Windows Vista -Understanding Bitlocker Drive Encryption

 

Bitlocker Drive Encryption in Windows Vista

 

A very common threat to the security of Windows based systems have been offline attacks. Attacks that happen in order to steal the data from a system while the system is offline, or in the shutdown state, are termed as offline attacks.

The most likely victims of offline attacks are stolen laptops, or physically insecure systems. In case a laptop with Windows XP operating system protected with good password protection is stolen, the offline attack can be performed on this system by any of the following ways –

1.      By detaching the hard disk from the system, attaching it as a slave disk to another system for which the attacker has an administrative access on the primary disk

2.     By installing a fresh copy of another operating system on the available space on the existing hard disk, gaining administrative control on the new operating system (on drive d:), thereby gaining administrative access to drive c:, on which the original operating system with data is.

3.     By booting the system with a Linux or other bootable disks (floppies or CDs) and running tools in order to change the administrative password on c: partition.

Notice, that in any of the above mentioned scenarios, the attacker needs to change the boot configuration of the hard disk on which the operating system with data resides.

To combat all the above common threats to information security, Microsoft has introduced a new security feature in the upcoming Windows Vista operating system. This feature is basically a hardware provided feature that is enabled through the operating system.

The Trusted Computing Group (TCG) (https://www.trustedcomputinggroup.org) now ships various certified laptops with a hardware chip installed on the motherboard, known as the TPM (Trusted Platform Module). TPM version 1.2 enabled systems provides the ability to store keys, password and even cryptographic keys in the form of certificates on the installed TPM chip.

In a Windows Vista system, the administrator has the ability to turn on ‘Bit locker Drive Encryption’ form the Security section in the Control Panel.

Bitlocker Drive Encryption consists of two parts –

1.       Secure Startup

a.       Is used to protect the boot configuration of the system volume from any changes.

b.      When turned on, the process generates two types of keys –

                                                               i.      Startup Key – This key is created after encrypting the existing boot configuration of the system volume. It is created and stored on the TPM chip on the mother board, and is used to match the key generated after checking the boot configuration every time the system starts up. If the boot configuration remains unchanged, the key generated every time the system starts, matches the key stored inside the TPM and system starts without any prompts and the process is transparent to the user.

                                                             ii.      Recovery Key – This key is generated for the administrator to store at another location which may be a USB Flash disk, a network drive or the active directory profile of the user. This key is used when the boot configuration of the system volume is accidently changed after enabling secure startup. When the system starts up and generates the key for the new boot configuration, it will not match the key stored in the TPM chip as the boot configuration was changed. In this case, the system enters into the ‘Recovery Mode’ where it prompts the user for a recovery key. In case the user is an authorized one (and has not stolen this laptop), he must have the recovery key provided to him at the time of enabling secure startup. This is a long numerical key that can be entered on the system by using the F1-F10 keys for (1-0 respectively) during this time, or can be provided through the USB disk in which the recovery key was stored.

 

2.       Full Volume Encryption – This feature ensures that in case the attacker tries to mount this system as another volume using Linux operating system, or tires to access the system drive by making it a slave volume of another system, or by booting from another operating system volume in a dual boot system, he is not able to extract the data out of this volume. Once the Full Volume Encryption is enabled on the Windows Vista volume, it makes renders it incapable of being mounted through any other OS volume. Even in case of a dual boot system with Windows XP installed on drive C: and Windows Vista (with FVE enabled) on drive d:, and the attacker gains admin access to Windows Vista on drive c:, he will not be able to gain any access to data in drive d:. This happens because as soon as the attacker double-clicks drive d: to browse through it, he only gets a message box telling that the “drive is inaccessible. Do you want to format it now?”  So the only option he is left with is to format and reuse the drive which keeps the confidentiality of the data inside the Windows Vista system.

