Windows10×Ô´øµÄ¡°BitLocker¼ÓÃÜ¡±¹¦ÄÜ¿ÉÒÔ¼ÓÃÜÕû¸öÇý¶¯Æ÷£¨´ÅÅÌ·ÖÇø£©£¬Õâ¶ÔÓÚÒþ˽»ò±£ÃÜÊý¾Ý±È½ÏÅÓ´óµÄÓû§À´ËµºÜÊÇ·½±ãʵÓᣱ¾À´BitLockerÓÐ×Ô¼ºµÄÒ»Ì×¼ÓÃÜËã·¨£¨ÀýÈçXTS-AES 128£©£¬µ«BitLocker±È½ÏÇ«Ð飬һµ©·¢ÏÖÇý¶¯Æ÷ÓÐ×Ô¼ºµÄÓ²¼þ¼ÓÃÜ·½Ê½£¨ÀýÈçijЩSSD¹Ì̬ӲÅ̵ļÓÃܹ¦ÄÜ£©£¬¾Í»á²ÉÓøÃÓ²¼þ¼ÓÃÜ·½Ê½£¬¶øÞðÆú×Ô¼ºµÄÈí¼þ¼ÓÃÜ·½Ê½¡£
ÎÊÌâ¾Í³öÔÚÕâÀÒòΪ¡ª¡ª²¿·ÖÐͺŵÄþ¹âºÍÈýÐǹÌ̬ӲÅÌ´æÔÚ¼ÓÃÜ©¶´£¬ÉõÖÁÎÞÐèÃÜÂë¼´¿É´ò¿ª¼ÓÃÜ´ÅÅÌ£¬µ¼ÖÂÓ²¼þ¼ÓÃÜÐÎͬÐéÉè¡£ËùÒÔ£¬ÔÚ¹Ì̬ӲÅ̳§É̽â¾ö¸ÃÎÊÌâ֮ǰ£¬»òÕß±ÜÃâÒÔºóÔÙ±¬À×ÊÜÓ°Ï죬ÈÃBitLocker½ûÓÃÓ²¼þ¼ÓÃÜ£¬ÓûØ×Ô¼ºµÄ¼ÓÃÜ·½Ê½²ÅÊǿɿ¿Ö®Ñ¡¡£ÏÂÃæÖÐÎÄ΢°Ù¿Æ¾Í½éÉÜÒ»ÏÂBitLocker½ûÓÃÓ²¼þ¼ÓÃܵķ½·¨¡£
ÅäÖÃBitLocker½ûÓÃÓ²¼þ¼ÓÃÜ×é²ßÂÔ
Ê×ÏÈ£¬ÐèÒª¹Ø±ÕBitLocker£¨½âÃÜBitLocker¼ÓÃÜÇý¶¯Æ÷£©¡£
È»ºó£¬´ò¿ª×é²ßÂÔ±à¼Æ÷£¬ÔÚ×ó²àµ¼º½´°¸ñÖÐÒÀ´Î¶¨Î»ÖÁ¡°¼ÆËã»úÅäÖà - ¹ÜÀíÄ£°å - Windows×齨 - BitLockerÇý¶¯Æ÷¼ÓÃÜ¡±£¬È»ºó¸ù¾Ý×Ô¼ºµÄBitLocker¼ÓÃÜÇý¶¯Æ÷ÀàÐÍÑ¡Ôñ¡°²Ù×÷ϵͳÇý¶¯Æ÷¡±¡¢¡°¹Ì¶¨Êý¾ÝÇý¶¯Æ÷¡±£¬»òÕß¡°¿ÉÒÆ¶¯Êý¾ÝÇý¶¯Æ÷¡±¡£È»ºóÔÚÓҲര¸ñÖм´¿É¿´µ½ÏàÓ¦µÄ¡°ÅäÖöԲÙ×÷ϵͳÇý¶¯Æ÷ʹÓûùÓÚÓ²¼þµÄ¼ÓÃÜ¡±¡¢¡°ÅäÖöԹ̶¨Êý¾ÝÇý¶¯Æ÷ʹÓûùÓÚÓ²¼þµÄ¼ÓÃÜ¡±£¬»òÕß¡°ÅäÖöԿÉÒÆ¶¯Êý¾ÝÇý¶¯Æ÷ʹÓûùÓÚÓ²¼þµÄ¼ÓÃÜ¡±ÅäÖÃÏî¡£Èçͼ£º
Ë«»÷¸ÃÏî´ò¿ªÅäÖô°¿Ú¡£Èçͼ£º
ÎÒÃÇ¿ÉÒÔÔÚ¡°°ïÖú¡±´°¸ñÖп´µ½¶Ô¸ÃÅäÖÃÏîµÄÏêϸÃèÊö£º
ʹÓô˲ßÂÔÉèÖ㬿ÉÒÔ¹ÜÀí BitLocker Ôڹ̶¨Êý¾ÝÇý¶¯Æ÷ÉÏʹÓûùÓÚÓ²¼þµÄ¼ÓÃܵķ½Ê½£¬ÒÔ¼°Ö¸¶¨Ëü¿ÉÒÔ½«ÄÄÖÖ¼ÓÃÜËã·¨ÓÃÓÚ»ùÓÚÓ²¼þµÄ¼ÓÃÜ¡£Ê¹ÓûùÓÚÓ²¼þµÄ¼ÓÃÜ¿ÉÒÔÌá¸ßÉæ¼°Æµ·±¶ÁÈ¡»òдÈëÇý¶¯Æ÷Êý¾ÝµÄÇý¶¯Æ÷²Ù×÷µÄÐÔÄÜ¡£
