Breaking Bitlocker - Bypassing the Windows Disk Encryption

How to bypass TPM-based Bitlocker encryption by sniffing the LPC bus using a Raspberry Pi Pico to extract the decryption key.

In this video we will use a hardware attack to bypass TPM-based Bitlocker encryption as used on most Microsoft Windows devices. Errata: - PIN can also be enabled using manage-bde, not just using group policies Questions: - Does this work on TPM2.0? Yes, at least on some: pulsesecurity.co.nz/articles/TPM-sniffing Links: - hextree.io/ - Pascal Gujer: twitter.com/pascal_gujer / hands-on-security.com - Enabling Bitlocker PIN: howtogeek.com/262720/how-to-enable-a-pre-boot-bitlocker-pin-… - Hardware & source-code: github.com/stacksmashing/pico-tpmsniffer - LPC Clockless Analyzer for Saleae: github.com/stacksmashing/LPCClocklessAnalyzer Me: - Twitter: twitter.com/ghidraninja - Patreon: patreon.com/stacksmashing Posts about sniffing bitlocker: - labs.withsecure.com/publications/sniff-there-leaks-my-bitloc… - secura.com/blog/tpm-sniffing-attacks-against-non-bitlocker-t… - blog.scrt.ch/2021/11/15/tpm-sniffing/ - pulsesecurity.co.nz/articles/TPM-sniffing