logoalt Hacker News

vel0city • today at 3:57 PM • 1 reply • view on HN

Look up YellowKey. Specifically crafted NTFS transaction logs would unlock any Bitlocker drive with transparent encryption. Some people believe it was an intentional backdoor, kind of a debated topic.

I'm not 100% certain either way.


Replies

gruez • today at 4:03 PM

>any Bitlocker drive with transparent encryption

Which even microsoft admits is basically a LARP from a security point of view. It's better than nothing, but it's not meant to stand up against serious attacks. Even without the yellowkey exploit, it can be bypassed via interposer attacks on the TPM.

https://learn.microsoft.com/en-us/windows/security/operating...