bitlocker-spi-toolkit icon indicating copy to clipboard operation
bitlocker-spi-toolkit copied to clipboard

Extracting BitLocker key possible with known pin?

Open softScheck opened this issue 2 years ago • 2 comments

We tried to capture the Bitlocker key for a laptop that has a security pin (entered at boot) set. We have access to that pin and the SPI bus communication but have not been able to extract the key. We captured the communication beginning the moment when the key is entered up to the point where Windows start booting.

Do you have any hints about doing that? Is it even possible to get access to the key when the pin feature is enabled (with access to the pin)? The capture is attached. Thanks a lot for your help! bitlockerCaptureSaleae.sal.zip

softScheck avatar Jul 13 '22 13:07 softScheck

4BS59ZEA.txt

gibasboy avatar Jun 07 '23 08:06 gibasboy

@softScheck did you manage to find out if in the situation you mentioned it is possible to extract the key? We ran into the same problem and are wondering if a security pin prevents sniffing the VMK from the SPI bus communication.

Thanks!

target-0 avatar Jan 30 '24 20:01 target-0