[LBo] more fyi - Paper Describes Weakness of Disk Encryption Software

[Stefan Waidele]

Robert Spangler schrieb:
> [...]
> [quote]
>  the researchers show that data is vulnerable because encryption keys and 
> passwords stored in a computer's temporary memory -- or RAM -- do not 
> disappear immediately after losing power.
> [/quote]
> 
> Not really.  The question then is how long is this infgormation stored.

I have not read the original research, but there were some 4-6 Minutes
in the discussions I followed (not so closely). That is after powering
off, not power-saving.

So the really paranoid among us should keep an eye on their computer for
a little while after powering off. But since physical access always
means compromized security, that should not matter too much.

Stefan

PS: I am not paranoid. I know they are after me...

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
Url : http://LinuxBasics.org/pipermail/qna/attachments/20080223/ada18984/attachment.pgp