VeraCrypt

Recent Commits

• Mounir IDRASSI(17 Oct 26)

  Docs: summarize release changes and security advisories

• Mounir IDRASSI(17 Oct 26)

  Crypto: fix ChaCha partial block continuation Count consumed input bytes so short updates don't skip unused keystream. Reset the saved offset when the block is exhausted. Reported by @router0mail.

• Mounir IDRASSI(17 Oct 26)

  macOS: refresh app bundles before notarization Refresh the app bundle after every build, without requiring -p.

• Mounir IDRASSI(17 Oct 26)

  macOS: update Makefile signing identities Use the new signing identity for app signing and standard and legacy installer packaging.

• Mounir IDRASSI(17 Oct 26)

  macOS: harden notarization and use Keychain credentials Use the new signing identity and Keychain profiles. Verify hardened runtime and packaged binaries before submission. Stop on failures and isolate outputs to prevent stale uploads.

• Marius Kjærstad(17 Oct 26)

  Update Norwegian Nynorsk translation (#1922) * Update Norwegian Nynorsk translation * Update Language.nn.xml Update Language.nn.xml

• Aldo Latino(17 Oct 26)

  Updated IT translation (#1925) * Updated IT translation * Hash algorithm * Address review comments * Address review comments - 2 * Change &Opzioni di mount... to &Opzioni... * Change Sm&onta tutti to Smo&nta tutti

• amail80(17 Oct 26)

  Windows: flush shell notifications when dismounting with /q (#1852) * Windows: flush shell notifications when dismounting with /q * Windows: limit the /q notification flush to the command line dismount ProcessExitsAfterCommand was set while parsing /q and stayed set when the process went on as the background task (/q background, and /q preferences, which is also used at logon). Later interactive dismounts, automatic dismounts through DismountAll and the hotkeys then flushed as well, which would also delay the cache wipe that the force dismount and wipe hotkeys issue after DismountAll. Set the flag only for the dismount requested on the command line and clear it right after, whatever Silent is. Rename it to FlushDriveRemovalNotifications, as /q doesn't necessarily end the process. Reword the comments: according to the documentation, SHCNF_FLUSH makes SHChangeNotify return once the notification has been delivered, which doesn't mean that Explorer has finished updating its display, and the cause of the reported ghost drive letters hasn't been established.

• Mounir IDRASSI(16 Oct 26)

  Release header allocations after early setup failures Free the key-info buffer and owned crypto context on pre-KDF errors, preserving borrowed contexts and avoiding uninitialized drain resources. Inject every setup allocation and event failure to verify cleanup.

• Mounir IDRASSI(16 Oct 26)

  Unix: complete pool work when exception capture fails Record cloning, formatting and allocation failures without allocating, then complete and drain the request before reporting an error. This prevents worker loss and avoids treating incomplete cipher or KDF output as valid. Test ordinary exceptions, capture failures and subsequent pool recovery.

• Mounir IDRASSI(16 Oct 26)

  Unix: drain encryption pool users before shutdown Retain accepted callers and KDF workers until completion, and run later requests synchronously. Clear joined threads and unwind partial startup so serialized restarts do not retain stale workers. Cover shutdown boundaries and startup failures with gated tests.

• Mounir IDRASSI(16 Oct 26)

  Unix: synchronize encryption fragment exceptions Serialize updates to the shared exception pointer and retain the first reported error. Test concurrent failures through all three handlers, exception cleanup and subsequent successful work.

• Mounir IDRASSI(16 Oct 26)

  Windows: drain encryption pool users before shutdown Close admission and retain references for accepted requests, KDF workers and submitters until they stop using pool resources. Run new work synchronously while stopping, then join workers and release handles. Test queued work, delayed requester wakeup, fallback and restart.

• Mounir IDRASSI(16 Oct 26)

  Windows: clean up partial encryption pool startup Join created workers and release allocated handles when startup fails before the pool is published. Close worker handles on normal shutdown as well. Test each startup allocation failure and subsequent restart.

• Mounir IDRASSI(16 Oct 26)

  Windows: remove unused header finalization work Header reads have performed synchronous cleanup since 9dc24ba7. Remove the unused queue operation and obsolete event-reset macros.

• Mounir IDRASSI(16 Oct 26)

  Windows: fix KDF completion lifetime Hold a requester reference until header parsing can no longer enqueue KDFs. This prevents stale completion signals from allowing cleanup while workers still use request-owned state. Add bounded tests of the production pool and caller completion protocol.

• Mounir IDRASSI(16 Oct 26)

  Harden encryption fragment completion against queue slot reuse Capture the parent before releasing a fragment slot on Windows and Unix. This removes the completion code's dependency on the first-fragment slot holding up the ring until the requester observes completion.

• Mounir IDRASSI(16 Oct 26)

  Windows: handle extended processor state save failures Use per-context software SHA-256/SHA-512 after a failed state save without changing global dispatch. Return an error and clear Argon2's output before its accelerated core can run.

