From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <zaolin@das-labor.org>
Received: from mail.saout.de ([127.0.0.1])
 by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id Atw3Hps40lMf for <dm-crypt@saout.de>;
 Wed, 18 Jul 2012 18:05:50 +0200 (CEST)
Received: from das-labor.org (das-labor.org [IPv6:2a01:4f8:100:63c2::2])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mail.saout.de (Postfix) with ESMTPS
 for <dm-crypt@saout.de>; Wed, 18 Jul 2012 18:05:50 +0200 (CEST)
Received: from [172.24.65.193] (pd956fa0c.dip0.t-ipconnect.de [217.86.250.12])
 (using TLSv1 with cipher AES128-SHA (128/128 bits))
 (No client certificate requested) (Authenticated sender: zaolin)
 by das-labor.org (Postfix) with ESMTPSA id 0DE6010522F2
 for <dm-crypt@saout.de>; Wed, 18 Jul 2012 17:59:59 +0200 (CEST)
References: <1342624384.5006d280d077c@www.inmano.com>
From: Philipp Deppenwiese <zaolin@das-labor.org>
Content-Type: text/plain;
	charset=utf-8
In-Reply-To: <1342624384.5006d280d077c@www.inmano.com>
Message-Id: <337DA804-432B-4789-8F51-F3857E2C2439@das-labor.org>
Date: Wed, 18 Jul 2012 17:59:57 +0200
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (1.0)
Subject: Re: [dm-crypt] Avoiding cold boot attack : frozencache or
	luksSuspend?
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: dm-crypt <dm-crypt@saout.de>

Hi,

take a look at:=20

http://www1.informatik.uni-erlangen.de/tresor

Regards Zaolin=20

Am 18.07.2012 um 17:13 schrieb octane indice <octane@alinto.com>:

> Hello
>=20
> I have a laptop encrypted with cryptsetup+luks. I'm concerned with cold-bo=
ot
> attacks and I want to avoid them.
>=20
> I think we can have two ways:
>=20
> 1/=20
> I found a project: http://frozencache.blogspot.fr/ which goal is to defeat=

> cold boot attacks.
> But:
> -last post has made in 2009
> -no link for project
> -no email of developer
> So, does anybody knows something about the availibility of frozen cache? A=

> conference in CCC says so, but there is not much information
> Does somebody knows more about frozencache?
>=20
> 2/=20
> Using cryptsetup luksSuspend before going to hibernation and when you lock=

> your screen.
> But you must need some help to resume from hibernation or screensaver.
> For screensaver we can imagine something in a ram disk
> For hibernation, maybe some stuff in the /boot partition?
> Did somebody try something like that?
>=20
> Thank you
>=20
>=20
> Envoy=C3=A9 avec Inmano, ma messagerie renversante et gratuite : http://ww=
w.inmano.com
>=20
>=20
>=20
> _______________________________________________
> dm-crypt mailing list
> dm-crypt@saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt