Bit Locker Drive Encryption Olivia Terrell Bit Locker

Bit. Locker Drive Encryption Olivia Terrell

Bit. Locker Drive Encryption Ú What it is Ú What it does Ú How it works Ú Just how Secure is Bit. Locker? Ú Advantages/Disadvantages Ú Questions and Treats

What is Bit. Locker Drive Encryption is Every year, about 1— 2% of laptops are stolen, along with the valuable information contained within them. Bit. Locker Drive Encryption is one suggested solution to this growing problem. . .

What is Bit. Locker Drive Encryption is Ú Full Disk encryption (FDE) Ú Can be used with/without a. Trusted Platform Chip (TPC) Ú Included on Windows Vista, both Ultimate and Enterprise versions and on Windows Server 2008 Ú Has AES encryption with a 128 key in Cipher Block Chaining (CBC) mode Ú Uses an Elephant Diffuser for additional security

Full Disk Encryption Ú Full Disk Encryption (FDE): either hardware or software that encrypts all data on disk or volume—excluding the 512 -byte Master Boot Record (MBR, i. e. “Sector 0”) which contains the primary partition table or instructions to execute the Basic Input/Output of the System (BIOS)

3 Modes of Bit. Locker Ú Transparent operation mode: Requires a Trusted Platform Module (TPM) 1. 2 hardware chip with built-in encryption key. The key used for the disk encryption is sealed (encrypted) by the TPM chip and will only be released to the OS loader code if the early boot files appear to be unmodified. The pre-OS components of Bit. Locker achieve this through a Static Root of Trust Measurement (specified by the Trusted Computing Group) Ú User authentication mode: User provides pre-boot PIN to boot the OS. Ú USB Key: (No TPM needed) Must use jump drive that contains a startup key to be able to boot the OS. (provided that the BIOS can read a jump drive before running the OS) Ú Ú Ú TPM + PIN + USB Key TPM + USB Key

Trusted Platform Chip Ú The TPM 1. 2 chip utilized by Bit. Locker Ú Chip is tamper resistant—but communication channel from/to it isn’t. [1]

Trusted Platform Chip Ú The TPC is a hardware chip on the Motherboard. Ú Has several Platform Configuration Registers (PCR) whose current value at any given time can only be attained through the same sequence of operations after power-up.

Trusted Platform Chip: PCRs Ú PCRs keep track of the code that runs Ú The PCRs are initially 0 and are set using a function called extend. Extend sets a PCR to a hash of its old value and a supplied data string. Ú There is no other way to set a PCR.

Trusted Platform Chip: Sealing/Unsealing Ú The seal/unseal functions of the Trusted Platform Module (TPM) then allow access to the cryptographic keys based on the PCR values. Ú Seal is used to encrypt keys into strings that can only be decrypted by that particular TPM Ú Can only decrypt if PCR has same value as it did at time of the seal.

TPM’s Cryptographic Keys… Ú The cryptographic encryption key on the TPM is called an Endorsement Key (EK) and is an RSA key created at the time of manufacture of the chip from the Direct Anonymous Attestation protocol (DAA), consisting of a public and private key. Ú The public key interacts in the creation of the sector key for each 512 byte sector encryption Ú The private key resides on the chip and is not revealed

What Bit. Locker is A Windows Vista security FDE that employs Trusted Computing technologies to either allow operation of the OS, or contact a pre-determined (possibly) third party for further instructions if an error/modification is encountered.

What Bit. Locker Does 1) 2) 3) 4) 5) 6) Laptop turned on Processor starts BIOS from ROM 1 st part of BIOS (which can’t be modified) extends BIOS PCR with entire BIOS code Rest of BIOS continues BIOS reads MBR of the hard disk Extends boot sector PCR with sector’s data 7) Executes code in the boot sector (the boot sequence takes several iterations) 8) PCRs measure what code is running 9) TPM unseals the Bit. Locker volume encryption key 10) Boot sector switches to Bit. Locker encryptions at first convenience 11) All data now read from encrypted volume [2]

What Bit. Locker Does Bit. Locker encrypts the data on the Operating System (OS) which is practically the entire hard disk in most computers.

How Bit. Locker Works Ú Bit. Locker Encryption is done a sector at a time Ú Each sector is usually 512 bytes, but could be as much as 8192 bytes in the near future Ú Each sector is encrypted independently of the other sectors

How Bit. Locker Works XOR IVs : = E(KAES; e(s))

Finding the Sector Key Ú The sector key derivation is the encryption of both the public endorsement key from the TPM chip along with the encoding function e() found in the AES-CBC layer. Ú The result is XORed into the plaintext (to make the key the same size as the block)

Why we need an IV? Ú Encryption of the same plain text with the same key results in the same ciphertext. This is very insecure. Ú By using an initialization vector (IV) XORed with the plaintext or included in front of the plaintext prior to encryption, we bypass the need for re-keying.

The Initialization Vector for AES-CBC component Ú IVs : = E(KAES; e(s)) Ú The initialization vector of a sector is the encryption of both the AES key and the encoding function that maps each sector into a unique 16 -byte number. Ú IVs depends on the key and the sector number s—but not on the data

How Bit. Locker Works Ú The sector key and AES-CBC components each receive ½ of the 512 byte Endorsement Key, making them 256 bytes. Only 128 bytes are normally used, and the rest is discarded. It's easier to throw away bits you don't need than it is to accommodate for variations in key length. Ú A sector can be any power of two (from 512— 8192 bytes). This is done in the hopes of creating a tweakable block cipher. That is—any alteration to the ciphertext creates randomness in that sectors plaintext. Ideally, if tweakable block cipher can be attained, then the algorithm changes slightly from one sector encryption to the next making it almost impossible to use one sectors ciphertext to decrypt another sector.

In short: If an attacker can detect a non-random change in the plaintext by the alteration of the ciphertext—they can determine the key of that sector and gain access to it.

The Elephant Diffuser: A&B The A and B diffusers are similar, but work in opposite directions. Each is for good diffusion properties in one direction and has poor diffusion properties in the other direction. Thus, two are needed: one diffuser for each direction (i. e. , decoding and encoding)

The Elephant Diffuser Ú The diffusers take the sector as a 32 word bit array Ú Each word is encoded using the least-signiffcant- byte first convention. Ú Let n be the number of words in the sector, and (d 0, d 1, … , dn¡) be the words of the sector array. Ú Decryption function of A diffuser is: di = di + (d i-2 XOR (d i-5 <<<R(a) mod 4))

A Diffuser: Decryption function of A diffuser is: di = di + (d i-2 XOR (d i-5 <<<R(a) mod 4)) 1. <<< is the rotate-left operator 2. R(a) = [9, 0, 13, 0] that specifies rotation amount

A Diffuser: Encryption function of A diffuser is similar, except that we run the forloop from n to 0, instead of 0 to n. As before: di = di + (d i-2 XOR (d i-5 <<<R(a) mod 4)) 1. <<< is the rotate-left operator 2. R(a) = [9, 0, 13, 0] that specifies rotation amount

B Diffuser: Decryption function of B diffuser is very similar to A, except that d i-2 changes into d i+2, and d i-5 becomes d i+5 (because diffusion in opposite direction) di = di + (d i+2 XOR (d i+5 <<<R(a) mod 4)) 1. <<< is the rotate-left operator 2. R(a) = [9, 0, 13, 0] that specifies rotation amount For Encryption, all that is needed is the reversal of the forloop

Why do we need the Elephant Diffuser? Ú AES-CBC does not protect integrity, hence the need for the diffuser. Ú The Elephant was released relatively untested. It was suggested that at the very least, the Bit. Locker could be no more insecure than the AES encoding.

Security of Bit. Locker Ú Because the key is stored in physical memory, it is vulnerable to cold boot attacks. The DRAM is literally frozen and the key is then read from it Ú Assumptions for cold boot attack: 1) 2) Physical access to the machine Laptop would likely have to be in sleep mode (rather than hibernate mode or powered off) 3) No implementation of the multi-factor pre-boot authentication “I would posit that the opportunistic laptop thief is somewhat unlikely to carry a separate laptop on which they will have installed tools that allow them to reconstruct cryptographic keys - or for that matter have a can of compressed air handy, " argued Microsoft senior product manager for Windows Vista security Russell Humphries.

Security of Bit. Locker Ú Or—if we are running Bit. Locker in Transparent operation mode (i. e. , utilizing the TPM) then we could monitor the communications between the CPU and the TPM via the Lower Pin Count bus and either try to guess the encryption key or fool the chip into giving up a part of its internal key.

Advantages/Disadvantages of Bit. Locker Ú Advantages: • Better than Encrypted Files System (EFS) • Encrypts ENTIRE hard drive • Only know Full Disk Encryption (FDE) active when it asks for password at boot up. • Only 5% performance cost when reading/writing to encrypted file (excluding virtual memory)

Advantages/Disadvantages of Bit. Locker Ú Disadvantages: • Actual access time may increase by 56% to 86% depending on how much the system utilizes virtual memory (because virtual memory also gets encrypted) and because the operating system is CONSTANTLY writing/reading data to hard disk, regardless of actions of the user. • User fallibilities (i. e. user writes password on Post- it note and appends it to computer)

Questions?

Glossary of Terms Ú Full Disk Encryption (FDE): either hardware or software that encrypts all data on disk or volume —excluding the Master Boot Record (i. e. “Sector 0”) which contains the primary partition entries in its partition table. Ú Encrypted File System (EFS): A feature of the Windows 2000 and XP that allows encryption of particular files.

Glossary of Terms Ú White Elephant pictorial reference: any valuable object whose value is less than its cost in maintenance. Ú Hash function takes a string or message of any length as input and produces a fixed length string as output, sometimes termed a message digest or a digital fingerprint. Ú initialization vector (IV) is a block of bits that is required to allow a stream or a block cipher to produce a unique stream independent from other streams produced by the same encryption key.

References [1] Klaus Kursawe, Dries Schellekens, and Bart Preneel, Analyzing trusted platform communication, Katholieke Universiteit Leuven Department Electrical Engineering-ESAT/SCD-COSIC, Kasteelpark Arenberg 10, 3001 Heverlee, Belgium Available at: http: //www. esat. kuleuven. be/cosic/, Accessed: Tuesday, March 18, 2008, 6: 13: 07 PM [2] Niels Ferguson, AES+CBC+Elephant diffuser: A Disk Encryption Algorithm for Windows Vista, August 2006, niels@microsoft. com [3] Infineon liefert erste auf Windows Vista abgestimmte Sicherheitslösung bestehend aus Management-Software und TPM für PCs in Unternehmen (picture of TPM chip) http: //www. infineon. com/cms/de/corporate/press/news/releases/2007/21 6326. html [4] Jan Camenisch, Better Privacy for Trusted Computing Platforms (extended abstract), IBM Research, Zurich Research Laboritory, CH 8803 Ruschlikon, Switzerland (pg 1 -3)

References [5] Preston Gralla. Big Book of Windows Hacks, pgs 400— 407 [6] S. Frankel, R. Glenn, S. Kelly, The AES-CBC Cipher Algorithm and Its Use with IPsec, September 2003, available at: http: //www. faqs. org/rfcs/rfc 3602. html [7] Marius Oiaga, Technology News Editor, Microsoft Downplays Windows Vista Encryption Cracks, available at: http: //news. softpedia. com/news/Microsoft. Downplays-Windows-Vista-Encryption-Cracks 79541. shtml

Additional Resources Bit. Locker user-end Microsoft products page Ú http: //www. microsoft. com/windows/products/windowsvista/features/details/bitlo cker. mspx Some Bit. Locker history Ú http: //www. windows-vista-hardware. info/bitlocker-vista-enterprise-ultimate. htm Member list of Trusted Computing Group (TCG) Ú https: //www. trustedcomputinggroup. org/about/members/ Basic overview of trusted computing and use of the Bit. Locker Ú http: //en. wikipedia. org/wiki/Trusted_computing Basic description of the Bit. Locker Ú http: //en. wikipedia. org/wiki/Bit. Locker_Drive_Encryption Steps to breaking a FDE system Ú http: //content. techrepublic. com/2346 -1009_11 -189078. html For anyone interested in CBC Stream Cipher in C# Ú http: //madebits. com/articles/aes/index. php