Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

What encryption algorithm does gnome-keyring use?

I've tried looking for it on their site but it seems quite hidden.

share|improve this question
add comment

4 Answers

up vote 5 down vote accepted

According to the FAQ, it uses standard-issue AES-128.

share|improve this answer
1  
+1, I spent 15 minutes looking and didn't find the FAQ. :/ –  robjb Aug 25 '11 at 19:50
    
Ditto, I must have hit the site 5 different ways and still missed that –  OldWolf Aug 26 '11 at 13:41
add comment

From looking here, I can see that gnome-keyring uses libgp11, "a wrapper based on GLib implementing the PKCS#11 (Cryptoki) interface."

PKCS #11 is an abstraction layer for a generic cryptographic token, and its API defines objects such as RSA keys, X.509 Certificates, DES/Triple DES keys, and more. [ 1 , 2 ]

This gnome-keyring thread is fairly recent; the developers discuss the use of HKDF (RFC 5869) hashing into something usable by AES / Rijndael, so it's a good bet that gnome-keyring predominantly uses AES.

share|improve this answer
add comment

The doc's are pretty ambiguous about that, only saying it uses PKCS#11 to store it. My guess would be that it uses the default encryption for the host. (Probably DES in most cases) The architecture

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.