secitemfunctionality.m [plain text]
//
// Copyright 2016 Apple. All rights reserved.
//
/*
* This is to fool os services to not provide the Keychain manager
* interface tht doens't work since we don't have unified headers
* between iOS and OS X. rdar://23405418/
*/
#define __KEYCHAINCORE__ 1
#include <Foundation/Foundation.h>
#include <Security/Security.h>
#include <Security/SecItemPriv.h>
#include <Security/SecBasePriv.h>
#include <Security/SecIdentityPriv.h>
#include <mach/mach_time.h>
#include <err.h>
#include <strings.h>
#if SEC_OS_OSX_INCLUDES
#include <Security/SecKeychain.h>
#endif
static void
fail(const char *fmt, ...) __printflike(1, 2) __attribute__((noreturn));
static void
fail(const char *fmt, ...)
{
va_list ap;
printf("[FAIL]\n");
fflush(stdout);
va_start(ap, fmt);
verrx(1, fmt, ap);
va_end(ap);
}
/*
* Create item w/o data, try to make sure we end up in the OS X keychain
*/
static void
CheckItemAddDeleteMaybeLegacyKeychainNoData(void)
{
OSStatus status;
printf("[BEGIN]
NSDictionary *query = @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrAccount : @"item-delete-me",
(id)kSecAttrAccessible : (id)kSecAttrAccessibleAfterFirstUnlock,
};
status = SecItemDelete((__bridge CFDictionaryRef)query);
if (status != errSecSuccess && status != errSecItemNotFound)
fail("cleanup item:
/*
* now check add notification
*/
status = SecItemAdd((__bridge CFDictionaryRef)query, NULL);
if (status != errSecSuccess)
fail("add item:
/*
* clean up
*/
status = SecItemDelete((__bridge CFDictionaryRef)query);
if (status != errSecSuccess)
fail("cleanup2 item:
printf("[PASS]
}
static void
CheckItemAddDeleteNoData(void)
{
OSStatus status;
printf("[BEGIN]
NSDictionary *query = @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrAccessGroup : @"keychain-test1",
(id)kSecAttrAccount : @"item-delete-me",
(id)kSecAttrAccessible : (id)kSecAttrAccessibleAfterFirstUnlock,
};
status = SecItemDelete((__bridge CFDictionaryRef)query);
if (status != errSecSuccess && status != errSecItemNotFound)
fail("cleanup item:
/*
* Add item
*/
status = SecItemAdd((__bridge CFDictionaryRef)query, NULL);
if (status != errSecSuccess)
fail("add item:
/*
* clean up
*/
status = SecItemDelete((__bridge CFDictionaryRef)query);
if (status != errSecSuccess)
fail("cleanup2 item:
printf("[PASS] }
static void
CheckItemUpdateAccessGroupGENP(void)
{
OSStatus status;
printf("[BEGIN]
NSDictionary *clean1 = @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrAccessGroup : @"keychain-test1",
};
NSDictionary *clean2 = @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrAccessGroup : @"keychain-test2",
};
(void)SecItemDelete((__bridge CFDictionaryRef)clean1);
(void)SecItemDelete((__bridge CFDictionaryRef)clean2);
/*
* Add item
*/
NSDictionary *add = @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrAccessGroup : @"keychain-test1",
