Linux:Kernel:Key
lastmod 2026-11-10created 2019-10-223 edits
Linux:Kernel:Key is a page about the Linux kernel's Kernel Key Retention Service. This service stores secret values such as encryption keys and authentication tokens inside the kernel, groups them into keyrings, and controls access per process, session, and user. eCryptfs, fscrypt, NFS, module signature verification, and others handle keys through this service, and from user space it is manipulated with the keyctl command and system calls.