3 ms·
I'd never even heard of cold boot attacks. Is there any prevention of this?
by alana314 3y ago
I'd never even heard of cold boot attacks. Is there any prevention of this?
- anfractuosity 3y agoI believe both recent Intel and AMD processors enable you to encrypt memory, such as Intel Total Memory Encryption.
- dist-epoch 3y agoThat is correct, AMD Zen4 (Ryzen 7000) supports transparent full memory encryption. It also supports more granular memory encryption, for example to prevent the host accessing VM guest memory.
- Wool2662 3y agoYes, control physical access to the hardware. You can also achieve some mitigation by using encrypted ram.
- bri3d 3y ago* Hardware memory encryption / bus encryption. If implemented correctly, keys never touch RAM and will be discarded instantly across any power disruption. * Control physical access: don’t allow an attacker access to the DRAM chips. * Control logical access: use trusted boot systems which don’t allow an attacker to dump arbitrary memory, combined with physical access control so they can’t directly address memory externally.
- deleted 3y ago[deleted]
- sneak 3y agoKeeping secrets out of main memory, either with registers, encrypted memory, or use of a secure enclave (which in turn uses encrypted memory) for sensitive operations.