What encryption algorithm does gnome-keyring use?

I've tried looking for it on their site but it seems quite hidden.

link|improve this question
feedback

4 Answers

up vote 4 down vote accepted

According to the FAQ, it uses standard-issue AES-128.

link|improve this answer
1  
+1, I spent 15 minutes looking and didn't find the FAQ. :/ – robjb Aug 25 '11 at 19:50
Ditto, I must have hit the site 5 different ways and still missed that – OldWolf Aug 26 '11 at 13:41
feedback

From looking here, I can see that gnome-keyring uses libgp11, "a wrapper based on GLib implementing the PKCS#11 (Cryptoki) interface."

PKCS #11 is an abstraction layer for a generic cryptographic token, and its API defines objects such as RSA keys, X.509 Certificates, DES/Triple DES keys, and more. [ 1 , 2 ]

This gnome-keyring thread is fairly recent; the developers discuss the use of HKDF (RFC 5869) hashing into something usable by AES / Rijndael, so it's a good bet that gnome-keyring predominantly uses AES.

link|improve this answer
feedback

The doc's are pretty ambiguous about that, only saying it uses PKCS#11 to store it. My guess would be that it uses the default encryption for the host. (Probably DES in most cases) The architecture

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.