BitLocker Disk Encryption - Revision history

Joachim Metz at 17:17, 19 May 2012

2012-05-19T17:17:21Z

Joachim Metz: /* External Links */

2012-05-18T17:17:47Z

‎External Links

Joachim Metz at 08:51, 16 May 2012

2012-05-16T08:51:32Z

Joachim Metz at 08:50, 16 May 2012

2012-05-16T08:50:36Z

Joachim Metz: /* See Also */

2012-03-08T06:38:55Z

‎See Also

Joachim Metz at 10:11, 27 September 2011

2011-09-27T10:11:56Z

Joachim Metz at 10:01, 27 September 2011

2011-09-27T10:01:43Z

Joachim Metz at 15:23, 25 September 2011

2011-09-25T15:23:45Z

Joachim Metz at 15:23, 25 September 2011

2011-09-25T15:23:09Z

Joachim Metz: Textual changes and additions. Removed reference to FreeOTFE does not seem to provide BitLocker support.

2011-09-25T15:18:00Z

Textual changes and additions. Removed reference to FreeOTFE does not seem to provide BitLocker support.

← Older revision		Revision as of 17:17, 19 May 2012
Line 1:		Line 1:
−	'''BitLocker Disk Encryption''' (BDE) is [[Full Volume Encryption]] solution by [[Microsoft]] first included with the Enterprise and Ultimate editions of [[Windows\|Windows Vista]]. It is also present in [[Windows\|Windows 7]] along with a system for encrypting removable storage media devices, like [[USB]], which is called BitLocker To Go. Unlike previous versions of BitLocker, ~~BTG~~ allows the user to protect volumes with a password or smart card.	+	'''BitLocker Disk Encryption''' (BDE) is [[Full Volume Encryption]] solution by [[Microsoft]] first included with the Enterprise and Ultimate editions of [[Windows\|Windows Vista]]. It is also present in [[Windows\|Windows 7]] along with a system for encrypting removable storage media devices, like [[USB]], which is called BitLocker To Go. Unlike previous versions of BitLocker, BitLocker To Go allows the user to protect volumes with a password or smart card.

	== BitLocker ==		== BitLocker ==

@@ Line 51: / Line 51: @@
 * [http://secude.com/htm/801/en/White_Paper%3A_Cold_Boot_Attacks.htm Cold Boot Attacks, Full Disk Encryption, and BitLocker]
 * [http://code.google.com/p/libbde/ Project to read BitLocker encrypted volumes]
 [[Category:Disk encryption]]
 [[Category:Windows]]

← Older revision		Revision as of 08:51, 16 May 2012
Line 1:		Line 1:
−	'''BitLocker Disk Encryption''' (BDE) is [[Full Volume Encryption]] solution by [[Microsoft]] first included with the Enterprise and Ultimate editions of [[Windows\|Windows Vista]]. It is also present in [[Windows\|Windows 7]] along with a system for encrypting removable storage media devices, like [[USB]], which is called BitLocker To Go.	+	'''BitLocker Disk Encryption''' (BDE) is [[Full Volume Encryption]] solution by [[Microsoft]] first included with the Enterprise and Ultimate editions of [[Windows\|Windows Vista]]. It is also present in [[Windows\|Windows 7]] along with a system for encrypting removable storage media devices, like [[USB]], which is called BitLocker To Go. Unlike previous versions of BitLocker, BTG allows the user to protect volumes with a password or smart card.

	== BitLocker ==		== BitLocker ==

@@ Line 1: / Line 1: @@
-'''BitLocker Disk Encryption''' (BDE) is [[Full Volume Encryption]] solution by [[Microsoft]] first included with the Enterprise and Ultimate editions of [[Windows|Windows Vista]]. It is also present in [[Windows 7]] along with a system for encrypting removable storage media devices, like [[USB]], which is called [[BitLocker To Go]].
+'''BitLocker Disk Encryption''' (BDE) is [[Full Volume Encryption]] solution by [[Microsoft]] first included with the Enterprise and Ultimate editions of [[Windows|Windows Vista]]. It is also present in [[Windows|Windows 7]] along with a system for encrypting removable storage media devices, like [[USB]], which is called BitLocker To Go.
 Volumes encrypted with BitLocker will have a different signature than the standard [[NTFS]] header. Instead, they have in their volume header (first sector): <tt>2D 46 56 45 2D 46 53 2D</tt> or, in ASCII, <tt>-FVE-FS-</tt>.
-Volumes encrypted with BitLocker To Go will have a hybrid encrypted volume, meaning that part of the volume is unencrypted and contains applications to unlock the volume and the other part of the volume is encypted. These volumes can be identified by the BitLocker GUID/UUID: 4967d63b-2e29-4ad8-8399-f6a339e3d00.
+These volumes can be identified by the BitLocker GUID/UUID: 4967d63b-2e29-4ad8-8399-f6a339e3d00.
 The actual data on the encrypted volume is protected with either 128-bit or 256-bit [[AES]] and optionally diffused using an algorithm called Elephant. The key used to do the encryption, the Full Volume Encryption Key (FVEK) and/or TWEAK key, is stored in the BitLocker metadata on the protected volume. The FVEK and/or TWEAK keys are encrypted using another key, namely the Volume Master Key (VMK). Several copies of the VMK are also stored in the metadata. Each copy of the VMK is encrypted using another key, also know as key-protector key. Some of the key-protectors are:
 * TPM (Trusted Platform Module)
 * recovery password
 * start-up key
@@ Line 13: / Line 15: @@
 BitLocker has support for partial encrypted volumes.
 == manage-bde ==
@@ Line 31: / Line 36: @@
 == See Also ==
 * [[BitLocker:_how_to_image]]
 * [[Defeating Whole Disk Encryption]]
@@ Line 42: / Line 46: @@
 * [http://technet2.microsoft.com/WindowsVista/en/library/c61f2a12-8ae6-4957-b031-97b4d762cf311033.mspx?mfr=true Microsoft's Step by Step Guide]
 * [http://technet.microsoft.com/en-us/windowsvista/aa906017.aspx Microsoft Technical Overview]
 * [http://www.microsoft.com/whdc/system/platform/hwsecurity/BitLockerFAQ.mspx Microsoft FAQ]
 * [http://www.microsoft.com/downloads/details.aspx?FamilyID=131dae03-39ae-48be-a8d6-8b0034c92555&DisplayLang=en Microsoft Description of the Encryption Algorithm]

