Full Disk Encryption Isn't Quite Dead Albuquerque NM
Manipulating cold memory chips isn't for the faint at heart. Over the past two years, other researchers realized they could capture memory on powered-up computers by using the 1394 FireWire port found on most higher-end laptops.
Cisco Systems
(505) 816-6000
2155 Louisiana Boulevard NE # 7100
Albuquerque, NM
(505) 816-6000
2155 Louisiana Boulevard NE # 7100
Albuquerque, NM 87110
Services
Computer and Equipment Dealers, Personal Computer Peripheral Equipment, Computer Networks, Data Communications Equipment and Systems
Data Provided by:
Hallmark Computer Supplies
(505) 265-5801
4401 Cutler Avenue Northeast Suite C
Albuquerque, NM
(505) 265-5801
4401 Cutler Avenue Northeast Suite C
Albuquerque, NM 87110
Services
Computer Supplies Parts and Accessories, Computer Cable and Wire Installation, Computer Hardware and Supplies
Data Provided by:
P C Parts Plus
(505) 880-0050
5023 Menaul Boulevard Northeast
Albuquerque, NM
(505) 880-0050
5023 Menaul Boulevard Northeast
Albuquerque, NM 87110
Services
Computers and Equipment Repair and Maintenance, Computer and Equipment Dealers, Computer Supplies Parts and Accessories, Computer Hardware and Supplies
Hours
Same Day Service Available
Data Provided by:
Bi RA Systems Inc
(505) 881-8887
2410 Midtown Place NE # A
Albuquerque, NM
(505) 881-8887
2410 Midtown Place NE # A
Albuquerque, NM 87107
Services
Computers and Equipment Wholesale and Manufacturers, Computer Peripherals, Manufacturers' Agents and Representatives, Measuring Instrument Dealers, Industrial Control Instruments
Data Provided by:
Creative Consultants
(505) 345-7222
2415 Princeton Drive NE
Albuquerque, NM
(505) 345-7222
2415 Princeton Drive NE
Albuquerque, NM 87107
Services
Computers and Equipment Repair and Maintenance, Computer Consultants, Computer Peripherals, Computer Systems Consultants and Designers
Data Provided by:
HI Z Computer Supplies
(505) 883-4501
3100 San Mateo Boulevard Northeast
Albuquerque, NM
HI Z Computer Supplies
(505) 883-4501
3100 San Mateo Boulevard Northeast
Albuquerque, NM 87110
Services
Computer Hardware and Supplies
Data Provided by:
Electronic Parts CO
(505) 293-6161
2620 Rhode Island Street Northeast
Albuquerque, NM
(505) 293-6161
2620 Rhode Island Street Northeast
Albuquerque, NM 87110
Services
Electronic Equipment and Supplies Wholesale and Manufacturers, Electric Equipment and Supplies Dealers, Computer Supplies Parts and Accessories, Computer Hardware and Supplies, Consumer Electronics Stores
Data Provided by:
Penta Performance
(505) 345-4646
1704 Patrick Avenue Northwest
Albuquerque, NM
(505) 345-4646
1704 Patrick Avenue Northwest
Albuquerque, NM 87107
Services
Computer and Equipment Dealers, Computers and Equipment Wholesale and Manufacturers, Computer Peripherals
Payment Options
American Express, Credit Cards, Discover, MasterCard, VISA
Data Provided by:
EG and G
(505) 998-0677
2420 Comanche Road NE # D2
Albuquerque, NM
EG and G
(505) 998-0677
2420 Comanche Road NE # D2
Albuquerque, NM 87107
Services
Electronic Equipment and Supplies Wholesale and Manufacturers, Research and Development Engineers, Computer Peripherals, Measuring Instrument Dealers, Power Transmission Equipment
Data Provided by:
Penta Performance
(505) 345-0167
Albuquerque, NM
(505) 345-0167
Albuquerque, NM 87109
Services
Computer and Equipment Dealers, Computer Supplies Parts and Accessories, Business Computer Dealers, Computer Hardware and Supplies, Portable Computers and Accessories
Data Provided by:
Data Provided by:
Provided By: 
| Full disk encryption isn't quite dead | At least once a month, it seems some vendor or techie claims to have broken a version of a hard drive full-disk encryption (FDE) program scheme, whether it's from Microsoft (my full-time employer), BitLocker, open source favorite TrueCrypt, or some other variant. All the stories and the hype are enough to make one wonder if FDE is dead.
The brief -- and slightly qualified -- answer is no. There are a handful of clever attacks, as well as software to make them easier to pull off. Luckily there are easy ways to prevent most of them. We will start, however, with an attack that doesn't have an easy defense.
[ A malicious Facebook ad is redirecting users to fake antivirus software. | Learn how to secure your systems with Roger Grimes' Security Adviser blog and Security Central newsletter, both from InfoWorld. ]
Cold boot attack
In February 2008, a team including Princeton's Dr. Edward Felton -- one of the world's premier computer security researchers -- used an interesting intrinsic property of computer memory to successfully hack BitLocker [PDF]. It turns out that computer memory chips will hold their contents from a few seconds to a few minutes after the computer's power is turned off. Further, lowering the temperature or freezing the chips enables the contents to remain in play much longer -- enough time to be transferred to another specialized analysis computer so that the data can be copied to permanent storage. The attack team could then search for the primary BitLocker encryption key and unlock the data.
Browser Security Deep Dive
The "cold boot" attack is perhaps the toughest attack to defend against on a computer without specialized crypto-hardware. The flaw lies more with computer memory than the involved crypto. All software-based crypto has to eventually place the decryption key in normal memory in an unprotected state so that it can be used to decrypt the hard drive. An attacker can always find the unprotected key when he or she has a copy of memory to examine.
This plan requires the attacker to somehow acquire the victim's computer while it's powering down, just after it's powered down, or when it's coming back up from a suspended or standby state. Then the attacker has to freeze the chips, transfer them to another specialized computer, and use specially built software to find the key for the FDE cipher. If you're worried about this attack, make sure your unattended, powered-on computers have good physical security; alternatively, consider using hardware crypto solutions that are resistant to cold boot attacks.
Manipulating cold memory chips isn't for the faint at heart. Over the past two years, other researchers realized they could capture memory on powered-up computers by using the 1394 FireWire port found on most higher-end laptops. Here's one discussion detailing how to crack BitLocker using the FireWire memory attack [PDF].
Exploitation via FireWire
Prolific crypto- an... |
Click here to read the rest of this article from Computer User
