1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
|
// Copyright 2024 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CRYPTO_APPLE_KEYCHAIN_V2_H_
#define CRYPTO_APPLE_KEYCHAIN_V2_H_
#import <CryptoTokenKit/CryptoTokenKit.h>
#import <Foundation/Foundation.h>
#import <Security/Security.h>
#include "crypto/crypto_export.h"
#include "base/apple/scoped_cftyperef.h"
#include "base/no_destructor.h"
#if !BUILDFLAG(IS_IOS_TVOS)
#import <LocalAuthentication/LocalAuthentication.h>
#endif
namespace crypto {
// AppleKeychainV2 wraps iOS-style operations from the macOS Security framework
// to work with keys and keychain items. These functions are grouped here so
// they can be mocked out in testing.
class CRYPTO_EXPORT AppleKeychainV2 {
public:
static AppleKeychainV2& GetInstance();
AppleKeychainV2(const AppleKeychainV2&) = delete;
AppleKeychainV2& operator=(const AppleKeychainV2&) = delete;
// Wraps the |TKTokenWatcher.tokenIDs| property.
virtual NSArray* GetTokenIDs();
// KeyCreateRandomKey wraps the |SecKeyCreateRandomKey| function.
virtual base::apple::ScopedCFTypeRef<SecKeyRef> KeyCreateRandomKey(
CFDictionaryRef params,
CFErrorRef* error);
// KeyCreateSignature wraps the |SecKeyCreateSignature| function.
virtual base::apple::ScopedCFTypeRef<CFDataRef> KeyCreateSignature(
SecKeyRef key,
SecKeyAlgorithm algorithm,
CFDataRef data,
CFErrorRef* error);
// KeyCopyPublicKey wraps the |SecKeyCopyPublicKey| function.
virtual base::apple::ScopedCFTypeRef<SecKeyRef> KeyCopyPublicKey(
SecKeyRef key);
// KeyCopyExternalRepresentation wraps the |SecKeyCopyExternalRepresentation|
// function.
virtual base::apple::ScopedCFTypeRef<CFDataRef> KeyCopyExternalRepresentation(
SecKeyRef key,
CFErrorRef* error);
// KeyCopyAttributes wraps the |SecKeyCopyAttributes| function.
virtual base::apple::ScopedCFTypeRef<CFDictionaryRef> KeyCopyAttributes(
SecKeyRef key);
// ItemAdd wraps the |SecItemAdd| function.
virtual OSStatus ItemAdd(CFDictionaryRef attributes, CFTypeRef* result);
// ItemCopyMatching wraps the |SecItemCopyMatching| function.
virtual OSStatus ItemCopyMatching(CFDictionaryRef query, CFTypeRef* result);
// ItemDelete wraps the |SecItemDelete| function.
virtual OSStatus ItemDelete(CFDictionaryRef query);
// ItemDelete wraps the |SecItemUpdate| function.
virtual OSStatus ItemUpdate(CFDictionaryRef query,
CFDictionaryRef keychain_data);
#if !BUILDFLAG(IS_IOS)
// TaskCopyValueForEntitlement wraps the |SecTaskCopyValueForEntitlement|
// function. Not available on iOS.
virtual base::apple::ScopedCFTypeRef<CFTypeRef> TaskCopyValueForEntitlement(
SecTaskRef task,
CFStringRef entitlement,
CFErrorRef* error);
#endif // !BUILDFLAG(IS_IOS)
#if !BUILDFLAG(IS_IOS_TVOS)
// LAContextCanEvaluatePolicy wraps LAContext's canEvaluatePolicy method.
virtual BOOL LAContextCanEvaluatePolicy(LAPolicy policy, NSError** error);
#endif // !BUILDFLAG(IS_IOS_TVOS)
protected:
AppleKeychainV2();
virtual ~AppleKeychainV2();
protected:
friend class base::NoDestructor<AppleKeychainV2>;
friend class ScopedTouchIdTestEnvironment;
friend class ScopedFakeAppleKeychainV2;
// Set an override to the singleton instance returned by |GetInstance|. The
// caller keeps ownership of the injected keychain and must remove the
// override by calling |ClearInstanceOverride| before deleting it.
static void SetInstanceOverride(AppleKeychainV2* keychain);
static void ClearInstanceOverride();
};
} // namespace crypto
#endif // CRYPTO_APPLE_KEYCHAIN_V2_H_
|
