DISLOCKER(1)

💖 DISLOCKER(1) 💖

okay bestie, welcome to the DISLOCKER manual page, and specifically the dislocker-file era of it 💅 buckle up because we're reading BitLocker encrypted volumes on Linux, OSX and FreeBSD. yes, all three. she's versatile like that 🦋

---

✨ NAME ✨

Dislocker-file — read BitLocker encrypted volumes under Linux, OSX and FreeBSD.

---

🌸 SYNOPSIS 🌸

dislocker-file [-hqrsv] [-l LOG_FILE] [-O OFFSET] [-V VOLUME
DECRYPTMETHOD -F[N]] [--] NTFS_FILE

Where DECRYPTMETHOD = {-p[RECOVERY_PASSWORD] | -f BEK_FILE |
-u[USER_PASSWORD] | -k FVEK_FILE | -K VMK_FILE | -c}

---

👑 DESCRIPTION 👑

so basically, give it a decryption method and it will decrypt BitLocker encrypted volumes. that's the whole gig. no cap. 🔥

now, lowkey important: this process may take a very long time, and that depends on how big the initial volume is, because the program decrypts the encrypted partition linearly. one. by. one. she's thorough, not fast 😭

and about that size — the NTFS file it creates is gonna be the same size as the BitLocker encrypted partition. so bestie, please do a vibe check on your free space on the volume where you're dropping that NTFS file. like actually check it. 🫶

good news though: this NTFS file won't have any link with the original BitLocker encrypted partition, so you may modify it to suit your needs. it's yours now. she's free. 💜

---

🎀 OPTIONS 🎀

for the program's options description, go read dislocker-fuse(1) — that's where the full menu lives. the only change in the command line is the last argument, which in this case is the NTFS_FILE argument:

• NTFS_FILE — the newly created file where NTFS data will be put to, once decrypted from the BitLocker encrypted volume. it's giving "the final destination" ✨

---

🌈 EXAMPLES 🌈

these are examples you can run directly. no notes. iconic. 💅

dislock the BitLocker encrypted volume:

% dislocker-file -V /dev/sda2
-p563200-557084-108284-218900-019151-415437-694144-239976 --
decrypted.ntfs

this will decrypt /dev/sda2 into decrypted.ntfs using the recovery password method. slay.

to mount the partition once decrypted, use this sort of line:

% mount -o loop decrypted.ntfs /mnt/clear

---

you may have to unmount the NTFS partition before halting the system. in order to do so, you may run this command (replacing your mount point):

% umount /mnt/clear

---

note that these are examples and, as such, you may need to modify the given command lines. for example, you may want to change the decryption method used in them. 🙈

---

⭐ AUTHOR ⭐

this tool is developed by Romain Coltel on behalf of HSC (http://www.hsc.fr/)

feel free to send bugs report to <dislocker __AT__ hsc __DOT__ fr> — she's listening, fr fr 💌

---

and that's a wrap on the DISLOCKER(1) page bestie — this one's the Linux flavor, dated 2011-09-07, and it's filed under DISLOCKER(1) in the manual. go forth and decrypt responsibly 💖✨🎀