This presentation shows internal but available structures used by a BitLocker encrypted drive : how to find them, how to decompose them and how to translate them. Moreover, the key used for encryption or decryption are listed. Finally, a tool to decrypt BitLocker encrypted drives under Linux or MacOSX is presented : dislocker. Video: dislocker-fuse.ogv [12 MB]
Context & Dates
Talk presented during the 2012th edition of the GS-Days, on
3 April 2012.