keys

file: /proc/sys/kernel/keys
variable: kernel.keys
Official reference

Every CEC will have a unique public key to enable tooling to build encrypted images. See s390-tools <https://github.com/ibm-s390-linux/s390-tools/> for the tooling.