I got this query while distrohopping. On Linux I have to enter my password erveytime I boot to decrypt the disk. But on windows I never had to do it. The first time windows bitlocker asked for password was when I booted into windows after installed Linux. Why is it so?
Wouldn’t that data be inaccessible if encrypted? You would still need to login to access it. You wouldn’t be able to drop the drive on another machine if it’s encrypted.
Every once in a while a security researcher will highlight a new method for obtaining the key from the TPM, usually by tapping into the I2C comms between it and the CPU. They’ll say it’s ‘trvial’ and can be done ‘in seconds’, but that’s only after a lot of work figuring out that particular motherboard.
A few months ago there was yellowkey that just needed a special file on a USB drive to bypass bitlocker, making it so easy that it was arguably a backdoor.