 

22 thoughts on “Windows Vista -Understanding Bitlocker Drive Encryption”

  1. http://www.batteryfast.com.au/acer/extensa-5210.htm Acer extensa 5210 battery http://www.batteryfast.com.au/acer/extensa-5220.htm Acer extensa 5220 battery http://www.batteryfast.com.au/acer/extensa-5620g.htm Acer extensa 5620g battery http://www.batteryfast.com.au/acer/tm00741.htm Acer tm00741 battery http://www.batteryfast.com.au/acer/tm00751.htm Acer tm00751 battery http://www.batteryfast.com.au/acer/travelmate-5710.htm Acer travelmate 5710 battery http://www.batteryfast.com.au/acer/travelmate-5720g.htm Acer travelmate 5720g battery http://www.batteryfast.com.au/acer/travelmate-7520g.htm Acer travelmate 7520g battery http://www.batteryfast.com.au/asus/a22-700.htm Asus a22-700 battery http://www.batteryfast.com.au/asus/a22-p701.htm Asus a22-p701 battery http://www.batteryfast.com.au/asus/eee-pc-1000.htm Asus eee pc 1000 battery http://www.batteryfast.com.au/asus/eee-pc-1000h.htm Asus eee pc 1000h battery http://www.batteryfast.com.au/asus/eee-pc-701.htm Asus eee pc 701 battery http://www.batteryfast.com.au/asus/eee-pc-900.htm Asus eee pc 900 battery http://www.batteryfast.com.au/asus/eee-pc-901.htm Asus eee pc 901 battery http://www.batteryfast.com.au/asus/eee-pc-904.htm Asus eee pc 904 battery http://www.batteryfast.com.au/dell/latitude-d410.htm Dell latitude d410 battery http://www.batteryfast.com.au/dell/latitude-d420.htm Dell latitude d420 battery http://www.batteryfast.com.au/dell/latitude-d430.htm Dell latitude d430 battery http://www.batteryfast.com.au/dell/latitude-d610.htm Dell latitude d610 battery http://www.batteryfast.com.au/dell/latitude-d810.htm Dell latitude d810 battery http://www.batteryfast.com.au/dell/vostro-1310.htm Dell vostro 1310 battery http://www.batteryfast.com.au/dell/vostro-1320.htm Dell vostro 1320 battery http://www.batteryfast.com.au/dell/vostro-1510.htm Dell vostro 1510 battery http://www.batteryfast.com.au/dell/vostro-1520.htm Dell vostro 1520 battery http://www.batteryfast.com.au/dell/vostro-2510.htm Dell vostro 2510 battery http://www.batteryfast.com.au/hp/f2024.htm Hp f2024 battery http://www.batteryfast.com.au/hp/f2024a.htm Hp f2024a battery http://www.batteryfast.com.au/hp/f2024b.htm Hp f2024b battery http://www.batteryfast.com.au/hp/f2111.htm Hp f2111 battery http://www.batteryfast.com.au/hp/pavilion-dv2133.htm Hp pavilion dv2133 battery http://www.batteryfast.com.au/hp/pavilion-dv3000.htm Hp pavilion dv3000 battery http://www.batteryfast.com.au/hp/pavilion-dv3500.htm Hp pavilion dv3500 battery http://www.batteryfast.com.au/hp/pavilion-n5130.htm Hp pavilion n5130 battery http://www.batteryfast.com.au/hp/pavilion-n5140.htm Hp pavilion n5140 battery http://www.batteryfast.com.au/hp/pavilion-n5150.htm Hp pavilion n5150 battery http://www.batteryfast.com.au/hp/pavilion-n5170.htm Hp pavilion n5170 battery http://www.batteryfast.com.au/hp/pavilion-n5190.htm Hp pavilion n5190 battery http://www.batteryfast.com.au/hp/pavilion-n5200.htm Hp pavilion n5200 battery

