3 ms·
That's my main reason for using suspend-to-disk instead of suspend-to-ram. With suspend-to-disk Linux allows me to save the RAM image to the encrypted harddisk
by gst 15y ago
That's my main reason for using suspend-to-disk instead of suspend-to-ram.
With suspend-to-disk Linux allows me to save the RAM image to the encrypted harddisk. With suspend-to-ram it would be pretty easy to work around the encryption.
- tptacek 15y agoRight, but suspend-to-disk doesn't really mitigate cold boot attacks, because in order to suspend your data to disk, an AES key is loaded into DRAM. The "cold" in "cold boot" refers to the tricks researchers use to extract data from DRAM even after reboot. The point of this research is that there aren't (that we know of) "cold register" attacks that extract prior contents of CPU registers.
- gst 15y agoRight, cold boot attacks would also apply to suspend-to-disk. But currently I do not really worry about this scenario, as it seems that cold boot attacks are only feasible if you get access to the hardware within several minutes after it has been powered down.
- tptacek 15y agoSure. If you don't care about cold-boot attacks, you don't care about this research. I think it's interesting, but it doesn't keep me up at night.
- gst 15y agoOfftopic: Btw, does someone know why the "reply" links are missing on some posts (such as the parent post)? Is this a bug? At least it works when "manually" opening the respective URL for a reply.
- tptacek 15y agoThere is a deliberate delay on replies in deeply-nested threads, as a damper on flame wars.
- JoachimSchipper 15y agoYou can still reply via the 'link' button, though.