BitLocker disk encryption on Linux
summary
Adds BitLocker support to cryptsetup by parsing BitLocker metadata, deriving keys from the password or recovery password, and building dm-crypt devices with the Device Mapper crypto target; metadata/log regions map to a zero target and NTFS header is relocated so the filesystem mounts normally. Supports AES-XTS and newer IV handling (needs kernel 5.3 for some modes), requires cryptsetup 2.3+ and util-linux 2.33+ for detection, and exposes unlocking via udisks integration so desktops prompt for passphrases.
AI-written summary · about
chapters (15)
- 0:00Intro
- 1:32Why BitLocker
- 2:52Device overview
- 3:37Metadata
- 6:00Devicemapper
- 7:40eSATA
- 9:40BitLocker
- 10:09Device mapper
- 12:53Device creation
- 13:17pip setup
- 14:28device metadata
- 15:14support
- 18:32setup
- 20:51summary
- 21:14questions
related talks
27mSpeeding Up Linux Disk Encryption
33mEncryption for filesystems with advanced features new fscrypt functionality
38mBitLeaker: Subverting BitLocker with One Vulnerability
24mOnline disk reencryption with LUKS2
30mOpenZFS and Linux
26mWide-Block Cipher Support and HCTR2
47msystemd and TPM2
51mApplications of TPM 2.0