KeychainManagerMBS.kSecAttrProtocolIRCS as string

IRC over TLS/SSL.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrProtocolLDAP as string

LDAP protocol.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrProtocolLDAPS as string

LDAP over TLS/SSL.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrProtocolNNTP as string

NNTP protocol.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrProtocolNNTPS as string

NNTP over TLS/SSL.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrProtocolPOP3 as string

POP3 protocol.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrProtocolPOP3S as string

POP3 over TLS/SSL.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrProtocolRTSP as string

RTSP protocol.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrProtocolRTSPProxy as string

RTSP proxy.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrProtocolSMB as string

SMB protocol.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrProtocolSMTP as string

SMTP protocol.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrProtocolSOCKS as string

SOCKS protocol.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrProtocolSSH as string

SSH protocol.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrProtocolTelnet as string

Telnet protocol.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrProtocolTelnetS as string

Telnet over TLS/SSL.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrPublicKeyHash as string

Public key hash attribute key.
The corresponding value is of type memoryblock and contains the hash of a certificate's public key. Items of class kSecClassCertificate have this attribute. Read only.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrRounds as string

The number of rounds for the pseudorandom function specified by kSecAttrPRF.
Available in OS X v10.7 and later.

KeychainManagerMBS.kSecAttrSalt as string

A memoryblock object containing the salt to use for this key.
Available in OS X v10.7 and later.

KeychainManagerMBS.kSecAttrSecurityDomain as string

Security domain attribute key.
The corresponding value is of type String and represents the Internet security domain. Items of class kSecClassInternetPassword have this attribute.
Available in OS X v10.6 and later.

Some examples using this method:

• /MacClassic/Keychain/Keychain Content

KeychainManagerMBS.kSecAttrSerialNumber as string

Serial number attribute key.
The corresponding value is of type Date and contains the serial number data of a certificate. Items of class kSecClassCertificate have this attribute. Read only.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrServer as string

Server attribute key.
The corresponding value is of type String and contains the server's domain name or IP address. Items of class kSecClassInternetPassword have this attribute.
Available in OS X v10.6 and later.

Some examples using this method:

• /MacClassic/Keychain/Keychain Content

KeychainManagerMBS.kSecAttrService as string

Service attribute key.
The corresponding value is a string of type String that represents the service associated with this item. Items of class kSecClassGenericPassword have this attribute.
Available in OS X v10.6 and later.

Some examples using this method:

• /MacClassic/Keychain/Keychain Content
• /MacClassic/Keychain/KeyChain test iOS

KeychainManagerMBS.kSecAttrSubject as string

Subject attribute key.
The corresponding value is of type CFDataRef and contains the X.500 subject name of a certificate. Items of class kSecClassCertificate have this attribute. Read only.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrSubjectKeyID as string

Subject key ID attribute key.
The corresponding value is of type date and contains the subject key ID of a certificate. Items of class kSecClassCertificate have this attribute. Read only.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecAttrSynchronizable as string

To add a new item which can be synced to other devices, or to obtain synchronizable results from a query, supply this key with a value of true. If the key is not supplied, or has a value of false, then no synchronizable items will be added or returned. A predefined value, kSecAttrSynchronizableAny, may be provided instead of true if both synchronizable and non-synchronizable results are desired.

IMPORTANT: Specifying the kSecAttrSynchronizable key has several caveats:

• Updating or deleting items using the kSecAttrSynchronizable key will affect all copies of the item, not just the one on your local device. Be sure that it makes sense to use the same password on all devices before deciding to make a password synchronizable.
• Only password items can currently be synchronized. Keychain syncing is not supported for certificates or cryptographic keys.
• Items stored or obtained using the kSecAttrSynchronizable key cannot specify SecAccessRef-based access control with kSecAttrAccess. If a password is intended to be shared between multiple applications, the kSecAttrAccessGroup key must be specified, and each application using this password must have a 'keychain-access-groups' entitlement with the specified access group value.
• Items stored or obtained using the kSecAttrSynchronizable key may not also specify a kSecAttrAccessible value which is incompatible with syncing (namely, those whose names end with "ThisDeviceOnly".)
• Items stored or obtained using the kSecAttrSynchronizable key cannot be specified by reference. You must pass kSecReturnAttributes and/or kSecReturnData to retrieve results; kSecReturnRef is currently not supported for synchronizable items.
• Persistent references to synchronizable items should be avoided; while they may work locally, they cannot be moved between devices, and may not resolve if the item is modified on some other device.
• When specifying a query that uses the kSecAttrSynchronizable key, search keys are limited to the item's class and attributes. The only search constant which may be used is kSecMatchLimit; other constants using the kSecMatch prefix are not supported at this time.

