Encrypt/Decrypt Function that produces output tied to a user

Originator:matt
Number:rdar://14483316 Date Originated:7/18/2013
Status:Open Resolved:
Product:OS X Product Version:
Classification:Feature Request Reproducible:
 
Summary: I would like to request an API that can encrypt and decrypt arbitrary data under the following rules:

1. Given |plainText|, an encrypted |cypherText| is produced.
2. Given |cypherText|, |plainText| can only be returned if the code is run by the same user, on the same machine, under the same Mach Namespace / Security Context / etc...

So, in pseudocode, something simple like

cyphertext = EncryptForCurrentUser(plainText)
plainText = DecryptForCurrentUser(cypherText)

I do not see anything in CommonCrypto that can do something like this. Note: I do not want to store any data in Keychain. I just want to encrypt/decrypt.

Windowz offers something along these lines... this is basically what I'm after: http://msdn.microsoft.com/en-us/library/windows/desktop/aa380261(v=vs.85).aspx

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!