Bitlocker Validation Info

Hello niknik
Here is the link on the Microsoft Site about bitlocker:
http://www.microsoft.com/technet/win.../bitlockr.mspx
This includes an introduction paper.
A faq link
A step by step guide
a technical paper

Thanks,
Darrell Gorter[MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights
--------------------
<From: niknik <niknik.2hntxx@no-mx.vista64.net>
<Subject: Bitlocker Validation Info
<Date: Wed, 22 Nov 2006 05:18:25 +0000
<Message-ID: <niknik.2hntxx@no-mx.vista64.net>
<Organization: Vista64.net
<User-Agent: vBulletin USENET gateway
<X-Newsreader: vBulletin USENET gateway
<X-Originating-IP: 66.77.218.72
<Newsgroups: microsoft.public.windows.vista.security
<NNTP-Posting-Host: host.hosting-solutions.co.uk 209.59.169.226
<Lines: 1
<Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFT NGP06.phx.gbl
<Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.vista.security:3051
<X-Tomcat-NG: microsoft.public.windows.vista.security
<
<
Hi,

I was wondering what exactly the Validation info is that is protected
by the VMK.
In some doc I saw it protects some exe's? How?

Bitlocker is very interesting, especially the Elephant paper.
Congratulations on getting Vista out, BTW..

Thanks,
Nik


--
niknik
------------------------------------------------------------------------
niknik's Profile: http://vista64.net/forums/member.php?userid=637
View this thread: http://vista64.net/forums/showthread.php?t=26659

<

Thank you both. I read pretty much through all the bitlocker documents.
In "BitLocker Drive Encryption: Scenarios, User Experience, and Flow"
There is a diagram that show what the VMK protects, (page 34)
There it says that the VMK encrypts "Validantion Info" to validate
"WinLoad.exe", "Hibrsm32.exe" and "Hibrsm64.exe".

That's where I got the question. I wanted to understand the details of
this validation.
I understand the TPM/secure boot part. if I tamper with the machine,
the TPM will not give me the SRK and I can't get the VMK.

Thank you for your answers, this is just informational, since I want to
understand the security architecture in detail.

Nik


--
niknik
------------------------------------------------------------------------
niknik's Profile: http://vista64.net/forums/member.php?userid=637
View this thread: http://vista64.net/forums/showthread.php?t=26659