4 ms·
There is E2EE! The spec defines it! It works! But Bitlocker doesn't use it (systemd-cryptenroll does), and as a result is vulnerable to this attack.
by mjg59 3y ago
There is E2EE! The spec defines it! It works! But Bitlocker doesn't use it (systemd-cryptenroll does), and as a result is vulnerable to this attack.
- jeroenhd 3y agoAs far as I understand parameter encryption, there are still ways to compromise the key if you don't use the TPM PIN, because of the difficulties of establishing trust between the TPM and the CPU and the risk of a MitM attack. This makes it much more difficult to attack the TPM, but the underlying challenge remains. I'm happy that systemd-cryptenroll does what Windows failed to do, though. I can't fathom why Microsoft would make it do easy for an attacker to bypass Bitlocker's encryption like this.