On a Mac not using hard drive encryption, how difficult would it be for an attacker with physical access to a machine to break into the keychain? This document answers the question for iOS 10 (the keychain uses AES 128 in Galois/Counter Mode). But I can't find a document for MacOS.

  • iCloud keychain uses AES 256 ( support.apple.com/en-us/HT202303 ) and local keychains use Triple DES for passwords and keys in a keychain, but I can't find a valid link to an official document that proves it. – toma Aug 2 '17 at 10:36
  • Thanks for your comment. That would make sense as AES is much less CPU-hungry than 3DES, which is a very important consideration on iOS, but probably less so on MacOS. Although with the current generation of both hardware, I'm not sure… – user123861 Aug 31 '17 at 12:49

You must log in to answer this question.