KeychainManagerMBS.kSecAttrSynchronizableAny as string

This may be used as a value for the kSecAttrSynchronizable dictionary key in a call to SecItemCopyMatching, SecItemUpdate, or SecItemDelete.
Available on Mac OS X 10.9 and newer.

KeychainManagerMBS.kSecAttrType as string

Type attribute key.
The corresponding value is of type integer and represents the item's type. This number is the unsigned integer representation of a four-character code (for example, 'aTyp').
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecClass as string

Dictionary key whose value is the item's class code.
Possible values for this key are listed in Item Class Value Constants.
Available in OS X v10.6 and later.

Some examples using this method:

• /MacClassic/Keychain/Keychain Content
• /MacClassic/Keychain/KeyChain test iOS

KeychainManagerMBS.kSecMatchCaseInsensitive as string

Case sensitivity attribute key.
The corresponding value is of type Boolean. If this value is False, or if this attribute is not provided, then case-sensitive string matching is performed.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecMatchDiacriticInsensitive as string

Case sensitivity attribute key.
The corresponding value is of type Boolean. If this value is False, or if this attribute is not provided, then diacritic-sensitive string matching is performed.
Available in OS X v10.7 and later.

KeychainManagerMBS.kSecMatchEmailAddressIfPresent as string

Email address attribute key.
The corresponding value is of type string and contains an RFC822 email address. If provided, returned certificates or identities are limited to those that either contain the address or do not contain any email address.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecMatchIssuers as string

Issuers attribute key.
The corresponding value is of type array, where the array consists of X.500 names of type Memoryblock. If provided, returned certificates or identities are limited to those whose certificate chain contains one of the issuers provided in this list.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecMatchItemList as string

Item list attribute key.
To provide your own set of items to be filtered by a search query rather than searching the keychain, specify this search key in a call to the SecItemCopyMatching function with a value that consists of an object of type array where the array contains either KeychainItemMBS, SecKeyRef, SecCertificateRef, SecIdentityRef, or memoryblock items. The objects in the provided array must all be of the same type.
To convert from persistent item references to normal item references, specify this search key in a call to the CopyMatching function with a value of type array where the array contains one or more CFDataRef elements (the persistent references), and a return-type key of kSecReturnRef whose value is True.
To delete an item identified by a transient reference, specify the kSecMatchItemList search key in a call to the SecItemDelete function with a reference returned by using the kSecReturnRef return type key in a previous call to the CopyMatching or SecItemAdd functions.
To delete an item identified by a persistent reference, specify the kSecMatchItemList search key in a call to the SecItemDelete function with a persistent reference returned by using the kSecReturnPersistentRef return type key to the CopyMatching or SecItemAdd functions.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecMatchLimit as string

Match limit attribute key.
The corresponding value is of type Integer. If provided, this value specifies the maximum number of results to return or otherwise act upon. For a single item, specify kSecMatchLimitOne. To specify all matching items, specify kSecMatchLimitAll. The default behavior is function-dependent.
Available in OS X v10.6 and later.

Some examples using this method:

• /MacClassic/Keychain/Keychain Content
• /MacClassic/Keychain/KeyChain test iOS

KeychainManagerMBS.kSecMatchLimitAll as string

An unlimited number of results may be returned; used as a value for the kSecMatchLimit attribute key.
Available in OS X v10.6 and later.

Some examples using this method:

• /MacClassic/Keychain/Keychain Content

KeychainManagerMBS.kSecMatchLimitOne as string

Results are limited to the first item found; used as a value for the kSecMatchLimit attribute key.
Available in OS X v10.6 and later.

