如何获取在 iOS Keychain 中创建和存储的密钥的唯一标识符

Question

When I create a new key in Keychain using SecKeyCreateRandomKey I would like to get UUID of this key (or any other unique id ) and use this id to search for this key in Keychain in the future. How can I do it?

So far I managed only to provide kSecAttrApplicationTag as an attribute for future queries, but this solution is problematic as there can be any amount of keys created with this tag.

When looking at how keys are stored in Keychain database I see there is a UUID field there, though I cannot find a way to access it at the application level.

Answer 1

I have used the keychain third library for this,If you feel comfortable check this out, I think it's easy and the best for your scenario. https://github.com/evgenyneu/keychain-swift

Answer 2

You could use kSecAttrApplicationTag to store a custom scheme with unique UID that you can generate independently.

Example:

kSecAttrApplicationTag -> {COMMON_ATTRIBUTE_PART}-{YOUR_GENERATED_UID}

Therefore you can store your generated UID and knowing the COMMON_ATTRIBUTE_PART you can later search for the key. That way you don't have to rely on UUID generated by keychain.