(id)kSecAttrAccount : @"item-delete-me",
(id)kSecAttrNoLegacy : (id)kCFBooleanTrue,
(id)kSecAttrAccessible : (id)kSecAttrAccessibleAfterFirstUnlock,
};
status = SecItemAdd((__bridge CFDictionaryRef)add, NULL);
if (status != errSecSuccess)
fail("add item:
/*
* Update access group
*/
NSDictionary *query = @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrAccessGroup : @"keychain-test1",
(id)kSecAttrAccount : @"item-delete-me",
(id)kSecAttrNoLegacy : (id)kCFBooleanTrue,
};
NSDictionary *modified = @{
(id)kSecAttrAccessGroup : @"keychain-test2",
};
status = SecItemUpdate((__bridge CFDictionaryRef)query, (__bridge CFDictionaryRef)modified);
if (status != errSecSuccess)
fail("cleanup2 item:
/*
*
*/
NSDictionary *check1 = @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrAccessGroup : @"keychain-test1",
(id)kSecAttrAccount : @"item-delete-me",
(id)kSecAttrNoLegacy : (id)kCFBooleanTrue,
};
status = SecItemCopyMatching((__bridge CFDictionaryRef)check1, NULL);
if (status != errSecItemNotFound)
fail("check1 item:
NSDictionary *check2 = @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrAccessGroup : @"keychain-test2",
(id)kSecAttrAccount : @"item-delete-me",
(id)kSecAttrNoLegacy : (id)kCFBooleanTrue,
};
status = SecItemCopyMatching((__bridge CFDictionaryRef)check2, NULL);
if (status != errSecSuccess)
fail("check2 item:
/*
* Clean
*/
(void)SecItemDelete((__bridge CFDictionaryRef)clean1);
(void)SecItemDelete((__bridge CFDictionaryRef)clean2);
printf("[PASS] }
static NSString *certDataBase64 = @"\
MIIEQjCCAyqgAwIBAgIJAJdFadWqNIfiMA0GCSqGSIb3DQEBBQUAMHMxCzAJBgNVBAYTAkNaMQ8wDQYD\
VQQHEwZQcmFndWUxFTATBgNVBAoTDENvc21vcywgSW5jLjEXMBUGA1UEAxMOc3VuLmNvc21vcy5nb2Qx\
IzAhBgkqhkiG9w0BCQEWFHRoaW5nQHN1bi5jb3Ntb3MuZ29kMB4XDTE2MDIyNjE0NTQ0OVoXDTE4MTEy\
MjE0NTQ0OVowczELMAkGA1UEBhMCQ1oxDzANBgNVBAcTBlByYWd1ZTEVMBMGA1UEChMMQ29zbW9zLCBJ\
bmMuMRcwFQYDVQQDEw5zdW4uY29zbW9zLmdvZDEjMCEGCSqGSIb3DQEJARYUdGhpbmdAc3VuLmNvc21v\
cy5nb2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5u9gnYEDzQIVu7yC40VcXTZ01D9CJ\
oD/mH62tebEHEdfVPLWKeq+uAHnJ6fTIJQvksaISOxwiOosFjtI30mbe6LZ/oK22wYX+OUwKhAYjZQPy\
RYfuaJe/52F0zmfUSJ+KTbUZrXbVVFma4xPfpg4bptvtGkFJWnufvEEHimOGmO5O69lXA0Hit1yLU0/A\
MQrIMmZT8gb8LMZGPZearT90KhCbTHAxjcBfswZYeL8q3xuEVHXC7EMs6mq8IgZL7mzSBmrCfmBAIO0V\
jW2kvmy0NFxkjIeHUShtYb11oYYyfHuz+1vr1y6FIoLmDejKVnwfcuNb545m26o+z/m9Lv9bAgMBAAGj\
gdgwgdUwHQYDVR0OBBYEFGDdpPELS92xT+Hkh/7lcc+4G56VMIGlBgNVHSMEgZ0wgZqAFGDdpPELS92x\
T+Hkh/7lcc+4G56VoXekdTBzMQswCQYDVQQGEwJDWjEPMA0GA1UEBxMGUHJhZ3VlMRUwEwYDVQQKEwxD\
b3Ntb3MsIEluYy4xFzAVBgNVBAMTDnN1bi5jb3Ntb3MuZ29kMSMwIQYJKoZIhvcNAQkBFhR0aGluZ0Bz\
dW4uY29zbW9zLmdvZIIJAJdFadWqNIfiMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEBAFYi\
Zu/dfAMOrD51bYxP88Wu6iDGBe9nMG/0lkKgnX5JQKCxfxFMk875rfa+pljdUMOaPxegOXq1DrYmQB9O\
