-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 16/07/12 18:34, James Vasile wrote: > I've always assumed the flash problem implied two practices: > > 1) Don't save sensitive data in unencrypted form 2) Don't use a > swap partition > > Given the limitations of devices as they currently are, is there > anything else you would do?
The only other thing I can think of is to use an encryption scheme that's secure if the adversary gets multiple versions of the ciphertext. I'm not sure how LUKS, TrueCrypt, etc stack up in this regard. SQLCipher looks secure as far as I can tell (but I'm *not* a cryptographer) because it uses a fresh random IV each time it writes a page: http://sqlcipher.net/design/ Cheers, Michael -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJQBI1BAAoJEBEET9GfxSfMCXgH/2Arfr/JtqPy8dNfqQ6F3574 cphKmd4M1T8pdhAUlLllgGZUuNKXtpbEAODTvFSxK3lhRsAGZvrEVMS6q2he36bK iFc6ofsBt4t3mAiQP6m8olvz1NXaBxP5JbzdLAa6tMJ4rVQHKs/lsk4xfB0vj1aY vNgVLilIkpvwiqvhZUX1wtVdw3ajj23Fk0T24j61SZDlaCdMc4tA9ar+bqzfGF/N KCcOn8jxcxs31tDqE7GYYf7eUKO4EVO0ZtoiHZq1UdptBW3qHneIWn5AdbRWfpdc TNoqOPOyowfSSTJqdJJ/4tbguBHJi+UzxKBQHrYDYCjctQfNFKVgCAoX/Y60vkg= =h1hL -----END PGP SIGNATURE----- _______________________________________________ liberationtech mailing list [email protected] Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. You may ask for a reminder here: https://mailman.stanford.edu/mailman/listinfo/liberationtech Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech
