Hi everyone, I found the great question on booting encrypted drives, and since I’m somewhat paranoid I’d like to ask a follow-up:

When the key to decrypt the drive is input into the system, I’m assuming it stays in the RAM till the time the computer shuts downs. We know that one could, in theory, get a dump of the contents of the RAM in such a state, if done correctly. How would you deal with this problem? Is there some way to insert the USB, decrypt the drive, and then remove the USB and all traces of the key from the system?

Thanks!

Edit: link to the question I referenced: https://feddit.de/post/6735667

    • WaterWaiverEnglish
      1·
      6 months ago

      I’ll need to think more about possible attack vectors

      I don’t think it’s feasible to protect against these unless you’re a big company or a nation state.

      Best way to avoid problems is to avoiding holding sensitive information in the first place. Win win. (Ideally eliminate, but reduce where that’s not possible).