VeraCrypt 1.26.7

Changes between 1.25.9 and 1.26.7 (1 October 2023) :

  - All OSes:
     * Security: Ensure that XTS primary key is different from the secondary key when creating volumes
         * Issue unlikely to happen thanks to random generator properties but this check must be added to prevent attacks
         * Reference: CCSS,NSA comment at page 3: https://csrc.nist.gov/csrc/media/Projects/crypto-publication-review-project/documents/initial-comments/sp800-38e-initial-public-comments-2021.pdf
     * Remove TrueCrypt Mode support. Version 1.25.9 can be used to mount or convert TrueCrypt volumes.
     * Complete removal of RIPEMD160 and GOST89 algorithms. Legacy volumes using any of them cannot be mounted by VeraCrypt anymore.
     * Add support for BLAKE2s as new PRF algorithm for both system encryption and standard volumes.
     * Introducing support for EMV banking smart cards as keyfiles for non-system volumes.
         * No need for a separate PKCS#11 module configuration.
         * Card PIN isn't required.
         * Generates secure keyfile content from unique, encoded data present on the banking card.
         * Supports all EMV standard-compliant banking cards.
         * Can be enabled in settings (go to Settings->Security Tokens).
         * Developed by a team of students from the Institut national des sciences appliquées de Rennes.
         * More details about the team and the project are available at https://projets-info.insa-rennes.fr/projets/2022/VeraCrypt/index_en.html.
     * When overwriting an existing file container during volume creation, add its current size to the available free space
     * Add Corsican language support. Update several translations.
     * Update documentation
  - Windows:
     * Officially, the minimum supported version is now <strong>Windows 10</strong>. VeraCrypt may still run on Windows 7 and Windows 8/8.1, but no active tests are done on these platforms.
     * EFI Bootloader:
         * Fix bug in PasswordTimeout value handling that caused it to be limited to 255 seconds.
         * Rescue Disk: enhance "Boot Original Windows Loader" by using embedded backup of original Windows loader if it is missing from disk
         * Addition of Blake2s and removal of RIPEMD160 & GOST89
     * Enable memory protection by default. Add option under Performance/Driver Configuration to disable it if needed.
         * Memory protection blocks non-admin processes from reading VeraCrypt memory
         * It may block Screen Readers (Accessibility support) from reading VeraCrypt UI, in which case it can be disabled
         * It can be disabled by setting registry value "VeraCryptEnableMemoryProtection" to 0 under "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\veracrypt"
     * Add process mitigation policy to prevent VeraCrypt from being injected by other processes
     * Minor enhancements to RAM Encryption implementation
     * Fix Secure Desktop issues under Windows 11 22H2
     * Implement support for mounting partially encrypted system partitions.
     * Fix false positive detection of new device insertion when Clear Encryption Keys option is enable (System Encryption case only)
     * Better implementation of Fast Create when creating file containers that uses UAC to request required privilege if not already held
     * Allow choosing Fast Create in Format Wizard UI when creating file containers
     * Fix formatting issues during volume creation on some machines.
     * Fix stall issue caused by Quick Format of large file containers
     * Add dropdown menu to Mount button to allow mounting without using the cache.
     * Possible workaround for logarithmic slowdown for Encrypt-In-Place on large volumes.
     * Make Expander first check file existence before proceeding further
     * Allow selecting size unit (KB/MB/GB) for generated keyfiles
     * Display full list of supported cluster sizes for NTFS, ReFS and exFAT filesystems when creating volumes
     * Support drag-n-drop of files and keyfiles in Expander.
     * Implement translation of Expander UI
     * Replace legacy file/dir selection APIs with modern IFileDialog interface for better Windows 11 compatibility
     * Enhancements to dependency dlls safe loading, including delay loading.
     * Remove recommendation of keyfiles files extensions and update documentation to mention risks of third-party file extensions.
     * Add support for more language in the setup installer
     * Update LZMA library to version 23.01
     * Update libzip to version 1.10.0 and zlib to version 1.3.
  - Linux:
     * Fix bug in Random generator on Linux when used with Blake2s that was triggering a self test failure.
     * Modify Random Generator on Linux to exactly match official documentation and the Windows implementation.
     * Fix compatibility issues with Ubuntu 23.04.
     * Fix assert messages displayed when using wxWidgets 3.1.6 and newer.
     * Fix issues launching fsck on Linux.
     * Fix privilege escalation prompts being ignored.
     * Fix wrong size for hidden volume when selecting the option to use all free space.
     * Fix failure to create hidden volume on a disk using CLI caused by wrong maximum size detection.
     * Fix various issues when running in Text mode:
         * Don't allow selecting exFAT/BTRFS filesytem if they are not present or not compatible with the created volume.
         * Fix wrong dismount message displayed when mounting a volume.
         * Hide PIM during entry and re-ask PIM when user entered a wrong value.
         * Fix printing error when checking free space during volume creation in path doesn't exist.
     * Use wxWidgets 3.2.2.1 for static builds (e.g. console only version)
     * Fix compatibility of generic installers with old Linux distros
     * Update help message to indicate that when cascading algorithms they must be separated by dash
     * Better compatibility with building under Alpine Linux and musl libc
  - macOS:
     * Fix issue of VeraCrypt window becoming unusable in use cases involving multiple monitors and change in resolution.