| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <87d48b77nu.fsf@jeremyms.com> Date: Wed, 08 Jul 2009 04:09:41 -0700 From: Jeremy Maitin-Shepard <jeremy@...emyms.com> To: Pavel Machek <pavel@....cz> Cc: Nigel Cunningham <ncunningham@...a.org.au>, tuxonice-devel@...ts.tuxonice.net, linux-kernel@...r.kernel.org, Rafael Wysocki <rjw@...k.pl> Subject: Re: [TuxOnIce-devel] RFC: Suspend-to-ram cold boot protection by encrypting page cache Pavel Machek <pavel@....cz> writes: > On Wed 2009-07-08 03:47:53, Jeremy Maitin-Shepard wrote: >> Pavel Machek <pavel@....cz> writes: >> >> [snip] >> >> > I believe uswsusp could be used rather easily. Just modify s2disk to >> > encrypt image in ram without writing it out, then decrypt it from ram >> > and resume... it should be interesting hack. >> >> As far as I understand, that would be completely useless since the image >> that would be encrypted would just be a copy of what would still remain >> in memory. > Yes... so next step would be kernel call that would erase all the > pagecache and anonymous pages. You would still leave some data in > kernel structures, but that would be quite hard to fix. Okay. (This does still require the same assumption as TuxOnIce regarding the page cache, though.) -- Jeremy Maitin-Shepard -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists