News for hackers. Stuff that matters.

A comment on TRESOR Runs Encryption Securely Outside RAM. Parent comment

Re:TRESOR Runs Encryption Securely Outside RAM by anologwintermut on Friday September 27, 2013 @10:59AM (#6457307)
One of the other nice things about OSX is the feds may already have your key[0], so if you manage to get your computer back from them after that confiscate it, it won't have cracks in it from the extreme cold.

[0]http://www.nosuchcon.org/talks/D1_02_Alex_Ninjas_and_Harry_P...

[ Parent | on HN ]
Re:TRESOR Runs Encryption Securely Outside RAM by aroch on Friday September 27, 2013 @11:11AM (#6457366)
SMCs are present in nearly all Intel systems...They could very well store your truecrypt keys too
[ Parent | on HN ]
Re:TRESOR Runs Encryption Securely Outside RAM by anologwintermut on Friday September 27, 2013 @01:02PM (#6458004)
SMCs are not the problem. The problem is code in OSX could put your key there in a way that someone could dump it.

Of course, since FileVault is not open source, we have no way of knowing if it does this. Is this paranoid? Perhaps, but if you are worried about cold boot attacks you should be worried about this as well.

You might also be worried about some strange design decisions in FileVault such as the fact that it uses public key cryptography[0] for what ought to just be symmetric disk encryption. While not a red flag,it is a bit strange.

[0]http://deimos3.apple.com/WebObjects/Core.woa/FeedEnclosure/u...

[ Parent | on HN ]