4 ms·
Why not provide the customer with a recovery key? Microsoft Bitlocker is able to do this and uses hardware-based encryption.
by willtim 8y ago
Why not provide the customer with a recovery key? Microsoft Bitlocker is able to do this and uses hardware-based encryption.
- pvg 8y agoFilevault generates recovery keys.
- dogma1138 8y agoTPM isn’t adversary resistant, these modules are easily accessible over the IC2 bus and can be compromised there is plenty of research to support that. With Bitlocker unless you backup the recovery key in the cloud or manually there is no way to recover it unless you are going to attempt to compromise the TPM this is no different than FileVault/TimeMachine backups which do exactly that however with the added assurance that at least at the writing of this comment the T2 chip cannot be easily compromised or accesses outside of normal operating parameters.