Port MASTG-TEST-0064: Testing Local Authentication (ios)

[serek8]

This PR closes #2950

Deprecates:

• MASTG-TEST-0064

Ports MASWE-0044 Biometric Authentication is Event-bound:

• MASTG-TEST-0266
• MASTG-TEST-0267
• MASTG-DEMO-0041
• MASTG-DEMO-0042

Ports MASWE-0045 Fallback to Non-biometric Credentials Allowed for Sensitive Transactions:

• MASTG-TEST-0268
• MASTG-TEST-0269
• MASTG-DEMO-0043
• MASTG-DEMO-0044

Port MASWE-0046 Crypto Keys Not Invalidated on New Biometric Enrollment:

• MASTG-TEST-0270
• MASTG-TEST-0271
• MASTG-DEMO-0045
• MASTG-DEMO-0046

Not ported: ⚠️
from MASTG-TEST-0064:

In order to make sure that biometrics can be used, verify that the kSecAttrAccessibleWhenPasscodeSetThisDeviceOnly or the kSecAttrAccessibleWhenPasscodeSet protection class is set when the SecAccessControlCreateWithFlags method is called.

Not sure if there is any reason to check if biometrics can be used. The keychain API will return an error if biometrics cannot be used anyway.

Note that the ...ThisDeviceOnly variant will make sure that the keychain item is not synchronized with other iOS devices

I think we miss a weakness for it @cpholguera?

Carlos: we have ThisDeviceOnly covered in https://mas.owasp.org/MASWE/MASVS-CRYPTO/MASWE-0018/ so we should be good.

[cpholguera]

Thanks @serek8, we have ThisDeviceOnly covered in https://mas.owasp.org/MASWE/MASVS-CRYPTO/MASWE-0018/ so we should be good.

Also see http://developer.apple.com/documentation/security/restricting-keychain-item-accessibility