Abstract:Disk encryption has become an important security measure for a multitude of clients, including governments, corporations, activists, security-conscious professionals, and privacy-conscious individuals. Unfortunately, recent research has discovered an effective side channel attack against any disk mounted by a running machine\cite{princetonattack}. This attack, known as the cold boot attack, is effective against any mounted volume using state-of-the-art disk encryption, is relatively simple to perform for an attacker with even rudimentary technical knowledge and training, and is applicable to exactly the scenario against which disk encryption is primarily supposed to defend: an adversary with physical access. To our knowledge, no effective software-based countermeasure to this attack supporting multiple encryption keys has yet been articulated in the literature. Moreover, since no proposed solution has been implemented in publicly available software, all general-purpose machines using disk encryption remain vulnerable. We present Loop-Amnesia, a kernel-based disk encryption mechanism implementing a novel technique to eliminate vulnerability to the cold boot attack. We offer theoretical justification of Loop-Amnesia's invulnerability to the attack, verify that our implementation is not vulnerable in practice, and present measurements showing our impact on I/O accesses to the encrypted disk is limited to a slowdown of approximately 2x. Loop-Amnesia is written for x86-64, but our technique is applicable to other register-based architectures. We base our work on loop-AES, a state-of-the-art open source disk encryption package for Linux.

A Practical Cold Boot Attack on RSA Private Keys

Recovering AES Keys with a Deep Cold Boot Attack

On recovering block cipher secret keys in the cold boot attack setting

A Complete And Optimized Key Mismatch Attack On Nist Candidate Newhope

Generalized Cryptanalysis of RSA with Small Public Exponent

A new method for solving polynomial systems with noise over and its applications in cold boot key recovery

New Attacks on Randomized ECC Algorithms

A Power Analysis Attack Against RSA-CRT

On an Attack on RSA with Small CRT-exponents

Design of an RSA Module Against Power Analysis Attacks

Security Through Amnesia: A Software-Based Solution to the Cold Boot Attack on Disk Encryption

Cryptanalysis of the RSA Variant Based on Cubic Pell Equation.

Improvement of Trace-Driven I-Cache Timing Attack on the RSA Algorithm.

Power Analysis Attacks on ECC Randomized Automata

Simple Backdoors on RSA Modulus by Using RSA Vulnerability.

Remarks on the Cryptanalysis of Common Prime RSA for IoT Constrained Low Power Devices.

A Comprehensive Study of Backdoors for RSA Key Generation

Notes on Small Private Key Attacks on Common Prime RSA

Implementation of efficient method of RSA key-pair generation algorithm

A Novel SPA Attack on ECC Using MMM's Conditional Subtraction

Challenging on-chip SRAM security with boot-state statistics