Design Goal
The central design consideration in Tin Hat is to construct an operating system that can hide data from an attacker even if he has physical access to the computer. Physical access to a computer with unencrypted filesystems does not secure the data and an attacker could easily retrieve the data. Encrypting the filesystem provides protection from such an attack, but many implementations of encryption do not hide the fact that data is encrypted on the filesystem. For example, the LUKS encryption system includes metadata which detail the block cipher and block cipher mode used in encryption. This information does not help the attacker decrypt the filesystem, but it does reveal that it contains encrypted data and not random data. However, Tin Hat stores its filesystem in the RAM, leaving no data in the computer's hard drive. If the user stores any data via a more permanent means than RAM, the encrypted data is indiscernable from random data.
Tin Hat's preferred method of encryption is via loop-aes v3.
Beyond these considerations, Tin Hat has to also protect against more common exploits based on networking or security holes in software. The hardening model chosen is PaX/Grsecurity which is already provided by the Hardened Gentoo project. Hardening of the kernel and the toolchain make most code born exploits less likely. A non-modular compiled kernel further frustrates the insertion of malicious kernel modules.
Read more about this topic: Tin Hat Linux
Famous quotes containing the words design and/or goal:
“What but design of darkness to appall?—
If design govern in a thing so small.”
—Robert Frost (1874–1963)
“The goal in raising one’s child is to enable him, first, to discover who he wants to be, and then to become a person who can be satisfied with himself and his way of life. Eventually he ought to be able to do in his life whatever seems important, desirable, and worthwhile to him to do; to develop relations with other people that are constructive, satisfying, mutually enriching; and to bear up well under the stresses and hardships he will unavoidably encounter during his life.”
—Bruno Bettelheim (20th century)