Re: Security Flaw in Popular Disk Encryption Technologies

Hi,

Maybe someone could implement a memory section
that is overwritten by the bios after reboot.
Then all the sensitive keys could be stored there.

This would prevent an attack that just boots from
another media and dump the whole memory out of i.e.
an USB-stick.

Preventing the physical access to the memory modules
could be done with a light sensor or a simple switch
at the computer case. If you implement also a temperature-
sensor near the memory-modules you could prevent cooling
them down before removal. (You'd just overwrite the keys
if the temperature falls i.e. below 10°C)

Greets,
Martin L.
_______________________________________________
freebsd-hackers@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • [Vuln-dev Challenge] Challenge #2
    ... structure somewhere in memory. ... _IO_file_jumps in the FILE structure to jump to a jump ... crafted FILE struct will be into the log file from ... You overwrite main's return code to point ...
    (Vuln-Dev)
  • Re: free space wiper...
    ... >> I'm looking for some utility that will wipe (overwrite with random ... > This snippet will clear swap by allocating swap one int at a time and ... > int main{ ... the memory is overwritten with random data. ...
    (comp.os.linux.security)
  • memory corruption/panic solved ("FAILURE - ATAPI_IDENTIFY no interrupt")
    ... I've tracked down the source of the memory corruption in -current that ... fill out an immediate read request for 512 bytes ... I've tested the attached patch and it fixes the memory overwrite (tested ... request->donecount in each loop iteration (bug 2). ...
    (freebsd-current)
  • Re: Overwriting a portion of a binary file
    ... the whole memory might not be enough. ... Assuming you only want to overwrite a record however, ... void add_record ... int main ...
    (comp.lang.c)
  • Re: FILE I/O
    ... Unix file system is assumed. ... Then read the next 100 bytes, and overwrite w/ the previous ... One variation, if there's enough memory, is to read everything from ...
    (comp.unix.programmer)