Design and Implementation of a Secure Linux Device Encryption Architecture
summary
Describes a Linux-focused device-encryption architecture that isolates cryptographic keys and operations from the main OS to prevent theft or compromise via kernel exploits or malicious administrators. Implements this isolation in software (as a lower-cost alternative to hardware) and can leverage Trusted Computing/TPM functionality to protect keys and verify boot-time software integrity, integrating with Linux disk encryption mechanisms like dm_crypt.
AI-written summary · about
related talks
34mAuthenticated and Encrypted Storage on Embedded Linux
45mNavigating Security Tradeoffs in Embedded Linux Systems
53mSecure Embedded Linux Product - A Success Story
36mUnder Lock & Key: Using Hardware Protected Keys with the Linux Crypto API
41mProtecting Your System from the Scum of the Universe
40mDesign and Implementation of a Security Architecture for Critical Infrastructure
45mBuilding a Secure IoT Device
32mELC 2013 Security: Best Practices for Embedded Systems