{"id":75933,"date":"2024-03-08T12:23:31","date_gmt":"2024-03-08T04:23:31","guid":{"rendered":"https:\/\/version-2.com\/?p=75933"},"modified":"2024-02-28T12:31:14","modified_gmt":"2024-02-28T04:31:14","slug":"keeping-encryption-secure-from-bitlocker-sniffing","status":"publish","type":"post","link":"https:\/\/version-2.com\/en\/2024\/03\/keeping-encryption-secure-from-bitlocker-sniffing\/","title":{"rendered":"Keeping encryption secure from BitLocker sniffing"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
<\/div>

Recently, the YouTube channel stacksmashing<\/a> uploaded a video on breaking the built-in encryption in Windows, essentially bypassing Windows Disk Encryption<\/a> on most devices using Microsoft’s globally dominant operating system with a cheap $10 tool.<\/p>

This all in just 43 seconds \u2013 record time. And while encryption has often been the poster child for efficient and secure data protection, now it seems like encryption, too, has its holes, despite relying on advanced features such as Trusted Platform Modules (TPM<\/a>), which are now also required by the newest Windows OS<\/a>.<\/p>

But can this security hole be properly navigated? Thankfully, the solution is relatively easy and also does not cost as much as a full data breach would.<\/p><\/div>

Exploring BitLocker sniffing<\/h3><\/header>

The method bypassing encryption has been dubbed \u201cBitLocker sniffing<\/a>,\u201d named after the built-in Windows encryption tool BitLocker. Essentially, data from the TPM is exposed on the bus, and if anything is using the TPM, one can then \u201csniff\u201d out the data that gets exposed on the bus at some point during the de-encryption process. This can happen on older machines, specifically those whose TPM is not integrated into the CPU.<\/p><\/div>