Sponsored link Serve your customers, not your servers, with VERIO Linux VPS. Full-access test-drive here. |
Cold Reboot Attacks on Disk EncryptionCold Reboot Attacks on Disk EncryptionPosted Mar 8, 2008 13:55 UTC (Sat) by kevinbsmith (subscriber, #4778)In reply to: Cold Reboot Attacks on Disk Encryption by njs Parent article: Cold Reboot Attacks on Disk Encryption
You missed the point. If you know that a key exists somewhere in RAM, it is fast and simple to read a key's worth of data starting at every byte in the system, and attempt a decode of every one until you find one that works. Brute force with one giga of attempts. No knowledge of OS, language, data structures, or app code is required, aside from knowing the encryption algorithm and key size (which is usually easy to find). Dead simple. And quite effective. Splitting the key, or having an encrypted key with its key elsewhere in RAM would foil that attack. At that point, the cracker would have to know something about the specific app and craft a custom attack, which makes the attack quite a lot more difficult/expensive. It's like locking your car so the stereo thief breaks into the unlocked car instead. It won't block a highly motivated/funded attacker, but will keep out some script kiddies. If the cost of splitting the key is near zero, it might be a good benefit/cost tradeoff.
(Log in to post comments)
|
Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds
Powered by Rackspace Managed Hosting.