TRESOR

• abstract: TRESOR (recursive acronym for "TRESOR Runs Encryption Securely Outside RAM") is a Linux kernel patch which provides CPU-only based encryption to defend against cold boot attacks on computer systems by performing encryption outside usual random-access memory (RAM). It is one of two proposed solutions for general-purpose computers (the other uses CPU cache for the same purposeThe other has been called frozen cache; the two are similar in using CPU based encryption key storage, but differs in that frozen cache uses CPU cache for the purpose (sometimes called "cache as RAM") rather than CPU registers: FrozenCache – Mitigating cold-boot attacks for Full-Disk-Encryption software, presented by Erik Tews at the 27th Chaos Communication , December 2010), was developed from its predecessor AESSE, presented at EuroSec 2010 and presented at USENIX Security 2011.

以上来源于: WordNet