A native Go API for the security key management system (aka "keyrings") found in Linux 2.6+
The keyctl interface is nominally provided by three or so Linux-specific syscalls, however it is almost always wrapped
in a library named libkeyutils.so.
This package interacts directly with the syscall interface and does not require CGO for linkage to the helper library provided on most systems.
To access the default session keyring (and create it if it doesn't exist)
package main
import (
"log"
"github.com/jsipprell/keyctl"
)
func main() {
keyring, err := keyctl.SessionKeyring()
if err != nil {
log.Fatal(err)
}
// default timeout of 10 seconds for new or updated keys
keyring.SetDefaultTimeout(10)
secureData := []byte{1,2,3,4}
id, err := keyring.Add("some-data", secureData)
if err != nil {
log.Fatal(err)
}
log.Printf("created session key id %v", id)
}To search for an existing key by name:
package main
import (
"log"
"github.com/jsipprell/keyctl"
)
func main() {
keyring, err := keyctl.SessionKeyring()
if err != nil {
log.Fatal(err)
}
key, err := keyring.Search("some-data")
if err != nil {
log.Fatal(err)
}
data, err := key.Get()
if err != nil {
log.Fatal(err)
}
log.Printf("secure data: %v\n", data)
}