Windows BitLocker – Screwed Without a Screwdriver

Breaking up-to-date Windows 11 BitLocker encryption -- on-device but software-only

1 comments

TLDR: Make the system error on boot, then use a usb ethernet to pxe boot using an older version of the bootloader with the bug, then make that bootloader error on boot to boot the linux payload via PXE that grabs the hardware key in memory (which is the bug).

Microsoft's fix will be to revoke the platform keys of the older bootloader, enforcing the use of the newest bootloader.