search

DavidXanatos / DiskCryptor

A fork of the DiskCryptor full disk encryption tool
https://www.diskcryptor.org/
459 stars 98 forks source link

Can DiskCryptor mitigate cold boot attacks? #81

Closed ghost closed 11 months ago

ghost commented 1 year ago

Can it? If DiskCryptor stores passwords in clear text format in RAM when encrypted volume is mounted, then password extraction via cold boot is possible. Are there plans to introduce RAM encryption in DiskCryptor? VeraCrypt already does that.

ghost commented 1 year ago

Can it? If DiskCryptor stores passwords in clear text format in RAM when encrypted volume is mounted, then password extraction via cold boot is possible. Are there plans to introduce RAM encryption in DiskCryptor? VeraCrypt already does that.

If it is not in clear text then it is still possible. Because key for decryption will still be stored in the RAM.

There are not much places where it can be placed - CPU registers (needs kernel patches), TPM (does not make sense).

So if you worry about cold boot attacks - buy AMD and enable TME.