>DRAM access during hibernation and within 2 minutes of shutdown: BitArmor >scrubs keys using KeyScrubber™ technology >immediately as the computer shuts >down or goes into hibernation mode – accessing the memory will yield nothing.
If you look at Blackhat Schedule, you probably know there is a lecture entitled "Windows hibernation file for fun and profit". In this lecture, I'll explain how we could have access to the undocumented hibernation file. There is no need to act within 2 minutes of shutdown... READ and WRITE access to it. I'll also show how to use this file in defensive and also offensive cases. Not like princeton people who read matasano articles to know how to identify crypto keys in memory and use a paper written 10 years ago about freezing memory. On Mon, Aug 4, 2008 at 6:40 PM, Tim Hollebeek <[EMAIL PROTECTED]> wrote: > Anything anyone says now will be sheer speculation. > > If you can wait until Thursday, we'll be revealing all the > details at Blackhat (there are some pretty clever tricks > involved). > >> -----Original Message----- >> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] >> On Behalf Of Garrett M. Groff >> Sent: Monday, August 04, 2008 11:34 AM >> To: fde@www.xml-dev.com >> Subject: [FDE] software defense for "cold boot" attack? >> >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Any thoughts on claims made by BitArmor that they have a software >> solution >> to the "cold boot" attack vector? >> http://www.bitarmor.com/prevent-cold-boot-attacks/ >> >> G >> >> -----BEGIN PGP SIGNATURE----- >> Version: PGP Desktop 9.8.3 (Build 4028) - not licensed for commercial >> use: www.pgp.com >> Charset: utf-8 >> >> wj8DBQFIlyFYSGIRT5oVahwRAmu+AJ9YEl7XSL+I4aNygK0FN4PLVkIR9gCgsSsF >> QRKtGBZr9FX56QExnniqdVE= >> =IQ+T >> -----END PGP SIGNATURE----- >> >> _______________________________________________ >> FDE mailing list >> FDE@www.xml-dev.com >> http://www.xml-dev.com/mailman/listinfo/fde > > > _______________________________________________ > FDE mailing list > FDE@www.xml-dev.com > http://www.xml-dev.com/mailman/listinfo/fde > -- Matthieu Suiche _______________________________________________ FDE mailing list FDE@www.xml-dev.com http://www.xml-dev.com/mailman/listinfo/fde
