This is all quite feasible. You don’t need to use CTK here, although there are some situations where you might want to do that [1]. However, for basic functionality all you need to do is: On iOS only, add the com.apple.token keychain access group to your keychain-access-groups entitlement [2]. When querying the keychain with SecItemCopyMatching, pass in the kSecAttrAccessGroup attribute with the value set to kSecAttrAccessGroupToken. Pasted in below are a few code snippets from a test project I have lying around. I tested it with a YubiKey 5 NFC. IMPORTANT This snippet uses deliberately bad crypto, .rsaSignatureMessagePSSSHA1. This snippet uses the secCall helpers from here. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com [1] For example, using TKTokenWatcher to watch tokens come and go. [2] The docs are not at all clear about this, something I recently filed a bug about. Coulda sworn I filed a bug about that but I can’t find the bu
Topic:
Privacy & Security
SubTopic:
General
Tags: