IOS SE - ToB企服应用市场:ToB评测及商务社交产业平台

import Foundation
import Security
func savePassword(password: String) -> Bool {
let query: [String: Any] = [
kSecClass as String: kSecClassGenericPassword,
kSecAttrAccount as String: "MyAccount",
kSecValueData as String: password.data(using: .utf8)!,
kSecAttrAccessible as String: kSecAttrAccessibleWhenUnlockedThisDeviceOnly
]
let status = SecItemAdd(query as CFDictionary, nil)
return status == errSecSuccess
}
func getPassword() -> String? {
let query: [String: Any] = [
kSecClass as String: kSecClassGenericPassword,
kSecAttrAccount as String: "MyAccount",
kSecReturnData as String: kCFBooleanTrue!,
kSecMatchLimit as String: kSecMatchLimitOne
]
var item: AnyObject?
let status = SecItemCopyMatching(query as CFDictionary, &item)
if status == errSecSuccess, let data = item as? Data, let password = String(data: data, encoding: .utf8) {
return password
}
return nil
}

复制代码

import Foundation
import Security
// 定义密钥的标签，用于在Keychain中唯一标识
let keyLabel = "SecureEnclaveExample"
// 创建或获取密钥
func createOrGetKey() -> SecKey? {
let keyQuery: [String: Any] = [
kSecClass as String: kSecClassKey,
kSecAttrKeyType as String: kSecAttrKeyTypeAES,
kSecAttrKeySizeInBits as NSNumber: 256,
kSecAttrIsPermanent as NSNumber: true,
kSecAttrAccessible as String: kSecAttrAccessibleWhenUnlockedThisDeviceOnly,
kSecAttrLabel as String: keyLabel,
kSecAttrTokenID as String: kSecAttrTokenIDSecureEnclave
]
// 尝试从Keychain获取密钥
var key: SecKey?
let status = SecKeyCreateRandomKey(keyQuery as CFDictionary, &key)
guard status == errSecSuccess else {
print("Failed to create key: \(status)")
return nil
}
return key
}
// 使用密钥加密数据
func encryptData(_ data: Data, key: SecKey) -> Data? {
let query: [String: Any] = [
kSecAttrKey as String: key,
kSecPadding as String: kSecPaddingPKCS1,
kSecMode as String: kSecModeCBC,
kSecIV as String: Data(count: 16).randomBytes // 生成随机初始化向量
]
var encryptedData: Data?
let status = SecTransformApply(SecEncryptTransformCreate(nil, query as CFDictionary), &encryptedData)
guard status == errSecSuccess else {
print("Encryption failed: \(status)")
return nil
}
return encryptedData
}
// 使用密钥解密数据
func decryptData(_ data: Data, key: SecKey) -> Data? {
let query: [String: Any] = [
kSecAttrKey as String: key,
kSecPadding as String: kSecPaddingPKCS1,
kSecMode as String: kSecModeCBC,
kSecIV as String: Data(count: 16).randomBytes // 必须与加密时相同
]
var decryptedData: Data?
let status = SecTransformApply(SecDecryptTransformCreate(nil, query as CFDictionary), &decryptedData)
guard status == errSecSuccess else {
print("Decryption failed: \(status)")
return nil
}
return decryptedData
}
// 示例用法
if let secureKey = createOrGetKey() {
let testData = "Hello, Secure Enclave!".data(using: .utf8)!
if let encryptedData = encryptData(testData, key: secureKey),
let decryptedData = decryptData(encryptedData, key: secureKey),
let decryptedText = String(data: decryptedData, encoding: .utf8) {
print("Decrypted Text: \(decryptedText)")
}
}

复制代码