Open Radar

 
Summary:

I have the following code in a framework target for my app:

---------------
let access = SecAccessControlCreateWithFlags(kCFAllocatorDefault,                                            
                                             kSecAttrAccessibleWhenUnlockedThisDeviceOnly,
                                             .privateKeyUsage,
                                             nil)!

var attributes: [String: Any] = [
    kSecAttrKeyType as String: encryptionType,
    kSecAttrKeySizeInBits as String: encryptionBits,
    kSecPrivateKeyAttrs as String: [
       kSecAttrIsPermanent as String: true,
       kSecAttrApplicationTag as String: "abc".data(using: .utf8) as Any,
       kSecAttrAccessControl as String: access,
    ],
]

if Device.hasSecureEnclave {
    attributes[kSecAttrTokenID as String] = kSecAttrTokenIDSecureEnclave
}

var error: Unmanaged<CFError>?
SecKeyCreateRandomKey(attributes as CFDictionary, &error)
---------------

When I run this code on the device or in the simulator it works fine. When I run this code from a unit test it fails, reporting: Error Domain=NSOSStatusErrorDomain Code=-50 
"Key generation failed, error -50" UserInfo={NSDescription=Key generation failed, error -50}

Steps to Reproduce:

1. Cut and paste the above code into a method in an app. Run the app in the simulator to verify a key pair is created and errSecSuccess (0) is returned from the call to SecKeyCreateRandomKey.

2. Setup a unit test totes the framework containing this test. ie. No host application.

3. Run the test. 

Expected Results:

Code should succeed, returning a key and a success code of errSecSuccess (0)

Actual Results:

Instead, a nil is returned and a success code of errSecParam(-50)

Version/Build:

Xcode Version 9.2 (9C40b)