Cryptkeeper: Improving security with encrypted RAM

2010 IEEE International Conference on Technologies for Homeland Security, HST 2010

Volumn , Issue , 2010, Pages 120-126

  Peterson, Peter A H ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Data security; Memory management; Operating systems

Indexed keywords

DATA EXPOSURE; DATA SECURITY; ENCRYPTION KEY; FIREFOX; LOW OVERHEAD; MEMORY MANAGEMENT; MEMORY MODELS; OPERATING SYSTEMS; PATHOLOGICAL CASE; PHYSICAL ATTACKS; RANDOM ACCESS MEMORIES; SECURITY POLICY; SIDE EFFECT; TARGET APPLICATION; USER DATA; VIRTUAL MEMORY; WORKING SET;

COMPUTER OPERATING SYSTEMS; CRYPTOGRAPHY; PERSONAL COMPUTERS; RANDOM ACCESS STORAGE; SECURITY SYSTEMS;

NETWORK SECURITY;

EID: 78651503546     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/THS.2010.5655081     Document Type: Conference Paper

References (24)

1. J. A. Halderman et al., "Lest We Remember: Cold Boot Attacks on Encryption Keys," Proc. 17th USENIX Security Symposium, 2008.
2. A. Czeskis et al., "Defeating Encrypted and Deniable File Systems: TrueCrypt v5.1a and the Case of the Tattling OS and Applications," 3rd USENIX HotSec, 2008.
3. G. Moore, "Intel Museum - Moore's Law," http://www.intel.com/ museum/archives/history-docs/mooreslaw.htm, 2009, accessed Tuesday, October 20th, 2009.
4. P. Schmid, "15 Years of Hard Drive History: Capacities Outran Performance," http://www.tomshardware.com/reviews/15-years-of-hard-drive- history, 1368-7.html, 2008, accessed Sunday, October 18th 2009.
5. SG Barracuda XT Series SATA Product Manual, Rev. A, Seagate Technology, 2009, http://www.seagate.com/staticfiles/support/disc/manuals/desktop/ Barracuda%20XT/100586689a.pdf.
6. J. Daemen and V. Rijmen, The Design of Rijndael: AES - The Advanced Encryption Standard. Springer, 2002.
7. N. Moller, "Nettle - a low-level cryptographic library," http://www.lysator.liu.se/~nisse/nettle/nettle.html, 2009, accessed Tuesday, October 20th, 2009.
8. N. El-Fishawy and O. M. A. Zaid, "Quality of Encryption Measurement of Bitmap Images with RC6, MRC6, and Rijndael Block Cipher Algorithms," International Journal of Network Security, 2007.
9. W. F. Ehrsam et al., "Message verification and transmission error detection by block chaining," U.S. Patent No. 4, 074, 066, 1978.
10. M. Roe, "Performance of symmetric ciphers and one-way hash functions," in Fast Software Encryption, ser. Lecture Notes in Computer Science. Springer Berlin/Heidelberg, 1995, pp. 359-362.
11. T. Bingmann, "Speedtest and Comparsion of Open-Source Cryptography Libraries and Compiler Flags," http://idlebox.net/2008/0714-cryptography- speedtest-comparison/, 2008.
12. Various, "The Linux Desktop Testing Project," http://ldtp.freedesktop.org/wiki/, accessed Tuesday, October 20th, 2009.
13. M. Gorman, Understanding the Linux Virtual Memory Manager. Prentice Hall, 2004, ch. 4, Process Address Space, p. 82.
14. Various, http://lkml.indiana.edu/hypermail/linux/kernel/0104.2/0282.html, 2001, accessed Monday, October 19th, 2009.
15. Trusted Computing Group, "TPM Main Specification 1.2," http://www.trustedcomputinggroup.org/resources/tpm-main-specification.
16. R. Canetti et al., "Exposure-Resilient Functions and All-or-Nothing Transforms," EUROCRYPT 2000, LNCS 1807, 2000.
17. M. Blaze, "A cryptographic file system for UNIX," Proc. of the 1st ACM conference on Computer and communications security, 1993.
18. N. Provos, "Encrypting virtual memory," Proc. of the 9th USENIX Security Symposium, 2000.
19. B. Yee, "Secure coprocessors in electronic commerce applications," First USENIX Workshop on Electronic Commerce, 1995.
20. -, "Using Secure Coprocessors (PhD Thesis)," Ph.D. dissertation, School of Computer Science, Carnegie Mellon University, 1994.
21. D. Boneh and R. J. Lipton, "A Revocable Backup System (Extended Abstract)," USENIX Security Symposium, 1996.
22. G. D. Crescenzo et al., "How to forget a secret (extended abstract)," STACS'99, LNCS 1563, 1999.
23. D. Lie, "Architectural Support for Copy and Tamper Resistant Software," Ph.D. dissertation, Stanford University, 2003.
24. B. Rogers et al., "Memory predecryption: hiding the latency overhead of memory encryption," SIGARCH Comput. Archit. News, vol. 33, no. 1, pp. 27-33, 2005.