Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
Suppose a Veracrypt container was mounted and dismounted later. Then CCleaner was run, Youtube was used to watch videos, websites are browsed, and so on for 3 hours. Then computer went to sleep (hibernate and pagefile disabled). What are the chances that the container can be decrypted because of whatever is left (master keys?) in the RAM or some where else??
Veracrypt version is below 1.24.
I have not personally verified this but according to Veracrypt Sourceforge:
When the volume is dismounted, we securely wipe the encrypted master keys from memory.
When Windows is shutdown or rebooted, we securely wipe the large memory region that was allocated at startup.
My interpretation is that recovering the keys after dismount would be unlikely.
