150 reputation
3
bio website clayfreeman.com
location Paragould, AR
age 19
visits member for 9 months
seen 10 hours ago

Jan
22
comment Is it possible to prevent a physical attack on full disk encryption?
Very true, but if I understand PrivateCore correctly, the only place that unencrypted data will ever be is in the CPU. When traveling to the HDD, it will be encrypted, and when traveling to the RAM, it should be encrypted.
Jan
22
comment Is it possible to prevent a physical attack on full disk encryption?
@woliveirajr Don't worry, I'm securing everything that I possibly can. I've taken appropriate measures with software already.
Jan
22
comment Is it possible to prevent a physical attack on full disk encryption?
The paths between CPU - RAM - HDD wouldn't necessarily have to be encrypted when communicating, but things definitely need to be encrypted when stored in RAM or HDD. Other than that, it seems as though a host operating system and an unencrypted section of RAM would be needed to allow PCI devices and such to function properly. Unfortunately, regarding physical server security, I would be unable to protect the server in the manner that you describe since I plan to colocate in a datacenter. I've considered this as maybe the only solution to my problem though.
Jan
22
awarded  Editor
Jan
22
revised Is it possible to prevent a physical attack on full disk encryption?
fixed grammar
Jan
22
suggested suggested edit on Is it possible to prevent a physical attack on full disk encryption?
Jan
22
comment Is it possible to prevent a physical attack on full disk encryption?
@woliveirajr I've attempted to make contact with PrivateCore to learn more about what they provide. That's a very good find! I'd like to have more than one option down the road though if possible. Preferably open source.
Jan
21
awarded  Scholar
Jan
21
accepted Is it possible to prevent a physical attack on full disk encryption?
Jan
21
comment Is it possible to prevent a physical attack on full disk encryption?
I'm wanting protection so that my clients' data cannot be retrieved physically from the server while it is running, just powered off recently, or has been powered off for a while.
Jan
20
comment Is it possible to prevent a physical attack on full disk encryption?
I can see what you mean now. Is there anything like a DIMM interface that automatically encrypts a stick of RAM? If you have a link to any piece of hardware or software that you think will help, send it my way.
Jan
20
comment Is it possible to prevent a physical attack on full disk encryption?
I plan to use the sysfs interface to enter the password remotely, so I should be safe from physical attacks on input devices. I'm planning this for a server in a datacenter that will be hosting VPSes. If you can offer any suggestions for security, they will be helpful.
Jan
20
comment Is it possible to prevent a physical attack on full disk encryption?
@kiBytes Hopefully an attack of that sort will be impossible in a datacenter due to interference from other machines, and by time my machine would be powered down and moved, the RAM contents would be gone.
Jan
20
comment Is it possible to prevent a physical attack on full disk encryption?
Do you have an example of some hardware that support full RAM encryption? I might be interested in purchasing such hardware. Also, wouldn't a virtual machine with a TRESOR-like vCPU still be vulnerable from the host level since the CPU registers are stored in the host's RAM?
Jan
20
awarded  Student
Jan
20
asked Is it possible to prevent a physical attack on full disk encryption?