Re: BugTraq: EFS Win 2000 flaw

[Timothy J. Miller]

Dan Kaminsky <[EMAIL PROTECTED]> writes:

>                                                          That means no
> decryption keys ever get written, no passwords get saved, and most
> importantly, *no plaintext data gets stored, not even "temporarily"*.

Interestingly, when a system hibernates everything in memory goes to
disk (into the hiber file or partition)-- and this includes the
sensitive data that the LSA holds that is not normally swapped out:
keypairs, kerberos tickets and encrypted files.