Suppose Alice and Bob are communicating using secure channel and both use symmetric key algo (AES) for encryption/decryption. The scenario is like
1. Alice encrypt data M1 with secret key K and sends cipher text C1 to Bob. 2. Bob receives cipher text C1 and decrypt it to get plaintext M1. 3. Bob encrypt data M2 with secret key K and sends cipher text C2 to Alice. 4. Alice receives cipher text C2 and decrypt it to get plaintext M2.
These sequences are followed repeatedly till communication ends.
Both Alice and Bob are using Linux System with latest kernel.
I have following questions with respect to security point of view.
If an intruder somehow manages to gain root privileges on Alice's system, will the intruder be able to capture the plaintext M2 stored in memory while Alice performs decryption operation ?
In case the secret key K is stored in memory (I'm not sure** whether it is) during encryption/decryption is performed, then is Intruder also able to retrieve secret key K the same way?
From both answers , it is known using MEMORY DUMP , it is possible to recover secret key as well as plaintext.
Can you explain with example?