Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory
1–10 of 247 posts
Re: Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory
#2[flagged]
Re: Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory
#3[flagged]
I shutdown mine too but only because suspend is still a crapshoot on linux
Re: Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory
#4[flagged]
[deleted]
Re: Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory
#5[flagged]
And I don't use GUIs, but it doesn't mean I have to be a jerk to people who are happy when their GUI gets better :-).
Re: Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory
#6[flagged]
> That's a you problem. I shutdown my machine when I'm not using it.
"We designed the antennas correctly, you're holding the phone the wrong way."
Re: Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory
#7[flagged]
> That's a you problem. I shutdown my machine when I'm not using it. "We designed the antennas correctly, you're holding the phone the wrong way."
It's not a good analogy. Something is still on in suspend. Good you can control Linux kernel, but what about all other chips which may be an attack vector?
Re: Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory
#8[flagged]
I am too lazy for that, and I hate that after boot you need to launch everything again.
Re: Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory
#9I don't see any other way? When you sleep (suspend to RAM), everything is stored in RAM and is encrypted but the master key is present in kernel memory (if I recall correctly).
However, if you hibernate (suspend to disk) the entire contents of RAM (including the master key) is written/encrypted to disk and the RAM is cleared.
When you wake the machine up you have to re-enter the passphrase to decrypt the master key to re-load disk contents back to memory.