lkml.org 
[lkml]   [2009]   [Jul]   [8]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectRe: [TuxOnIce-devel] RFC: Suspend-to-ram cold boot protection by encrypting page cache
    Date
    Pavel Machek <pavel@ucw.cz> writes:

    > On Wed 2009-07-08 03:47:53, Jeremy Maitin-Shepard wrote:
    >> Pavel Machek <pavel@ucw.cz> writes:
    >>
    >> [snip]
    >>
    >> > I believe uswsusp could be used rather easily. Just modify s2disk to
    >> > encrypt image in ram without writing it out, then decrypt it from ram
    >> > and resume... it should be interesting hack.
    >>
    >> As far as I understand, that would be completely useless since the image
    >> that would be encrypted would just be a copy of what would still remain
    >> in memory.

    > Yes... so next step would be kernel call that would erase all the
    > pagecache and anonymous pages. You would still leave some data in
    > kernel structures, but that would be quite hard to fix.

    Okay. (This does still require the same assumption as TuxOnIce
    regarding the page cache, though.)

    --
    Jeremy Maitin-Shepard


    \
     
     \ /
      Last update: 2009-07-08 13:05    [W:5.722 / U:0.204 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site