So it’s a bit of a confusing mess in TrueCrypt land. Of course, TrueCrypt’s website now states that TrueCrypt itself is vulnerable and recommends you use BitLocker - which uses TPMs - instead. It slammed TPM-based solutions as providing a false sense of security. TrueCrypt’s FAQ - now taken down - used to stress why TrueCrypt didn’t use and would never use a TPM. Of course, a TPM isn’t the only workable option for disk encryption. RELATED: 3 Alternatives to the Now-Defunct TrueCrypt for Your Encryption Needs BitLocker can function on drives without TPMs, but Microsoft went out of its way to hide this option to emphasize how important a TPM is for security. That means it has to store its encryption keys on the hard drive, and makes it much less secure. It has no way to store encryption keys in a TPM. This is one reason why the older Windows EFS encryption technology isn’t as good. That’s why the “recovery key” for BitLocker is quite a bit longer - you need that longer recovery key to access your data if you move the drive to another computer.
#DOES ABSOLUTE LOJACK USE BITLOCKER PASSWORD#
That encryption key is partially stored in the TPM, so you actually need your Windows login password and the same computer the drive is from to get access.
You normally just gain access to an encrypted drive by typing your Windows login password, but it’s protected with a longer encryption key than that. Enable BitLocker disk encryption and Windows will use a TPM to store the encryption key. Just sign in with a Microsoft account on a modern PC that ships with “device encryption” enabled and it’ll use encryption.
Modern versions of Windows use the TPM transparently. Encryption, Encryption, Encryptionįor most people, the most relevant use case here will be encryption. This chip provides hardware-based authentication and tamper detection, so an attacker can’t attempt to remove the chip and place it on another motherboard, or tamper with the motherboard itself to attempt to bypass the encryption - at least in theory.
0 kommentar(er)
