Messages in this thread | | | Date | Sat, 4 Jul 2009 04:57:55 +0200 | From | Pavel Machek <> | Subject | Re: [TuxOnIce-devel] RFC: Suspend-to-ram cold boot protection by encrypting page cache |
| |
On Wed 2009-07-08 03:47:53, Jeremy Maitin-Shepard wrote: > Pavel Machek <pavel@ucw.cz> writes: > > [snip] > > > I believe uswsusp could be used rather easily. Just modify s2disk to > > encrypt image in ram without writing it out, then decrypt it from ram > > and resume... it should be interesting hack. > > As far as I understand, that would be completely useless since the image > that would be encrypted would just be a copy of what would still remain > in memory.
Yes... so next step would be kernel call that would erase all the pagecache and anonymous pages. You would still leave some data in kernel structures, but that would be quite hard to fix.
-- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
| |