Arch Linux

xerc

Member

From: Berlin

Registered: 2012-01-24

Posts: 3

create AUR package against "cold boot"-attacks (AES)

"TRESOR is a secure implementation of AES which is resistant against cold boot attacks and other attacks on main memory. The basic idea behind this implementation is to store the secret key inside CPU registers rather than in RAM. All computations take place only on registers, no AES state is ever going to RAM. In particular, the x86 debug registers are misused as secure key storage." ..  the kernel integration is mandatory!
- from http://www1.informatik.uni-erlangen.de/tresor

Core-i series with AES-NI support [64-bit] key sizes of 128, 192 and 256 bits
- http://www1.informatik.uni-erlangen.de/ … .0.9_aesni

other x86 CPUs with at least SSE2 [32-bit] only 128 bit key size
- http://www1.informatik.uni-erlangen.de/ … .6.36_i686

integrated in loop-AES, Loop-Amnesia can be used directly (limited l.b.)
- https://sourceforge.net/projects/loop-aes/
- https://www.ideals.illinois.edu/handle/2142/18862

for CPUs with at least SSE2 [64-bit] only 128 bit key size
- https://www.ideals.illinois.edu/bitstre … sequence=3

Awebb

Member

Registered: 2010-05-06

Posts: 6,282

Re: create AUR package against "cold boot"-attacks (AES)

This is not the request section. Read the AUR article in the wiki and try your luck.

xerc

Member

From: Berlin

Registered: 2012-01-24

Posts: 3

Re: create AUR package against "cold boot"-attacks (AES)

would be nice if there are people who are interessted and want to work together
"Discussion and support regarding building packages with makepkg and ABS"

-> request for cooperation - if it's still the wrong section - please move it! thanks

Last edited by xerc (2012-01-24 20:28:56)

xerc

Member

From: Berlin

Registered: 2012-01-24

Posts: 3

Re: create AUR package against "cold boot"-attacks (AES)

just created/tested the package - someone who want to give it a try? opinions are welcome ..
http://xerc.de/aur/linux-lts-tresor-3.0.27-1.src.tar.gz [currently x86_64 + AES-NI only]

btw: i'll upgrade the kernel to 3.0.28 (or newer) before commiting to AUR

Last edited by xerc (2012-04-16 20:35:37)