Re: [vncrypt-users] Keyfile passwords etc.

[Andrey S. <bl...@in...>]

On Fri, 2002-07-26 at 17:00, Dave Raven wrote:

> I need to have a fully unattended boot.
> 
> I plan to sell the hard drive I'm talking about (in a box of 
> course) but as a product. Now if someone was to remove
> the disk drive, and mount it on another FreeBSD box,
> how can I prevent him from viewing whats in the virtual
> drive - if he can see all my startup files. 

No way. Think about fully controlled environment like vmware, where any
request to any hardware can be intercepted and "correct" answer can be
returned. If attacker knows this answers, there is no way to decide is
this original computer or not. And anyone with phisical access to
computer can not only steal your hard drive, but also insert another,
boot and collect any required information.

This is why any copy-protection fails :)

Sorry, but you need some secret and you must store it separate from
computer, so it can't be stolen. And this breaks unattended boot,
because you need to put this secret back to computer.