From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <rdzidlic@googlemail.com>
Received: from mail-bw0-f50.google.com (mail-bw0-f50.google.com
 [209.85.214.50]) by mail.saout.de (Postfix) with ESMTP
 for <dm-crypt@saout.de>; Tue, 11 Jan 2011 01:08:29 +0100 (CET)
Received: by bwg12 with SMTP id 12so21926739bwg.37
 for <dm-crypt@saout.de>; Mon, 10 Jan 2011 16:08:29 -0800 (PST)
Sender: Richard Zidlicky <rdzidlic@googlemail.com>
Date: Tue, 11 Jan 2011 01:08:16 +0100
From: Richard <rz@linux-m68k.org>
Message-ID: <20110111000816.GC31936@rz>
References: <4D266EF9.6090904@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
 protocol="application/pgp-signature"; boundary="zYM0uCDKw75PZbzx"
Content-Disposition: inline
In-Reply-To: <4D266EF9.6090904@gmail.com>
Subject: Re: [dm-crypt] Dmcrypt and hibernate key disclosure
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: Aaron Lewis <the.warl0ck.1989@gmail.com>
Cc: dm-crypt@saout.de


--zYM0uCDKw75PZbzx
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Jan 07, 2011 at 09:40:09AM +0800, Aaron Lewis wrote:
> Hi,
> 	If i hibernate with an device opened , before i resume , an image was
> written on swap partition , will there be a problem with my secret key's
> disclosure ?
>=20
> 	Just an off-line attack , if swap is not encrypted.

swap must be encrypted. Works nicely on Fedora, one boot partition and a bi=
g=20
encrypted dm0 device with several LVM partitions on top of it.


Richard

---
Name and OpenPGP keys available from pgp key servers


--zYM0uCDKw75PZbzx
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFNK59wxglR1/QGFNwRAgubAKCm9XqH20P3ac+LoXjFuKEnn6CvyQCcDSe2
DeV5WFdpthDb7Mlvao5JpE8=
=w1n8
-----END PGP SIGNATURE-----

--zYM0uCDKw75PZbzx--