3 ms·
> [...]TrueCrypt cannot actually properly protect data on a running system. This I understand : as long as you store the encryption key in RAM somebody that ca
by jmnicolas 11y ago
> [...]TrueCrypt cannot actually properly protect data on a running system.
This I understand : as long as you store the encryption key in RAM somebody that can access your system can get it.
> If such protection is desired, one cannot get around solutions that use smartcards or other hardware-based key storage such that the encryption key can be better kept a secret.
Can someone expands a bit on this please ?
- ilurk 11y agoLike you said with TrueCrypt the key stays in RAM and is vulnerable to attacks. Using a hardware based key makes digital attacks impossible AFAIK. Although it's still subject to physical attacks (eg: theft, coercion). BTW, I'm surprised there is no mention of SSD and other flash drives, since IIRC that poses problems for FDE.