Commit1074e56

committed

Specify kSecUseDataProtectionKeychain when generating RSA/ECC keys

1 parent4e4b8bf commit1074e56Copy full SHA for 1074e56

File tree

-0

lines changed

src/libraries/Native/Unix/System.Security.Cryptography.Native.Apple
- pal_ecc.c
- pal_rsa.c

-0

lines changed

Lines changed: 4 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -24,6 +24,10 @@ int32_t AppleCryptoNative_EccGenerateKey(int32_t keySizeBits,`
`24`	`24`	`{`
`25`	`25`	`CFDictionaryAddValue(attributes,kSecAttrKeyType,kSecAttrKeyTypeEC);`
`26`	`26`	`CFDictionaryAddValue(attributes,kSecAttrKeySizeInBits,cfKeySizeValue);`
	`27`	`+if (__builtin_available(macOS10.15,iOS13,tvOS13,*))`
	`28`	`+ {`
	`29`	`+CFDictionaryAddValue(attributes,kSecUseDataProtectionKeychain,kCFBooleanTrue);`
	`30`	`+ }`
`27`	`31`
`28`	`32`	`*pPrivateKey=SecKeyCreateRandomKey(attributes,pErrorOut);`
`29`	`33`	`if (*pPrivateKey!=NULL)`

Lines changed: 4 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -26,6 +26,10 @@ int32_t AppleCryptoNative_RsaGenerateKey(int32_t keySizeBits,`
`26`	`26`	`{`
`27`	`27`	`CFDictionaryAddValue(attributes,kSecAttrKeyType,kSecAttrKeyTypeRSA);`
`28`	`28`	`CFDictionaryAddValue(attributes,kSecAttrKeySizeInBits,cfKeySizeValue);`
	`29`	`+if (__builtin_available(macOS10.15,iOS13,tvOS13,*))`
	`30`	`+ {`
	`31`	`+CFDictionaryAddValue(attributes,kSecUseDataProtectionKeychain,kCFBooleanTrue);`
	`32`	`+ }`
`29`	`33`
`30`	`34`	`*pPrivateKey=SecKeyCreateRandomKey(attributes,pErrorOut);`
`31`	`35`	`if (*pPrivateKey!=NULL)`

Comments

(0)