Attacking the BitLocker Boot Process

  • Authors:
  • Sven Türpe;Andreas Poller;Jan Steffan;Jan-Peter Stotz;Jan Trukenmüller

  • Affiliations:
  • Fraunhofer Institute for Secure Information Technology (SIT), Darmstadt, Germany 64295;Fraunhofer Institute for Secure Information Technology (SIT), Darmstadt, Germany 64295;Fraunhofer Institute for Secure Information Technology (SIT), Darmstadt, Germany 64295;Fraunhofer Institute for Secure Information Technology (SIT), Darmstadt, Germany 64295;Fraunhofer Institute for Secure Information Technology (SIT), Darmstadt, Germany 64295

  • Venue:
  • Trust '09 Proceedings of the 2nd International Conference on Trusted Computing
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

We discuss five attack strategies against BitLocker, which target the way BitLocker is using the TPM sealing mechanism. BitLocker is a disk encryption feature included in some versions of Microsoft Windows. It represents a state-of-the-art design, enhanced with TPM support for improved security. We show that, under certain assumptions, a dedicated attacker can circumvent the protection and break confidentiality with limited effort. Our attacks neither exploit vulnerabilities in the encryption itself nor do they directly attack the TPM. They rather exploit sequences of actions that Trusted Computing fails to prevent, demonstrating limitations of the technology.