Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What encryption algorithm does gnome-keyring use?

I've tried looking for it on their site but it seems quite hidden.

share|improve this question
up vote 6 down vote accepted

According to the FAQ, it uses standard-issue AES-128.

share|improve this answer
+1, I spent 15 minutes looking and didn't find the FAQ. :/ – robjb Aug 25 '11 at 19:50
Ditto, I must have hit the site 5 different ways and still missed that – OldWolf Aug 26 '11 at 13:41

From looking here, I can see that gnome-keyring uses libgp11, "a wrapper based on GLib implementing the PKCS#11 (Cryptoki) interface."

PKCS #11 is an abstraction layer for a generic cryptographic token, and its API defines objects such as RSA keys, X.509 Certificates, DES/Triple DES keys, and more. [ 1 , 2 ]

This gnome-keyring thread is fairly recent; the developers discuss the use of HKDF (RFC 5869) hashing into something usable by AES / Rijndael, so it's a good bet that gnome-keyring predominantly uses AES.

share|improve this answer

The doc's are pretty ambiguous about that, only saying it uses PKCS#11 to store it. My guess would be that it uses the default encryption for the host. (Probably DES in most cases) The architecture

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.