Lest We Remember: Cold Boot Attacks on Encryption Keys
pucitp1 HN recommender · recommended in 1 month, 2011-2020
749K views · 18 years ago · demo · evergreen
A short Princeton CITP video describing cold boot attacks, where encryption keys remain in DRAM after power loss and can be recovered. It covers the attack against disk encryption such as BitLocker, FileVault and TrueCrypt.
It is linked as the original short demonstration that keys can be pulled from RAM after shutdown.
44:29Behind the scenes of iOS and Mac Security
Black Hat
36K views • 6 years ago
46:34The Memory Sinkhole - Unleashing An X86 Design Flaw Allowing Universal Privilege Escalation
Black Hat
169K views • 10 years ago
50:06Protected KVM on Arm64: A Technical Deep Dive - Quentin Perret, Google
The Linux Foundation
6K views • 4 years ago
45:14DEFCON 19: Bit-squatting: DNS Hijacking Without Exploitation (w speaker)
Christiaan008
24K views • 14 years ago
45:14DEF CON 19 - Artem Dinaburg - Bit-squatting: DNS Hijacking Without Exploitation
DEFCONConference
4K views • 13 years ago
51:00GOD MODE UNLOCKED - Hardware Backdoors in x86 CPUs
Black Hat
319K views • 8 years ago
38:03Replace Your Exploit-Ridden Firmware with Linux - Ronald Minnich, Google
The Linux Foundation
73K views • 9 years ago
52:43DEFCON 19: Introduction to Tamper Evident Devices
Christiaan008
352K views • 15 years ago
45:47The State of Kernel Self Protection Project by Kees Cook, Google
The Linux Foundation
7K views • 9 years ago
53:09DEF CON 23 - Zoz - And That's How I Lost My Other Eye...Explorations in Data Destruction (Fixed)
DEFCONConference
533K views • 11 years ago
44:29Breaking the x86 Instruction Set
Black Hat
381K views • 9 years ago
58:05Guarding Against Physical Attacks: The Xbox One Story — Tony Chen, Microsoft
Platform Security Summit
95K views • 7 years ago
56:3736C3 - Uncover, Understand, Own - Regaining Control Over Your AMD CPU
media.ccc.de
23K views • 6 years ago
44:50My personal fight against the modern laptop
linux conf au 2017 - Hobart, Australia
121K views • 9 years ago
44:40DCEmu Reviews - 27C3 - Chaos Communication Congress 2010 - fail0verflow - FULL VIDEO
1KIND Reviews
47K views • 15 years ago
1:02:52Joanna Rutkowska: Towards (reasonably) trustworthy x86 laptops
media.ccc.de
27K views • 10 years ago
8:45Chip & PIN Fraud Explained - Computerphile
Computerphile
851K views • 11 years ago
24:28Ichthyology: Phishing as a Science
Black Hat
38K views • 9 years ago
1:05:45LibreSSL with Bob Beck
Jason Tubnor
25K views • 12 years ago
44:31BadUSB - On Accessories that Turn Evil by Karsten Nohl + Jakob Lell
Black Hat
147K views • 12 years ago
4 comments from Hacker News
For getting encryption keys from RAM after shutdown there's this video mentioned by another commentor: ▶ this video For using reflections, there's this paper implementing reading screen content from various things like reading glasses, a can of coke or even the user's eye (including a discussion of limitations): link Right now I can't find something on reading keyboard vibrations with lasers, but here's one doing it acoustically and one doing it via acclerometer of a phone on the table: link link
You're right, I think an attack could be possible on some computers if the agents act very quickly. I don't think 30 minutes would be possible though, judging from what is said and shown in the original cold boot video: ▶ this video
2. "with the cryogenic RAM freezing technique, presumably" - errr, no. With the "sit down at the computer and turn off the encryption/copy the data to an external drive technique", I think you'll find. Obvious bullsh*t to anyone technical but sounds 'cool' to your average 14yr old who reads these sort of sites. Errr, actually yes. You may be interested in [1] and [2]. [1] link [2] ▶ this video
Indeed, the encryption keys can be recovered from memory fairly easily. link is very readable; ▶ this video is a well-made 5-minute introduction by the authors.