Bitlocker Security Questions

The default key length for BitLocker is AES 128-bit. However, BitLocker also supports AES 256-bit, which can be configured for enhanced security if needed.

The choice between AES 128-bit and AES 256-bit depends on your security requirements—AES 128-bit is highly secure and generally faster, while AES 256-bit provides an even greater level of protection but with slightly reduced performance.

TraderGary said:

I know how much you love jumping up and down about your "43 seconds", but that one has also been patched.

Click to expand...

I know how much you love jumping up and down about your "BitLocker uses 256-bit AES encryption", but as far as all the people who had bought one of those hackable modern Windows 11 laptops are concerned, that one wasn't making a shred of difference until many months after this thread had been created. Like I said, if I have to wait for more than 3 whole years before it will finally be "safe", then thanks but no thanks, it is what it is, better luck next time, apologies for the inconvenience of me not buying into that fad, and, have a nice day!

hdmi said:

I know how much you love jumping up and down about your "BitLocker uses 256-bit AES encryption", but as far as all the people who had bought one of those hackable modern Windows 11 laptops are concerned, that one wasn't making a shred of difference until many months after this thread had been created. Like I said, if I have to wait for more than 3 whole years before it will finally be "safe", then thanks but no thanks, it is what it is, better luck next time, apologies for the inconvenience of me not buying into that fad, and, have a nice day!

Click to expand...

You apparently didn't read my previous post where I stated that the BitLocker default is AES 128-Bit encryption. The user can decide if he wants to use 256-Bit encryption. It's user configurable.

You really do need to understand that there is no such thing as an app or an OS that's 100% guaranteed safe and un-hackable. Your delight in finding vulnerabilities simply demonstrates that fact. If your goal is to find an invulnerable system, you'll only be disappointed.

The bottom line is that if you and I are going to use computers, we must always be vigilant and do the best we can to be as safe as possible.

I really do enjoy reading your posts and I wish the very best to you too!

TraderGary said:

You apparently didn't read my previous post where I stated that the BitLocker default is AES 128-Bit encryption. The user can decide if he wants to use 256-Bit encryption. It's user configurable.

Click to expand...

I did read your post. But I didn't have to read it to know that 128-bit AES is the default option, as I have already known it for years.

TraderGary said:

You really do need to understand that there is no such thing as an app or an OS that's 100% guaranteed safe and un-hackable.

Click to expand...

What makes you think that I don't already understand this fact? Most of what I do for a living is about data security. The stakeholders of every project I work on as an Enterprise Java developer include some of the largest corporations in the world.

TraderGary said:

Your delight in finding vulnerabilities simply demonstrates that fact.

Click to expand...

Finding vulnerabilities is actually a major part of my job description, albeit not when it comes to the Windows OS and features thereof. To me, personally, everything that relates to Windows is just a hobby. Each time when I poop Enterprise Java Beans, I can't hold a press conference about it all day and all of the night, as I also have to think about protecting my sanity so that's why.

TraderGary said:

If your goal is to find an invulnerable system, you'll only be disappointed.

Click to expand...

It isn't, and, it never will be. For the most part, I come here to have some fun. I am a Sagittarius, and, according to the Greek Zodiac calendar, a Chiron aka "The Wounded Healer". I think I understand one or two things about vulnerability.

TraderGary said:

The bottom line is that if you and I are going to use computers, we must always be vigilant and do the best we can to be as safe as possible.

Click to expand...

My brain comes at it from different directions. I tend to agree with Joymalya Basu Roy on this:
"Security is a subjective matter. If I talk about myself as an admin, what I consider secure, the end-user may feel the same for restrictive, hampering his daily work. As such, a balance needs to be struck between security and usability."
Source: Windows Measured Boot - How It Helps To Secure Windows OS Platform HTMD Blog

TraderGary said:

I really do enjoy reading your posts and I wish the very best to you too!

Click to expand...