BitLocker
Sign in to saveAlso known as BitLocker Drive Encryption
BitLocker is a full volume encryption feature included with Microsoft Windows versions starting with Windows Vista. It is designed to protect data by providing encryption for entire volumes. By default, it uses the Advanced Encryption Standard (AES) algorithm in cipher block chaining (CBC) or "xor–encrypt–xor (XEX)-based tweaked codebook mode with ciphertext stealing" (XTS) mode with a 128-bit or 256-bit key. CBC is not used over the whole disk; it is applied to each individual sector.
Key facts
- Software.name
- manage-bde
- Software.logo
- BitLocker icon.png
- Software.logo_size
- x64px
- Software.screenshot
- Bitlocker setup window screenshot.png
- Software.screenshot_size
- 300px
- Software.caption
- Screenshot of the BitLocker Drive Encryption utility
- Software.developer
- Microsoft
- Software.other_names
- Device Encryption
- Software.operating system
- Microsoft Windows
- Software.genre
- Command
- Software.license
- Proprietary commercial software
- Software.website
- manage-bde
via Wikipedia infobox
Wikidata facts
Show 2 more facts
- Stack Exchange tag
- stackoverflow.com/tags/bitlocker
- Commons category
- BitLocker
Sources (1)
via Wikidata · CC0
~15 min read
Article
12 sectionsContents
- History
- Features
- Device encryption
- Encryption modes
- Operation
- Security concerns
- TPM alone is not enough
- Upholding Kerckhoffs's principle
- Other concerns
- See also
- References
- External links
BitLocker is a full volume encryption feature included with Microsoft Windows versions starting with Windows Vista. It is designed to protect data by providing encryption for entire volumes. By default, it uses the Advanced Encryption Standard (AES) algorithm in cipher block chaining (CBC) or "xor–encrypt–xor (XEX)-based tweaked codebook mode with ciphertext stealing" (XTS) mode with a 128-bit or 256-bit key. CBC is not used over the whole disk; it is applied to each individual sector.
== History == BitLocker originated as a part of Microsoft's Next-Generation Secure Computing Base architecture in 2004 as a feature tentatively codenamed "Cornerstone" and was designed to protect information on devices, particularly if a device was lost or stolen. Another feature, titled "Code Integrity Rooting", was designed to validate the integrity of Microsoft Windows boot and system files. When used in conjunction with a compatible Trusted Platform Module (TPM), BitLocker can validate the integrity of boot and system files before decrypting a protected volume; an unsuccessful validation will prohibit access to a protected system. BitLocker was briefly called Secure Startup before Windows Vista's release to manufacturing.