New BitLocker attack puts laptops storing sensitive data at risk

guest · Mar 14, 2019

New BitLocker attack puts laptops storing sensitive data at risk
New Zealand security researcher details never-before-seen attack for recovering BitLocker keys
March 14, 2019
https://www.zdnet.com/article/new-bitlocker-attack-puts-laptops-storing-sensitive-data-at-risk/

A security researcher has come up with a new method of extracting BitLocker encryption keys from a computer's Trusted Platform Module (TPM) that only requires a $27 FPGA board and some open-sourced code.

To be clear, this new BitLocker attack require physical access to a device and will result in the device's destruction as the attacker needs to hard-wire equipment into the computer's motherboard.
Nonetheless, the attack yields the desired results and should be considered a threat vector for owners of devices storing highly-valuable information [...]
ATTACK TARGETS TPM LPC BUSES
The attack was detailed for the first time today in a report by Denis Andzakovic, a New Zealand-based security researcher at Pulse Security.
Click to expand...

RESEARCHER & MICROSOFT: USE PRE-BOOT AUTHENTICATION
Andzakovic's research showed once again why using standard BitLocker deployments is a very bad idea and the reason why even Microsoft is warning against it in the official BitLocker documentation.

Both the researcher and Microsoft recommend using a pre-boot authentication method by setting a TPM/BIOS password before the OS boots, password that should prevent the BitLocker keys from reaching the TPM and getting sniffed using this new attack.
Click to expand...

Log in or Sign up

New BitLocker attack puts laptops storing sensitive data at risk

guest Guest

Log in or Sign up

New BitLocker attack puts laptops storing sensitive data at risk

guest Guest

Useful Searches