Jump To:
Reference Library: Security
Mac OS X provides a number of authorization, authentication, and cryptographic services that developers can use to build security into their applications. These interfaces include several C APIs that can be called from Carbon applications to provide security and secure SSL/TLS networking services.

View all Carbon Reference Library.
Document Descriptions
On Off
Display

Sort by
Title
Sorted by
Resource Type
Sort by
Date
CFNetwork Programming Guide (HTML) (PDF)
Explains how to use Core Foundation networking functions to work with low-level BSD sockets.
Guides 2008-03-11
Keychain Services Programming Guide (HTML) (PDF)
This document explains how to use Keychain Services to store and retrieve passwords.
Guides 2007-01-08
Secure Coding Guide (HTML) (PDF)
Describes techniques to use and factors to consider to make your code more secure from attack.
Guides 2006-05-23
Certificate, Key, and Trust Services Programming Guide (HTML) (PDF)
Shows how to evaluate trust for a certificate and recover from a trust failure.
Guides 2004-06-28
Certificate, Key, and Trust Services Programming Guide (HTML) (PDF)
Shows how to evaluate trust for a certificate and recover from a trust failure.
Guides 2004-06-28
Performing Privileged Operations With Authorization Services (HTML) (PDF)
Explains how to add fine-grained control of privileged operations in an application.
Guides 2004-02-01
Security Interface Reference Update (HTML) (PDF)
Summarizes the symbols added to the Security Interface framework.
Reference 2007-07-18
Security Reference Update (HTML) (PDF)
Summarizes the symbols added to the Security framework.
Reference 2007-07-18
Authorization Plug-in Reference (HTML) (PDF)
Describes the C API for implementing an authorization plug-in.
Reference 2007-05-15
Security Framework Reference (HTML) (PDF)
Describes the C API for protecting information and controlling access to software.
Reference 2006-05-23
Authorization Services C Reference (HTML) (PDF)
Describes the C API for adding fine-grained control of privileged operations in an application.
Reference 2005-11-08
Keychain Manager Reference (HTML) (PDF)
Describes the legacy C API for managing passwords for multiple users and databases. Replaced by Keychain Services.
Reference 2005-07-07
Keychain Services Reference (HTML) (PDF)
Describes the C API for storing passwords, certificates, keys, and other security related items.
Reference 2005-04-29
Certificate, Key, and Trust Services Reference (HTML) (PDF)
Describes the C API for managing certificates, public and private keys, and trust policies.
Reference 2005-03-03
Secure Transport Reference (HTML) (PDF)
Describes the C API for creating a Secure Sockets Layer session over any transport layer.
Reference 2004-08-31
OS Services Framework Release Notes (HTML)
Release Notes 2007-10-31
BetterAuthorizationSample (HTML) (DMG) (ZIP)
Shows the recommended way to access privileged functionality from a non-privileged application on Mac OS X.
Sample Code 2007-11-27
GetPrimaryMACAddress (HTML) (DMG) (ZIP)
Demonstrates retrieving the MAC address of the built-in Ethernet controller. Useful for uniquely identifying a Macintosh system.
Sample Code 2005-10-27
MoreIsBetter (HTML) (DMG) (ZIP)
Library providing indispensable wrapers and workarounds for many areas of Mac OS programming.
Sample Code 2003-10-27
CryptoSample (HTML) (DMG) (ZIP)
Contains sample code showing symmetric encryption and message digest calculation.
Sample Code 2003-02-06
GetMACAddressSample (HTML) (DMG) (ZIP)
Demonstrates how to retrieve the MAC address for each Ethernet interface from the Mac OS X I/O Registry.
Sample Code 2003-01-14
SSLSample (HTML) (DMG) (ZIP)
Contains examples showing how to use SecureTransport.
Sample Code 2003-01-14
Authorization for Everyone (HTML)
TN2095: Describes applications of Authorization Services beyond simple privilege requesting.
Technical Notes 2008-01-30
Describing the kSecTrustResultUnspecified error. (HTML)
QA1360: Explaining the semantics behind the kSecTrustResultUnspecified error returned by the Security APIs.
Technical Q&As 2007-02-05
Security Framework Error Codes (HTML)
QA1499: Explains how to interpret errors returned by the Security Framework with an overview of Security error handling.
Technical Q&As 2006-11-16