Fedora - Cold Boot Attack

Petr Pisar ppisar at redhat.com
Mon Nov 8 10:18:53 UTC 2010


On 2010-11-08, Petr Pisar <ppisar at redhat.com> wrote:
> One of the problem is where to store the key. I found a thesis
><http://pi1.informatik.uni-mannheim.de/filepool/theses/diplomarbeit-2010-mueller.pdf>
> right now which describes working implementation using SSE registers as
> a permanent (untill power cycle) storage for the key. I have not read it
> yet but it looks promissing.
>
So, after quick reading, this is not what I expected. This is just
another kernel block cypher used by dmcrypt to (de)crypt block device
data guartneeing encryption key does no leave CPU by storing the key in
SSE register. The drawback is nobody can use SSE instructions then.

-- Petr



More information about the devel mailing list