News for hackers. Stuff that matters.

A comment on Usbkill – anti-forensic tool to halt computer when new USB device is connected. Parent comment

Re:Usbkill – anti-forensic tool to halt computer when new US... by captainmuon on Thursday August 06, 2020 @09:11AM (#24070535)
There are also things like TRESOR [1] which keep all encryption keys inside the CPU. I'm not sure what the current state of the art is.

There are so many possible evil maid attacks that I think it would be useful to add a pysical layer, just in case.

[1] https://en.wikipedia.org/wiki/TRESOR

[ Parent | on HN ]
Re:Usbkill – anti-forensic tool to halt computer when new US... by _kbh_ on Friday August 07, 2020 @06:53AM (#24080513)
TRESOR is a great project but pretty seperate to SME imo. TESOR implements SME but its implemented effectively in software, making it less secure and a lot slower. The great thing about SME on AMD CPUs is that I believe (at least on the newer Zen cores) it effectively can run at the speed of the memory, so you have no performance loss.
[ Parent | on HN ]