News for hackers. Stuff that matters.

A comment on TRESOR Runs Encryption Securely Outside RAM. Parent comment

Re:TRESOR Runs Encryption Securely Outside RAM by jacquesm on Friday September 27, 2013 @10:03AM (#6457047)
OpenBSD will get you halfway there, it at least encrypts (if you switch it on) the virtual memory.
[ Parent | on HN ]
Re:TRESOR Runs Encryption Securely Outside RAM by dobbsbob on Friday September 27, 2013 @01:05PM (#6458020)
OpenBSD does this by default. It also now directly boots cryptodisks eliminating the need to create a /boot partition and carry it around if you're concerned about evil maid attacks, though I would imagine a camera or keyboard hardware keyloggers would defeat that pretty easily
[ Parent | on HN ]
Re:TRESOR Runs Encryption Securely Outside RAM by tedunangst on Friday September 27, 2013 @02:46PM (#6458750)
The boot loader is still on the disk, unencrypted.
[ Parent | on HN ]
Re:TRESOR Runs Encryption Securely Outside RAM by Nanzikambe on Saturday September 28, 2013 @01:49AM (#6461079)
That's what removable media is for
[ Parent | on HN ]
Re:TRESOR Runs Encryption Securely Outside RAM by dobbsbob on Friday September 27, 2013 @03:27PM (#6458968)
derp, /root correction
[ Parent | on HN ]
Re:TRESOR Runs Encryption Securely Outside RAM by m_eiman on Friday September 27, 2013 @11:13AM (#6457380)
As does OSX. Probably Windows too? There has to be a registry setting to tweak, somewhere.
[ Parent | on HN ]