3 ms·
Isn't the TPM meant for precisely that use case?
by imiric 4y ago
Isn't the TPM meant for precisely that use case?
- londons_explore 4y agoThe TPM is good for storing keys, but can't actually decrypt/encrypt large amounts of data fast as required for disk encryption. So the key ends up temporarily stored in RAM. The fact that most people leave their computers in sleep mode means that to a determined attacker, disk encryption is bypass able by reading the key from RAM.
- smileybarry 4y agoI think the current sleep implementation in Windows flushes the key from memory before entering sleep, and re-fetches it on-wake. That's one reason for those "BitLocker PC doesn't wake from sleep" bugs in quirky setups.