Can the encryption key leak from RAM to swap when using LUKS/dm-crypt (and why)?

A

antonx19902017-03-13 11:31:11

linux

antonx1990, 2017-03-13 11:31:11

What about TrueCrypt and BitLocker?

Reply

Answer the question

In order to leave comments, you need to log in

1 answer(s)

V

Vasily, 2017-03-13
@DobriyJuk

Only if the RAM has run out. Only the key itself will not leave, but its hash function. In the case of these packages, it might just be time counter information or permission to use resources, or...
In general, it's better to use disk encryption and a security certificate instead of a key. And the password for the certificate. A certificate on a flash drive. The scheme is quite working.