Re: Zeroing sensitive memory chunks [Was: Security Flaw in Popular Disk Encryption Technologies]

2008-02-26 Thread RW
On Tue, 26 Feb 2008 22:49:37 +0300 Eygene Ryabinkin <[EMAIL PROTECTED]> wrote: > Yes, Geoff just responded to my private question: it was Peter > Gutmann, who pointed him to the thing you're talking about. There > is a paper by Peter, > > http://www.usenix.org/publications/library/proceedings

Re: Zeroing sensitive memory chunks [Was: Security Flaw in Popular Disk Encryption Technologies]

2008-02-26 Thread Eygene Ryabinkin
Gregory, good day. Tue, Feb 26, 2008 at 07:42:17PM +0100, [EMAIL PROTECTED] wrote: > Quoting Eygene Ryabinkin <[EMAIL PROTECTED]>: > > > *) New function OPENSSL_cleanse(), which is used to cleanse a section of > >memory from it's contents. This is done with a counter that will > >place a

Re: Zeroing sensitive memory chunks [Was: Security Flaw in Popular Disk Encryption Technologies]

2008-02-26 Thread gregoryd . freebsd
Quoting Eygene Ryabinkin <[EMAIL PROTECTED]>: > *) New function OPENSSL_cleanse(), which is used to cleanse a section of >memory from it's contents. This is done with a counter that will >place alternating values in each byte. This can be used to solve >two issues: 1) the removal of

Re: Zeroing sensitive memory chunks [Was: Security Flaw in Popular Disk Encryption Technologies]

2008-02-24 Thread Eygene Ryabinkin
Good day. I am posting the follow-up to the -hackers and CC'ing to the -security, because some more-or-less nasty points were found. Sat, Feb 23, 2008 at 10:32:02PM +0300, Eygene Ryabinkin wrote: > But there is another concern with bzero(): it is well-known function. > Especially for compilers.

Re: Zeroing sensitive memory chunks [Was: Security Flaw in Popular Disk Encryption Technologies]

2008-02-23 Thread Jeremy Chadwick
On Sat, Feb 23, 2008 at 10:32:02PM +0300, Eygene Ryabinkin wrote: > Sat, Feb 23, 2008 at 10:56:20AM -0800, Jeremy Chadwick wrote: > > > A possible counter-measure would be to add wiping features to the RAM > > > modules themselves. When power is lost, the memory could wipe itself. > > > Still >

Zeroing sensitive memory chunks [Was: Security Flaw in Popular Disk Encryption Technologies]

2008-02-23 Thread Eygene Ryabinkin
Jeremy, list, good day. Sat, Feb 23, 2008 at 10:56:20AM -0800, Jeremy Chadwick wrote: > > A possible counter-measure would be to add wiping features to the RAM > > modules themselves. When power is lost, the memory could wipe itself. Still > > not perfect, but would certainly help. > > Proper s