logoalt Hacker News

PunchyHamsterlast Thursday at 9:24 AM1 replyview on HN

That is also required for any kind of key rotation to work, you're getting new key for a key, because alternative of using key directly would mean re-encrypting the whole drive when it changes and of course only having single one instead of multiple


Replies

nottorplast Thursday at 10:11 AM

So if you’re using the TPM based encryption you’d better have a working backup system.

How many home users have that? How many stories of personal data loss are we going to hear as windows 11 ready PCs start to die?

show 2 replies