Re: Security Flaw in Popular Disk Encryption Technologies

From: "Igor Mozolevsky" <igor@xxxxxxxxxxxxxxxx>
Date: Sat, 23 Feb 2008 21:28:58 +0000

On 23/02/2008, Brooks Davis <brooks@xxxxxxxxxxx> wrote:

You should actually read the paper. :) They successfully defeat both
of these type of protections by using canned air to chill the ram and
transplanting it into another machine.

Easy to get around this attack - store the key on a usb
stick/cd/whatever and every time the OS needs to access the encrypted
date the key should be read, data decrypted, then key wiped from the
memory; or have the daemon erase the key from memory every T minutes
and re-acquire the key at next access attempt...

Or you could carry something that emits a huge EMI pulse to destroy
the data on the disk...
_______________________________________________
freebsd-hackers@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@xxxxxxxxxxx"

Follow-Ups:
- Re: Security Flaw in Popular Disk Encryption Technologies
  - From: Bill Moran
- Re: Security Flaw in Popular Disk Encryption Technologies
  - From: Achim Patzner

References:
- Re: Security Flaw in Popular Disk Encryption Technologies
  - From: Pieter de Boer
- Re: Security Flaw in Popular Disk Encryption Technologies
  - From: Tim Clewlow
- Re: Security Flaw in Popular Disk Encryption Technologies
  - From: Brooks Davis

Prev by Date: Re: find -lname and -ilname implemented
Next by Date: Re: find -lname and -ilname implemented
Previous by thread: Re: Security Flaw in Popular Disk Encryption Technologies
Next by thread: Re: Security Flaw in Popular Disk Encryption Technologies
Index(es):
- Date
- Thread

Relevant Pages

Re: Random Restarts - Please Help
... I upgraded my BIOS a long time ago ... Beginners Guides: Diagnosing Bad Memory
... How to diagnose bad RAM ... (microsoft.public.windowsxp.help_and_support)
Re: Alocated Memory Error (SQLSERVR)
... but my understanding is that the MSDE instances are designed to ... and you
don't want it grabbing all that RAM. ... running but non ever going about 200mb of memory
usage. ... Server 2000 SP4, ... (microsoft.public.windows.server.sbs)
Re: help
... choices and found the RAM memory test option and ran it, ... second later that
the DIMM RAM chip showed error after error. ... I would bet that the fan ...
> inspection, and swapped suspected parts around, and got no boot ... (microsoft.public.windowsxp.general)
Re: How to set up a Linux machine that occupies the minimum memory footprint ?
... Of course, if you use 8GB of RAM, or more precisely if you ... Are you saying
that if I have a 4GB RAM memory, ... Linux will somehow "know" that it doesn't have
... You've said in another message that your app is ... (comp.os.linux.setup)
Re: How to set up a Linux machine that occupies the minimum memory footprint ?
... Of course, if you use 8GB of RAM, or more precisely if you ... Are you saying
that if I have a 4GB RAM memory, ... Linux will somehow "know" that it doesn't have
... You've said in another message that your app is ... (comp.os.linux.misc)