LWN.net Logo

Cold Reboot Attacks on Disk Encryption

Cold Reboot Attacks on Disk Encryption

Posted Feb 21, 2008 20:10 UTC (Thu) by elicriffield (subscriber, #33738)
Parent article: Cold Reboot Attacks on Disk Encryption

If your seizing a computer that is on, why would you ever shut it off

Just use this device to move a running computer without it ever going to sleep or lose power,
even if its plugged directly into the wall.
http://www.youtube.com/watch?v=erq4TO_a3z8

Disk Encryption only works when the computer is off, and now we know it only works when the
computer has been off for a min or two. 

Hole disk Encryption is still very effective for transporting laptops around, the most common
cause of data lose. Anything you have thats important should be in an encrypted file thats not
decrypted when your not using it, then even if they get to your hard drive your important data
wont be compromised.

You should be more worried about the TSA forcing you to give you there password:
http://www.schneier.com/blog/archives/2008/02/us_customs_...

Eli Criffield


(Log in to post comments)

Cold Reboot Attacks on Disk Encryption

Posted Feb 22, 2008 16:04 UTC (Fri) by JoeBuck (subscriber, #2330) [Link]

The "min or two" could be eliminated by having the shutdown or hibernate sequence wipe the key.

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds
Powered by Rackspace Managed Hosting.