Hacker News new | ask | show | jobs
by dlcarrier 28 days ago
Zeroing memory on boot is pretty slow. Modern CPUs support encrypting the RAM with a key generated at boot and lost when the processor powers off. This would give even better security under most circumstances, without the slow boot.
2 comments

Wow, that sounds quite slow? I wonder what speed boosts you could get if you disable this if this is not an attack vector you want to cover
It's done transparently in hardware, so it doesn't slow down the RAM.
It usually has a latency cost, but it's not much.
If you have 256GB/s of memory bandwidth and 64GB of RAM, you can zero it all in 250ms.