Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What encryption algorithm does gnome-keyring use?

I've tried looking for it on their site but it seems quite hidden.

share|improve this question
up vote 6 down vote accepted

According to the FAQ, it uses standard-issue AES-128.

share|improve this answer
1  
+1, I spent 15 minutes looking and didn't find the FAQ. :/ – robjb Aug 25 '11 at 19:50
    
Ditto, I must have hit the site 5 different ways and still missed that – OldWolf Aug 26 '11 at 13:41

From looking here, I can see that gnome-keyring uses libgp11, "a wrapper based on GLib implementing the PKCS#11 (Cryptoki) interface."

PKCS #11 is an abstraction layer for a generic cryptographic token, and its API defines objects such as RSA keys, X.509 Certificates, DES/Triple DES keys, and more. [ 1 , 2 ]

This gnome-keyring thread is fairly recent; the developers discuss the use of HKDF (RFC 5869) hashing into something usable by AES / Rijndael, so it's a good bet that gnome-keyring predominantly uses AES.

share|improve this answer

The doc's are pretty ambiguous about that, only saying it uses PKCS#11 to store it. My guess would be that it uses the default encryption for the host. (Probably DES in most cases) The architecture

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .