Are account names (kSecAttrAccount) encrypted in iOS keychain? -
apple's generickeychain example saves username , password in ios keychain. using ksecattraccount
username, , ksecvaluedata
password.
are data items placed in keychain encrypted, including ksecattraccount
/username in example?
i'm asking because don't want account names exposed.
if use ksecattr
username encrypted.
the attributes associated keychain item depend on class of item; item classes used applications ... internet passwords , generic passwords. might expect, internet passwords include attributes such things security domain, protocol type, , path. passwords or other secrets stored keychain items encrypted.
(see "structure of keychain")
as use ksecattraccount
, can used classes ksecclassinternetpassword
, ksecclassgenericpassword
(see keychain services reference @ ksecattraccount), account name encrypted.
Comments
Post a Comment