Abstract

The Bitlocker Drive Encryption feature of Windows Vista poses an interesting set of security and performance requirements on the encryption algorithm used for the disk data. We discuss why no existing cipher satisfies the requirements of this application and document our solution which consists of using AES in CBC mode with a dedicated diffuser to improve the security against manipulation attacks.

Citations

86	Tweakable block ciphers - Liskov, Rivest, et al. - 2002
59	Two practical and provably secure block ciphers: BEAR and LION - Anderson, Biham - 1996
19	Mercy: A Fast Large Block Cipher for Disk Sector Encryption - Crowley - 2000
13	On the Construction of Variable-Input-Length Ciphers - Bellare, Rogaway - 1999
10	BEAST: A fast block cipher for arbitrary block sizes - Lucks - 1996
5	Cryptanalysis of the Mercy block Cipher - Fluhrer - 2002
1	A parallelizable enciphering mode. http://eprint. iacr.org/2003/147 - Halevi, Rogaway - 2003
1	A tweakable enciphering mode. http://eprint - Halevi, Rogaway - 2003