737
BitLocker encryption broken in less than 43 seconds with sub-$10 Raspberry Pi Pico — key can be sniffed when using an external TPM (www.tomshardware.com)
submitted 2 years ago by to c/technology@lemmy.world
69 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 2 years ago (1 child)

Why not store it directly in the TPM, if that's the device that will do that initial decryption?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (2 children)

    You can't do that since vulnerability is the connection between the TPM and the CPU, you need to encrypt that path.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 2 years ago

    The TPM comes out from the factory with a private key stored in it. The CPU has the public key.

    You turn on the laptop for the first time, and the communication between the CPU and the TPM is encrypted from the start.

    That's what I'm referring to. Can't this be done? I'm guessing it's not that easy because I'm sure computer designers have already considered this idea.

  • permalink
  • fedilink
  • source
  • parent