Protecting cryptographic secrets using file system attributes

A non-transitory computer-readable storage medium storing instructions, which, when executed on a processor, performs an operation for protecting a shared secret, the operation comprising:

• generating, by operation of a processor, a key based on a file system attribute of a file stored in a file system of a computing device, wherein the file system attribute of the file is distinct relative to files stored in the file system of the computing device;
• encrypting the shared secret with the key;
• and
• storing the encrypted shared secret in a storage memory on the computing device.

A system, comprising:

• a processor and
• a memory hosting an application, which, when executed on the processor, performs an operation for protecting a shared secret in a UNIX-based file system, the operation comprising:
• generating, by operation of a processor, a key based on a file system attribute of a file stored in a file system of a computing device, wherein the file system attribute of the file is distinct relative to files stored in the file system of the computing device,
• encrypting the shared secret with the key, and
• storing the encrypted shared secret in a storage memory on the computing device.