Cryptographic key recovery from Linux memory dumps

Does dm-crypt and cryptoloop provide expected security when facing modern computer forensics techniques?

Torbjörn Pettersson

• 65 min
• 2007-08-09
• 2009-09-28
• 64
• Fahrplan

Cryptoloop and dm-crypt are the two disk encryption solutions provided by the stock Linux kernel. This lecture will describe in detail how to find and reuse cryptoloop and dm-crypt keys from kernel memory.

Download

Related

Tags