News for hackers. Stuff that matters.

A comment on Cryogenically frozen RAM bypasses disk encryption methods (2008).

Re:Cryogenically frozen RAM bypasses disk encryption methods... by lunixbochs on Saturday June 11, 2016 @08:22PM (#11886057)
https://en.wikipedia.org/wiki/TRESOR

OS X has a setting called "destroy FileVault key on standby" in `pmset` which mitigates cold boot attacks.

I kinda want the CPU/MMU to support loading encryption keys to transparently encrypt some or all of RAM (could also toss in error checking while we're at it). SGX has this in the trusted containers, but I think it makes sense for general use too.

[ Parent | on HN ]
Re:Cryogenically frozen RAM bypasses disk encryption methods... by kdeldycke on Sunday June 12, 2016 @06:41AM (#11887520)
And here is the command to activate FileVault key destruction on stand by: https://github.com/kdeldycke/dotfiles/commit/32a01c08e196f87...
[ Parent | on HN ]