News for hackers. Stuff that matters.

A comment on Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory. Parent comment

Re:Since Linux 6.9, LUKS suspend stopped wiping disk-encrypt... by akerl_ on Thursday July 02, 2026 @01:07PM (#48764378)
The reason this bug is unexpected is that the user is expecting to have to enter their password (because they expect the key to be wiped on suspend), and then _they are_ asked for their password. But there was a copy of the key elsewhere in kernel memory that was never cleared.
[ Parent | on HN ]
Re:Since Linux 6.9, LUKS suspend stopped wiping disk-encrypt... by unethical_ban on Thursday July 02, 2026 @02:13PM (#48765331)
Ah, my bad. Yes, if the user was being presented with the prompt on wake, I see the problem.

I have never had that setup so I was confused.

[ Parent | on HN ]