Cold boot attack: How to decrypt an encrypted computer

Zu den Kommentaren

“Even if we are paranoid they are trying to catch us”

The University of Princeton shows how an encrypted computer system can be read (decrypted).

This technique is also known as “Iceman Attack” or “cold ghosting attack“:

Lest We Remember: Cold Boot Attacks on Encryption Keys

BTW: timeframe to act (to ice the DRAM) is between 2,5 – 35 seconds. The newer your DRAM is the shorter the time. One would have to open the computer / laptop within a few seconds after it was shutdown or cut off from electricity.  How should this be done? How should this be done by a thief? A thief would be running in the first seconds. Under laboratory conditions the descripted trick can be done. If someone would have something to hide inside her computer and if she where in a totalitarian state a simple shutdown would not be enough if they are coming through the door/window/wall/ceiling/floor. (Wikipedia: Paranoia.)

Are you really scared? Then you want protection ‘gainst the Iceman Attack. You will be wanting to use Incognito Live CD. Shutting down it overwrites your RAM with random figures.This demands:

1. You’ll have got the time and will be able to shutdown your system.
2. The shutdown takes some precious seconds longer, caused by the overwriting. Will there be these seconds left?

Hinterlasse einen Kommentar

Eingeordnet unter Geister, Lebenshilfe

Schlagwörter: cold boot attack, decryption, DRAM, encryption, iceman attack, security