BitLeaker: Subverting BitLocker with One Vulnerability
summary
Demonstrates a working exploit that resets TPM PCRs via S3/F3 sleep (CVE-2018-3602 / CVE-2020-0526) on dTPM and fTPM implementations (Intel PTT, many vendors), then replays captured event logs to restore PCR7/11 values, dumps TPM command parameters via a hooked UEFI/TSS layer, extracts the TPM‑encoded VMK blob from BitLocker metadata, and finally unseals the VMK and mounts the BitLocker volume. Implements custom shim/bootloader, corner module, and BitLeaker tool; demonstration decrypts a real Windows partition.
AI-written summary · about
chapters (24)
- 0:00Start
- 5:58Microsoft's BitLocker
- 6:52Trusted Platform Module (TPM)
- 7:38Root of Trust for Measurement (RTM)
- 8:17Static RTM (SRTM)
- 9:10Examples of PCR values
- 9:59Security researchers have tried to get the VMK
- 12:35ACPI and Sleeping State
- 13:09Sleep Process of the SRTM
- 14:48Typical Types of TPMS
- 15:38CVE-2018-6622 and fTPM
- 16:26I got the REAL power!
- 16:37Kernel Module for Exploiting the Vulnerability
- 17:06BitLocker and TPM
- 17:30Query Protectors with Manage-bde tool
- 17:42PCR usage of UEFI
- 23:24Get Hashes from Windows Logs
- 24:32Unseal VMK with a TPM (2)
- 25:29Custom Bootloader v2
- 30:19Get Parameters from BitLocker's Metadata (2)
- 30:54I got the last piece of the puzzle
- 31:28Contents
- 32:06BitLeaker and USB Bootable Device
- 33:24DEMO
related talks
26mA Bad Dream: Subverting Trusted Platform Module While You Are Sleeping
29mBreaking The Root Of Trust Practical Side Channel Key Extraction From A TPM
51mSecuring Embedded Linux Systems with TPM 2.0
51mApplications of TPM 2.0
28mThe TPM as an everyday security tool
25mOverview and Recent Developments: TPM
42mRecent TPM Security Enhancements to the Linux Kernel
25mTPM 2.0 Attestable Firmware: Recovering Trust After Firmware Flaws