Re: [cap-talk] RumpelTree++

Actually neither hybernation nor the swap not being encrypted are the main
issue. Consider the following scenario:

1) Alice stores a secret in her process memory at virtual location A
mapping to real address B.
2) A gets swapped to disk, B gets added to the pool of available pages.
3) ...
4) A gets paged back to memory but now virtual location A maps to real
address C.
5) Alice wipes virtual location A and thus real location C.

Now at any time (during 3 or theoretically possibly even later) Mallet may
malloc a new page that just happens to be B with the non-wiped version of
the secret.

Rob

On Sat, July 26, 2014 05:05, Bill Frantz wrote:
> On 7/25/14 at 2:14 PM, rmeijer-qWit8jRvyhVmR6Xm/[email protected] (Rob Meijer) wrote:
>
>>(sidenote: if swap is enabled all efforts could be futile)
>
> Encrypted swap might be a solution. If the machine is capable of
> hibernating, then the key for the encrypted swap has to be
> written to disk and might be recovered from there.
>
> Cheers - Bill
>
> ---------------------------------------------------------------------------
> Bill Frantz        |"We used to quip that "password" is the most common
> 408-356-8506       | password. Now it's 'password1.' Who said
> users haven't
> www.pwpconsult.com | learned anything about security?" -- Bruce Schneier
>
>
> _______________________________________________
> e-lang mailing list
> [email protected]
> http://www.eros-os.org/mailman/listinfo/e-lang
>
>