Re: [TuxOnIce-devel] RFC: Suspend-to-ram cold boot protection byencrypting page cache

[Pavel Machek]

On Wed 2009-07-08 03:47:53, Jeremy Maitin-Shepard wrote:
> Pavel Machek <pavel@xxxxxx> writes:
> 
> [snip]
> 
> > I believe uswsusp could be used rather easily. Just modify s2disk to
> > encrypt image in ram without writing it out, then decrypt it from ram
> > and resume... it should be interesting hack.
> 
> As far as I understand, that would be completely useless since the image
> that would be encrypted would just be a copy of what would still remain
> in memory.

Yes... so next step would be kernel call that would erase all the
pagecache and anonymous pages. You would still leave some data in
kernel structures, but that would be quite hard to fix. 

-- 
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/