▲ 737 ▼ BitLocker encryption broken in less than 43 seconds with sub-$10 Raspberry Pi Pico — key can be sniffed when using an external TPM (www.tomshardware.com) submitted 2 years ago by throws_lemy@lemmy.nz to c/technology@lemmy.world 69 comments fedilink hide all child comments
[–] Bitflip@lemmy.ml 1 point 2 years ago (1 child) The key is inside the TPM. permalink fedilink source parent hideshow 2 child comments replies: [–] baseless_discourse@mander.xyz 2 points 2 years ago (1 child) For LUKS user set the key; for bitlocker, I believe the key is automatically uploaded to either your Microsoft account or you system admin's account. permalink fedilink source parent hideshow 2 child comments replies: [–] Bitflip@lemmy.ml 2 points 2 years ago Sure LUKS will do what you tell it. Bitlocker will do what it wants and just use the TPM unless you jump through a bunch of group policy edits and such. But you are correct, I had forgotten it does give you the option to backup the key to a txt file during the installation or initial encryption process :) permalink fedilink source parent
[–] baseless_discourse@mander.xyz 2 points 2 years ago (1 child) For LUKS user set the key; for bitlocker, I believe the key is automatically uploaded to either your Microsoft account or you system admin's account. permalink fedilink source parent hideshow 2 child comments replies: [–] Bitflip@lemmy.ml 2 points 2 years ago Sure LUKS will do what you tell it. Bitlocker will do what it wants and just use the TPM unless you jump through a bunch of group policy edits and such. But you are correct, I had forgotten it does give you the option to backup the key to a txt file during the installation or initial encryption process :) permalink fedilink source parent
[–] Bitflip@lemmy.ml 2 points 2 years ago Sure LUKS will do what you tell it. Bitlocker will do what it wants and just use the TPM unless you jump through a bunch of group policy edits and such. But you are correct, I had forgotten it does give you the option to backup the key to a txt file during the installation or initial encryption process :) permalink fedilink source parent