@@ Line 32: / Line 32: @@
 == See Also ==
 * [[BitLocker To Go]]
 * [[Defeating Whole Disk Encryption]]

← Older revision		Revision as of 10:11, 27 September 2011
Line 1:		Line 1:
−	'''BitLocker Disk Encryption''' (BDE) is ~~a [[Microsoft]]~~ [[Full Volume Encryption]] solution first included with the Enterprise and Ultimate editions of [[Windows\|Windows Vista]]. It is also present in [[Windows 7]] along with a system for encrypting removable storage media devices, like [[USB]], which is called [[BitLocker To Go]].	+	'''BitLocker Disk Encryption''' (BDE) is [[Full Volume Encryption]] solution by [[Microsoft]] first included with the Enterprise and Ultimate editions of [[Windows\|Windows Vista]]. It is also present in [[Windows 7]] along with a system for encrypting removable storage media devices, like [[USB]], which is called [[BitLocker To Go]].

	Volumes encrypted with BitLocker will have a different signature than the standard [[NTFS]] header. Instead, they have in their volume header (first sector): <tt>2D 46 56 45 2D 46 53 2D</tt> or, in ASCII, <tt>-FVE-FS-</tt>.		Volumes encrypted with BitLocker will have a different signature than the standard [[NTFS]] header. Instead, they have in their volume header (first sector): <tt>2D 46 56 45 2D 46 53 2D</tt> or, in ASCII, <tt>-FVE-FS-</tt>.

← Older revision		Revision as of 10:01, 27 September 2011
Line 13:		Line 13:

	BitLocker has support for partial encrypted volumes.		BitLocker has support for partial encrypted volumes.
		+
		+	== manage-bde ==
		+	To view the BitLocker Drive Encryption (BDE) status on a running Windows system:
		+	<pre>
		+	manage-bde.exe -status
		+	</pre>
		+
		+	To obtain the recovery password for volume C:
		+	<pre>
		+	manage-bde.exe -protectors -get C: -Type recoverypassword
		+	</pre>
		+
		+	Or just obtain the all “protectors” for volume C:
		+	<pre>
		+	manage-bde.exe -protectors -get C:
		+	</pre>

	== See Also ==		== See Also ==

@@ Line 3: / Line 3: @@
 Volumes encrypted with BitLocker will have a different signature than the standard [[NTFS]] header. Instead, they have in their volume header (first sector): <tt>2D 46 56 45 2D 46 53 2D</tt> or, in ASCII, <tt>-FVE-FS-</tt>.
-Volumes encrypted with BitLocker To Go will have a hybrid encrypted volume, meaning that part of the volume is unencrypted and contains applications to unlock the volume and the other part of the volume is encypted. These volumes can be identifier by the BitLocker GUID/UUID: 4967d63b-2e29-4ad8-8399-f6a339e3d00.
+Volumes encrypted with BitLocker To Go will have a hybrid encrypted volume, meaning that part of the volume is unencrypted and contains applications to unlock the volume and the other part of the volume is encypted. These volumes can be identified by the BitLocker GUID/UUID: 4967d63b-2e29-4ad8-8399-f6a339e3d00.
 The actual data on the encrypted volume is protected with either 128-bit or 256-bit [[AES]] and optionally diffused using an algorithm called Elephant. The key used to do the encryption, the Full Volume Encryption Key (FVEK) and/or TWEAK key, is stored in the BitLocker metadata on the protected volume. The FVEK and/or TWEAK keys are encrypted using another key, namely the Volume Master Key (VMK). Several copies of the VMK are also stored in the metadata. Each copy of the VMK is encrypted using another key, also know as key-protector keys. Several key-protectors are: