From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.saout.de ([127.0.0.1]) by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JDg_s1uBQnMr for ; Wed, 18 Jul 2012 17:19:06 +0200 (CEST) Received: from mx1-v2.alinto.net (mx1-v2.alinto.net [83.145.109.31]) by mail.saout.de (Postfix) with ESMTP for ; Wed, 18 Jul 2012 17:19:05 +0200 (CEST) Received: from http2alinto.alinto.net (http2alinto.alinto.net [83.145.109.62]) by mx1-v2.alinto.net (Postfix) with ESMTP id 1B70758014A for ; Wed, 18 Jul 2012 17:13:05 +0200 (CEST) Message-ID: <1342624384.5006d280d077c@www.inmano.com> Date: Wed, 18 Jul 2012 17:13:04 +0200 From: octane indice MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: [dm-crypt] Avoiding cold boot attack : frozencache or luksSuspend? List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt Hello I have a laptop encrypted with cryptsetup+luks. I'm concerned with cold-boot attacks and I want to avoid them. I think we can have two ways: 1/=20 I found a project: http://frozencache.blogspot.fr/ which goal is to defeat cold boot attacks. But: -last post has made in 2009 -no link for project -no email of developer So, does anybody knows something about the availibility of frozen cache? A conference in CCC says so, but there is not much information Does somebody knows more about frozencache? 2/=20 Using cryptsetup luksSuspend before going to hibernation and when you lock your screen. But you must need some help to resume from hibernation or screensaver. For screensaver we can imagine something in a ram disk For hibernation, maybe some stuff in the /boot partition? Did somebody try something like that? Thank you Envoy=E9 avec Inmano, ma messagerie renversante et gratuite : http://www.in= mano.com