• Patriccollu(16 Oct 26)

  Update Corsican translation on 2026-10 (#1860) * Update Corsican translation on 2026-08 * Update Corsican translation on 2026-10 * Update Corsican translation on 2026-10 * Update Corsican translation on 2026-10 * Update Corsican translation on 2026-10 * Update Corsican translation on 2026-10

• nkh0472(15 Oct 26)

  Update Language.zh-cn.xml (#1915) * Update Language.zh-cn.xml * Update Language.zh-cn.xml

• Matthaiks(15 Oct 26)

  Update Polish translation (#1924)

• Mounir IDRASSI(15 Oct 26)

  CI: run the APDU response erasure checks on Linux Tests/response_apdu_test.cpp was not run by any workflow. Build and run it in the Linux workflow before the packages are built, and start the workflow when the test changes. Changes to the code it covers already start it.

• Mounir IDRASSI(15 Oct 26)

  Unix: fall back to English when a language file is unusable An empty language file made VeraCrypt access the first element of an empty vector, and any language file without a language element crashed it at startup, when LanguageStrings::Init took the first element of an empty node list. A file with an unterminated tag made initialization fail instead, so VeraCrypt could not start until the preferences file was edited. Read the file only if it is not empty, and ignore a language file that cannot be parsed or has no language element, keeping the built-in English strings. Also fall back when the optional language file cannot be opened or read completely. Catch I/O failures at the resource loader, leaving preference-loading errors outside the handler.

• Mounir IDRASSI(15 Oct 26)

  Windows: do not truncate files of 4 GiB or more in LoadFile LoadFile read the file size with GetFileSize without its high-order part, so a file of 4 GiB or more was loaded as if it were only as large as its size modulo 4 GiB, without any error. Refuse such files with ERROR_FILE_TOO_LARGE instead.

• Mounir IDRASSI(15 Oct 26)

  Security tokens: bound response chaining and EMV directory reads ApduProcessData sent GET RESPONSE for as long as the card answered 0x61XX, allowing an endless loop and unbounded response growth. Limit each chain to 256 follow-up commands and erase the partial response if the limit is exceeded. PSE directory enumeration had a separate unbounded loop with an eight-bit record counter. Read only records 1 through 254, stop on an empty or unsuccessful response, and limit the accumulated directory data to 254 short records before parsing. Malformed TLV responses consume this budget too, so they cannot bypass either limit.

• Mounir IDRASSI(15 Oct 26)

  Security tokens: release cached EMV card data when closing sessions EMVToken::EMVCards keeps every EMV card that was read, together with the ICC and issuer public key certificates and the CPLC data that make up its keyfile, and keeps the card connected. Closing all security token sessions, the option to close them after mounting and wiping the cache on auto-dismount only closed PKCS#11 sessions, so this data stayed in memory until VeraCrypt exited. Add Token::CloseAllSessions, which also releases the cached cards so that their data is erased and their connection closed, and use it wherever all sessions are closed. This resolves the "TODO Use Token" notes at these call sites on Windows. Keep the EMV cache private and serialize reader enumeration, card reads, and cache cleanup with the same mutex. Closing sessions waits for active reads to release their local card references before erasing the cache, so a read cannot race destruction or insert its card after cleanup.

• Mounir IDRASSI(15 Oct 26)

  Security tokens: fix PC/SC error messages PCSCException::Show on Windows was derived from the PKCS#11 version but kept its trailing %s without the matching argument, so any PC/SC error without a message of its own was formatted from a missing argument. Remove the extra conversion. Both platforms label these errors with PCSC_ERROR, which no language file defined, so users saw a placeholder such as ?PCSC_ERROR? instead. Append the English text to all language files as a fallback. Unknown codes were printed in decimal after a 0x prefix. Print them in hexadecimal, as Pkcs11Exception does.

• Mounir IDRASSI(15 Oct 26)

  Security tokens: reject unsupported paths when resolving keyfiles Token::getTokenKeyfile returned null for a path that is neither a PKCS#11 nor an EMV token path, and every caller dereferenced the result. Keyfile application validates the path beforehand, but the text-mode export does not, so entering an ordinary file path at the --export-token-keyfile prompt crashed VeraCrypt. Throw InvalidSecurityTokenKeyfilePath instead, which the user interfaces already report.

• Mounir IDRASSI(14 Oct 26)

  Unix: snapshot token import lengths before allocation Use a single file-length measurement for both the non-empty check and the vector allocation in GUI and text token imports. Reject lengths exceeding vector::max_size before converting to size_t, while retaining the cleanup guard before reading.

• Mounir IDRASSI(14 Oct 26)

  Security tokens: wipe APDU buffers throughout their lifetime EMV keyfile cleanup did not cover APDU response storage, temporary copies, or transport buffers on exceptions. Wipe responses on clear, replacement, destruction and growth, avoid redundant response and PAN copies, and install transport cleanup guards before use. Add standalone checks for erasure before release, aliasing, allocation failures, exception unwinding and const TLV input.