3 ms·
These rely on the vendors secret sauce and an analysis years back found these frequently horribly broken like my password is password levels of broken. Bitlock
by michaelmrose 6y ago
These rely on the vendors secret sauce and an analysis years back found these frequently horribly broken like my password is password levels of broken.
Bitlocker by default on windows will happily depend on these broken implications in favor of actually secure options that are now and for years specifically accelerated by your cpu.
They are also potentially worthless at protecting data in suspended laptops which for some is a machines condition 99% of the time when it is apt to be lost or stolen.
- fomine3 6y agoAny citations about broken AES-NI?
- michaelmrose 6y agoTo be clear the parent post and mine were discussing self encrypting drives. Drives which handle the encryption and decryption on drive instead of relying on your CPU. This is what is insecure. https://www.tomshardware.com/news/crucial-samsung-ssd-encryption-bypassed,38025.html https://www.tomshardware.com/news/crucial-samsung-ssd-encryp... https://ciso.uw.edu/2018/11/16/bitlocker-ineffective-on-self-encrypting-drives/ https://ciso.uw.edu/2018/11/16/bitlocker-ineffective-on-self... https://borncity.com/win/2018/11/06/ssd-vulnerability-breaks-bitlocker-encryption/ https://borncity.com/win/2018/11/06/ssd-vulnerability-breaks... Self encrypting drives are have been insecure for years.
- fomine3 6y agoThanks, I misunderstood.
- athms 6y ago>Bitlocker by default on windows will happily depend on these broken implications... This was changed September 2019, when Microsoft pushed an update that defaults Bitlocker to software encryption.