#define TC_IOCTL_GET_WARNING_FLAGS TC_IOCTL (35)

#define TC_IOCTL_SET_SYSTEM_FAVORITE_VOLUME_DIRTY TC_IOCTL (36)

#define TC_IOCTL_REREAD_DRIVER_CONFIG TC_IOCTL (37)

#define TC_IOCTL_GET_SYSTEM_DRIVE_DUMP_CONFIG TC_IOCTL (38)

// Legacy IOCTLs used before version 5.0

#define TC_IOCTL_LEGACY_GET_DRIVER_VERSION 466968

#define TC_IOCTL_LEGACY_GET_MOUNTED_VOLUMES 466948

} GetBootEncryptionAlgorithmNameRequest;

typedef struct

{

wchar_t DevicePath[TC_MAX_PATH];

byte Configuration;

BOOL DriveIsDynamic;

uint16 BootLoaderVersion;

CallDriver (TC_IOCTL_GET_BOOT_LOADER_VERSION, NULL, 0, &version, sizeof (version));

return version;

}

// Note that this does not require admin rights (it just requires the driver to be running)

bool BootEncryption::IsBootLoaderOnDrive (char *devicePath)

{

void BootEncryption::InstallBootLoader (bool preserveUserConfig, bool hiddenOSCreation)

{

CreateBootLoaderInMemory (bootLoaderBuf, sizeof (bootLoaderBuf), false, hiddenOSCreation);

// Write MBR

byte mbr[TC_SECTOR_SIZE_BIOS];

device.SeekAt (0);

device.Read (mbr, sizeof (mbr));

device.SeekAt (TC_SECTOR_SIZE_BIOS);

device.Write (bootLoaderBuf + TC_SECTOR_SIZE_BIOS, sizeof (bootLoaderBuf) - TC_SECTOR_SIZE_BIOS);

}

string BootEncryption::GetSystemLoaderBackupPath ()

{

char pathBuf[MAX_PATH];

reopenRequest.pkcs5_prf = cryptoInfo->pkcs5;

reopenRequest.pim = pim;

finally_do_arg (ReopenBootVolumeHeaderRequest*, &reopenRequest, { burn (finally_arg, sizeof (*finally_arg)); });

CallDriver (TC_IOCTL_REOPEN_BOOT_VOLUME_HEADER, &reopenRequest, sizeof (reopenRequest));

}

return result;

VolumeFilter,

DumpFilter

};

void AbortDecoyOSWipe ();

void AbortSetup ();

void AbortSetupWait ();

void CallDriver (DWORD ioctl, void *input = nullptr, DWORD inputSize = 0, void *output = nullptr, DWORD outputSize = 0);

DecoySystemWipeStatus GetDecoyOSWipeStatus ();

DWORD GetDriverServiceStartType ();

unsigned int GetHiddenOSCreationPhase ();

uint16 GetInstalledBootLoaderVersion ();

Partition GetPartitionForHiddenOS ();

bool IsBootLoaderOnDrive (char *devicePath);

BootEncryptionStatus GetStatus ();

string GetTempPath ();

void GetVolumeProperties (VOLUME_PROPERTIES_STRUCT *properties);

SystemDriveConfiguration GetSystemDriveConfiguration ();

void Install (bool hiddenSystem);

void InstallBootLoader (bool preserveUserConfig = false, bool hiddenOSCreation = false);

void InvalidateCachedSysDriveProperties ();

bool IsCDDrivePresent ();

bool IsHiddenSystemRunning ();

bool IsPagingFileActive (BOOL checkNonWindowsPartitionsOnly);

<string lang="en" key="TC_BOOT_LOADER_ALREADY_INSTALLED">CAUTION: The VeraCrypt Boot Loader is already installed on your system drive!\n\nIt is possible that another system on your computer is already encrypted.\n\nWARNING: PROCEEDING WITH ENCRYPTION OF THE CURRENTLY RUNNING SYSTEM MAY MAKE OTHER SYSTEM(S) IMPOSSIBLE TO START AND RELATED DATA INACCESSIBLE.\n\nAre you sure you want to continue?</string>

<string lang="en" key="SYS_LOADER_RESTORE_FAILED">Failed to restore the original system loader.\n\nPlease use your VeraCrypt Rescue Disk ('Repair Options' > 'Restore original system loader') or Windows installation medium to replace the VeraCrypt Boot Loader with the Windows system loader.</string>

