+ Post New Thread
Results 1 to 1 of 1
IT News Thread, Frosty attack on Android encryption in Other News; This is the same method that has been used on PCs in the past. Source : FROST (via H-Online ) ...
  1. #1

    Join Date
    Feb 2007
    51.403651, -0.515458
    Thank Post
    Thanked 2,663 Times in 1,963 Posts
    Rep Power

    Frosty attack on Android encryption

    This is the same method that has been used on PCs in the past.

    Source: FROST (via H-Online)

    Two researchers at the University of Erlangen in Germany have demonstrated a way of accessing an encrypted Android smartphone using a freezer. To access the cryptographic key stored in the phone's memory, they placed the phone in the freezer compartment for an hour, with the result that the memory content remained – almost literally – frozen. They used a special tool to read the cryptographic key from the phone's memory (cold boot attack).

    By cooling the device to below 10 degrees, the volatile memory can be made to retain data for a short period of time without power. Tilo Müller and Michael Spreitzenbarth exploit this to disconnect the battery for a moment, resulting in a reboot. They then use a key combination to invoke the bootloader, allowing them to flash and run their own recovery image, dubbed "Frost". For this to work, however, the bootloader needs to be already unlocked, as any unlocking would wipe user data. Frost then searches the memory for, among other things, the cryptographic key for decrypting user data stored in the (non-volatile) storage.

    Since version 4.0, Android has offered the ability to encrypt personal data (if the user activates the appropriate checkbox in the settings). In addition to the cryptographic key, Frost was also able to extract many other items of personal data from the frozen smartphone's memory, including plain text Wi-Fi access data, WhatsApp chat history, the address book, and photos taken on the phone.
    When disconnected from the power supply at room temperature, data stored in RAM rapidly disappears. The Android logo after 0, 0.5, 1, 2, 4, and 6 seconds without power

    Last edited by Arthur; 16th February 2013 at 04:51 PM.

+ Post New Thread

Similar Threads

  1. [Android] Proxy on Android
    By nephilim in forum Netbooks, PDA and Phones
    Replies: 69
    Last Post: 24th June 2011, 03:19 PM
  2. [Android] Firefox 4 on Android
    By creese in forum Netbooks, PDA and Phones
    Replies: 2
    Last Post: 30th March 2011, 07:52 PM
  3. [Android] Skype on Android
    By creese in forum Netbooks, PDA and Phones
    Replies: 8
    Last Post: 5th October 2010, 04:17 PM
  4. [Android] How to make proxies work on Android devices
    By Dos_Box in forum Netbooks, PDA and Phones
    Replies: 4
    Last Post: 27th September 2010, 03:39 PM
  5. [Video] Penguin finds safety from Killer Whale’s attack on small boat
    By mattx in forum Jokes/Interweb Things
    Replies: 7
    Last Post: 24th November 2008, 03:50 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts