Bypass: Apple FileVault, Microsoft Bit Locker, Open-Source TruCrypt -- all insecure

[libertyforall]

Ok Apple, make FileVault do secure memory too!

Slideshow:
http://www.news.com/2300-1029_3-6230933-1.html?tag=ne.gall.pg

Article/video:
http://www.news.com/8301-13578_3-9876060-38.html?tag=nefd.pop

 

[GilGrissom]

Where would OS X then store the key to decrypt the RAM to get at the key to decrypt the hard drive? It's a bit of a catch 22 situation. Unfortunately current encryption software is restricted by hardware almost, and has to put the encryption key somewhere while you're using it. It's a wide problem that seems to require new thinking on the hardware front as opposed to the software front.

There are ways around it, or at least make it harder, by using encrypted disk images inside the main OS to keep your stuff protected for example, so even if the main OS encryption key is obtained the other encrypted disk image stored on the drive is not.