diff --git a/sec-keys/openpgp-keys-pam/Manifest b/sec-keys/openpgp-keys-pam/Manifest
new file mode 100644
index 0000000000000..11009544c9d77
--- /dev/null
+++ b/sec-keys/openpgp-keys-pam/Manifest
@@ -0,0 +1 @@
+DIST openpgp-keys-pam-20230330-pam.gpg 8678 BLAKE2B 9ea0614de2fa3f3f5f067bf2e3e40e290d02a0409a3e1c0d042f957a9f5d99da0fbcd2f909fb3f1caa7adfe7adee77442a148307a9b048131bdab2c570e78740 SHA512 a79e385e8b5cf375eb5d88e438e3aa277aeb36780f52e3551e71d3f8677e91c110c703b119a958ffd6d97da2806f69b57c42e0294efe59c0fbc280f7b90db55b
diff --git a/sec-keys/openpgp-keys-pam/metadata.xml b/sec-keys/openpgp-keys-pam/metadata.xml
new file mode 100644
index 0000000000000..297834e78bd94
--- /dev/null
+++ b/sec-keys/openpgp-keys-pam/metadata.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<maintainer type="project">
+		<email>base-system@gentoo.org</email>
+		<name>Gentoo Base System</name>
+	</maintainer>
+	<upstream>
+		<remote-id type="github">linux-pam/linux-pam</remote-id>
+	</upstream>
+</pkgmetadata>
diff --git a/sec-keys/openpgp-keys-pam/openpgp-keys-pam-20230330.ebuild b/sec-keys/openpgp-keys-pam/openpgp-keys-pam-20230330.ebuild
new file mode 100644
index 0000000000000..bd563299f1cfe
--- /dev/null
+++ b/sec-keys/openpgp-keys-pam/openpgp-keys-pam-20230330.ebuild
@@ -0,0 +1,23 @@
+# Copyright 1999-2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+# Cannot use sec-keys.eclass (bug #967745)
+
+DESCRIPTION="OpenPGP keys used by the linux-pam project"
+HOMEPAGE="https://github.com/linux-pam/linux-pam"
+# https://github.com/linux-pam/linux-pam/commit/b7ba550110f2f93fabb50976ea920fcb656c9a8e
+# pgp.keys.asc in linux-pam.git
+SRC_URI="https://raw.githubusercontent.com/linux-pam/linux-pam/b7ba550110f2f93fabb50976ea920fcb656c9a8e/pgp.keys.asc -> ${P}-pam.gpg"
+S="${WORKDIR}"
+
+LICENSE="public-domain"
+SLOT="0"
+KEYWORDS="~alpha amd64 arm arm64 ~hppa ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 ~sparc x86"
+
+src_install() {
+	local files=( ${A} )
+	insinto /usr/share/openpgp-keys
+	newins - pam.asc < <(cat "${files[@]/#/${DISTDIR}/}" || die)
+}