Bitlocker VMK Extraction over SPI

I’ve been doing some reading about Bitlocker and how it works recently and I had an occasion to reproduce some work done by others as an educational excercise.

Bitlocker in Theory

Most operating systems allow you to use full disk encryption these days to encrypt your system storage drive. This is very handy, but there is a core design question regarding how the drive is decrypted. For Linux, you need to provide a password to boot the computer. If you loose the password, I guess tough.

Framework Intro

So Framework is a laptop company that sells repair-able laptops. The value proposition as I see it is that you get a laptop that focuses on user-servicable repairs and upgrades. While it might not be opimizing the “cost vs computational power vs battery life vs weight” metrics as heavily as other laptops are, you are getting something that, if Framework holds up its promise, if you break it in three years you don’t have to choose between getting a brand new laptop or just living with the broken one, or getting some dodgy third party parts if you’re lucky. Instead, if my laptop screen breaks I can go to framework and order a new one. Just the screen. Even if its not their latest product. And, if they don’t offer that screen any more, the “current” edition of the screen should still work with my laptop.