/pHI+t7ozuWHRj2zKkVgMWAygNWDPcoqBEus53BdAgA644aPN2JvnE4NEPCllOMKftPoIWbd/5ZjCx3a\
bCuxBdXq5YSmiEnOdGfKeXjeeEiIDgARb4tLgH5rkOpB1uH/ZCWn1hkiajBhrGhhPhpA0zbkZg2Ug+8g\
XPlx1yQB1VOJkj2Z8dUEXCaRRijInCJ2eU+pgJvwLV7mxmSED7DEJ+b+opxJKYrsdKBU6RmYpPrDa+KC\
/Yfu88P9hKKj0LmBiREA\
";
static NSString *keyDataBase64 = @"\
MIIEogIBAAKCAQEAubvYJ2BA80CFbu8guNFXF02dNQ/QiaA/5h+trXmxBxHX1Ty1inqvrgB5yen0yCUL\
5LGiEjscIjqLBY7SN9Jm3ui2f6CttsGF/jlMCoQGI2UD8kWH7miXv+dhdM5n1Eifik21Ga121VRZmuMT\
36YOG6bb7RpBSVp7n7xBB4pjhpjuTuvZVwNB4rdci1NPwDEKyDJmU/IG/CzGRj2Xmq0/dCoQm0xwMY3A\
X7MGWHi/Kt8bhFR1wuxDLOpqvCIGS+5s0gZqwn5gQCDtFY1tpL5stDRcZIyHh1EobWG9daGGMnx7s/tb\
69cuhSKC5g3oylZ8H3LjW+eOZtuqPs/5vS7/WwIDAQABAoIBAGcwmQAPdyZus3OVwa1NCUD2KyB+39KG\
yNmWwgx+br9Jx4s+RnJghVh8BS4MIKZOBtSRaEUOuCvAMNrupZbD+8leq34vDDRcQpCizr+M6Egj6FRj\
Ewl+7Mh+yeN2hbMoghL552MTv9D4Iyxteu4nuPDd/JQ3oQwbDFIL6mlBFtiBDUr9ndemmcJ0WKuzor6a\
3rgsygLs8SPyMefwIKjh5rJZls+iv3AyVEoBdCbHBz0HKgLVE9ZNmY/gWqda2dzAcJxxMdafeNVwHovv\
BtyyRGnA7Yikx2XT4WLgKfuUsYLnDWs4GdAa738uxPBfiddQNeRjN7jRT1GZIWCk0P29rMECgYEA8jWi\
g1Dph+4VlESPOffTEt1aCYQQWtHs13Qex95HrXX/L49fs6cOE7pvBh7nVzaKwBnPRh5+3bCPsPmRVb7h\
k/GreOriCjTZtyt2XGp8eIfstfirofB7c1lNBjT61BhgjJ8Moii5c2ksNIOOZnKtD53n47mf7hiarYkw\
xFEgU6ECgYEAxE8Js3gIPOBjsSw47XHuvsjP880nZZx/oiQ4IeJb/0rkoDMVJjU69WQu1HTNNAnMg4/u\
RXo31h+gDZOlE9t9vSXHdrn3at67KAVmoTbRknGxZ+8tYpRJpPj1hyufynBGcKwevv3eHJHnE5eDqbHx\
ynZFkXemzT9aMy3R4CCFMXsCgYAYyZpnG/m6WohE0zthMFaeoJ6dSLGvyboWVqDrzXjCbMf/4wllRlxv\
cm34T2NXjpJmlH2c7HQJVg9uiivwfYdyb5If3tHhP4VkdIM5dABnCWoVOWy/NvA7XtE+KF/fItuGqKRP\
WCGaiRHoEeqZ23SQm5VmvdF7OXNi/R5LiQ3o4QKBgAGX8qg2TTrRR33ksgGbbyi1UJrWC3/TqWWTjbEY\
uU51OS3jvEQ3ImdjjM3EtPW7LqHSxUhjGZjvYMk7bZefrIGgkOHx2IRRkotcn9ynKURbD+mcE249beuc\
6cFTJVTrXGcFvqomPWtV895A2JzECQZvt1ja88uuu/i2YoHDQdGJAoGAL2TEgiMXiunb6PzYMMKKa+mx\
mFnagF0Ek3UJ9ByXKoLz3HFEl7cADIkqyenXFsAER/ifMyCoZp/PDBd6ZkpqLTdH0jQ2Yo4SllLykoiZ\
fBWMfjRu4iw9E0MbPB3blmtzfv53BtWKy0LUOlN4juvpqryA7TgaUlZkfMT+T1TC7xU=\
";
static SecIdentityRef
CreateTestIdentity(void)
{
NSData *certData = [[NSData alloc] initWithBase64EncodedString:certDataBase64 options:0];
SecCertificateRef cert = SecCertificateCreateWithData(kCFAllocatorDefault, (CFDataRef)certData);
if (cert == NULL)
fail("create certificate from data");
NSData *keyData = [[NSData alloc] initWithBase64EncodedString:keyDataBase64 options:0];
NSDictionary *keyAttrs = @{
(id)kSecAttrKeyType: (id)kSecAttrKeyTypeRSA,
(id)kSecAttrKeySizeInBits: @2048,
(id)kSecAttrKeyClass: (id)kSecAttrKeyClassPrivate
};
SecKeyRef privateKey = SecKeyCreateWithData((CFDataRef)keyData, (CFDictionaryRef)keyAttrs, NULL);
if (privateKey == NULL)
fail("create private key from data");
// Create identity from certificate and private key.
SecIdentityRef identity = SecIdentityCreate(kCFAllocatorDefault, cert, privateKey);
CFRelease(privateKey);
CFRelease(cert);
return identity;
