Does pureboot have mitigations against cold boot attack to steal full disk encryption key?

[OpojOJirYAlG]

@kieran

1 is probably the hardest case. Solution may be use the script at https://docs.puri.sm/Librem_Key/Getting_Started/User_Manual.html#automatically-lock-the-desktop-when-removing-the-librem-key so that the computer locks when the key is removed and have the discipline to remove the key when going to bathroom, getting a (fake) delivery, etc. and solve the problem so that security is enforced when locking, as per the previous paragraph.

You could also modify that script so that instead of locking the computer hibernates/shuts down on key removal. Then no quick key entry is required (though I’d go for power button over key combination).