Re: [eros-arch] Did you *really* zeroize that key?

[Jeroen C. van Gelderen]

On Sunday, November 10, 2002, at 07:33 PM, Jonathan S. Shapiro wrote:

4. Encrypt all *used* storage as it goes to disk, whereupon you don't
need to worry about explicitly zeroing the deleted storage.

This can be a problem when you are somehow forced to decrypt your storage contents to allow forensics.

The last, I think, is the right answer. On the whole, when my laptop is
stolen I don't want anybody to get *anything* useful off of that drive.
If they can't get anything useful, then in particular they cannot get my
crypto keys and I'm done.

Law enforcement can get your crypto keys in some backward countries.

First question: what is your threat model?

-J
--
Jeroen C. van Gelderen -- [EMAIL PROTECTED]

If you took the entire world-population (~6.5bn) and put them in Nebraska
(~77k square miles) you'd get a population density of 84k per square mile.
For reference: the population density in Manhattan is 85k per square mile.