Èç¹ûÆôÓô˲ßÂÔÉèÖã¬Ôò¿ÉÒÔÖ¸¶¨ÆäËûÑ¡Ï¿ØÖÆÊÇ·ñÔÚ²»Ö§³Ö»ùÓÚÓ²¼þµÄ¼ÓÃܵļÆËã»úÉÏʹÓà BitLocker »ùÓÚÈí¼þµÄ¼ÓÃÜ£¬¶ø²»ÊÇ»ùÓÚÓ²¼þµÄ¼ÓÃÜ£¬ÒÔ¼°ÊÇ·ñÏ£ÍûÏÞÖÆÓÃÓÚ»ùÓÚÓ²¼þµÄ¼ÓÃܵļÓÃÜËã·¨ºÍÃÜÂëÌ×¼þ¡£
Èç¹û½ûÓô˲ßÂÔÉèÖã¬Ôò BitLocker ÎÞ·¨½«»ùÓÚÓ²¼þµÄ¼ÓÃÜÓÃÓÚ²Ù×÷ϵͳÇý¶¯Æ÷£¬²¢ÇÒÔÚ¼ÓÃÜÇý¶¯Æ÷ʱ½«Ä¬ÈÏʹÓà BitLocker »ùÓÚÈí¼þµÄ¼ÓÃÜ¡£
Èç¹ûδÅäÖô˲ßÂÔÉèÖã¬Ôò BitLocker ½«¶ÔÇý¶¯Æ÷ʹÓûùÓÚÓ²¼þµÄ¼ÓÃÜÒÔ¼°¼ÓÃÜËã·¨¼¯¡£Èç¹û»ùÓÚÓ²¼þµÄ¼ÓÃܲ»¿ÉÓã¬Ôòת¶øÊ¹Óà BitLocker »ùÓÚÈí¼þµÄ¼ÓÃÜ¡£
×¢Òâ:¡°Ñ¡ÔñÇý¶¯Æ÷¼ÓÃÜ·½·¨ºÍÃÜÂ볤¶È¡±²ßÂÔÉèÖò»ÊÊÓÃÓÚ»ùÓÚÓ²¼þµÄ¼ÓÃÜ¡£»ùÓÚÓ²¼þµÄ¼ÓÃÜËùʹÓõļÓÃÜËã·¨ÔÚÇý¶¯Æ÷·ÖÇøÊ±½øÐÐÉèÖá£Ä¬ÈÏÇé¿öÏ£¬BitLocker ½«Ê¹ÓÃÇý¶¯Æ÷ÉÏÅäÖõÄËã·¨À´¼ÓÃÜÇý¶¯Æ÷¡£Ê¹Óá°ÏÞÖÆ¿ÉÓÃÓÚ»ùÓÚÓ²¼þµÄ¼ÓÃܵļÓÃÜËã·¨ºÍÃÜÂëÌ×¼þ¡±Ñ¡Ï¿ÉÒÔÏÞÖÆ BitLocker ¿ÉÓÃÓÚÓ²¼þ¼ÓÃܵļÓÃÜËã·¨¡£Èç¹ûÇý¶¯Æ÷µÄËã·¨¼¯²»¿ÉÓã¬Ôò BitLocker ½«½ûÓûùÓÚÓ²¼þµÄ¼ÓÃÜ¡£
¼ÓÃÜËã·¨ÓɶÔÏó±êʶ·û(OID)Ö¸¶¨¡£ÀýÈç:
- AES 128 (CBC ģʽ) OID: 2.16.840.1.101.3.4.1.2
- AES 256 (CBC ģʽ) OID: 2.16.840.1.101.3.4.1.42
ÅäÖÃΪ¡°ÒѽûÓá±£¬È·¶¨¡£ÕâÑùBitLocker¾Í½ûÓÃÁËÓ²¼þ¼ÓÃÜ·½Ê½¡£
È»ºóÄãÔÙ¿ªÆôBitLocker¼ÓÃÜ£¬Ê¹ÓõľÍÊÇBitLocker×Ô¼ºµÄAES 128»òAES 256Èí¼þ¼ÓÃÜ·½Ê½ÁË¡£
ÑéÖ¤BitLocker¼ÓÃÜ·½Ê½
ÄÇôÈçºÎÖªµÀ×Ô¼ºµÄWin10µçÄÔµÄBitLocker¼ÓÃÜ·½Ê½ÄØ£¿Ö»ÐèÒÔ¹ÜÀíÔ±Éí·ÝÔËÐÐÃüÁîÌáʾ·û£¬ÔËÐÐÒÔÏÂÃüÁî¼´¿É£º
manage-bde.exe -status
Èç¹ûBitLocker¼ÓÃÜ·ÖÇøµÄ¡°¼ÓÃÜ·½·¨¡±ÏÔʾΪ¡°XTS-AES 128¡±¡¢¡°XTS-AES 256¡±µÈ£¬¶ø·Ç¡°Ó²¼þ¼ÓÃÜ¡±£¬ÄÇôʹÓõľÍÊÇBitLocker×Ô¼ºµÄÈí¼þ¼ÓÃÜ·½Ê½ÁË¡£
- ΢ÐÅɨÂëÔÞÖú
-
- Èç¹û°ïµ½ÁËÄú£¬Äú¿ÉÒÔÔÞÖúÎÒһϣ¡
- Ö§¸¶±¦É¨ÂëÔÞÖú
-
- ²»ÂÛ¶àÉÙ£¬ÎÒ¶¼ÏòÄú±íÊ¾ÌØ±ðµÄ¸Ðл£¡