2008-02-22 Science
|
Researchers: Disk Encryption Not Secure
|
The five minute video at the link is way more informative than this article.
Researchers with Princeton University and the Electronic Frontier Foundation have found a flaw that renders disk encryption systems useless if an intruder has physical access to your computer -- say in the case of a stolen laptop or when a computer is left unattended on a desktop in sleep mode or while displaying a password prompt screen.
The attack takes only a few minutes to conduct and uses the disk encryption key that's stored in the computer's RAM.
The attack works because content as well as encryption keys stored in RAM linger in the system, even after the machine is powered off, enabling an attacker to use the key to collect any content still in RAM after reapplying power to the machine.
"We've broken disk encryption products in exactly the case when they seem to be most important these days: laptops that contain sensitive corporate data or personal information about business customers," said J. Alex Halderman, one of the researchers, in a press release. "Unlike many security problems, this isn't a minor flaw; it is a fundamental limitation in the way these systems were designed."
The researchers successfully performed the attack on several disk encryption systems -- Apple's FileVault, Microsoft's BitLocker, as well as TrueCrypt and dm-crypt -- but said they have no reason to believe it won't work on other disk encryption systems as well, since they all share similar architectures.
They released a paper about their work as well as a video demonstration of the attack (below).
|
Posted by gorb 2008-02-22 03:58||
||
Front Page|| [27 views ]
Top
|
Posted by OldSpook 2008-02-22 08:50||
2008-02-22 08:50||
Front Page
Top
|
Posted by regular joe 2008-02-22 18:08||
2008-02-22 18:08||
Front Page
Top
|
Posted by bigjim-ky 2008-02-22 18:26||
2008-02-22 18:26||
Front Page
Top
|
Posted by OldSpook 2008-02-22 22:26||
2008-02-22 22:26||
Front Page
Top
|
|
16:56 Jefe101
16:32 Mullah Richard
16:29 Mullah Richard
16:27 Mullah Richard
16:19 Mullah Richard
16:16 Procopius2k
16:15 swksvolFF
16:11 Besoeker
16:09 Tom
16:08 Procopius2k
16:05 Procopius2k
16:04 Skidmark
16:04 Lord Garth
16:01 Lord Garth
15:55 M. Murcek
15:52 Lord Garth
15:30 NoMoreBS
15:16 Mullah Richard
15:12 MikeKozlowski
15:09 NoMoreBS
14:57 NoMoreBS
14:56 Grom the Reflective
14:49 49 Pan
14:48 swksvolFF
|