Lee Duna@lemmy.nz to Technology@lemmy.worldEnglish · rok temuBitLocker encryption broken in less than 43 seconds with sub-$10 Raspberry Pi Pico — key can be sniffed when using an external TPMwww.tomshardware.comexternal-linkmessage-square63fedilinkarrow-up1757arrow-down119
arrow-up1738arrow-down1external-linkBitLocker encryption broken in less than 43 seconds with sub-$10 Raspberry Pi Pico — key can be sniffed when using an external TPMwww.tomshardware.comLee Duna@lemmy.nz to Technology@lemmy.worldEnglish · rok temumessage-square63fedilink
minus-squarefmstrat@lemmy.nowsci.comlinkfedilinkEnglisharrow-up36arrow-down5·rok temuSay it with me now: LUUUUUKS
minus-squarebaseless_discourse@mander.xyzlinkfedilinkEnglisharrow-up36·edit-27 miesięcy temudeleted by creator
minus-squarePhoenixz@lemmy.calinkfedilinkEnglisharrow-up15·rok temu CPU communicates with TPM in plaintext Because of course
minus-squareEufalconimorph@discuss.tchncs.delinkfedilinkEnglisharrow-up7·rok temuCPU doesn’t have any secure storage, so it can’t encrypt or authenticate comms to the TPM. The on-CPU fTPMs are the solution, the CPU then has the secure storage.
minus-squarebaseless_discourse@mander.xyzlinkfedilinkEnglisharrow-up2·edit-27 miesięcy temudeleted by creator
minus-squarebaseless_discourse@mander.xyzlinkfedilinkEnglisharrow-up1·edit-27 miesięcy temudeleted by creator
minus-squareHelloHotel@lemm.eelinkfedilinkEnglisharrow-up15·edit-2rok temuI wondered why LUUUUUKS didnt use the TPM, why do i have to put my password in… this is absolutely why. Edit: fixed spelling of LUUUUUKS
minus-squarecooopsspace@infosec.publinkfedilinkEnglisharrow-up4·edit-2rok temuAlso yes you can, I wouldn’t recommend it though. Maybe in addition to your password though. Wait until you see Dracut and Tang.
minus-squaremlaga97@lemmy.mlaga97.spacelinkfedilinkEnglisharrow-up3·rok temuWhat exactly is the point of full disk encryption if the system auto-unlocks on boot?
minus-squarerambling_lunatic@sh.itjust.workslinkfedilinkEnglisharrow-up1·rok temuProtection against tampering, maybe? Bad excuse, but that is the logic I’ve heard.
Say it with me now: LUUUUUKS
deleted by creator
Because of course
CPU doesn’t have any secure storage, so it can’t encrypt or authenticate comms to the TPM. The on-CPU fTPMs are the solution, the CPU then has the secure storage.
deleted by creator
deleted by creator
I wondered why LUUUUUKS didnt use the TPM, why do i have to put my password in… this is absolutely why.
Edit: fixed spelling of LUUUUUKS
Also yes you can, I wouldn’t recommend it though. Maybe in addition to your password though.
Wait until you see Dracut and Tang.
What exactly is the point of full disk encryption if the system auto-unlocks on boot?
Protection against tampering, maybe?
Bad excuse, but that is the logic I’ve heard.