How can an application, using Apple’s Secure Enclave on macOS or TPM on Windows, protect itself from other applications accessing its private keys?

I’m interested in using Apple’s Secure Enclave on macOS or TPM on Windows to protect cryptographic keys used by an application from being accessed by other applications running with the same or higher privileges. However, the documentation… Continue reading How can an application, using Apple’s Secure Enclave on macOS or TPM on Windows, protect itself from other applications accessing its private keys?

Do passkeys on iCloud Keychain ever exist unencrypted outside the secure enclave?

Regarding Apple’s beta feature of storing WebAuthn passkeys in the iCloud Keychain, does anybody know if the unencrypted passkeys ever leave the secure enclave, and get stored in RAM or anything?
With traditional WebAuthn on a Yubikey or s… Continue reading Do passkeys on iCloud Keychain ever exist unencrypted outside the secure enclave?