<li>For every master key of a volume, the RAM encryption algorithm derives a unique key from a combination of the memory region and unique values extracted from the memory to be encrypted. This ensures a distinct key for each encrypted memory region. The use of location-dependent keys and IVs prevents master keys from being easily extracted from memory dumps.</li>

<li>The master keys are decrypted for every request, requiring a fast decryption algorithm. For this, ChaCha12 is utilized.</li>

<li>Once a volume is mounted, its master keys are immediately encrypted using the described algorithm.</li>

<li>For each I/O request for a volume, the master keys are decrypted only for the duration of that request and then securely wiped.</li>

<li>At Windows shutdown or reboot, the memory region allocated during startup is securely wiped.</li>

</ol>

<h3>Protection against Cold Boot Attacks</h3>