One FaceID for multiple operations in a short while

Question

akolio OP

Created May ’24

Replies 1

Boosts 0

Participants 2

Hi,

Is this possible? I would like to:

Store a biometrically secured key in the Secure Enclave.
Do multiple cryptographic operations using that key in a short period of time (say 5 seconds), not all at once.
Only do one FaceID for that set.

For the time I've only gotten either multiple flashing FaceId requests or the operations failing.

Is it possible to set a time limit in which the first FaceID authentication is accepted?

Should I do something else?

Thanks!

Boost

Answer 1

DTS Engineer OP

Apple

May ’24

Is this possible?

Yes.

The trick is to attach the same LACContext to your biometric authentication and your keychain items. For the latter, use kSecUseAuthenticationContext. Its docs describe two different ways to approach this.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

1