From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from nekare.kjorling.se (nekare.kjorling.se [89.221.249.175]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.server123.net (Postfix) with ESMTPS for ; Tue, 21 Feb 2017 15:13:56 +0100 (CET) Received: from yeono.kjorling.se (h-9-65.a328.priv.bahnhof.se [46.59.9.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "yeono", Issuer "yeono" (not verified)) by nekare.kjorling.se (Postfix) with ESMTPS id D983C114148 for ; Tue, 21 Feb 2017 14:13:48 +0000 (UTC) Received: from yeono.kjorling.se (localhost [127.0.0.1]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (Client did not present a certificate) by yeono (Postfix) with ESMTPS id 816641930 for ; Tue, 21 Feb 2017 15:13:48 +0100 (CET) Date: Tue, 21 Feb 2017 14:13:47 +0000 From: Michael =?utf-8?B?S2rDtnJsaW5n?= Message-ID: <20170221141347.GA16865@yeono.kjorling.se> References: <517282b9-becc-aa96-602a-9b6f603d01f1@rocketmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <517282b9-becc-aa96-602a-9b6f603d01f1@rocketmail.com> Subject: Re: [dm-crypt] General question: Encrypytion on virtual servers (VPS/Vserver) List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de On 21 Feb 2017 14:42 +0100, from michaelof@rocketmail.com: > But when asking the author of this article about some small > questions left, he stated his personal opinion that any encryption > on an externally hosted vserver/VPS would be a waste of time. > Because the to be entered at boot time deencryption passwords would > be stored in memory of the virtual machine (all is KVM based at this > company), they could easily be read from memory, in case of a "real" > attack. > > Coming to the point: As this sounds reasonable, is there any chance > to circumvent this issue? That post was a whole lot of text to ask "is there any way to protect data on a VPS guest against an attacker with full hypervisor access?". Basically, the answer to that is _no_. If the attacker has hypervisor access, they can snapshot the VM's RAM right along with the storage. Because the data encryption key is necessarily in RAM, the rest is simply a matter of going through the data structures in kernel memory to locate the key material. Nothing running inside the VM will know it ever happened. For the purposes of the above, CPU registers can be treated as identical to RAM. There has been some discussion on methods of encryption without exposing the key, but IIRC that's more about restricting exposure to the _guest_, not the _hypervisor_. That has some value, but does not against the threat model you describe. And I'm pretty sure not even that is widely implemented anywhere. -- Michael Kjörling • https://michael.kjorling.se • michael@kjorling.se “People who think they know everything really annoy those of us who know we don’t.” (Bjarne Stroustrup)