Remix.run Logo
teravor an hour ago

on the subject of encryption keys and memory there is something you can do:

- if your CPU supports it, enable memory encryption.

- if your TPM module supports this look for MemoryOverwriteRequestControl & MemoryOverwriteRequestControlLock (/sys/firmware/efi/efivars/) and toggle them. make sure that your computer always reboots and never powers off. memory will always be wiped on boot.

someothherguyy an hour ago | parent [-]

https://trustedcomputinggroup.org/wp-content/uploads/TCG-PC-...