OSCrypt for POSIX uses libsecret to store a randomised encryption key.

components/os_crypt/key_storage_mock.cc

+// Copyright 2016 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "components/os_crypt/key_storage_mock.h"
+
+#include "base/base64.h"
+#include "base/rand_util.h"
+
+std::string KeyStorageMock::GetKey() {
+  if (key_.empty())
+    base::Base64Encode(base::RandBytesAsString(16), &key_);
+  return key_;
+}
+
+bool KeyStorageMock::Init() {
+  return true;
+}
+
+void KeyStorageMock::ResetTo(base::StringPiece new_key) {
+  key_ = new_key.as_string();
+}
+
+std::string* KeyStorageMock::GetKeyPtr() {
+  return &key_;
+}