BLU Discuss list archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Discuss] Cold Boot Attacks on Encryption Keys

Subject: [Discuss] Cold Boot Attacks on Encryption Keys
From: richard.pieri at gmail.com (Richard Pieri)
Date: Sun, 10 Nov 2013 10:59:30 -0500
In-reply-to: <fbd74be217624653a75a59a22b9b0ea4@BL2PR04MB035.namprd04.prod.outlook.com>
References: <527CC7D4.50000@stephenadler.com> <li6mwle1xr3.fsf@panix5.panix.com> <527D4B03.8070300@borg.org> <527D50D1.4000902@gmail.com> <527D5312.9040209@borg.org> <527D58EB.6010203@gmail.com> <CAJFsZ=qLGt1x6uyt=TRu+-tVPxJY76tvFeP2n2v_UcUhoe1+-g@mail.gmail.com> <527DA694.5090402@gmail.com> <527DADB9.3060309@gmail.com> <527E9326.6080206@gmail.com> <527F0FAA.2090205@gmail.com> <527F341C.3070306@gmail.com> <fbd74be217624653a75a59a22b9b0ea4@BL2PR04MB035.namprd04.prod.outlook.com>

Edward Ned Harvey (blu) wrote:
> The most obvious solution to me, is to have an authentication server
> (AD/Ldap/Kerberos) which boots using TPM.

But TPM is potentially vulnerable to cold boot attacks, and pre-boot PIN 
systems are vulnerable to bootkit attacks. The only reliable defense 
against these is to maintain good physical security.

-- 
Rich P.

Follow-Ups:
- [Discuss] Cold Boot Attacks on Encryption Keys
  - From: kentborg at borg.org (Kent Borg)

References:
- [Discuss] ssd's in linux
  - From: adler at stephenadler.com (Stephen Adler)
- [Discuss] ssd's in linux
  - From: smallm at panix.com (Mike Small)
- [Discuss] ssd's in linux
  - From: kentborg at borg.org (Kent Borg)
- [Discuss] ssd's in linux
  - From: richard.pieri at gmail.com (Richard Pieri)
- [Discuss] ssd's in linux
  - From: kentborg at borg.org (Kent Borg)
- [Discuss] ssd's in linux
  - From: richard.pieri at gmail.com (Richard Pieri)
- [Discuss] ssd's in linux
  - From: bogstad at pobox.com (Bill Bogstad)
- [Discuss] Cold Boot Attacks on Encryption Keys
  - From: tmetro+blu at gmail.com (Tom Metro)
- [Discuss] Cold Boot Attacks on Encryption Keys
  - From: richard.pieri at gmail.com (Richard Pieri)
- [Discuss] Cold Boot Attacks on Encryption Keys
  - From: tmetro+blu at gmail.com (Tom Metro)
- [Discuss] Cold Boot Attacks on Encryption Keys
  - From: richard.pieri at gmail.com (Richard Pieri)
- [Discuss] Cold Boot Attacks on Encryption Keys
  - From: tmetro+blu at gmail.com (Tom Metro)
- [Discuss] Cold Boot Attacks on Encryption Keys
  - From: blu at nedharvey.com (Edward Ned Harvey (blu))

Prev by Date: [Discuss] Cold Boot Attacks on Encryption Keys
Next by Date: [Discuss] Cold Boot Attacks on Encryption Keys
Previous by thread: [Discuss] Cold Boot Attacks on Encryption Keys
Next by thread: [Discuss] Cold Boot Attacks on Encryption Keys
Index(es):
- Date
- Thread


BLU is a member of BostonUserGroups
We also thank MIT for the use of their facilities.

Boston Linux & Unix / webmaster@blu.org