4 ms·
It's unlikely that this would matter to most people, but leaving the computer sleeping rather than hibernated or shutdown partially defeats any full disk encryp
by 1q2w3e4r5t6y7u8 7y ago
It's unlikely that this would matter to most people, but leaving the computer sleeping rather than hibernated or shutdown partially defeats any full disk encryption. Recovering keys from RAM is possible for a short period of time after power is removed. [1] Microsoft suggests disabling sleep when using bitlocker encryption. [2] And it is similarly suggested that Ubuntu use suspend-to-disk (hibernate) rather than suspend-to-RAM (sleep) when utilizing full disk encryption. [3] For better security leave the computer shutdown when not using it.
1. https://en.wikipedia.org/wiki/Cold_boot_attack https://en.wikipedia.org/wiki/Cold_boot_attack
2.https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-vista/cc766200(v=ws.10)?redirectedfrom=MSDN#what-are-the-implications-of-using-the-sleep-or-hibernate-power-management-options https://docs.microsoft.com/en-us/previous-versions/windows/i...
3. https://security.stackexchange.com/questions/208921/is-suspend-to-ram-really-a-meaningful-risk-for-full-disk-encryption https://security.stackexchange.com/questions/208921/is-suspe...