kxd

Documentation

Overview

kxd is a key exchange daemon.

It serves blobs of data (keys) over https, authenticating and authorizing the clients using SSL certificates, and notifying upon key accesses.

It can be used to get keys remotely instead of using local storage. The main use case is to get keys to open dm-crypt devices automatically, without having to store them on the machine.