There's a neat implementation of AES that uses only registers and never has the key in RAM after boot. I forget the name right now, but it's pretty fucking awes

There's a neat implementation of AES that uses only registers and never has the key in RAM after boot. I forget the name right now, but it's pretty fucking awesome. IIRC it puts the key into debug registers, then disables access to those registers. It calculates the key schedule on-the-fly for each block it encrypts, and it performs decently with AES-NI. So neither the key, nor any of intermediate pieces, are ever in RAM, just in registers. Edit: Here it is: Tresor: http://www1.informatik.uni-erlangen.de/tresor http://www1.informatik.uni-erlangen.de/tresor