News for hackers. Stuff that matters.

A comment on TRESOR Runs Encryption Securely Outside RAM. Parent comment

Re:TRESOR Runs Encryption Securely Outside RAM by dlitz on Friday September 27, 2013 @11:12AM (#6457372)
This isn't just about surreptitiously installing a compromised PCI card into a desktop PC. It affects every machine with a FireWire, Thunderbolt, or PCMCIA/ExpressCard port, i.e. most stolen corporate laptops.

https://en.wikipedia.org/wiki/DMA_attack

[ Parent | on HN ]
Re:TRESOR Runs Encryption Securely Outside RAM by rdl on Friday September 27, 2013 @11:40AM (#6457527)
VT-d addresses this. Standard on most Intel Core processors for a couple years.
[ Parent | on HN ]
Re:TRESOR Runs Encryption Securely Outside RAM by tga_d on Friday September 27, 2013 @12:54PM (#6457951)
I've heard that it could address it in theory but hasn't actually been used for that yet. Do you have a source saying it does this by default, or failing that, how to set it up to do that?
[ Parent | on HN ]
Re:TRESOR Runs Encryption Securely Outside RAM by sweis on Friday September 27, 2013 @04:39PM (#6459391)
IOMMU with VT-d is present, but not utilized by some major commercial operating systems and hypervisors.

There are also some implementation vulnerabilities in specific OSes which are not yet publicly disclosed.

[ Parent | on HN ]