}
static void
CheckIdentityItem(NSString *accessGroup, OSStatus expectedStatus)
{
OSStatus status;
NSDictionary *check = @{
(id)kSecClass : (id)kSecClassIdentity,
(id)kSecAttrAccessGroup : accessGroup,
(id)kSecAttrLabel : @"item-delete-me",
(id)kSecAttrNoLegacy : (id)kCFBooleanTrue,
};
status = SecItemCopyMatching((__bridge CFDictionaryRef)check, NULL);
if (status != expectedStatus)
fail("check }
static void
CheckItemUpdateAccessGroupIdentity(void)
{
OSStatus status;
CFTypeRef ref = NULL;
printf("[BEGIN]
NSDictionary *clean1 = @{
(id)kSecClass : (id)kSecClassIdentity,
(id)kSecAttrAccessGroup : @"keychain-test1",
};
NSDictionary *clean2 = @{
(id)kSecClass : (id)kSecClassIdentity,
(id)kSecAttrAccessGroup : @"keychain-test2",
};
(void)SecItemDelete((__bridge CFDictionaryRef)clean1);
(void)SecItemDelete((__bridge CFDictionaryRef)clean2);
CheckIdentityItem(@"keychain-test1", errSecItemNotFound);
CheckIdentityItem(@"keychain-test2", errSecItemNotFound);
SecIdentityRef identity = CreateTestIdentity();
if (identity == NULL)
fail("create private key from data");
/*
* Add item
*/
NSDictionary *add = @{
(id)kSecValueRef : (__bridge id)identity,
(id)kSecAttrAccessGroup : @"keychain-test1",
(id)kSecAttrLabel : @"item-delete-me",
(id)kSecAttrAccessible : (id)kSecAttrAccessibleAfterFirstUnlock,
(id)kSecAttrNoLegacy : (id)kCFBooleanTrue,
(id)kSecReturnPersistentRef: (id)kCFBooleanTrue,
};
status = SecItemAdd((__bridge CFDictionaryRef)add, &ref);
if (status != errSecSuccess)
fail("add item:
/*
*
*/
CheckIdentityItem(@"keychain-test1", errSecSuccess);
CheckIdentityItem(@"keychain-test2", errSecItemNotFound);
/*
* Update access group
*/
NSDictionary *query = @{
(id)kSecClass : (id)kSecClassIdentity,
(id)kSecAttrAccessGroup : @"keychain-test1",
(id)kSecAttrLabel : @"item-delete-me",
(id)kSecAttrNoLegacy : (id)kCFBooleanTrue,
};
NSDictionary *modified = @{
(id)kSecAttrAccessGroup : @"keychain-test2",
};
status = SecItemUpdate((__bridge CFDictionaryRef)query, (__bridge CFDictionaryRef)modified);
if (status != errSecSuccess)
fail("cleanup2 item:
/*
*
*/
CheckIdentityItem(@"keychain-test1", errSecItemNotFound);
CheckIdentityItem(@"keychain-test2", errSecSuccess);
/*
* Check pref
*/
CFDataRef data = NULL;
NSDictionary *prefQuery = @{
(id)kSecClass : (id)kSecClassIdentity,
(id)kSecAttrAccessGroup : @"keychain-test2",
(id)kSecAttrLabel : @"item-delete-me",
(id)kSecAttrNoLegacy : (id)kCFBooleanTrue,
(id)kSecReturnPersistentRef : (id)kCFBooleanTrue,
};
status = SecItemCopyMatching((__bridge CFDictionaryRef)prefQuery, (CFTypeRef *)&data);
if (status != errSecSuccess)
fail("prefQuery item:
/*
* Update access group for identity
*/
NSDictionary *query2 = @{
(id)kSecValuePersistentRef : (__bridge id)data,
(id)kSecAttrNoLegacy : (id)kCFBooleanTrue,
};
NSDictionary *modified2 = @{
