Windows 10’s BitLocker Encryption No Longer Trusts Your SSD

Stefan Mileschin · 29th September 2019, 15:48

Many consumer SSDs claim to support encryption and BitLocker believed them. But, as we learned last year, those drives often weren’t securely encrypting files. Microsoft just changed Windows 10 to stop trusting those sketchy SSDs and default to software encryption.

In summary, solid-state drives and other hard drives can claim to be “self-encrypting.” If they do, BitLocker wouldn’t perform any encryption, even if you enabled BitLocker manually. In theory, that was good: The drive could perform the encryption itself at the firmware level, speeding up the process, reducing CPU usage, and maybe saving some power. In reality, it was bad: Many drives had empty master passwords and other horrendous security failures. We learned consumer SSDs can’t be trusted to implement encryption.

Now, Microsoft has changed things. By default, BitLocker will ignore drives that claim to be self-encrypting and do the encryption work in software. Even if you have a drive that claims to support encryption, BitLocker won’t believe it.

https://www.howtogeek.com/442114/win...usts-your-ssd/

29th September 2019, 15:48	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 153,541	Windows 10’s BitLocker Encryption No Longer Trusts Your SSD Many consumer SSDs claim to support encryption and BitLocker believed them. But, as we learned last year, those drives often weren’t securely encrypting files. Microsoft just changed Windows 10 to stop trusting those sketchy SSDs and default to software encryption. In summary, solid-state drives and other hard drives can claim to be “self-encrypting.” If they do, BitLocker wouldn’t perform any encryption, even if you enabled BitLocker manually. In theory, that was good: The drive could perform the encryption itself at the firmware level, speeding up the process, reducing CPU usage, and maybe saving some power. In reality, it was bad: Many drives had empty master passwords and other horrendous security failures. We learned consumer SSDs can’t be trusted to implement encryption. Now, Microsoft has changed things. By default, BitLocker will ignore drives that claim to be self-encrypting and do the encryption work in software. Even if you have a drive that claims to support encryption, BitLocker won’t believe it. https://www.howtogeek.com/442114/win...usts-your-ssd/

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Microsoft's Bitlocker compromised by bad SSD encryption	Stefan Mileschin	WebNews	0	7th November 2018 11:21
How to Remove Your Windows Disk Encryption Key From Microsoft’s Servers	Stefan Mileschin	WebNews	0	18th January 2016 06:43
Windows is vulnerable to web encryption attacks, too	Stefan Mileschin	WebNews	0	13th November 2014 12:27
Here’s Why Windows 8.1′s Encryption Doesn’t Seem to Scare the FBI	Stefan Mileschin	WebNews	0	23rd October 2014 11:42
Your iPhone trusts the security of many sites, including the government's	Stefan Mileschin	WebNews	0	24th September 2014 09:03
How to Create an Encrypted Container File With BitLocker on Windows	Stefan Mileschin	WebNews	0	17th July 2014 09:23
How to Set Up BitLocker Encryption on Windows	Stefan Mileschin	WebNews	0	14th July 2014 09:16
Windows XP PCs No Longer Receiving Updates	Stefan Mileschin	WebNews	0	16th May 2014 09:20
Lenovo exec: there's no longer a need for Windows RT	Stefan Mileschin	WebNews	0	6th September 2013 08:14
Hardware Accelerated BitLocker Encryption	Stefan Mileschin	WebNews	0	11th April 2013 10:47