WIP: UBSecureStorage #27
Conversation
UBSecureStorage is a drop in replacement for the iOS Keychain. Instead of saving each value individually on the keychain only the key is stored there. The actual encrypted data is stored in the documents directory
| var error: Unmanaged<CFError>? | ||
| guard | ||
| let access = | ||
| SecAccessControlCreateWithFlags( |
There was a problem hiding this comment.
option für secure enclave mit FaceID?
| import Foundation | ||
|
|
||
| @available(iOS 11.0, *) | ||
| public class UBEnclave: UBEnclaveProtocol { |
|
|
||
| self.logger = UBLogging.frameworkLoggerFactory(category: "UBSecureStorage[\(fileName)]") | ||
|
|
||
| let documentsPath = FileManager.default.urls(for: .documentDirectory, in: .userDomainMask) |
There was a problem hiding this comment.
backup flag, file protection
| private func loadDict() -> Result<[String: Data], UBSecureStorageError> { | ||
| dispatchPrecondition(condition: .onQueue(queue)) | ||
|
|
||
| guard FileManager.default.fileExists(atPath: filePath.path) else { |
There was a problem hiding this comment.
file protection check
| } | ||
|
|
||
| let key: SecKey | ||
| switch loadOrGenerateKey() { |
There was a problem hiding this comment.
hier sollte der key nie generiert werden, das file wurde ja schon geschrieben
| return .failure(.enclaveError(error)) | ||
| } | ||
|
|
||
| switch enclave.verify(data: wrapper.encrypedData, signature: wrapper.signature, with: key) { |
There was a problem hiding this comment.
verify ist nicht notwenig (nicht security relevant)
| } | ||
|
|
||
| let key: SecKey | ||
| switch loadOrGenerateKey() { |
There was a problem hiding this comment.
nur generieren wenn file nicht existiert!
| case let .success(value): | ||
| return value | ||
| case .failure: | ||
| return defaultValue |
There was a problem hiding this comment.
fallback auf default value ist bei vielen fehler nicht cool
There was a problem hiding this comment.
nur bei notFound ok
|
|
Kudos, SonarCloud Quality Gate passed!
|
UBSecureStorage is a drop in replacement for the iOS Keychain. Instead of saving each value individually on the keychain only the key is stored there. The actual encrypted data is stored in the documents directory