HackerTube
HomeLongsLikedHistoryWatch laterCategoriesPlaylistsSettings

Lest We Remember: Cold Boot Attacks on Encryption Keys

pucitp1 HN recommender · recommended in 1 month, 2011-2020
YouTube
749K views · 18 years ago · demo · evergreen

A short Princeton CITP video describing cold boot attacks, where encryption keys remain in DRAM after power loss and can be recovered. It covers the attack against disk encryption such as BitLocker, FileVault and TrueCrypt.

It is linked as the original short demonstration that keys can be pulled from RAM after shutdown.

Security & hackingCryptographyComputer architecture & CPUs#coldbootattack#diskencryption#dramremanence#memoryforensics#princeton

4 comments from Hacker News

@wongarsu2020 · in “BusKill: A kill cord for your laptop”

For getting encryption keys from RAM after shutdown there's this video mentioned by another commentor: ▶ this video For using reflections, there's this paper implementing reading screen content from various things like reading glasses, a can of coke or even the user's eye (including a discussion of limitations): link Right now I can't find something on reading keyboard vibrations with lasers, but here's one doing it acoustically and one doing it via acclerometer of a phone on the table: link link

CitesView on HN
@Buge2020 · in “BusKill: A kill cord for your laptop”

You're right, I think an attack could be possible on some computers if the agents act very quickly. I don't think 30 minutes would be possible though, judging from what is said and shown in the original cold boot video: ▶ this video

CitesView on HN
@pjin2011 · in “Full disk encryption is too good?”

2. "with the cryogenic RAM freezing technique, presumably" - errr, no. With the "sit down at the computer and turn off the encryption/copy the data to an external drive technique", I think you'll find. Obvious bullsh*t to anyone technical but sounds 'cool' to your average 14yr old who reads these sort of sites. Errr, actually yes. You may be interested in [1] and [2]. [1] link [2] ▶ this video

CitesView on HN
@JoachimSchipper2011 · in “Instapaper Server Update”

Indeed, the encryption keys can be recovered from memory fairly easily. link is very readable; ▶ this video is a well-made 5-minute introduction by the authors.

RecommendsView on HN
Behind the scenes of iOS and Mac Security44:29

Behind the scenes of iOS and Mac Security

Black Hat
36K views • 6 years ago
The Memory Sinkhole - Unleashing An X86 Design Flaw Allowing Universal Privilege Escalation46:34

The Memory Sinkhole - Unleashing An X86 Design Flaw Allowing Universal Privilege Escalation

Black Hat
169K views • 10 years ago
Protected KVM on Arm64: A Technical Deep Dive - Quentin Perret, Google50:06

Protected KVM on Arm64: A Technical Deep Dive - Quentin Perret, Google

The Linux Foundation
6K views • 4 years ago
DEFCON 19: Bit-squatting: DNS Hijacking Without Exploitation (w speaker)45:14

DEFCON 19: Bit-squatting: DNS Hijacking Without Exploitation (w speaker)

Christiaan008
24K views • 14 years ago
DEF CON 19 - Artem Dinaburg - Bit-squatting: DNS Hijacking Without Exploitation45:14

DEF CON 19 - Artem Dinaburg - Bit-squatting: DNS Hijacking Without Exploitation

DEFCONConference
4K views • 13 years ago
GOD MODE UNLOCKED - Hardware Backdoors in x86 CPUs51:00

GOD MODE UNLOCKED - Hardware Backdoors in x86 CPUs

Black Hat
319K views • 8 years ago
Replace Your Exploit-Ridden Firmware with Linux - Ronald Minnich, Google38:03

Replace Your Exploit-Ridden Firmware with Linux - Ronald Minnich, Google

The Linux Foundation
73K views • 9 years ago
DEFCON 19: Introduction to Tamper Evident Devices52:43

DEFCON 19: Introduction to Tamper Evident Devices

Christiaan008
352K views • 15 years ago
The State of Kernel Self Protection Project by Kees Cook, Google45:47

The State of Kernel Self Protection Project by Kees Cook, Google

The Linux Foundation
7K views • 9 years ago
DEF CON 23 - Zoz - And That's How I Lost My Other Eye...Explorations in Data Destruction (Fixed)53:09

DEF CON 23 - Zoz - And That's How I Lost My Other Eye...Explorations in Data Destruction (Fixed)

DEFCONConference
533K views • 11 years ago
Breaking the x86 Instruction Set44:29

Breaking the x86 Instruction Set

Black Hat
381K views • 9 years ago
Guarding Against Physical Attacks: The Xbox One Story — Tony Chen, Microsoft58:05

Guarding Against Physical Attacks: The Xbox One Story — Tony Chen, Microsoft

Platform Security Summit
95K views • 7 years ago
36C3 -  Uncover, Understand, Own - Regaining Control Over Your AMD CPU56:37

36C3 - Uncover, Understand, Own - Regaining Control Over Your AMD CPU

media.ccc.de
23K views • 6 years ago
My personal fight against the modern laptop44:50

My personal fight against the modern laptop

linux conf au 2017 - Hobart, Australia
121K views • 9 years ago
DCEmu Reviews - 27C3 - Chaos Communication Congress 2010 - fail0verflow - FULL VIDEO44:40

DCEmu Reviews - 27C3 - Chaos Communication Congress 2010 - fail0verflow - FULL VIDEO

1KIND Reviews
47K views • 15 years ago
Joanna Rutkowska: Towards (reasonably) trustworthy x86 laptops1:02:52

Joanna Rutkowska: Towards (reasonably) trustworthy x86 laptops

media.ccc.de
27K views • 10 years ago
Chip & PIN Fraud Explained - Computerphile8:45

Chip & PIN Fraud Explained - Computerphile

Computerphile
851K views • 11 years ago
Ichthyology: Phishing as a Science24:28

Ichthyology: Phishing as a Science

Black Hat
38K views • 9 years ago
LibreSSL with Bob Beck1:05:45

LibreSSL with Bob Beck

Jason Tubnor
25K views • 12 years ago
BadUSB - On Accessories that Turn Evil by Karsten Nohl + Jakob Lell44:31

BadUSB - On Accessories that Turn Evil by Karsten Nohl + Jakob Lell

Black Hat
147K views • 12 years ago