3 ms·
> BitLocker, the encryption software built into Microsoft Win- dows will rely exclusively on hardware full-disk encryption if the SSD advertises support for it.
by zaroth 7y ago
> BitLocker, the encryption software built into Microsoft Win- dows will rely exclusively on hardware full-disk encryption if the SSD advertises support for it. Thus, for these drives, data protected by BitLocker is also compromised.
I thought BitLocker stopped trusting SEDs after the last time around when drives were discovered to be trivially broken? [1]
But apparently this change only just happened a couple months ago. [2]
[1] - https://www.zdnet.com/google-amp/article/flaws-in-self-encrypting-ssds-let-attackers-bypass-disk-encryption/ https://www.zdnet.com/google-amp/article/flaws-in-self-encry...
[2] - https://www.pcworld.com/article/3441864/bitlocker-windows-built-in-encryption-tool-no-longer-trusts-your-ssds-hardware-protection.html https://www.pcworld.com/article/3441864/bitlocker-windows-bu...
- spzb 7y agoThis appears to be the same paper as in your first link. It was a draft at the time and now appears to have made it to a conference presentation. Edit: In fact the conference was in May so about six months after the first story based on the draft version. Not quite sure why it's hitting HN front page now
- isido 7y agoI think this is the published paper which contains the same vulnerabilites mentioned in the first link.