Post for: #Linux Kernel ^{(2 Posts)}

In the last entry of this series we created a Linux kernel module which was able to dump keys from the Linux Kernel Key Retention Service. The kernel module was limited to only x86_64 machines with a mainline Linux kernel. It also required having the appropriate Linux kernel headers. Access…

The Kernel Key Retention Service (KKRS) is an in-kernel key management and retention feature, which provided a secure method for storing secrets on Linux systems. With this feature, it is possible for processes to process cryptographic material without having direct access to the key material. Instead, the kernel would handle…