OSCrypt for POSIX uses libsecret to store a randomised encryption key.

components/os_crypt/key_storage_linux.h

Index: components/os_crypt/key_storage_linux.h
diff --git a/components/os_crypt/key_storage_linux.h b/components/os_crypt/key_storage_linux.h
new file mode 100644
index 0000000000000000000000000000000000000000..a8cb42305554f005ce560b63ece68aaede8591f6
--- /dev/null
+++ b/components/os_crypt/key_storage_linux.h
@@ -0,0 +1,36 @@
+// Copyright 2016 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef COMPONENTS_OS_CRYPT_KEY_STORAGE_LINUX_H_
+#define COMPONENTS_OS_CRYPT_KEY_STORAGE_LINUX_H_
+
+#include <memory>
+#include <string>
+
+#include "base/macros.h"
+
+// An API for retrieving OSCrypt's password from the system's password storage
+// service

[vabr (Chromium), 2016/05/23 12:38:33]

nit: Also here, please end the sentence with a full-stop.

[cfroussios, 2016/05/30 11:50:16]

Done.

+class KeyStorageLinux {
+ public:
+  KeyStorageLinux() = default;
+  virtual ~KeyStorageLinux() = default;
+
+  // Tries to load all known key storages. Returns the first that succeeds or
+  // null if none succeed.
+  static std::unique_ptr<KeyStorageLinux> CreateService();
+
+  // Gets the encryption key from the OS password-managing library. If a key is
+  // not found, a new key will be generated, stored and returned.
+  virtual std::string GetKey() = 0;
+
+ protected:
+  // Loads the key storage. Returns false if the service is not available.
+  virtual bool Init() = 0;
+
+ private:
+  DISALLOW_COPY_AND_ASSIGN(KeyStorageLinux);
+};
+
+#endif  // COMPONENTS_OS_CRYPT_KEY_STORAGE_LINUX_H_