Toot

Written by Will Dormann on 2025-01-20 at 00:00

@SecurityWriter

The VMK is definitely not in clear text.

Yes it's on the drive, but it's encrypted using values in the TPM.

Yes, it's somewhat flawed. But it's nowhere near as broken as having the decryption key in plain text. See also:

https://neodyme.io/en/blog/bitlocker_screwed_without_a_screwdriver/

=> View attached media

=> More informations about this toot | View the thread | More toots from wdormann@infosec.exchange

Mentions

=> View SecurityWriter@infosec.exchange profile

Tags