  2. http://www.batteryfast.com.au/ibm/thinkpad-r51.htm Ibm thinkpad r51 battery http://www.batteryfast.com.au/ibm/thinkpad-t20.htm Ibm thinkpad t20 battery http://www.batteryfast.com.au/ibm/thinkpad-t21.htm Ibm thinkpad t21 battery http://www.batteryfast.com.au/ibm/thinkpad-t22.htm Ibm thinkpad t22 battery http://www.batteryfast.com.au/ibm/thinkpad-t23.htm Ibm thinkpad t23 battery http://www.batteryfast.com.au/ibm/thinkpad-t42.htm Ibm thinkpad t42 battery http://www.batteryfast.com.au/ibm/thinkpad-t43.htm Ibm thinkpad t43 battery http://www.batteryfast.com.au/ibm/thinkpad-x20.htm Ibm thinkpad x20 battery http://www.batteryfast.com.au/ibm/thinkpad-x200.htm Ibm thinkpad x200 battery http://www.batteryfast.com.au/ibm/thinkpad-x21.htm Ibm thinkpad x21 battery http://www.batteryfast.com.au/ibm/thinkpad-x22.htm Ibm thinkpad x22 battery http://www.batteryfast.com.au/ibm/thinkpad-x23.htm Ibm thinkpad x23 battery http://www.batteryfast.com.au/ibm/thinkpad-X40.htm Ibm thinkpad X40 battery http://www.batteryfast.com.au/ibm/thinkpad-x41.htm Ibm thinkpad x41 battery http://www.batteryfast.com.au/ibm/thinkpad-x60.htm Ibm thinkpad x60 battery http://www.batteryfast.com.au/ibm/thinkpad-x60s.htm Ibm thinkpad x60s battery http://www.batteryfast.com.au/ibm/thinkpad-z60t.htm Ibm thinkpad z60t battery http://www.batteryfast.com.au/ibm/thinkpad-z61t.htm Ibm thinkpad z61t battery http://www.batteryfast.com.au/msi/bty-s11.htm Msi bty-s11 battery http://www.batteryfast.com.au/msi/bty-s12.htm Msi bty-s12 battery http://www.batteryfast.com.au/msi/wind-u100.htm Msi wind u100 battery http://www.batteryfast.com.au/msi/wind-u90.htm Msi wind u90 battery http://www.batteryfast.com.au/sony/pcga-bp2r.htm Sony pcga-bp2r battery http://www.batteryfast.com.au/sony/pcga-bpz51.htm Sony pcga-bpz51 battery http://www.batteryfast.com.au/sony/pcga-bpz51a.htm Sony pcga-bpz51a battery http://www.batteryfast.com.au/sony/vgp-bpl5a.htm Sony vgp-bpl5a battery http://www.batteryfast.com.au/sony/vgp-bps5.htm Sony vgp-bps5 battery http://www.batteryfast.com.au/sony/vgp-bps5a.htm Sony vgp-bps5a battery http://www.batteryfast.com.au/toshiba/pa3123u-1brs.htm Toshiba pa3123u-1brs battery http://www.batteryfast.com.au/toshiba/pa3178u-1bas.htm Toshiba pa3178u-1bas battery http://www.batteryfast.com.au/toshiba/pa3178u-1brs.htm Toshiba pa3178u-1brs battery http://www.batteryfast.com.au/toshiba/pa3211u-1bas.htm Toshiba pa3211u-1bas battery http://www.batteryfast.com.au/toshiba/pa3211u-1brs.htm Toshiba pa3211u-1brs battery http://www.batteryfast.com.au/toshiba/pa3479u-1brs.htm Toshiba pa3479u-1brs battery http://www.batteryfast.com.au/toshiba/pa3480u-1brs.htm Toshiba pa3480u-1brs battery http://www.batteryfast.com.au/toshiba/pa3591u-1bas.htm Toshiba pa3591u-1bas battery http://www.batteryfast.com.au/toshiba/pa3634u-1bas.htm Toshiba pa3634u-1bas battery http://www.batteryfast.com.au/toshiba/pa3635u-1bam.htm Toshiba pa3635u-1bam battery http://www.batteryfast.com.au/toshiba/pa3635u-1brm.htm Toshiba pa3635u-1brm battery http://www.batteryfast.com.au/toshiba/pa3638u-1bap.htm Toshiba pa3638u-1bap battery http://www.batteryfast.com.au/toshiba/pabas117.htm Toshiba pabas117 battery http://www.batteryfast.com.au/toshiba/pabas118.htm Toshiba pabas118 battery http://www.batteryfast.com.au/laptop-ac-adapter/hp/510.htm hp 510 adapter http://www.batteryfast.com.au/laptop-ac-adapter/hp/530.htm hp 530 adapter

