Questions tagged [cold-boot-attack]

An active or semi-active [tag:side-channel] attack that involves turning off or resetting the device forcibly, then reading the contents of its memory before it decays or changes substantially.

Filter by
Sorted by
Tagged with
0
votes
0answers
41 views

Should I Pursue Platform-Ownership?

the context is this introduction in an HP whitepaper. I'm inquiring about "platform-ownership" within the Secure-Boot environment. I'm looking for a simplified summary of platform-ownership. Much of ...
0
votes
0answers
32 views

Non-obvious Mitigations for This DMA-Attack Demonstrated by F-Secure

Are there any non-obvious mitigations for the big DMA-attack revealed last year and demonstrated in this video by F-Secure? We know that Microsoft has published some material pertaining to DMA-...
0
votes
1answer
38 views

Interpreting this F-Secure Video of a DMA-Attack

I'm trying to interpret this video demonstration by F-Secure of the big cold-boot attack discovered last year. What is happening at the 50-second mark? Why does he insert the USB boot-device before ...
1
vote
2answers
106 views

Is setting a firmware password on a Macbook enough to prevent cold boot attacks?

I have a Macbook configured with a firmware password required to boot from any media other than the built-in NVMe drive. In theory, this means without my password you can't boot from removable media. ...
3
votes
1answer
401 views

Cold-boot attack example in the real world

I wrote a paper with a countermeasure for a cold-boot attack and am currently in rebuttal process. One reviewer struggles with the motivation behind cold-boot attacks. Specifically, he asks if there ...
1
vote
1answer
130 views

How Secure is Storing Cryptographic Information into the CPU Register instead of RAM

I read about Tresor / TreVisor / Armored. How Secure is Storing Cryptographic Information into the CPU Debug-Register over storing it into the RAM? And why is it currently not much used? I know ...
6
votes
3answers
850 views

Is tails os susceptible to a cold boot attack?

I've looked at the documentation and it mentions that upon shutdown the data residing in the ram is overwritten, however it doesn't go into any detail on how it does this. Documentation link: https://...
8
votes
2answers
1k views

Methods of cold boot attacks in the wild

As far as I know, there are two methods for performing cold boot attacks: Reboot the system into an alternate operating system or BIOS with a minimal memory footprint which automatically exports ...
5
votes
1answer
315 views

Why isn't there a FROST-like cold boot exploit for iOS?

I know there's a cold boot attack for Android called FROST (Forensic Recovery Of Scrambled Phones). But there doesn't seem to be one for iOs. Why is this? Is it because iOS is inherently more ...
9
votes
1answer
275 views

How long would a computer have to be off to be resistant to a cold boot attack?

I understand that the longer a computer is off, the more resistant it is to a cold boot attack. I also understand that an AES key can be reconstructed from a redundant round key schedule even after a ...
1
vote
1answer
293 views

Possible security risk with disk encryption key getting swapped to the hard drive

I've recently read about the cold boot method, where it's possible to obtain the key for an encrypted filesystem from DRAM. This can be done even after the computer is turned off, but it requires ...
4
votes
1answer
898 views

LUKS TPM disk encryption attacks

Is it possible, or are there any known attacks, to get the encryption key for disk encryption tpm-luks? (Linux LUKS using encryption key stored in TPM) I know that there are attacks like cold boot ...
6
votes
1answer
2k views

Are encryption keys wiped from RAM before hibernate, or how to do it (Luks and Truecrypt)

Using Linux, I have system and swap/hibernation partitions encrypted with LUKS, and data partitions encrypted with Truecrypt, and I am wondering when I put my laptop to hibernation if the encryption ...
2
votes
1answer
265 views

Rasberry Pi with TRESOR immune to cold boot and DMA attacks?

I would like to set up a Rasberry Pi and connect a large USB Harddrive and some webcams to run motion for homesurveillance. If I am understanding everything correctly if I get Ubuntu mate to run with ...
4
votes
3answers
609 views

Software defense against cold-boot attacks

Cold boot attacks are particularly nasty. On Android, a solution is to use a Nexus device with a locked bootloader to preven flashing a custom recovery. On a PC, your safeguards are even more limited....