Raspberry Pi Pico cracks BitLocker in under a minute
theregister.com
Raspberry Pi Pico cracks BitLocker in under a minute
1–10 of 24 posts
Re: Raspberry Pi Pico cracks BitLocker in under a minute
#2I saw this on hackaday 43 seconds to crack bitlocker is pretty badass.
Re: Raspberry Pi Pico cracks BitLocker in under a minute
#3Previous discussions: "Breaking Bitlocker – Bypassing the Windows Disk Encryption [video]"[0](110 points, 3 days ago, 68 comments), "BitLocker encryption broken in 43 seconds with sub-$10 Raspberry Pi Pico"[1] (108 points, 11 hours ago, 62 comments)
[0]: https://news.ycombinator.com/item?id=39243305 [1]: https://news.ycombinator.com/item?id=39284711
Re: Raspberry Pi Pico cracks BitLocker in under a minute
#4I saw this on hackaday 43 seconds to crack bitlocker is pretty badass.
And the first 30 seconds was just unscrewing the base.
Re: Raspberry Pi Pico cracks BitLocker in under a minute
#5TFA:
> If your hardware is vulnerable, mitigation can be achieved through the use of a PIN.
Or, encryption passphrase on boot.
But in that case, you just need two accesses: Add h/w keylogger, read h/w keylogger.
You can at least make it somewhat more difficult by using ubsguard to prevent the most obvious keylogger ingress points.
Re: Raspberry Pi Pico cracks BitLocker in under a minute
#6TFA: > If your hardware is vulnerable, mitigation can be achieved through the use of a PIN. Or, encryption passphrase on boot. But in that case, you just need two accesses: Add h/w keylogger, read h/w keylogger. You can at least make it somewhat more difficult by using ubsguard to prevent the most obvious keylogger ingress points.
And the usbguard must be installed in the initramfs, not the main system, right? Because the fde password is provided before most of the system loads.
Re: Raspberry Pi Pico cracks BitLocker in under a minute
#7Am I missing something or is this the same TPM bus sniffing for the key exchange attack (from @marcan maybe?) that was detailed some years back but using a cheap Pi? Is this attack BitLocker specific somehow? It looks like it would affect LUKS or others just as well. Just trying to understand the novelty of this particular method or if it's tied to BitLocker in particular.
Anyway, not to detract from the nice work of the author or to tout my own horn but I can hack a lot of encryptions in seconds with a simple keylogger. For the sake of this exercise I'll consider the key exchange (user typing password) is an integral part of any encryption scheme :).
More seriously, I think fTPM or TPM+PIN+USB key would be good ways to avoid this scenario.
Re: Raspberry Pi Pico cracks BitLocker in under a minute
#8Am I missing something or is this the same TPM bus sniffing for the key exchange attack (from @marcan maybe?) that was detailed some years back but using a cheap Pi? Is this attack BitLocker specific somehow? It looks like it would affect LUKS or others just as well. Just trying to understand the novelty of this particular method or if it's tied to BitLocker in particular. Anyway, not to detract from the nice work of…
This impacts any encryption scheme using dTPM, which today should be uncommon as fTPM has been in AMD and Intel chips for many years.
Re: Raspberry Pi Pico cracks BitLocker in under a minute
#9Am I missing something or is this the same TPM bus sniffing for the key exchange attack (from @marcan maybe?) that was detailed some years back but using a cheap Pi? Is this attack BitLocker specific somehow? It looks like it would affect LUKS or others just as well. Just trying to understand the novelty of this particular method or if it's tied to BitLocker in particular. Anyway, not to detract from the nice work of…
> It looks like it would affect LUKS or others just as well.
Except you can use good old password protected FDE on any major desktop operating system other than Windows Home Edition.
> I can hack a lot of encryptions in seconds with a simple keylogger.
A thief can't use your keylogger to decrypt a stolen laptop that's properly encrypted. A rogue recycling shop can't do that either. And kids won't be able to use, uh, Raspberry Pis to decrypt random Surface laptops.
So yes, it's kind of a big deal. People shouldn't have to worry about the TPM details of their devices to benefit from encryption in ways that protect against the most common threats.
Re: Raspberry Pi Pico cracks BitLocker in under a minute
#10Am I missing something or is this the same TPM bus sniffing for the key exchange attack (from @marcan maybe?) that was detailed some years back but using a cheap Pi? Is this attack BitLocker specific somehow? It looks like it would affect LUKS or others just as well. Just trying to understand the novelty of this particular method or if it's tied to BitLocker in particular. Anyway, not to detract from the nice work of…
> It looks like it would affect LUKS or others just as well. Except you can use good old password protected FDE on any major desktop operating system other than Windows Home Edition. > I can hack a lot of encryptions in seconds with a simple keylogger. A thief can't use your keylogger to decrypt a stolen laptop that's properly encrypted. A rogue recycling shop can't do that either. And kids won't be able to use, uh,…
VeraCrypt works on Windows Home