BitLocker encryption broken in less than 43 seconds with sub-$10 Raspberry Pi Pico — key can be sniffed when using an external TPM
BitLocker encryption broken in less than 43 seconds with sub-$10 Raspberry Pi Pico — key can be sniffed when using an external TPM
BitLocker's reliance on a TPM for security is its own downfall in this specific exploit.
You're viewing a single thread.
Question: if I have an bitlocker encrypted SSD in a modern computer with embedded TPM, can I move this SSD to an old computer with external TPM to sniff the cod this way? Be gentle. I am dumb. Thanks.
"Sniff the cod" This is a typo right? I don't know any better, but I had a good laugh.
What about the salmon and the halibut? :-D
Not unless you entered your recovery code to unlock it on the old computer with the external tpm.
Nope. As soon as you move the disk to your second system/TPM, you lose any ability to decrypt it at all.
unless you have the key?
The key is inside the TPM.
For LUKS user set the key; for bitlocker, I believe the key is automatically uploaded to either your Microsoft account or you system admin's account.
Sure LUKS will do what you tell it. Bitlocker will do what it wants and just use the TPM unless you jump through a bunch of group policy edits and such. But you are correct, I had forgotten it does give you the option to backup the key to a txt file during the installation or initial encryption process :)
The Key is stored on the Internal TPM. Only it can unlock the SSD.