Nikos Mavrogiannopoulos <nmav@xxxxxxxxxx> wrote: > It is not that simple. My understanding of the keyring API is that it > allows exporting of the keys to user-space and this crypto API > explicitly prevents that That's simple. Don't provide a read() key type operation, then. David -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html