Protecting cryptographic keys from memory disclosure attacks

Proceedings of the International Conference on Dependable Systems and Networks

Volumn , Issue , 2007, Pages 137-142

  Harrison, Keith ^a   Xu, Shouhuai ^a  

^a University of Texas at San Antonio   (United States)

Author keywords

Cryptographic key security; Memory disclosure

Indexed keywords

ALLOCATED MEMORY; CRYPTOGRAPHIC KEY SECURITY; MEMORY DISCLOSURE; PERFORMANCE PENALTY;

COMMUNICATION SYSTEMS; CRYPTOGRAPHY; HTTP; REAL TIME SYSTEMS; SERVERS;

SECURITY SYSTEMS;

EID: 36049035340     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSN.2007.77     Document Type: Conference Paper

References (19)

1. R. Anderson. On the forward security of digital signatures. Technical report, 1997.
2. M. Bellare and S. Miner. A forward-secure digital signature scheme. In Proc. Crypto'99, pages 431-448.
3. Bochs. the bochs ia-32 emulator project. http://bochs.sourceforge.net/.
4. P. Broadwell, M. Harren, and N. Sastry. Scrash: A system for generating secure crash information. In Usenix Security Symposium'03.
5. J. Chow, B. Pfaff, T. Garfinkel, K. Christopher, and M. Rosenblum. Understanding data lifetime via whole system simulation. In Usenix Security Symposium '04.
6. J. Chow, B. Pfaff, T. Garfinkel, and M. Rosenblum. Shredding your garbage: Reducing data lifetime. In Proc. USENIX Security Symposium '05.
7. G. Di Crescenzo, N. Ferguson, R. Impagliazzo, and M. Jakobsson. How to forget a secret. In STACS'99.
8. Y. Desmedt and Y. Frankel. Threshold cryptosystems. In Proc. Crypto'89, pages 307-315.
9. Y. Dodis, J. Katz, S. Xu, and M. Yung. Key-insulated public key cryptosystems. In Proc. EUROCRYPT'02.
10. Georgi Guninski. linux kernel 2.6 fun. windoze is a joke. http://www.guninski.com/where_do_you_want_billg_to_go_today_3. html (dated 15 February 2005).
11. G. Itkis and L. Reyzin. Forward-secure signatures with optimal signing and verifying. In Crypto'01.
12. G. Itkis and L. Reyzin. Sibir: Signer-base intrusion-resilient signatures. In Crypto'02.
13. K. Harrison and S. Xu. Full version of the present paper available at www.cs.utsa.edu/~shxu.
14. Mathieu Lafon and Romain Francoise. Information leak in the linux kernel ext2 implementation. http://arkoon.net/advisories/ext2-make-empty-leak.txt (Arkoon Security Team Advisory - dated March 25, 2005).
15. R. Ostrovsky and M. Yung. How to withstand mobile virus attacks (extended abstract). In PODC'91.
16. N. Provos. Encrypting virtual memory. In Proc. Usenix Security Symposium'00.
17. A. Silberschatz, P. Galvin, and G. Gagne. Operating System Concepts (sixth ed.). John Wiley & Sons.
18. J. Viega. Protecting sensitive data in memory. http://www.cgisecurity. com/lib/protecting-sensitive-data.html, 2001.
19. J. Viega and G. McGraw. Building Secure Software. Addison Wesley, 2002.