Monitor iOS CommonCrypto Usage

[gagnonca]

These hooks allow penetration testers and security researchers to monitor iOS CommonCrypto usage in real time.

Command: ios crypto monitor

Usage: ios crypto monitor

Hooks CommonCrypto to output information about cryptographic operation. Works best for AES with PKCS7 Padding.
Currently the following hooks are supported: 
 - SecRandomCopyBytes
 - CCKeyDerivationPBKDF
 - CCCrypt
 - CCCryptorCreate
 - CCCryptorUpdate
 - CCCryptorFinal

Examples:
   ios crypto monitor

Sample output:

[gagnonca]

@leonjza I just noticed some style things I want to fix before you review. Just cleaning up the code a bit. I will push it tomorrow.

[leonjza]

Amazing! Thanks for this. I'll wait for you to be done before I start a review. Overall, looking good! 👍

[gagnonca]

Just pushed the commit. Feel free to take a look whenever you get a chance.

[leonjza]

Such a good PR! I am going to make a few small tweaks such as moving the command into a monitor category instead, but you have done the hard work. Thanks so much. 🙌

[gagnonca]

Thanks. I'm really glad you like it. I am also working on hooks for monitoring system crypto APIs for Android as well as expanding what we hook for iOS (i.e. including asymmetric). Moving to monitor makes a lot of sense.

[leonjza]

Awesome. I think there are plenty of things we can monitor which I am excited about. :D

[snoerenberg]

Thanks for the nice addition!

It was meant to be used with this command: "ios monitor crypto monitor"?
I was not expecting to put "monitor" again at the end :)

Thanks again
Stephan

[leonjza]

Yeah I think it will make more sense to change this to enable to compliment the disable command.

[gagnonca]

I actually was thinking of removing the monitor at the end of the command to make it just ios monitor crypto. Instead of disable we can use the existing jobs kill ... command to disable the hooks.

I already wrote the patch yesterday and can do a PR today if we like it better this way. I also removed some other dead code from the crypto hooks.

[leonjza]

That is an excellent point and makes the most sense. Thanks.