(id)kSecAttrAccessGroup : @"keychain-test1",
};
status = SecItemUpdate((__bridge CFDictionaryRef)query2, (__bridge CFDictionaryRef)modified2);
if (status != errSecInternal)
fail("update identity with pref fails differntly:
/*
CheckIdentityItem(@"keychain-test1", errSecSuccess);
CheckIdentityItem(@"keychain-test2", errSecItemNotFound);
*/
/*
* Clean
*/
(void)SecItemDelete((__bridge CFDictionaryRef)clean1);
(void)SecItemDelete((__bridge CFDictionaryRef)clean2);
CFRelease(identity);
CheckIdentityItem(@"keychain-test1", errSecItemNotFound);
CheckIdentityItem(@"keychain-test2", errSecItemNotFound);
printf("[PASS] }
static void
CheckFindIdentityByReference(void)
{
OSStatus status;
CFDataRef pref = NULL, pref2 = NULL;
printf("[BEGIN]
/*
* Clean identities
*/
NSDictionary *clean1 = @{
(id)kSecClass : (id)kSecClassIdentity,
(id)kSecAttrAccessGroup : @"keychain-test1",
};
(void)SecItemDelete((__bridge CFDictionaryRef)clean1);
/*
* Add
*/
SecIdentityRef identity = CreateTestIdentity();
if (identity == NULL)
fail("create private key from data");
NSDictionary *add = @{
(id)kSecValueRef : (__bridge id)identity,
(id)kSecAttrAccessGroup : @"keychain-test1",
(id)kSecAttrLabel : @"CheckItemReference",
(id)kSecAttrAccessible : (id)kSecAttrAccessibleAfterFirstUnlock,
(id)kSecAttrNoLegacy : (id)kCFBooleanTrue,
(id)kSecReturnPersistentRef: (id)kCFBooleanTrue,
};
status = SecItemAdd((__bridge CFDictionaryRef)add, (CFTypeRef *)&pref);
if (status != errSecSuccess)
fail("add item:
if (pref == NULL || CFGetTypeID(pref) != CFDataGetTypeID())
fail("no pref returned");
/*
* Find by identity
*/
NSDictionary *query = @{
(id)kSecValueRef : (__bridge id)identity,
(id)kSecReturnPersistentRef: (id)kCFBooleanTrue,
};
status = SecItemCopyMatching((CFDictionaryRef)query, (CFTypeRef *)&pref2);
if (status)
fail("SecItemCopyMatching:
if (pref2 == NULL || CFGetTypeID(pref2) != CFDataGetTypeID())
fail("no pref2 returned");
if (!CFEqual(pref, pref2))
fail("prefs not same");
CFRelease(pref2);
/*
* Find by label
*/
NSDictionary *query2 = @{
(id)kSecClass : (id)kSecClassIdentity,
(id)kSecAttrAccessGroup : @"keychain-test1",
(id)kSecAttrLabel : @"CheckItemReference",
(id)kSecReturnPersistentRef: (id)kCFBooleanTrue,
};
status = SecItemCopyMatching((CFDictionaryRef)query2, (CFTypeRef *)&pref2);
if (status)
fail("SecItemCopyMatching:
if (pref2 == NULL || CFGetTypeID(pref2) != CFDataGetTypeID())
fail("no pref2 returned");
if (!CFEqual(pref, pref2))
fail("prefs not same");
CFRelease(pref2);
/*
* Find by label + reference
*/
NSDictionary *query3 = @{
(id)kSecAttrAccessGroup : @"keychain-test1",
(id)kSecAttrLabel : @"CheckItemReference",
(id)kSecValueRef : (__bridge id)identity,
(id)kSecReturnPersistentRef: (id)kCFBooleanTrue,
};
status = SecItemCopyMatching((CFDictionaryRef)query3, (CFTypeRef *)&pref2);
if (status)
