Tresor – CPU-only AES implementation resistant against RAM cold-boot attacks