Asklemmy

55084 readers

305 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy 🔍

If your post meets the following criteria, it's welcome here!

Open-ended question
Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
Not ad nauseam inducing: please make sure it is a question that would be new to most members
An actual topic of discussion

Looking for support?

Looking for a community?

Lemmyverse: community search
sub.rehab: maps old subreddits to fediverse options, marks official as such
!lemmy411@lemmy.ca: a community for finding communities

~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~

founded 7 years ago

MODERATORS

Why does Linux require password for decryption but not windows? (sh.itjust.works)

submitted 1 week ago by remustan37@sh.itjust.works to c/asklemmy@lemmy.ml

14 comments fedilink hide all child comments

I got this query while distrohopping. On Linux I have to enter my password erveytime I boot to decrypt the disk. But on windows I never had to do it. The first time windows bitlocker asked for password was when I booted into windows after installed Linux. Why is it so?

you are viewing a single comment's thread
view the rest of the comments

[–] dan@upvote.au 35 points 1 week ago* (last edited 1 week ago) (3 children)

Bitlocker stores the key required to boot the system in the TPM.

You can do that on Linux too if you want to, using Clevis or systemd-cryptenroll.

As far as I know, Bitlocker uses two keys to boot: There's a key in the TPM, that's used to decrypt a key stored on the drive, that's used to decrypt the data.

~~I think some data (maybe just user-specific data?) is encrypted with a user-specific key too, that isn't unlocked until you log in.~~ Edit: I think I was thinking of DPAPI.

I'm not 100% sure about the specifics of its design.

[–] Mihies@programming.dev 4 points 1 week ago* (last edited 1 week ago) (1 children)

I doubt that it is the case - it encrypts ~~disk~~ partition , not user specific data AFAIK. It has a single key AFAIK.

[–] dan@upvote.au 2 points 1 week ago

Yeah I think I was thinking of DPAPI. Updating my comment!

load more comments (1 replies)