I don't understand how disabling suspend to ram solve any 'cold boot' class of attacks.
If i have physical access to your system (has needed by this kind of attack), i'd just pull the plug out of it and start with my boot device of choice. I would not trust your suspend to ram anyway.
Ubuntu aims for ten-second boot time with 10.04 (ars Technica)
Posted Jun 12, 2009 19:27 UTC (Fri) by warp (subscriber, #14659)
[Link]
With full disk encryption and a powered off system, I care a lot less if a laptop is stolen from the car while I'm at the store.
With full disk encryption and a suspend to ram system, the cold boot issue allows them to grab the memory from the system, potentially even move it to another system, and grab the decryption keys for the HD.
Now, ideally, Linux overwrite the encryption keys on shut down, but.