将任何对象保存到Keychain

Question

I want to save an object which might include sensitive data into the keychain. To achieve this i will convert this object into a NSData instance.

I'm a bit confused which attributes i need to use. Is it ok to use kSecClassGenericPassword as kSecClass even though it is not really a password? Furthermore i've set the kSecAttrAccount . I've read somewhere that i also need to add kSecAttrService . What implications can happen if i don't ?

Answer 1

Checkout SSKeychain on GitHub. It's a nice Open Source wrapper for the keychain that makes it super easy to use. If you want to understand more about how the keychain and the security on iOS/OS X work and you're registered to the Apple Developer Program, there are few WWDC session videos that you might check on developer.apple.com .

Answer 2

在保存到钥匙串之前， Strongbox使用NSKeyedUnarchiver将任何类型符合NSCoding转换为NSData对象。

Answer 3

See this library: https://github.com/nicklockwood/FXKeychain

- (BOOL)setObject:(id)object forKey:(id)key;
- (BOOL)setObject:(id)object forKeyedSubscript:(id)key;

Basic example:

#import "ViewController.h"
#import "FXKeychain.h"


@interface ViewController () <UITextFieldDelegate, UITextViewDelegate>

@property (nonatomic, strong) IBOutlet UITextField *keyField;
@property (nonatomic, strong) IBOutlet UITextView *dataField;

@end


@implementation ViewController

- (IBAction)save
{
    //save data
    [FXKeychain defaultKeychain][_keyField.text] = _dataField.text;
}

- (IBAction)load
{
    //load data
    _dataField.text = [FXKeychain defaultKeychain][_keyField.text];
}

- (IBAction)delete
{
    //clear field
    _dataField.text = @"";

    //delete data
    [[FXKeychain defaultKeychain] removeObjectForKey:_keyField.text];
}

- (IBAction)tap
{
    [_keyField resignFirstResponder];
    [_dataField resignFirstResponder];
}

- (BOOL)textFieldShouldReturn:(UITextField *)textField
{
    [textField resignFirstResponder];
    return YES;
}

@end