Bitlocker Validation Info

Hi,

I was wondering what exactly the Validation info is that is protected by the VMK.
In some doc I saw it protects some exe's? How?

Bitlocker is very interesting, especially the Elephant paper.
Congratulations on getting Vista out, BTW..

Thanks,
Nik

Are you asking what bitlocker checks against to see if the machine has been
tampered with?

--
Josh
http://windowsconnected.com
"niknik" <niknik.2hntxx@no-mx.vista64.net> wrote in message
news:niknik.2hntxx@no-mx.vista64.net...
>
> Hi,
>
> I was wondering what exactly the Validation info is that is protected
> by the VMK.
> In some doc I saw it protects some exe's? How?
>
> Bitlocker is very interesting, especially the Elephant paper.
> Congratulations on getting Vista out, BTW..
>
> Thanks,
> Nik
>
>
> --
> niknik
> ------------------------------------------------------------------------
> niknik's Profile: http://vista64.net/forums/member.php?userid=637
> View this thread: http://vista64.net/forums/showthread.php?t=26659
>

Hello niknik
Here is the link on the Microsoft Site about bitlocker:
http://www.microsoft.com/technet/win.../bitlockr.mspx
This includes an introduction paper.
A faq link
A step by step guide
a technical paper

Thanks,
Darrell Gorter[MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights
--------------------
<From: niknik <niknik.2hntxx@no-mx.vista64.net>
<Subject: Bitlocker Validation Info
<Date: Wed, 22 Nov 2006 05:18:25 +0000
<Message-ID: <niknik.2hntxx@no-mx.vista64.net>
<Organization: Vista64.net
<User-Agent: vBulletin USENET gateway
<X-Newsreader: vBulletin USENET gateway
<X-Originating-IP: 66.77.218.72
<Newsgroups: microsoft.public.windows.vista.security
<NNTP-Posting-Host: host.hosting-solutions.co.uk 209.59.169.226
<Lines: 1
<Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
<Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.vista.security:3051
<X-Tomcat-NG: microsoft.public.windows.vista.security
<
<
Hi,

I was wondering what exactly the Validation info is that is protected
by the VMK.
In some doc I saw it protects some exe's? How?

Bitlocker is very interesting, especially the Elephant paper.
Congratulations on getting Vista out, BTW..

Thanks,
Nik


--
niknik
------------------------------------------------------------------------
niknik's Profile: http://vista64.net/forums/member.php?userid=637
View this thread: http://vista64.net/forums/showthread.php?t=26659

<

Thank you both. I read pretty much through all the bitlocker documents.
In "BitLocker Drive Encryption: Scenarios, User Experience, and Flow"
There is a diagram that show what the VMK protects, (page 34)
There it says that the VMK encrypts "Validantion Info" to validate
"WinLoad.exe", "Hibrsm32.exe" and "Hibrsm64.exe".

That's where I got the question. I wanted to understand the details of this validation.
I understand the TPM/secure boot part. if I tamper with the machine, the TPM will not give me the SRK and I can't get the VMK.

Thank you for your answers, this is just informational, since I want to understand the security architecture in detail.

Nik