Version History
1.19 (October 17
th
, 2016)
• All OSs:
◦ Fix issues raised by Quarkslab audit:
▪ Remove GOST89 encryption algorithm.
▪ Make PBKDF2 and HMAC code clearer and easier to analyze.
▪ Add test vectors for Kuznyechik.
▪ Update documentation to warn about risks of using command line switch ”token-
pin”.
◦ Use SSE2 optimized Serpent algorithm implementation from Botan project (2.5
times faster on 64-bit platforms).
• Windows:
◦ Fix keyboard issues in EFI Boot Loader.
◦ Fix crash on 32-bit machines when creating a volume that uses Streebog as PRF.
◦ Fix false positive detection of Evil-Maid attacks in some cases (e.g. hidden OS
creation)
◦ Fix failure to access EFS data on VeraCrypt volumes under Windows 10.
◦ Fix wrong password error in the process of copying hidden OS.
◦ Fix issues raised by Quarkslab audit:
▪ Fix leak of password length in MBR bootloader inherited from TrueCrypt.
▪ EFI bootloader: Fix various leaks and erase keyboard buffer after password is
typed.
▪ Use libzip library for handling zip Rescue Disk file instead of vulnerable XUnzip
library.
◦ Support EFI system encryption for 32-bit Windows.
◦ Perform shutdown instead of reboot during Pre-Test of EFI system encryption to
detect incompatible motherboards.
• MacOSX:
◦ Remove dependency to MacFUSE compatibility layer in OSXFuse.
159
