Cryptographic key recovery from Linux memory dumps
Does dm-crypt and cryptoloop provide expected security when facing modern computer forensics techniques?
Video Player
Playlists:
'camp2007' videos starting here
/
related events
Media error: Format(s) not supported or source(s) not found
Download File: https://berlin-ak.ftp.media.ccc.de//events/camp2007/video/m4v/cccamp07-en-2002-Cryptographic_key_recovery_from_Linux_memory_dumps.m4v00:00
00:00 | 00:00
Cryptoloop and dm-crypt are the two disk encryption solutions provided by the stock Linux kernel. This lecture will describe in detail how to find and reuse cryptoloop and dm-crypt keys from kernel memory.
