Publica

Hier finden Sie wissenschaftliche Publikationen aus den Fraunhofer-Instituten.

Attacking the BitLocker boot process

Presentation held at Research Workshop "Challenges for Trusted Computing" im Rahmen der 3rd European Trusted Infrastructure Summer School (ETISS), held in Oxford, 31st August - 5th September 2008

: Türpe, S.; Poller, A.; Steffan, J.; Stotz, J.-P.; Trukenmüller, J.

Fulltext urn:nbn:de:0011-n-831041 (104 KByte PDF)

MD5 Fingerprint: 86a937ea7952f1f1a101b1e0f15a2cda

Created on: 19.11.2008

	2008, 12 pp. European Trusted Infrastructure Summer School (ETISS) <3, 2008, Oxford> Research Workshop "Challenges for Trusted Computing" <2008, Oxford>

	English
	Presentation, Electronic Publication
	Fraunhofer SIT ()
	trusted computing; authenticated boot; BitLocker; Windows Vista; disk encryption; security

Abstract
We discuss attack scenarios against the TPM-based boot process of BitLocker. Bit Locker is a disk volume encryption feature included in some recent versions of Microsoft Windows. BitLocker is capable of using the TPM to manage all or a portion of its secret encryption keys. Specifically it uses the sealing feature to ensure keys are released only if the platform is in a predefined, trusted state. We present six ways in which an attacker may gain access to secret key material by manipulating the boot process in ways not prevented by the trusted computing technology. We also discuss their causes and contributing factors.

: http://publica.fraunhofer.de/documents/N-83104.html