[dm-crypt] Avoiding cold boot attack : frozencache or luksSuspend?

[dm-crypt] Avoiding cold boot attack : frozencache or luksSuspend?

[octane indice]

Hello

I have a laptop encrypted with cryptsetup+luks. I'm concerned with cold-boot
attacks and I want to avoid them.

I think we can have two ways:

1/ 
I found a project: http://frozencache.blogspot.fr/ which goal is to defeat
cold boot attacks.
But:
-last post has made in 2009
-no link for project
-no email of developer
So, does anybody knows something about the availibility of frozen cache? A
conference in CCC says so, but there is not much information
Does somebody knows more about frozencache?

2/ 
Using cryptsetup luksSuspend before going to hibernation and when you lock
your screen.
But you must need some help to resume from hibernation or screensaver.
For screensaver we can imagine something in a ram disk
For hibernation, maybe some stuff in the /boot partition?
Did somebody try something like that?

Thank you


Envoyé avec Inmano, ma messagerie renversante et gratuite : http://www.inmano.com

Re: [dm-crypt] Avoiding cold boot attack : frozencache or luksSuspend?

[Philipp Deppenwiese]

Hi,

take a look at: 

http://www1.informatik.uni-erlangen.de/tresor

Regards Zaolin 

Am 18.07.2012 um 17:13 schrieb octane indice <octane@alinto.com>:

> Hello
> 
> I have a laptop encrypted with cryptsetup+luks. I'm concerned with cold-boot
> attacks and I want to avoid them.
> 
> I think we can have two ways:
> 
> 1/ 
> I found a project: http://frozencache.blogspot.fr/ which goal is to defeat
> cold boot attacks.
> But:
> -last post has made in 2009
> -no link for project
> -no email of developer
> So, does anybody knows something about the availibility of frozen cache? A
> conference in CCC says so, but there is not much information
> Does somebody knows more about frozencache?
> 
> 2/ 
> Using cryptsetup luksSuspend before going to hibernation and when you lock
> your screen.
> But you must need some help to resume from hibernation or screensaver.
> For screensaver we can imagine something in a ram disk
> For hibernation, maybe some stuff in the /boot partition?
> Did somebody try something like that?
> 
> Thank you
> 
> 
> Envoyé avec Inmano, ma messagerie renversante et gratuite : http://www.inmano.com
> 
> 
> 
> _______________________________________________
> dm-crypt mailing list
> dm-crypt@saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt