I'm not doing any base64 encoding actually. The kSecAttrApplicationTag required for SecKeyGeneratePair or SecKeyCreateRandomKey, is an NSData generated from a UInt8 array (in turn generated from an NSString that is plain text).

digging deeply I noticed several identifier sizes fail to extract the key.

-added to the original post-