[quote='844785022, neha24, /thread/788736?answerId=844785022#844785022, /profile/neha24'] Does SecItemDelete should also fail … in case of Device in locked state … right? [/quote] No. The keychain database as a whole is available at all times. Keychain item protection is implemented by encrypting specific attributes of the keychain item. When you read the item, the system goes to decrypt those attributes. If the required key material isn’t available, then the read operation fails. However, the system doesn’t need that key material in order to delete the item, and thus it’s possible to delete an item that you can’t currently access. This makes more sense if you have a little understanding of how the keychain actually works internally. Have a read of SecItem: Fundamentals, and specifically its The Four Freedoms^H^H^H^H^H^H^H^H Functions section. In that model, the content column of a row is encrypted (based on the kSecAttrAccessible column) but that doesn’t stop you from deleting the entire ro
Topic:
Privacy & Security
SubTopic:
General
Tags: