![Broken BitSafe Vault: Postpone the Transition](https://thmb.techidaily.com/57a4dd5881ee89a7ccb05cda2bbc7d01f9c197463ce070f6b273e0abf69dbbe5.jpg)
Broken BitSafe Vault: Postpone the Transition
![](/images/site-logo.png)
Broken BitSafe Vault: Postpone the Transition
Quick Links
Key Takeaways
- BitLocker’s encryption keys can be stolen with a Raspberry Pi Pico, but the exploit only works with external TPMs using the LPC bus.
- Most modern hardware integrates the TPM, making it more difficult to extract BitLocker keys. AMD and Intel CPUs are likely safe.
- Despite the exploit, BitLocker’s AES-128 or AES-256 encryption is still secure, so there’s no need to abandon it.
Microsoft’s BitLocker is one of the most popular full-disk encryption tools, and is built into Windows 10 and 11 Pro providing an easy encryption option for millions of Windows users worldwide. But BitLocker’s reputation as a leading encryption tool could be under threat after a YouTuber successfully stole encryption keys and decrypted private data in just 43 seconds—using a Raspberry Pi Pico costing $6.
How Was BitLocker’s Encryption Broken?
BitLocker’s encryption was broken by YouTuber Stacksmashing, who posted a video detailing how he intercepted BitLocker data, extracted decryption keys, and successfully exploited the BitLocker encryption process.
Stacksmashing’s exploit involves the external Trusted Platform Module (TPM)—the same TPM chip that stops Windows 11 upgrades—found on some laptops and computers. While many motherboards integrate the TPM chip and modern CPUs integrate the TPM into their design, other machines still use an external TPM.
Now, here’s the issue and the exploit discovered by Stacksmashing. External TPMs communicate with the CPU using what’s known as an LPC bus (Low Pin Count), which is a way for low-bandwidth devices to maintain communication with other hardware without creating a performance overhead.
However, Stacksmashing found that while the data on the TPM is secure, during the boot-up process, the communication channels (the LPC bus) between the TPM and CPU are completely unencrypted. With the right tools, an attacker can intercept data sent between the TPM and CPU containing insecure encryption keys.
Tools like the Raspberry Pi Pico, the minute $6 single-board computer that has a bunch of uses. In this case, Stacksmashing connected a Raspberry Pi Pico to unused connectors on a test laptop and managed to read the binary data as the machine booted. The resulting data contained the Volume Master Key stored on the TPM, which he could then use to decrypt other data.
Is It Time to Ditch BitLocker?
Interestingly, Microsoft was already aware of the potential for this attack. However, this is the first time a practical attack has surfaced at large, illustrating just how fast BitLocker encryption keys can be stolen.
It raises the vital question of whether you should consider switching to a BitLocker alternative, like the free and open-source VeraCrypt . The good news is that you don’t need to jump ship for a few reasons.
First, the exploit only works with external TPMs that request data from the module using the LPC bus. Most modern hardware integrates the TPM. While a motherboard-based TPM could theoretically be exploited, it would require more time, effort, and an extensive period with the target device. Extracting BitLocker Volume Master Key data from a TPM becomes even more difficult if the module is integrated into the CPU.
AMD CPUs have integrated TPM 2.0 since 2016 (with the launch of AM4, known as fTPM), while Intel CPUs integrated TPM 2.0 with the launch of its 8th Generation Coffee Lake CPUs in 2017 (known as PTT). Suffice to say, if you’re using a machine with an AMD or Intel CPU manufacturer after those dates, you’re most likely safe.
It’s also worth noting that despite this exploit, BitLocker remains secure, and the actual encryption underpinning it, AES-128 or AES-256, is still secure.
Also read:
- [New] 2024 Approved Capturing PS4 Gaming Magic in Full Detail Using OBS
- [New] 2024 Approved Dissecting YouTube's Activities Post-Uploading Videos
- [New] Fascination on Screen Top 6 Engaging Video Categories for 2024
- [New] In 2024, CaptureClub Bout
- [New] In 2024, Mastering Your Syma X8C Flight Patterns
- [New] In 2024, QuickShot Screen Grab Reviews
- [New] Mastering the Art of Online Marketing for Newcomers
- [New] Unleashing Hidden Features - Funimate Guide
- [Updated] Effortless SnapTweet Videos From Twitter for 2024
- [Updated] Free-Range Humor Development Unleash Your Wit
- [Updated] In 2024, Mastering Wide Angle Postings Integrating 360 Photos on Mobile Apps
- [Updated] In 2024, Pro Tools for Non-Pro YouTubers
- [Updated] Top Picks of Screen Recording Applications for Modern Windows Users for 2024
- 2 Ways to Monitor Asus ROG Phone 8 Pro Activity | Dr.fone
- 2024 Approved Crafty Concepts Designing Unforgettable Instagram Puzzle Feeds
- 2024 Approved Cutting-Edge Mounts Uninterrupted Mobile Shooting
- 6 Free Artificial Intelligence Services Similar to Sora
- Comprehensive Solutions to Cut Down Discord's Hefty CPU Usage in Today’s Tech Landscape
- Dissecting DJi Flyer X20 FPV Headset Capabilities
- Expert FF Video Extractor Kit Efficient File Grabbing, Firefox Compatibility
- Fixing Microsoft Store Error 0X80072EFD on PCs
- Guide to Overcoming Java Installation Errors on PC
- Guidelines to Correct Err 87 on Windows LoadLib
- How to Maintain Notebook Visibility on Win 10/11
- How to Return to Original Windows Setup Settings
- Improving System Performance by Curbing Browser Activity
- In 2024, About Infinix Hot 40 FRP Bypass
- In 2024, How to Remove a Previously Synced Google Account from Your Nokia C22
- In 2024, How to Unlock OnePlus 11R Pattern Lock if Forgotten? 6 Ways
- In 2024, Secrets Unlocked Becoming a Leader in Online Social Media Live Events
- In 2024, Unlock OnePlus Nord N30 5G Phone Password Without Factory Reset Full Guide Here
- In 2024, Unlocking Potential Metaverse Marketing Secrets
- Launch Successfully: Guiding Through Startup Services in Windows 11
- Maintain Full-Size Icons on Your Windows 11 Machine
- Mastering Wake on Lid Closure in Windows Devices
- Optimize Command Execution: Setting Terminal Preference
- Overcoming Slow Download Issues with Ease (Win)
- Overcoming Windows Speakers Unresponsiveness
- Quick Fix for Disabling Audio Playback Errors
- Resolving Update Breakdown: Overcoming Error 0X80246007 on Win11
- Safeguarding Your OS: Managing USB Device Use
- Secure Your Wi-Fi: Blocking Networks on Windows PC
- Simplified Methods for Google Meet Recordings
- Strategies to Restore Active Window Defense System
- Success Tips: Reviving Your Intel Unison App
- Techniques to Reinstate Lost McUICnt File in Windows
- The Path to a Fortified PC with Windows 11 & TPM/Secure Boot
- The Rotation Rulebook: Six Secrets to Snap-Spins in Windows 11
- Tips for Switching Off/On Windows 11'S SmartScreen
- Troubleshooting Black/White Windows Store Errors
- Turbo Steam Downloads: Overcoming Frustrating Speed Halts
- Turbo-Type Tips: Quick Key Input Enhancements for Win 10/11
- Why Your WhatsApp Location is Not Updating and How to Fix On Gionee F3 Pro | Dr.fone
- Win11 5GHz Wi-Fi Connection Woes: How to Solve Them
- Windows 10, AMD Failure: Loaded Driver Issue Resolved
- Windows 11 Widgets Configuration: The Triad Approach
- Windows Photos' Clever Trick for Image Renewal
- Windows Woos: Resolve Opera Download Hitch
- Winfix Guide: Reviving Dormant WSReset Service Process
- Title: Broken BitSafe Vault: Postpone the Transition
- Author: Joseph
- Created at : 2024-08-15 15:15:25
- Updated at : 2024-08-16 15:15:25
- Link: https://windows11.techidaily.com/broken-bitsafe-vault-postpone-the-transition/
- License: This work is licensed under CC BY-NC-SA 4.0.