3

I want to understand the technical aspect of BitLocker and TPM, especially with Startup PIN. Does anyone know a technical survey report, preferred by a competent third party (not MS)?

I have a few questions about this topic

  1. If I use the BitLocker StartUp PIN, do I use the TPM like a smart card?
  2. Like a smart card, can I change the maximal tries until the smart card resets? Or is there a other methode to prevent brute force?
  3. Can I retrieve my data at every point with the recovery key? (use hard drive on another pc, reseted TPM, ... )
  4. In my bios a can chose between TPM 1.2 and Intel TPM 2.0, what is the difference?
  5. If leaving aside the transparency, can you say that BitLocker and TrueCrypt are equally safe? (IMHO transparency in TrueCrypt not really exist.)
3

I don't know of independent security audits, but your questions 1-4 are relatively easily answered from official sources. I would have no reason to distrust the official sources on those matters. The quick answers are:

  1. Yes, the TPM is tamper-proof hardware which stores and protects your key.
  2. This is manufacturer dependent but most use an exponential backoff, e.g. 1st bad attempt locks for 1 min, then 2 mins, 4 mins, 8 mins, etc. more here
  3. Yes, the recovery key is your key, so you can recover in case the TPM fails. more here
  4. TPM 2.0 supports new algorithms and other improvements. I don't think the changes are fundamental. more here

Your question number 5 is much more interesting! TrueCrypt and BitLocker have very different safety profiles, and this is where we do have to question how much we can trust the TPM manufacturers.

  • TrueCrypt is as secure as your passphrase. If you use a weak passphrase, your encryption can be broken by brute force. If you use a strong passphrase then as far as anyone can tell (at least anyone who will speak in public) then your data is safe. There are a few caveats on this (cold boot, evil maid) but in the case that your computer is stolen while turned off, the data is very well secured.

  • BitLocker is as secure as your TPM. If you use a weak password, your data is still safe because the TPM enforces a lockout. However, if your TPM can be compromised then your data is at risk. It may be possible to compromise the TPM by techniques like shaving it open layer by layer and using a scanning-tunnelling electron microscope. However, a much more practical concern is law enforcement back doors. The TPM manufacturers probably have a back door they can use to get in, and they would likely reveal this to law enforcement in certain circumstances.

I can see why law enforcement would hate TrueCrypt! BitLocker gives adequate protection for commercial uses. And TrueCrypt is ideal for criminals.

Even if someone did an independent security audit, it wouldn't normally be possible to determine whether there was a manufacturer back door.

0

The TPM manufacturers probably have a back door they can use to get in, and they would likely reveal this to law enforcement in certain circumstances.

You'd kinda hope not; it would mean that the TPM manufacturer can undermine all of the guarantees that Trusted Computing tries to give you.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.