Some examples using this method:

• /MacClassic/Keychain/KeyChain test iOS

KeychainManagerMBS.kSecMatchPolicy as string

Match policy attribute key.
The corresponding value is of type SecPolicyRef. If provided, returned certificates or identities must verify with this policy.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecMatchSearchList as string

// We pass a keychain for searching only in this keychain
dim keychains() as KeychainMBS = KeychainManagerMBS.SearchList
dim keychain as KeychainMBS = keychains(1) // we pick second keychain
dim keychainname as string = keychain.name

// Build query
dim query as new Dictionary

query.value( KeychainManagerMBS.kSecClass ) = KeychainManagerMBS.kSecClassGenericPassword
query.Value( KeychainManagerMBS.kSecReturnAttributes ) = true
query.Value( KeychainManagerMBS.kSecMatchLimit ) = KeychainManagerMBS.kSecMatchLimitAll
query.Value( KeychainManagerMBS.kSecMatchSearchList ) = array(keychain)

// search all items
dim dics() as Dictionary = KeychainManagerMBS.CopyMatchingDictionaries(query)

// pick first
dim dic as Dictionary = dics(0)

// and display
MsgBox "Service: "+dic.Value(KeychainManagerMBS.kSecAttrService)+EndOfLine+_
  "Account: "+dic.Value(KeychainManagerMBS.kSecAttrAccount)

Available in OS X v10.6 and later.

KeychainManagerMBS.kSecMatchSubjectContains as string

Subject attribute key.
The corresponding value is of type string. If provided, returned certificates or identities are limited to those whose subject contains this string.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecMatchSubjectEndsWith as string

Subject attribute key.
The corresponding value is of type String. If provided, returned certificates or identities are limited to those whose subject ends with this string.
Available in OS X v10.7 and later.

KeychainManagerMBS.kSecMatchSubjectStartsWith as string

Subject attribute key.
The corresponding value is of type String. If provided, returned certificates or identities are limited to those whose subject starts with this string.
Available in OS X v10.7 and later.

KeychainManagerMBS.kSecMatchSubjectWholeString as string

Subject attribute key.
The corresponding value is of type String. If provided, returned certificates or identities are limited to those whose subject is exactly equal to this string.
Available in OS X v10.7 and later.

KeychainManagerMBS.kSecMatchTrustedOnly as string

Trusted anchor attribute key.
The corresponding value is of type Boolean. If this attribute is provided with A value of True, only certificates that can be verified back to a trusted anchor are returned. If this value is False or the attribute is not provided, then both trusted and untrusted certificates may be returned.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecMatchValidOnDate as string

Valid-on-date attribute key.
The corresponding value is of type Date. If provided, returned keys, certificates or identities are limited to those that are valid for the given date. Pass a value of nil to indicate the current date.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecMatchWidthInsensitive as string

Case sensitivity attribute key.
The corresponding value is of type Boolean. If this value is False, or if this attribute is not provided, then width-sensitive string matching is performed (for example, the ASCII character a does not match the UTF-8 full-width letter a (U+FF41).
Available in OS X v10.7 and later.

KeychainManagerMBS.kSecReturnAttributes as string

Return attributes attribute key.
The corresponding value is of type Boolean. A value of True indicates that a dictionary of the (unencrypted) attributes of an item should be returned in the form of a Dictionary.
Available in OS X v10.6 and later.

Some examples using this method:

• /MacClassic/Keychain/Keychain Content

KeychainManagerMBS.kSecReturnData as string

Return data attribute key.
The corresponding value is of type Boolean. A value of True indicates that the data of an item should be returned in the form of a Memoryblock. For keys and password items, data is secret (encrypted) and may require the user to enter a password for access.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecReturnPersistentRef as string

Return persistent reference attribute key. A persistent reference to a credential can be stored on disk for later use or passed to other processes.
The corresponding value is of type Boolean. A value of True indicates that a persistent reference to an item (Memoryblock) should be returned.
Available in OS X v10.6 and later.

KeychainManagerMBS.kSecReturnRef as string

Return reference attribute key.
The corresponding value is of type Boolean. A value of True indicates that a reference should be returned. Depending on the item class requested, the returned references may be of type KeychainItemMBS, SecKeyRef, SecCertificateRef, SecIdentityRef, or Memoryblock.
Available in OS X v10.6 and later.