Messages in this thread | | | Date | Tue, 26 May 2015 20:32:10 +0200 | Subject | Re: RAM encryption and key storing in CPU | From | Richard Weinberger <> |
| |
On Tue, May 26, 2015 at 5:21 PM, someone called <someonecalled@safe-mail.net> wrote: > https://www1.informatik.uni-erlangen.de/tresor > > Is this solution already in the Linux kernel? If yes, how can a Linux enduser turn it on? If no, how can we get the code/idea in the mainline? What are the arguments against it?
No, these patches are not mainline. IMHO such solutions paper over the real problem. Adding new layers won't help. If we store keys in CPU registers, secret agencies will (or have already) develop tools to dump them too.
-- Thanks, //richard
| |