On Tue, Feb 26, 2008 at 12:44:40 -0500, Javier Perez <pepebuho@xxxxxxxxx> wrote: > > Can they defeat a Cold Boot attack ? I am pretty sure that Truecrypt was specifically mentioned as being vulnerable to this. > http://citp.princeton.edu.nyud.net/pub/coldboot.pdf > > Is there a solution yet for this? That depends on what your threat model is. If you aren't worried about no knock raids or laptops being stolen out of your hands, you can power off the machine and keep it under supervision for a few tens of minutes and at that point recovering keys from the dram will be a lot more tricky.
