What is Linux kernel keystore and why you should use it in your next app
summary
Linux kernel keystore stores keys as kernel objects inside session keyring and other ring types, accessible by add_key or requested on demand with request_key; keys can be user, logon, asymmetric, encrypted or TPM-wrapped keys. Demo shows keyctl and OpenSSL PKCS8 import, an eBPF probe proving session keys are auto-destroyed on logout, and a Python request-key plugin that derivates machine+app keys from TPM. Proof-of-concept OpenSSH patch uses kernel-backed keys so plain-text secrets never enter user space.
AI-written summary · about
chapters (11)
- 0:00Introduction and why Linux kernel keystore matters
- 3:00Process isolation, memory layout, and why secrets leak
- 6:00Common ways cryptographic keys are exposed in applications
- 9:00Using process separation to protect sensitive keys
- 12:00Linux kernel keystore basics: keyrings and key objects
- 16:00Working with keys and sharing secrets between users
- 20:00Session, process, thread, and persistent keyrings
- 24:00Key types: user keys, logon keys, and asymmetric keys
- 28:00Secure key usage with signing and cryptographic operations
- 31:00TPM, trusted keys, and encrypted key provisioning
- 35:00Designing more secure Linux app architectures with kernel-backed secrets
related talks
58mWhat is Linux kernel keystore and why you should use it in your next application
53mWhat is Linux kernel keystore and why you should use it in your next application
41mWhat Is Linux Kernel Keystore and Why You Should Use It in Your Next...
55mWhat is Linux kernel keystore and why you should use it in your next application
45mTPMs & The Linux Kernel: Unlocking A Better Path To Hardware Security
43mTPMs and the Linux Kernel: unlocking a better path to hardware security
54mTPMs and the Linux Kernel: unlocking a better path to hardware security
47mTPMs and the Linux Kernel: unlocking a better path to hardware security