If you read anything, from BitLocker reversing tool source to articles to FIPS reports, it says it uses AES-CCM to wrap keys. It doesn't. It uses AES-CTR. Somehow everyone has managed to write AES-CTR implementations and call them AES-CCM. WTF.
-
-
Lol, I take that back. It *is* CCM, it's just that libbde incorrectly implements it as CTR and it works by accident (and returns 16 bytes of garbage before the plaintext). The correct ciphertext format is <12b nonce><16b tag><ciphertext>, not <12b nonce><ciphertext>.
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Good to know
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
there's no mention of ccm anywhere in group policies thopic.twitter.com/OCyAiMfmLG
-
Those are the disk encryption algorithms. "CCM-not-really" is used for key wrapping.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.