Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm studying this white-paper:

The author says that using AES-CCM with the external key (highlighted in green at page 9, figure 4) and with the nonce at offset 0x3662B8 (highlighted in red, figure 5) you can decrypt the data at offset 0x3662D4.

I don't understand how AES-CCM works in BitLocker. Can someone please explain it to me?

I have the following doubts:

  1. The length of IV should be of 16 bytes, but I have a nonce of 12 bytes.
  2. How is the MAC calculated?
share|improve this question
The octet length of the CCM nonce is not 16 but $15-L$, where $L$ equals the octet length of the counter. – Henrick Hellström Jul 15 '14 at 7:07
Don't you understand CCM in BitLocker, or don't you understand CCM at all? Explain CCM is a bit broad. – Maarten Bodewes Jul 16 '14 at 0:17
I don't understand CCM in BitLocker – RobotMan Jul 16 '14 at 21:07

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.