Messages in this thread | | | From | Jeremy Maitin-Shepard <> | Subject | Re: [TuxOnIce-devel] RFC: Suspend-to-ram cold boot protection by encrypting page cache | Date | Wed, 08 Jul 2009 04:09:41 -0700 |
| |
Pavel Machek <pavel@ucw.cz> writes:
> On Wed 2009-07-08 03:47:53, Jeremy Maitin-Shepard wrote: >> Pavel Machek <pavel@ucw.cz> writes: >> >> [snip] >> >> > I believe uswsusp could be used rather easily. Just modify s2disk to >> > encrypt image in ram without writing it out, then decrypt it from ram >> > and resume... it should be interesting hack. >> >> As far as I understand, that would be completely useless since the image >> that would be encrypted would just be a copy of what would still remain >> in memory.
> Yes... so next step would be kernel call that would erase all the > pagecache and anonymous pages. You would still leave some data in > kernel structures, but that would be quite hard to fix.
Okay. (This does still require the same assumption as TuxOnIce regarding the page cache, though.)
-- Jeremy Maitin-Shepard
| |