What is Linux kernel keystore and why you should use it in your next application
summary
Linux exposes a kernel keystore that holds keys as kernel objects, with session/process/thread keyrings that auto-destroy keys on logout or crash, and key types like user, logon, asymmetric keys plus encrypted/trusted wrappers. Applications use add_key or the request_key helper to provision keys so user space never sees plaintext; TPM/HSM-based wrapping and a bin-request-key connector integrate with central KMS. Demo shows SSH-agent replacement working and secure deletion on logout; kernel crypto performance needed a recent RSA fix.
AI-written summary · about
chapters (6)
- 0:00Start
- 1:57Linux address spaces
- 20:31Example: secret sharing
- 22:07Special keyring types
- 28:01Asymmetric keys
- 31:34Encrypted keys
related talks
55mWhat is Linux kernel keystore and why you should use it in your next application
43mWhat is Linux kernel keystore and why you should use it in your next app
41mWhat Is Linux Kernel Keystore and Why You Should Use It in Your Next...
53mWhat is Linux kernel keystore and why you should use it in your next application
45mTPMs & The Linux Kernel: Unlocking A Better Path To Hardware Security
43mTPMs and the Linux Kernel: unlocking a better path to hardware security
54mTPMs and the Linux Kernel: unlocking a better path to hardware security
47mTPMs and the Linux Kernel: unlocking a better path to hardware security