Windows 11 used with modern CPUs could lead to encrypted data corruption

News
By
published

CPUs with VAES instructions may not get along with Windows' encryption features.

Windows 11 search bar
(Image credit: Microsoft)

Microsoft has warned that some users may be affected by an issue related to its encryption features in combination with CPUs with Vector Advanced Encryption Standard (VAES) instructions. The issue can lead to ‘data damage’. The issue affects Windows 11 and Windows Server 2022.

According to a post on Microsoft’s website, the services that may be impacted include Bitlocker, which is Microsoft’s full volume encryption feature. It uses the AES instruction sets supported by modern CPUs, specifically the AES XEX-based tweaked-codebook mode with ciphertext stealing (AES-XTS) and AES with Galois/Counter Mode (GCM) (AES-GCM).

The list of CPUs that are affected has not been revealed, however, Intel 10th Gen and newer, and AMD Ryzen 5000 and newer CPUs are believed to be affected. It’s believed that the issue is a result of Windows code, and not a hardware issue.

Bleeping Computer reports that Microsoft has been aware of the issue for some time, releasing preview and security releases in May and June. These interim patches caused a performance hit, but there is good news. According to Microsoft support, "performance will be restored after you install the June 23, 2022 preview release or the July 12, 2022 security release". So, if you are using Bitlocker or other Microsoft disk encryption, you should update your Windows right now if you haven’t already.

Window shopping

Windows 11 Square logo

(Image credit: Microsoft)

Windows 11 review: What we think of the new OS
How to install Windows 11: Safe and secure install
What you need to know before upgrading: Things to note before downloading the latest OS
Windows 11 TPM requirements: Microsoft's strict security policy

The cause of the issue is described as follows: "We added new code paths to the Windows 11 (original release) and Windows Server 2022 versions of SymCrypt to take advantage of VAES (vectorized AES) instructions. SymCrypt is the core cryptographic library in Windows. These instructions act on Advanced Vector Extensions (AVX) registers for hardware with the newest supported processors."

The launch of Windows 11 has been a success for the most part. But like any widely installed operating system with an essentially infinite number of hardware and software combinations, issues will always rear their heads. Problems with updating won’t go away, and Windows Defender is known to affect Intel CPU performance.

There’s always Linux. It's getting more game friendly all the time, led by the success of the Steam Deck.

TOPICS
Chris Szewczyk
Chris Szewczyk
Hardware Writer

Chris' gaming experiences go back to the mid-nineties when he conned his parents into buying an 'educational PC' that was conveniently overpowered to play Doom and Tie Fighter. He developed a love of extreme overclocking that destroyed his savings despite the cheaper hardware on offer via his job at a PC store. To afford more LN2 he began moonlighting as a reviewer for VR-Zone before jumping the fence to work for MSI Australia. Since then, he's gone back to journalism, enthusiastically reviewing the latest and greatest components for PC & Tech Authority, PC Powerplay and currently Australian Personal Computer magazine and PC Gamer. Chris still puts far too many hours into Borderlands 3, always striving to become a more efficient killer.

See comments