3 ms·
One of the other nice things about OSX is the feds may already have your key[0], so if you manage to get your computer back from them after that confiscate it,
by anologwintermut 13y ago
One of the other nice things about OSX is the feds may already have your key[0], so if you manage to get your computer back from them after that confiscate it, it won't have cracks in it from the extreme cold.
[0]http://www.nosuchcon.org/talks/D1_02_Alex_Ninjas_and_Harry_Potter.pdf http://www.nosuchcon.org/talks/D1_02_Alex_Ninjas_and_Harry_P...
- aroch 13y agoSMCs are present in nearly all Intel systems...They could very well store your truecrypt keys too
- anologwintermut 13y agoSMCs are not the problem. The problem is code in OSX could put your key there in a way that someone could dump it. Of course, since FileVault is not open source, we have no way of knowing if it does this. Is this paranoid? Perhaps, but if you are worried about cold boot attacks you should be worried about this as well. You might also be worried about some strange design decisions in FileVault such as the fact that it uses public key cryptography[0] for what ought to just be symmetric disk encryption. While not a red flag,it is a bit strange. [0]http://deimos3.apple.com/WebObjects/Core.woa/FeedEnclosure/utah.edu.1380568002.01381129957.14368733217/enclosure.pdf http://deimos3.apple.com/WebObjects/Core.woa/FeedEnclosure/u...