Lest we remember: cold-boot attacks on encryption keys

By By J. Alex Halderman, Seth D. Schoen, Nadia Heninger, W. Clarkson, William Paul, Joseph A. Calandrino, Ariel J. Feldman, J. Appelbaum, Edward W. Felten. CACM, 2008

1,505 citations recorded by the source corpus.

Subfields: Computer Vision and Pattern Recognition, Information Systems, Signal Processing

View Paper: https://www.semanticscholar.org/paper/31da09f829f14cd2c335f53b1f548bf5995967c5

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computer Vision and Pattern Recognition

In Information Systems

In Signal Processing

Citations in the corpus

Komodo: Using verification to disentangle secure-enclave hardware from software (2017, background): “This includes bus snooping and cold-boot [36] attacks.”
Simultaneous Hardcore Bits and Cryptography against Memory Attacks (2009, methodology): “This definition captures the attack specified in [22] where the bits measured were only a function of the hardware or the storage medium used.”
RowClone: Fast and energy-efficient in-DRAM bulk data copy and initialization (2013, result): “Not doing so can potentially lead to security vulnerabilities, as shown by prior works [9, 13, 16, 17].”
Vanish: Increasing Data Privacy with Self-Destructing Data (2009, background): “For example, suppose that the hard disk fails and is returned for repairs or thrown out [15]; or imagine that a laptop is stolen and the thief uses a cold-boot [32] attack to recover its primary whole-disk decryption keys (if any).”
CryptDB: protecting confidentiality with encrypted query processing (2011, background): “An adversary can exploit software vulnerabilities to gain unauthorized access to servers [32]; curious or malicious administrators at a hosting or application provider can snoop on private data [6]; and attackers with physical access to servers can access all data on disk and in memory [23].”
SMART: Secure and Minimal Architecture for (Establishing Dynamic) Root of Trust (2012, background): “We note that the aforementioned phenomenon is similar to cold boot attacks [22] whereby a computer is stopped during execution and its memory is removed in order to recover keying material.”
Leakage-Resilient Cryptography (2008, background): “put forward cold-boot attacks [18] in which the adversary can learn a (noisy) version of the entire memory even if no computation is going on.”
Malware Guard Extension: Using SGX to Conceal Cache Attacks (2017, background): “[40] showed that it is even possible to recover a full RSA key if up to 12% of random bits are corrupted.”
M2R: Enabling Stronger Privacy in MapReduce Computation (2015, background): “For instance, traditional TPMs protect against software-only attacks but not against physical access to RAM via attacks such as cold-boot [24].”
Public-Key Cryptosystems Resilient to Key Leakage (2009, background): “[18] the adversary learns a noisy version of all of the memory.”
Survey of Attacks and Defenses on Edge-Deployed Neural Networks (2019, background): “[52] [53] [59] [60] [61, 62, 63] [65] [71, 72]”
Effective and Efficient Malware Detection at the End Host (2009, methodology): “Here, symbolic execution [25], model checking [21], or techniques from compiler verification [12] are applied to recognize arbitrary code fragments that implement a specific function.”