Exploring SecAccessControl Obj in iOS 9 Keychain presented at BsidesROC 2016

by Nitin Jami,

Summary : iOS’s keychain has gone through a lot of improvements since its inception. One notable feature is the introduction of access controls from iOS 8 which allows more granular control over an item. This presentation aims to explore the new access control object, by taking help from apple open-source code and reversing Security.Framework. The talk also presents a new tool (GUI and CLI) that allows dumping of keychain items, supporting iOS 9, with the additional information of the access control of an item. Furthermore, the tool allows to edit or delete existing keychain items.