  3. http://www.topbattery.com.au/toshiba/pa3285u-3brs.htm Toshiba pa3285u-3brs Battery http://www.topbattery.com.au/asus/a32-f3.htm Asus a32-f3 Battery http://www.topbattery.com.au/asus/f3.htm Asus f3 Battery http://www.topbattery.com.au/toshiba/pa3285u-3bas.htm Toshiba pa3285u-3bas Battery http://www.topbattery.com.au/laptop-ac-adapter/dell/d620.htm Dell d620 Adapter http://www.topbattery.com.au/acer/as07b41.htm Acer as07b41 Battery http://www.topbattery.com.au/acer/aspire-5500.htm Acer aspire 5500 Battery http://www.topbattery.com.au/acer/aspire-9300-series.htm Acer aspire 9300 series Battery http://www.topbattery.com.au/laptop-ac-adapter/ laptop ac adapter http://www.topbattery.com.au/laptop-ac-adapter/ laptop ac adapters http://www.topbattery.com.au/apple/a1185.htm Apple a1185 Battery http://www.topbattery.com.au/apple/a1185-black.htm Apple a1185 black Battery http://www.topbattery.com.au/apple/a1185-white.htm Apple a1185 white Battery http://www.topbattery.com.au/asus/a42-a4.htm Asus a42-a4 Battery http://www.topbattery.com.au/asus/a42-v6.htm Asus a42-v6 Battery http://www.topbattery.com.au/clevo/d400.htm Clevo d400 Battery http://www.topbattery.com.au/clevo/d470w.htm Clevo d470w Battery http://www.topbattery.com.au laptop battery http://www.topbattery.com.au laptop batteries http://www.topbattery.com.au/compaq/dv4000.htm Compaq dv4000 Battery http://www.topbattery.com.au/compaq/dv6000.htm Compaq dv6000 Battery http://www.topbattery.com.au/compaq/dv6500.htm Compaq dv6500 Battery http://www.topbattery.com.au/compaq/presario-v4000.htm Compaq presario v4000 Battery http://www.topbattery.com.au/dell/1501.htm Dell 1501 Battery http://www.topbattery.com.au/dell/6400.htm Dell 6400 Battery http://www.topbattery.com.au/dell/d620.htm Dell d620 Battery http://www.topbattery.com.au/dell/d630.htm Dell d630 Battery http://www.topbattery.com.au/dell/d820.htm Dell d820 Battery http://www.topbattery.com.au/dell/d830.htm Dell d830 Battery http://www.topbattery.com.au/dell/e1505.htm Dell e1505 Battery http://www.topbattery.com.au/dell/gd761.htm Dell gd761 Battery http://www.topbattery.com.au/dell/gk479.htm Dell gk479 Battery http://www.topbattery.com.au/dell/inspiron-1000.htm Dell inspiron 1000 Battery http://www.topbattery.com.au/dell/inspiron-1520.htm Dell inspiron 1520 Battery http://www.topbattery.com.au/dell/inspiron-6400.htm Dell inspiron 6400 Battery http://www.topbattery.com.au/dell/inspiron-1521.htm Dell inspiron 1521 Battery http://www.topbattery.com.au/dell/inspiron-6400.htm Dell inspiron 6400 Battery http://www.topbattery.com.au/dell/inspiron-1720.htm Dell inspiron 1720 Battery http://www.topbattery.com.au/dell/inspiron-500m.htm Dell inspiron 500m Battery http://www.topbattery.com.au/dell/inspiron-6000.htm Dell inspiron 6000 Battery http://www.topbattery.com.au/dell/inspiron-9300.htm Dell inspiron 9300 Battery http://www.topbattery.com.au/dell/inspiron-9400.htm Dell inspiron 9400 Battery http://www.topbattery.com.au/dell/kd476.htm Dell kd476 Battery http://www.topbattery.com.au/dell/kr-onx511.htm Dell kr-onx511 Battery http://www.topbattery.com.au/dell/latitude-d620.htm Dell latitude d620 Battery

