public marks

PUBLIC MARKS with tags encryption & hacking

2008

Cold Boot Attacks on Encryption Keys - Center for information technology policy

by rike_
Contrary to popular assumption, DRAMs used in most modern computers retain their contents for seconds to minutes after power is lost, even at operating temperatures and even if removed from a motherboard. Although DRAMs become less reliable when they are not refreshed, they are not immediately erased, and their contents persist sufficiently for malicious (or forensic) acquisition of usable full-system memory images. We show that this phenomenon limits the ability of an operating system to protect cryptographic key material from an attacker with physical access. We use cold reboots to mount attacks on popular disk encryption systems — BitLocker, FileVault, dm-crypt, and TrueCrypt — using no special devices or materials. We experimentally characterize the extent and predictability of memory remanence and report that remanence times can be increased dramatically with simple techniques. We offer new algorithms for finding cryptographic keys in memory images and for correcting errors caused by bit decay. Though we discuss several strategies for partially mitigating these risks, we know of no simple remedy that would eliminate them.

2006

Anonym.OS - kaos.theory security research Home - creative security research, focused on solving real-world problems - interesting and exciting open source software

by macroron
kaos theory was formed to bring together the brightest minds in the information technology and security communities, willing to contribute their ideas and dedicate their free time and energy, to create and innovate in an effort to organically and wholisti

Anonym.OS Download Live CD - kaos.theory security research

by macroron & 4 others
an OpenBSD 3.8 Live CD with strong tools for anonymizing and encrypting connections. Standard network applications are provided and configured to take advantage of the tor onion routing network.

2005

PUBLIC TAGS related to tag encryption

api +   cryptographie +   disque dur +   java +   security +   sécurité +  

Active users

rike_
last mark : 07/03/2008 19:48

alexf10
last mark : 17/05/2006 11:46

macroron
last mark : 17/01/2006 16:04