"a serious documentation flaw"
http://developer.apple.com/library/ios/#documentation/System...
this does not exonerate Apple having made a wrong choice of design.
"a serious documentation flaw"
http://developer.apple.com/library/ios/#documentation/System...
this does not exonerate Apple having made a wrong choice of design.
A low-level API is not the thing to design your cryptographic protocol around.
A low-level crypto API is not prescriptive, it's documentation is merely descriptive. Apple devs were merely documenting and unit testing what happens when you pass in a certain combination of parameters.