https://github.com/kicksecure/ram-wipe

Wipe RAM on shutdown and reboot - Cold Boot Attack Defense
https://github.com/kicksecure/ram-wipe

Last synced: about 2 months ago
JSON representation

Wipe RAM on shutdown and reboot - Cold Boot Attack Defense

• Host: GitHub
• URL: https://github.com/kicksecure/ram-wipe
• Owner: Kicksecure
• License: other
• Created: 2023-01-09T10:56:46.000Z (almost 2 years ago)
• Default Branch: master
• Last Pushed: 2024-03-20T15:48:27.000Z (10 months ago)
• Last Synced: 2024-03-20T17:00:58.365Z (10 months ago)
• Language: Shell
• Homepage:
• Size: 157 KB
• Stars: 7
• Watchers: 2
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Changelog: changelog.upstream
  • Contributing: CONTRIBUTING.md
  • License: COPYING

Awesome Lists containing this project

README

        
## Cold Boot Attack Defense

Wiping RAM at shutdown to defeat cold boot attacks.

Implemented as `dracut` module `cold-boot-attack-defense`.

Requires `dracut`. In other words, RAM wipe is incompatible with systems

using `initramfs-tools`. To switch to, install dracut:

    sudo apt update

    sudo apt install --no-install-recommends dracut

Linux distribution such as Kicksecure are advised to

(and Kicksecure is planning to) install `dracut` instead of

`initramfs-tools` by default.

Only tested on `systemd` enabled systems.

User documentation:

https://www.kicksecure.com/wiki/Cold_Boot_Attack_Defense

Design documentation:

https://www.kicksecure.com/wiki/Dev/RAM_Wipe

Source code:

* `/usr/lib/dracut/modules.d/40cold-boot-attack-defense`

* `/etc/default/grub.d/40_cold_boot_attack_defense.cfg`

## Related

* security-misc

* Linux Kernel Runtime Guard (LKRG)

* tirdad - TCP ISN CPU Information Leak Protection.

* Kicksecure (TM) - a security-hardened Linux Distribution

* And more.

* https://github.com/Kicksecure/security-misc

* https://www.kicksecure.com/wiki/Linux_Kernel_Runtime_Guard_LKRG

* https://github.com/Kicksecure/tirdad

* https://www.kicksecure.com

* https://github.com/Kicksecure

## Discussion

Happening primarily in forums.

https://forums.whonix.org/t/kernel-hardening/7296

## How to install `ram-wipe`

See https://www.kicksecure.com/wiki/Cold_Boot_Attack_Defense#install

## How to Build deb Package from Source Code

Can be build using standard Debian package build tools such as:

```

dpkg-buildpackage -b

```

See instructions. (Replace `generic-package` with the actual name of this package `security-misc`.)

* **A)** [easy](https://www.kicksecure.com/wiki/Dev/Build_Documentation/generic-package/easy), _OR_

* **B)** [including verifying software signatures](https://www.kicksecure.com/wiki/Dev/Build_Documentation/generic-package)

## Contact

* [Free Forum Support](https://forums.kicksecure.com)

* [Professional Support](https://www.kicksecure.com/wiki/Professional_Support)

## Donate

`security-misc` requires [donations](https://www.kicksecure.com/wiki/Donate) to stay alive!