Winsage
December 25, 2025
Microsoft has introduced a hardware-accelerated BitLocker encryption system for Windows 11, which shifts the encryption workload from software to dedicated accelerator units in future CPU microarchitectures. This new system is available in Windows 11 version 25H2 and Windows Server 2025 following the September update. Initial testing shows that certain workloads can achieve double the storage performance and reduce CPU usage by over 70%. The encryption processing is offloaded to a fixed-function cryptography engine within the system on chip (SoC), and encryption keys are hardware-wrapped for enhanced security. The initial rollout focuses on Intel vPro platforms with Core Ultra Series 3 "Panther Lake" processors, with plans to extend support to other vendors. Performance data indicates that while sequential read and write speeds are similar between software and hardware approaches, random 4K operations show significant improvements, with hardware-accelerated BitLocker being 2.3 times faster in RND4K Q32T1 tests and demonstrating a 40% speed increase for single-queue random reads and a 2.1 times speed increase for single-queue random writes.
