AppleKeychainSigningKey

A hardware-backed JwsProcessor that signs and verifies JWT payloads using keys stored in the iOS/macOS Keychain.

Keys are stored in the Keychain with kSecAttrAccessibleAfterFirstUnlock, making them hardware-bound to this device (they cannot be migrated via iCloud/backups).

Use getInstance to look up an existing key, or getOrCreateInstance to obtain one and generate it on first use.

Types

Link copied to clipboard
object Companion

Properties

Link copied to clipboard
open override val algorithm: SigningAlgorithm
Link copied to clipboard
open override val keyId: String

Functions

Link copied to clipboard
open suspend override fun sign(data: ByteArray): ByteArray
Link copied to clipboard
open suspend override fun verify(data: ByteArray, signature: ByteArray): Boolean