Anyway, if you rely on BitLocker in TPM mode (boot without PIN), you should know that anyone can steal your computer, sniff 32 bytes off of the LPC bus, stick them into libbde, and decrypt your disk. Yes, it's that easy. Solder 7 wires to $favorite_fpga_board, decrypt drive.
The problem with FBE and all the DE stuff (and what iPhone does too) is that it's quite secure if nobody made any mistakes all the way through the stack; everything has to work together perfectly. A security flaw could make the whole thing moot, as we've seen many times.
-
-
With FDE I know that the storage is cryptographically bound to the long and not crackable passphrase, period. As long as the much simpler code from that to the storage crypto is secure, if my phone is off, you aren't getting any data out of it.
-
I see what you mean. At least the relevant code is open source.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.