Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How do I make my drive fullly protected with bitlocker?

05 Jul 2014   #1
onlineth

Windows 7 Ultimate x64
 
 
How do I make my drive fullly protected with bitlocker?

I am new to bitlocker but I want to start using it. I set it up my c drive and now I think that my drive is secure however, I came across these two pages, Passware Kit Decrypts Hard Disks Encrypted with BitLocker or TrueCrypt and This $299 Tool Decrypts BitLocker, PGP, and TrueCrypt Disks What do I have to do to make these tools unusable?


My System SpecsSystem Spec
.
05 Jul 2014   #2
Sir George

Windows 7 Professional x64
 
 

Quote   Quote: Originally Posted by onlineth View Post
I am new to bitlocker but I want to start using it. I set it up my c drive and now I think that my drive is secure however, I came across these two pages, Passware Kit Decrypts Hard Disks Encrypted with BitLocker or TrueCrypt and This $299 Tool Decrypts BitLocker, PGP, and TrueCrypt Disks What do I have to do to make these tools unusable?
Is your data worth $995.00 or $299.00 to anyone other than you? I realize this is not a direct answer to the question, but it may be all that matters.

HTH
My System SpecsSystem Spec
05 Jul 2014   #3
onlineth

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by Sir George View Post
Quote   Quote: Originally Posted by onlineth View Post
I am new to bitlocker but I want to start using it. I set it up my c drive and now I think that my drive is secure however, I came across these two pages, Passware Kit Decrypts Hard Disks Encrypted with BitLocker or TrueCrypt and This $299 Tool Decrypts BitLocker, PGP, and TrueCrypt Disks What do I have to do to make these tools unusable?
Is your data worth $995.00 or $299.00 to anyone other than you? I realize this is not a direct answer to the question, but it may be all that matters.

HTH
I understand what your saying however, in my case, I have data well over $995.00 or $299.00 sadly
My System SpecsSystem Spec
.

06 Jul 2014   #4
andrew129260

Windows 10 Pro
 
 

There is no such thing as 100% security. There will be always new ways to hack or circumvent security.

That is not the only program that can do it. Trust me.

Security is a deterrent, nothing more. Once they have it physically, it does not matter what security you have. It can and will be taken.

The average user though is not specifically targeted. For anyone that is specifically targeted, eventually they can get the data.
My System SpecsSystem Spec
06 Jul 2014   #5
onlineth

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by andrew129260 View Post
There is no such thing as 100% security. There will be always new ways to hack or circumvent security.

That is not the only program that can do it. Trust me.

Security is a deterrent, nothing more. Once they have it physically, it does not matter what security you have. It can and will be taken.

The average user though is not specifically targeted. For anyone that is specifically targeted, eventually they can get the data.
I totally agree, however, I just want to get my security to the point where the only way a hacker can get my data is if they brute force hack.
My System SpecsSystem Spec
07 Jul 2014   #6
Alejandro85

Windows 7 Ultimate x64
 
 

Those cracking tools do no miracles. Read carefully their pages on your links and clues about how they work become obvious. As far as I can see there, they attempt to scan dumps to recover the encryption keys from memory dumps, hibernation files and I will add "maybe" the page file. As the encrypting tools need to have keys in memory to encrypt/decrypt data, that's the weak point, and the tools solely try is to retrieve those, then use them to mount the data back.

Avoiding the hibernation file to contain the keys is trivial. Don't hibernate the computer while using encrypted data, that is, unmount TrueCrypt drives before hibernating, or disable hibernation at all if using full-disk encryption.
Memory dumps can be disabled, I think, but can always be deleted following a BSOD if you want (not just delete, wipe the files with a specialized tool). To be completely paranoid, when powering off, give the computer a few minutes before someone else has access to it, to prevent cold-boot attacks.
The pagefile is probaly the hardest to avoid, as it relies on the encryption tool to prevent the keys from being paged out to disk. Any reputable tool should prevent this anyway. I'm not sure how to securely wipe the pagefile if it happens.

From one of your pages:
Quote:
NOTE: If the target computer is turned off and the encrypted volume was dismounted during the last hibernation, neither the memory image nor the hiberfil.sys file will contain the encryption keys. Therefore, instant decryption of the volume is impossible. In this case, Passware Kit assigns brute-force attacks to recover the original password for the volume.
Meaning that, taken those precautions, brute force is the only reliable choice for those tools to crack your files, and with any decent encryption algorithm, it can take literally centuries to break into.
My System SpecsSystem Spec
07 Jul 2014   #7
Sir George

Windows 7 Professional x64
 
 

Quote   Quote: Originally Posted by onlineth View Post
Quote   Quote: Originally Posted by andrew129260 View Post
There is no such thing as 100% security. There will be always new ways to hack or circumvent security.

That is not the only program that can do it. Trust me.

Security is a deterrent, nothing more. Once they have it physically, it does not matter what security you have. It can and will be taken.

The average user though is not specifically targeted. For anyone that is specifically targeted, eventually they can get the data.
I totally agree, however, I just want to get my security to the point where the only way a hacker can get my data is if they brute force hack.
Would this work; use a USB external hard drive and move, don't copy, your data to it and place the drive in a secure location?

Just a thought.
My System SpecsSystem Spec
Reply

 How do I make my drive fullly protected with bitlocker?




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
BitLocker Drive Encryption - Unlock a Locked Data or Removable Drive
How to Unlock a Data or Removable Drive Locked by BitLocker Drive Encryption This will show you how to unlock a internal data drive or a removable drive (ex: USB flash drive or external) that was locked by BitLocker Drive Encryption in Windows 7, and now cannot be accessed. These drives...
Tutorials
BitLocker Drive Encryption - BitLocker To Go - Turn On or Off
How to Turn Windows 7 BitLocker To Go On or Off for Removable Drives BitLocker To Go is used to encrypt and password protect any removable external hard drives and USB flash drives. The drives must be formatted using either the exFAT, FAT16, FAT32, or NTFS file system and must be at least...
Tutorials
BitLocker Drive Encryption - Suspend or Resume Protection on Windows 7 Drive
How to Suspend or Resume BitLocker Protection on Windows 7 Drive This will show you how to temporarily suspend (unlock) BitLocker drive encryption protection on a Windows 7 or other operating system drive or partition, and to resume (lock) protection when needed.Suspend protection is...
Tutorials
Cant make password protected sharing
Hi I have an "server" with windows 7 ultimate running. Here I have earlier shared the whole hard disks and no protection everyone on the network could access them. But now I would like to share folders to specified people\computers. iv'e made user accounts on the computer and chosen to...
Network & Sharing
The OS drive must be protected by Bitlocker to automatically unlock.
Hey, I'm trying to configure my secondary internal HDD to lock with bitlocker, since acronis won't back it up well with truecrypt, but I still want to encrypt my OS drive with truecrypt since I don't have a TPM, and have to use a USB key to unlock it at startup, which I think is a vulnerability...
System Security
how do i make a folder password protected in window 7
plz help me. i want to put a password on my folders, but not want to loose them due to any problem with the software used to apply password on them...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 03:26.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App