fail("SecItemCopyMatching:
if (pref2 == NULL || CFGetTypeID(pref2) != CFDataGetTypeID())
fail("no pref2 returned");
if (!CFEqual(pref, pref2))
fail("prefs not same");
CFRelease(pref2);
/*
* Free stuff
*/
CFRelease(pref);
if(identity) {
CFRelease(identity);
identity = NULL;
}
printf("[PASS] }
static uint64_t
timeDiff(uint64_t start, uint64_t stop)
{
static uint64_t time_overhead_measured = 0;
static double timebase_factor = 0;
if (time_overhead_measured == 0) {
uint64_t t0 = mach_absolute_time();
time_overhead_measured = mach_absolute_time() - t0;
struct mach_timebase_info timebase_info = {};
mach_timebase_info(&timebase_info);
timebase_factor = ((double)timebase_info.numer)/((double)timebase_info.denom);
}
return ((stop - start - time_overhead_measured) * timebase_factor) / NSEC_PER_USEC;
}
static void
RunCopyPerfTest(NSString *name, NSDictionary *query)
{
uint64_t start = mach_absolute_time();
OSStatus status;
CFTypeRef result = NULL;
status = SecItemCopyMatching((__bridge CFDictionaryRef)query, &result);
uint64_t stop = mach_absolute_time();
if (status != 0) {
printf("SecItemCopyMatching failed with: fflush(stdout);
abort();
}
if (result)
CFRelease(result);
uint64_t us = timeDiff(start, stop);
puts([[NSString stringWithFormat:@"[RESULT_KEY] SecItemCopyMatching- name, (unsigned long)us] UTF8String]);
}
static void
RunDigestPerfTest(NSString *name, NSString *itemClass, NSString *accessGroup, NSUInteger expectedCount)
{
uint64_t start = mach_absolute_time();
dispatch_semaphore_t sema = dispatch_semaphore_create(0);
__block uint64_t stop;
_SecItemFetchDigests(itemClass, accessGroup, ^(NSArray *items, NSError *error) {
stop = mach_absolute_time();
if (error) {
printf("_SecItemFetchDigests failed with: fflush(stdout);
abort();
}
dispatch_semaphore_signal(sema);
if (expectedCount != [items count]) {
printf("_SecItemFetchDigests didn't return expected items: fflush(stdout);
abort();
}
});
dispatch_semaphore_wait(sema, DISPATCH_TIME_FOREVER);
uint64_t us = timeDiff(start, stop);
puts([[NSString stringWithFormat:@"[RESULT_KEY] SecItemCopyDigest- name, (unsigned long)us] UTF8String]);
}
static void
CheckItemPerformance(void)
{
unsigned n;
printf("[BEGIN]
/*
* Clean identities
*/
NSDictionary *clean1 = @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrService : @"service",
(id)kSecAttrAccessGroup : @"keychain-test1",
(id)kSecAttrNoLegacy : (id)kCFBooleanTrue,
};
(void)SecItemDelete((__bridge CFDictionaryRef)clean1);
NSData *data = [NSData dataWithBytes:"password" length:8];
for (n = 0; n < 1000; n++) {
NSDictionary *item = @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrAccount : [NSString stringWithFormat:@"account- (id)kSecAttrService : @"service",
(id)kSecAttrNoLegacy : (id)kCFBooleanTrue,
(id)kSecAttrAccessGroup : @"keychain-test1",
(id)kSecAttrNoLegacy : (id)kCFBooleanTrue,
