PDA

View Full Version : Cold Boot Attacks on Encryption Keys


[yAtEs]
February 23rd, 2008, 11:01
someone sent me this link recently

http://citp.princeton.edu/memory/

might be interesting to you geeks :>

/yates.

dELTA
February 23rd, 2008, 12:05
Hehe, yep, pretty cool attack.

I guess one solution that would not require new hardware would be to let the BIOS overwrite the entire memory at powerup (would take time, but could be a security setting or something).

To be able to protect against the attack of actually quickly removing the entire chips and dropping them into liquid nitrogen, I guess a new hardware design for memory units would be required, with some kind of hardware feature to automatically wipe them as soon as they are removed from the motherboard.

JMI
February 23rd, 2008, 12:28
"Hehe, yep, pretty cool attack." I guess that was an "inadvertant" pun, considering the subject matter of the clip.

Wonder whether it has any effect on removable hardware keys, such as those which must be physically connected to the USB or printer port, or such. I guess it would have to also need to prevent the key from being stored in the onboard memory.

Fortunately, everytime it gets really cold here, my own (internal) memory completely erases itself and I have to completely relearn everything I previously knew. Problem is, I can no longer always remember what it "used to" know, so I really don't know if I have properly rebooted my brain!

Regards,

blurcode
February 23rd, 2008, 14:07
JMI, lol

I think they can create materials that will destroy the chip if it goes under some temperature.

tHE mUTABLE
February 23rd, 2008, 15:20
Quote:
I think they can create materials that will destroy the chip if it goes under some temperature.

Quote:
Fortunately, everytime it gets really cold here, my own (internal) memory completely erases itself and I have to completely relearn everything I previously knew. Problem is, I can no longer always remember what it "used to" know, so I really don't know if I have properly rebooted my brain!


Silkut
February 23rd, 2008, 16:17
Err,
The page doesn't show here, seems it's down ?
Unfortunately the web archive did not aspired it yet :/

JMI
February 23rd, 2008, 19:25
Working find from within the US at the moment. It's a flash presentation with audio commentary.

Regards,