[dm-crypt] Avoiding cold boot attack : frozencache or luksSuspend?

Philipp Deppenwiese zaolin at das-labor.org
Wed Jul 18 17:59:57 CEST 2012


Hi,

take a look at: 

http://www1.informatik.uni-erlangen.de/tresor

Regards Zaolin 

Am 18.07.2012 um 17:13 schrieb octane indice <octane at alinto.com>:

> Hello
> 
> I have a laptop encrypted with cryptsetup+luks. I'm concerned with cold-boot
> attacks and I want to avoid them.
> 
> I think we can have two ways:
> 
> 1/ 
> I found a project: http://frozencache.blogspot.fr/ which goal is to defeat
> cold boot attacks.
> But:
> -last post has made in 2009
> -no link for project
> -no email of developer
> So, does anybody knows something about the availibility of frozen cache? A
> conference in CCC says so, but there is not much information
> Does somebody knows more about frozencache?
> 
> 2/ 
> Using cryptsetup luksSuspend before going to hibernation and when you lock
> your screen.
> But you must need some help to resume from hibernation or screensaver.
> For screensaver we can imagine something in a ram disk
> For hibernation, maybe some stuff in the /boot partition?
> Did somebody try something like that?
> 
> Thank you
> 
> 
> Envoyé avec Inmano, ma messagerie renversante et gratuite : http://www.inmano.com
> 
> 
> 
> _______________________________________________
> dm-crypt mailing list
> dm-crypt at saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt


More information about the dm-crypt mailing list