
  • 1,713
  • 4
  • 17
  • 18
14
votes
4 answers

Mac OS X Keychain Access: "A default keychain could not be found" error

I am trying to sign an iPhone app for publishing, so I am following the instructions to do so. Anyhow, when creating my Certificate Signing Request I get this error from Keychain Access: "A default keychain could not be found" I found no help on…
Pizzur22
  • 141
  • 1
  • 1
  • 3
14
votes
2 answers

Get Certificates in Keychain

I've looked over the Security framework documentation but I can't seem to be able to find a way to get all of the certificates on a given keychain. Are there methods to accomplish this?
Dylan Copeland
  • 1,249
  • 1
  • 11
  • 20
14
votes
4 answers

Add codesign to private key ACL without Keychain

I'm trying to set up continuous builds/integration for a stable of iPhone apps. I have: A dedicated Mac Mini. A user account named "build" Hudson set up as a LaunchAgent for build, by dropping a plist in /Users/build/Library/LaunchAgents Tried as…
David Boike
  • 18,545
  • 7
  • 59
  • 94