bitlocker

We both agree that there is plenty of room to backdoor Bitlocker without having to rely specifically on bitlocker code.

It's also true that the TPM protector for bitlocker uses a pin with max ~20 bits of entropy to shield the bitlocker key from exfiltration.

Allegedly after making claims about 'going dark,' the FBI 'informally' asked Microsoft for a backdoor in BitLocker.

The BitLocker preferences tell me I have BitLocker enabled.

Bruce cites removal of the diffuser as a specific reason he no longer thinks Bitlocker is OK.

Outside of this it's not really so speculative to think that Bitlocker has backdoors for gov't access.

There are practical attacks on Bitlocker without the diffuser, but Ferguson stated he didn't believe there would be with the diffuser (in the original Bitlocker paper, I think).

It's unlikely that Microsoft Bitlocker survived the combined forces of state-of-the-art cryptanalysis, legal compulsion, and company infiltration (exposed by Snowden).

There were earlier stories from a developer building Bitlocker indicating the FBI did want a backdoor at the time but ultimately settled for this.

Which the Bitlocker stuff already does, when you run it manually.

I get this whole skepticism thing, but Microsoft has been backing up BitLocker keys in OneDrive since at least Windows 8.

Unfortunately, it reduced the security of Bitlocker in a way that is only marginally relevant to Bitlocker's goals, and in a way that is very, very difficult to explain to people who don't routinely work with cryptography.

Windows 8.1 and above now have a type of "poor man's bitlocker" simply called drive encryption.

Right, I'm wondering about the assertion that the SP3 came with a "poor man's BitLocker called Drive Encryption" enabled.

I think it's best summarized as: "Removing the Elephant diffuser doesn’t entirely break BitLocker.

It also means seriously asking yourself if you actually have an adversary or just like to think that you might some day.) Just sort of saying..."How can you trust MS NOT to have backdoored bitlocker just use Linux.

Bitlocker, and then authenticated encrypted archives (for instance, PGP'd ZIP files) for anything sensitive, including your mail spool.

Schneier is not wrong: removing the diffuser did, technically, reduce the security of Bitlocker.

Bitlocker keys can be backed up to onedrive if you want, but you can also store them in a TPM or a smartcard (physical or virtual).