If I were to make a VM disk that was encrypetd, boot it, enter the encrypted passphrase and save the resulting 'image state' (of the running VM).
Would this image have the 'encrypted' files easily accessible?
Essentially I'm trying to understanding where exactly the 'decrypted filesystem' exists, is it in memory or somewhere else? This would depend on the actual implementation of the encryption - but I'm trying to know if there exists any implementation (Truecrypt / etc) such that it would NOT provide easy access to the files from the above state.
Said a slightly different way, is there any encryption implementation that 'decrypts' to a binary blob?