Home▸Cybersecurity▸Full-Disk Encryption & TPM Sealing

Full-Disk Encryption & TPM Sealing

Interactive 3D simulation of full-disk encryption (FDE) and TPM-sealed keys: watch a laptop's drive get stolen and plugged into another PC, with and without encryption, to see why physical access alone can no longer read the data.

Cybersecurity3DModerate60 FPS

This simulation shows what actually happens when a laptop is stolen, its drive removed, and plugged into a different computer — with and without full-disk encryption enabled. Toggle encryption, then run the theft scenario to watch the physical drive detach from the original laptop and get mounted on an attacker's PC. Without encryption, every file block reads out in plain form immediately. With encryption, the Disk Encryption Key stays sealed inside the original laptop's TPM chip — bound to that machine's exact boot state — so the drive on the attacker's PC never yields more than random ciphertext.

⚙ Under the hood

3D full-disk encryption (FDE) demo: a physical drive is detached from a laptop and mounted on an attacker PC, with a toggle for encrypted vs unencrypted. Unencrypted, every file block reads out immediately; encrypted, the AES DEK stays sealed inside the original laptop's TPM chip bound to its boot state, so the attacker PC only ever shows randomized ciphertext blocks.

Three.jsEncryptionTPMBitLockerCybersecurity

3D · Three.js / WebGL renderer · 60 FPS target · runs fully client-side, no install