Key Password Traps

Question

Are there any known errors that should be avoided when storing user passwords in a keychain? I plan to provide users with the ability to request a password to access my iPad application. I have a basic read and write string for Keychain to work. I just want to make sure that I don't let them get into a script that they block on their own, not through their own fault. For instance:

• Will the keyboard allow them to enter special characters that could not be saved or read from the key fob
• Is there a string length limit

Thanks for any information you can share.

Answer 1

Save the password. Read it. Make sure it works. If not, inform the user that it failed, and enter a different password.

Not all keyboards can enter all characters. The phone lock keypad in 3.1.2 or so (not sure if it has been fixed) had an error that would limit you to "ASCII-capable keyboards" (for example, not Hebrew), but not limit the characters that could be entered ; allowing some keys to add extra accents, and some keyboards had extra characters. Then you can turn off some keyboards, lock the phone, and you won’t be able to unlock it completely. (I made a backup before testing this.)

, .

, : . . ( ).

() . 3.1.2 ( , 3.2); , , "Backup".

.

Answer 2

:

iOS Keychain . , , , , , .

, , , , / .

:

HUGE NSString,

NSString stringWithFormat