Re: Keychain best practice

On 10 December 2010 15:53, James Montgomerie <[email protected]> wrote:
> On 10 Dec 2010, at 15:37, Christiaan Hofman wrote:
>> On Dec 10, 2010, at 15:40, jerry porter wrote:
>>> We hired a forensics company to test an app I wrote for my company and they
>>> broke the keychain in a matter of moments.
>
> I'd be interested to hear how.  I was under the impression that keychain was very secure.

I'd also be interested to hear more about this. 3DES apparently has 80
bits of security in the worst case (chosen plaintext attacks) for
which brute-forcing is not a "matter of moments", so perhaps this was
through a vulnerability in the Security Server?

H