Encryption algorithm of gnome-keyring

Question

What encryption algorithm does gnome-keyring use?

I've tried looking for it on their site but it seems quite hidden.

Answer 1

According to the FAQ, it uses standard-issue AES-128.

Answer 2

From the FAQ:

"SHA-256 for hashing, AES-128 for encrypting the secrets. Note that although the documented file format has MD5 for the hash algorithm, the key for encrypting the keyring is not generated with MD5!"

Answer 3

From looking here, I can see that gnome-keyring uses libgp11, "a wrapper based on GLib implementing the PKCS#11 (Cryptoki) interface."

PKCS #11 is an abstraction layer for a generic cryptographic token, and its API defines objects such as RSA keys, X.509 Certificates, DES/Triple DES keys, and more. [ 1 , 2 ]

This gnome-keyring thread is fairly recent; the developers discuss the use of HKDF (RFC 5869) hashing into something usable by AES / Rijndael, so it's a good bet that gnome-keyring predominantly uses AES.

Answer 4

The doc's are pretty ambiguous about that, only saying it uses PKCS#11 to store it. My guess would be that it uses the default encryption for the host. (Probably DES in most cases) The architecture