  4. http://www.topbattery.com.au/dell/latitude-d630.htm Dell latitude d630 Battery http://www.topbattery.com.au/dell/latitude-d810.htm Dell latitude d810 Battery http://www.topbattery.com.au/dell/latitude-d820.htm Dell latitude d820 Battery http://www.topbattery.com.au/dell/latitude-d830.htm Dell latitude d830 Battery http://www.topbattery.com.au/dell/vostro-1000.htm Dell vostro 1000 Battery http://www.topbattery.com.au/dell/vostro-1500.htm Dell vostro 1500 Battery http://www.topbattery.com.au/dell/vostro-1700.htm Dell vostro 1700 Battery http://www.topbattery.com.au/dell/wr050.htm Dell wr050 Battery http://www.topbattery.com.au/dell/xps-m1210.htm Dell xps m1210 Battery http://www.topbattery.com.au/dell/xps-m1330.htm Dell xps m1330 Battery http://www.topbattery.com.au/dell/xps-m140.htm Dell xps m140 Battery http://www.topbattery.com.au/dell/xps-m1530.htm Dell xps m1530 Battery http://www.topbattery.com.au/dell/xps-m1730.htm Dell xps m1730 Battery http://www.topbattery.com.au/hp/510.htm Hp 510 Battery http://www.topbattery.com.au/hp/530.htm Hp 530 Battery http://www.topbattery.com.au/hp/dv2000.htm Hp dv2000 Battery http://www.topbattery.com.au/hp/dv6000.htm Hp dv6000 Battery http://www.topbattery.com.au/hp/dv6500.htm Hp dv6500 Battery http://www.topbattery.com.au/hp/dv9000.htm Hp dv9000 Battery http://www.topbattery.com.au/sony/vgp-bps2b.htm Sony vgp-bps2b Battery http://www.topbattery.com.au/toshiba/pa3285u-1bas.htm Toshiba pa3285u-1bas Battery http://www.topbattery.com.au/toshiba/pa3285u-1brs.htm Toshiba pa3285u-1brs Battery http://www.topbattery.com.au/sony/vgp-bps5a.htm Sony vgp-bps5a Battery http://www.topbattery.com.au/toshiba/pa3356u.htm Toshiba pa3356u Battery http://www.topbattery.com.au/toshiba/pa3356u-3bas.htm Toshiba pa3356u-3bas Battery http://www.topbattery.com.au laptop battery http://www.topbattery.com.au laptop batteries http://www.topbattery.com.au/toshiba/pa3399u-1bas.htm Toshiba pa3399u-1bas Battery http://www.topbattery.com.au/toshiba/pa3399u-1brs.htm Toshiba pa3399u-1brs Battery http://www.topbattery.com.au/toshiba/pa3399u-2bas.htm Toshiba pa3399u-2bas Battery http://www.topbattery.com.au/toshiba/pa3533u-1bas.htm Toshiba pa3533u-1bas Battery http://www.topbattery.com.au/toshiba/pa3533u-1brs.htm Toshiba pa3533u-1brs Battery http://www.topbattery.com.au/toshiba/pa3534u-1bas.htm Toshiba pa3534u-1bas Battery http://www.topbattery.com.au/hp/nc6100.htm Hp nc6100 Battery http://www.topbattery.com.au/hp/nc6120.htm Hp nc6120 Battery http://www.topbattery.com.au/hp/nc6120.htm Hp nc6200 Battery http://www.topbattery.com.au/hp/nc6400.htm Hp nc6400 Battery http://www.topbattery.com.au/hp/nc8230.htm Hp nc8230 Battery http://www.topbattery.com.au/hp/nx6100.htm Hp nx6100 Battery http://www.topbattery.com.au/hp/nx6120.htm Hp nx6120 Battery http://www.topbattery.com.au/hp/pavilion-dv2000.htm Hp pavilion dv2000 Battery http://www.topbattery.com.au/hp/pavilion-dv6000.htm Hp pavilion dv6000 Battery http://www.topbattery.com.au/hp/pavilion-tx2000.htm Hp pavilion tx2000 Battery http://www.topbattery.com.au/ibm/thinkpad-r60.htm Ibm thinkpad r60 Battery http://www.topbattery.com.au/ibm/thinkpad-t40.htm Ibm thinkpad t40 Battery http://www.topbattery.com.au/ibm/thinkpad-t42.htm Ibm thinkpad t42 Battery

Leave a Comment

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s