@@ -29,12 +29,14 @@ is a list of the most popular operating systems and their respective passwords m
2929* GNU/Linux:
3030 * [ libsecret] ( https://gitlab.gnome.org/GNOME/libsecret )
3131 * [ kwallet] ( https://api.kde.org/frameworks/kwallet/html/index.html )
32+ * [ keyctl] ( https://www.kernel.org/doc/html/latest/security/keys/core.html )
3233
3334GNU/Linux distributions that use GNOME as default desktop environment typically come with
3435[ Seahorse] ( https://wiki.gnome.org/Apps/Seahorse ) . Users of KDE based distributions are
3536commonly provided with [ KDE Wallet Manager] ( https://userbase.kde.org/KDE_Wallet_Manager ) .
3637Whilst the former is in fact a ` libsecret ` convenient frontend, the latter is a ` kwallet `
37- client.
38+ client. ` keyctl ` is a secure backend leverages the Linux's kernel security key management system
39+ to store cryptographic keys securely in memory.
3840
3941` os ` is the default option since operating system's default credentials managers are
4042designed to meet users' most common needs and provide them with a comfortable
@@ -93,6 +95,15 @@ GNU/Linux distributions that ships KDE as default desktop environment. Please re
9395[ KWallet Handbook] ( https://docs.kde.org/stable5/en/kdeutils/kwallet5/index.html ) for more
9496information.
9597
98+ ### The ` keyctl ` backend
99+
100+ The * Kernel Key Retention Service* is a security facility that
101+ has been added to the Linux kernel relatively recently. It allows sensitive
102+ cryptographic data such as passwords, private key, authentication tokens, etc
103+ to be stored securely in memory.
104+
105+ The ` keyctl ` backend is available on Linux platforms only.
106+
96107### The ` test ` backend
97108
98109The ` test ` backend is a password-less variation of the ` file ` backend. Keys are stored
0 commit comments