bitlocker-forensic

Unlock a BitLocker volume from its password and read the plaintext — a from-scratch, pure-Rust BitLocker (BDE) decryptor, validated byte-for-byte against pybde on real disk images.

No dislocker C dependency, no FUSE, no mounting: one library that parses the FVE metadata, derives the keys from a password, and decrypts sectors (AES-128-CBC + Elephant Diffuser).

use std::fs::File;
use bitlocker::BitLockerVolume;

// Unlock the dfvfs BitLocker To Go test image with its published password.
let mut vol = BitLockerVolume::unlock_with_password(File::open("bdetogo.raw")?, "bde-TEST")?;

let mut boot = [0u8; 512];
vol.read_at(0, &mut boot)?;      // decrypted FAT boot sector
assert_eq!(&boot[3..11], b"MSWIN4.1");
# Ok::<(), Box<dyn std::error::Error>>(())

Scope

This build targets exactly what the Tier-1 oracle validates: the password protector (0x2000) over AES-128-CBC + Elephant Diffuser (method 0x8000). AES-XTS, recovery-password, startup-key, and TPM protectors are deliberately out of scope for unlock — but the metadata parser still reports every protector and cipher it finds. See docs/RESEARCH.md.

The two-crate split

Following the fleet reader/analyzer standard:

Analyzer findings

Findings are observations, never verdicts — the examiner draws conclusions.

Trust but verify

• Every primitive is an audited RustCrypto crate (aes, cbc, ccm, sha2). The only hand-written cryptographic routine is the Elephant Diffuser — no crate exists for it — implemented to the libbde reference and validated only against the independent pybde oracle on the real bdetogo.raw image, never a self-authored round-trip.
• Panic-free, bounds-checked parsing of untrusted volumes; unwrap/expect denied in production code (#![forbid(unsafe_code)]); the metadata parser is fuzzed.
• Tier-1 validated: decrypted sectors match pybde byte-for-byte — see docs/validation.md.

Privacy Policy · Terms of Service · © 2026 Security Ronin Ltd