(id)kSecValueData : data,
};
SecItemAdd((__bridge CFDictionaryRef)item, NULL);
}
RunCopyPerfTest(@"FindOneItemLimit", @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrService : @"service",
(id)kSecMatchLimit : (id)kSecMatchLimitOne,
});
RunCopyPerfTest(@"FindOneItemUnique", @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrAccount : @"account-0",
(id)kSecAttrService : @"service",
(id)kSecMatchLimit : (id)kSecMatchLimitAll,
});
RunCopyPerfTest(@"Find1000Items", @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrService : @"service",
(id)kSecMatchLimit : (id)kSecMatchLimitAll,
});
RunDigestPerfTest(@"Digest1000Items", (id)kSecClassGenericPassword, @"keychain-test1", 1000);
RunCopyPerfTest(@"GetAttrOneItemUnique", @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrAccount : @"account-0",
(id)kSecAttrService : @"service",
(id)kSecReturnAttributes : (id)kCFBooleanTrue,
(id)kSecMatchLimit : (id)kSecMatchLimitAll,
});
RunCopyPerfTest(@"GetData1000Items", @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrService : @"service",
(id)kSecReturnData : (id)kCFBooleanTrue,
(id)kSecMatchLimit : (id)kSecMatchLimitAll,
});
RunCopyPerfTest(@"GetDataOneItemUnique", @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrAccount : @"account-0",
(id)kSecAttrService : @"service",
(id)kSecReturnData : (id)kCFBooleanTrue,
(id)kSecMatchLimit : (id)kSecMatchLimitAll,
});
RunCopyPerfTest(@"GetDataAttrOneItemUnique", @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrAccount : @"account-0",
(id)kSecAttrService : @"service",
(id)kSecReturnData : (id)kCFBooleanTrue,
(id)kSecReturnAttributes : (id)kCFBooleanTrue,
(id)kSecMatchLimit : (id)kSecMatchLimitAll,
});
#if TARGET_OS_IPHONE /* macOS doesn't support fetching data for more then one item */
RunCopyPerfTest(@"GetData1000Items", @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrService : @"service",
(id)kSecReturnData : (id)kCFBooleanTrue,
(id)kSecMatchLimit : (id)kSecMatchLimitAll,
});
RunCopyPerfTest(@"GetDataAttr1000Items", @{
(id)kSecClass : (id)kSecClassGenericPassword,
(id)kSecAttrService : @"service",
(id)kSecReturnData : (id)kCFBooleanTrue,
(id)kSecReturnAttributes : (id)kCFBooleanTrue,
(id)kSecMatchLimit : (id)kSecMatchLimitAll,
});
#endif
(void)SecItemDelete((__bridge CFDictionaryRef)clean1);
printf("[PASS] }
int
main(int argc, const char ** argv)
{
printf("[TEST] secitemfunctionality\n");
#if TARGET_OS_OSX
char *user = getenv("USER");
if (user && strcmp("bats", user) == 0) {
(void)SecKeychainUnlock(NULL, 4, "bats", true);
}
#endif
CheckItemPerformance();
CheckFindIdentityByReference();
CheckItemAddDeleteMaybeLegacyKeychainNoData();
CheckItemAddDeleteNoData();
CheckItemUpdateAccessGroupGENP();
CheckItemUpdateAccessGroupIdentity();
printf("[SUMMARY]\n");
printf("test completed\n");
return 0;
}