diskcryptor.org

Turn off fast boot, see if that changes anything: https://support.lenovo.com/gt/en/solutions/ht501793

Could DiskCryptor itself create a "rescue disk" before encrypting the Windows drive?

Assuming the worst case scenario and Windows 10 has overwritten the DiskCryptor bootloader (or it somehow got damaged).

How would the user repair it? What about UEFI setups, would this make it too difficult or impossible?

TRESOR?

https://github.com/ayeks/TresorSGX

When the user encrypts the Windows 10 data partition (or all the Windows 10 partitions, except the EFI), maybe require the creation of a "rescue disk" before the encryption takes place? If Windows 10 does not boot in future, the user can restore the DiskCryptor boot loader. Protecting the bootloader...

I mean is there a way to prevent Windows 10 from tampering with the DiskCryptor bootloader or a way to self-repair it? For instance, while the bootlaoder or DiskCryptor itself is loaded in memory, protect the integrity of the bootloader when Windows 10 decides to do its own thing. Crazy that Windows...

Is there a way to code the DiskCryptor boatloader so it never gets overwritten?

Third party boot loaders like GRUB and (in the past?) the VeraCrypt boot loader could be broken by Windows 10 upgrades. A Windows 10 upgrade is the same as re-installing Windows and it doesn't seem to care about messing with other boot loaders. Hopefully there are safeguards in place to prevent Wind...

To prevent cold boot and DMA attacks, is it possible to encrypt the keys in RAM (but still allow Windows hibernate and fast startup to work)?

Thank you for your explanation.