Axcrpyt and Windows hibernation security vulnerability

[Dale]

When a user hibernates Windows, all memory contents are copied to the hard drive.  If encryption software such as Axcrypt is running when they do this, any passwords or keys in memory will also be written to the hard drive, allowing a hacker with physical access to the computer to retrieve those keys from the hard drive and decrypt all the user’s files encrypted with them.

Does Axcrypt take any steps to resolve this security issue (eg. zeroing out memory allocated to the application on closing)?

 

 

 

 

[Dale]

Admins please have an Axcrypt technician/developer respond to this question.  It is a major potential security issue and users need to know.

[Author]

Posts