iOS Security Framework printing sensitive information in device logs

We are using KeyChainWrapper to store sensitive data in keychain, which is internally using apple’s security framework. This security framework is logging my sensitive information in the device logs. Whenever i add/update any item in my keychain, below functions printing the details of the item in device logs(not in x-code project console). Included the sample device logs as well with the issue below,


Any solution to overcome this issue? YOur suggestion would be greatly appreciated! Thanks.


SecItemAdd()

SecItemUpdate()


Dec 21 09:25:40 iPhone securityd[507] <Notice>: replaced <genp,rowid=2403,cdat=2018-12-21 15:25:40 +0000,mdat=2018-12-21 15:25:40 +0000,desc=,icmt=null,crtr=null,type=null,scrp=null,labl=,alis=null,invi=null,nega=null,cusi=null,prot=null,acct=,svce=TouchID,gena={

"touchIDToken" : "My Token"

},data=0178:0300023F0A000000...|31bccf46667da5b9c4,agrp=<TeamIdentifier>,pdmn=cku,sync=0,tomb=0,sha1=9CC066A62296770E863502HG8W3FCD9E781D75,vwht=null,tkid=null,v_Data=<?>,v_pk=D8AACB133A8673A5DAF71504577HKFH7B5C7E3D855,accc=310D300B0C0874GD740C03636B75,u_Tomb=null,musr=> with <genp,rowid=2403,cdat=2018-12-21 15:25:40 +0000,mdat=2018-12-21 15:25:40 +0000,desc=,icmt=null,crtr=null,type=null,scrp=null,labl=,alis=null,invi=null,nega=null,cusi=null,prot=null,acct=,svce=TouchID,gena={

"Sample" : "true",

"touchIDToken" : "MyToken"

},data=018f:030000278FA000000...|64aacda385dhfj700,agrp=<TeamIdentifier>,pdmn=cku,sync=0,tomb=0,sha1=CA8A0376S756WE2E2E0E7F4 in

Replies

This security framework is logging my sensitive information in the device logs.

Which sensitive information in particular? In general the keychain assumes that the attributes of a generic password item are not sensitive, and it’s the data associated with that item that’s sensitive. And the log you posted reflects that, with the data being elided from the log (hence

v_Data=<?>
). Are you storing sensitive information in other attributes? If so, I recommend that you not do that.

Share and Enjoy

Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"