<string lang="en" key="SYS_LOADER_UNAVAILABLE_FOR_RESCUE_DISK">The original system loader will not be stored on the Rescue Disk (probable cause: missing backup file).</string>

<string lang="en" key="ERROR_MBR_PROTECTED">Failed to write the MBR sector.\n\nYour BIOS may be configured to protect the MBR sector. Check your BIOS settings (press F2, Delete, or Esc, after powering on your computer) for MBR/antivirus protection.</string>

<string lang="en" key="BOOT_LOADER_VERSION_INCORRECT_PREFERENCES">The required version of the VeraCrypt Boot Loader is currently not installed. This may prevent some of the settings from being saved.</string>

<string lang="en" key="CUSTOM_BOOT_LOADER_MESSAGE_HELP">Note: In some situations, you may wish to prevent a person (adversary) that is watching you start the computer from knowing that you use VeraCrypt. The above options allow you to do that by customizing the VeraCrypt boot loader screen. If you enable the first option, no texts will be displayed by the boot loader (not even when you enter the wrong password). The computer will appear to be "frozen" while you can type your password. In addition, a custom message can be displayed to mislead the adversary. For example, fake error messages such as "Missing operating system" (which is normally displayed by the Windows boot loader if it finds no Windows boot partition). It is, however, important to note that if the adversary can analyze the content of the hard drive, he can still find out that it contains the VeraCrypt boot loader.</string>

<string lang="en" key="CUSTOM_BOOT_LOADER_MESSAGE_PROMPT">WARNING: Please keep in mind that if you enable this option, the VeraCrypt boot loader will not display any texts (not even when you enter the wrong password). The computer will appear to be "frozen" (unresponsive) while you can type your password (the cursor will NOT move and no asterisk will be displayed when you press a key).\n\nAre you sure you want to enable this option?</string>

<string lang="en" key="SYS_PARTITION_OR_DRIVE_APPEARS_FULLY_ENCRYPTED">Your system partition/drive appears to be fully encrypted.</string>

#include "Pkcs5.h"

#ifdef _WIN32

#include <Strsafe.h>

#endif

/* Volume header v5 structure (used since TrueCrypt 7.0): */

//

return status;

}

#else // TC_WINDOWS_BOOT

int ReadVolumeHeader (BOOL bBoot, char *header, Password *password, int pim, PCRYPTO_INFO *retInfo, CRYPTO_INFO *retHeaderCryptoInfo)

{

#ifdef TC_WINDOWS_BOOT

int ReadVolumeHeader (BOOL bBoot, char *encryptedHeader, Password *password, int pim, PCRYPTO_INFO *retInfo, CRYPTO_INFO *retHeaderCryptoInfo);

#else

int ReadVolumeHeader (BOOL bBoot, char *encryptedHeader, Password *password, int pkcs5_prf, int pim, BOOL truecryptMode, PCRYPTO_INFO *retInfo, CRYPTO_INFO *retHeaderCryptoInfo);

#endif

#if !defined (DEVICE_DRIVER) && !defined (TC_WINDOWS_BOOT)

int CreateVolumeHeaderInMemory (HWND hwndDlg, BOOL bBoot, char *encryptedHeader, int ea, int mode, Password *password, int pkcs5_prf, int pim, char *masterKeydata, PCRYPTO_INFO *retInfo, unsigned __int64 volumeSize, unsigned __int64 hiddenVolumeSize, unsigned __int64 encryptedAreaStart, unsigned __int64 encryptedAreaLength, uint16 requiredProgramVersion, uint32 headerFlags, uint32 sectorSize, BOOL bWipeMode);

static volatile BOOL BootDriveFound = FALSE;

static DriveFilterExtension *BootDriveFilterExtension = NULL;

static LARGE_INTEGER BootDriveLength;

static BOOL CrashDumpEnabled = FALSE;

static BOOL HibernationEnabled = FALSE;

if (CacheBootPassword && BootArgs.BootPassword.Length > 0)

AddPasswordToCache (&BootArgs.BootPassword);

status = STATUS_SUCCESS;

}

}

Extension->DriveMounted = FALSE;

}

static NTSTATUS MountDrive (DriveFilterExtension *Extension, Password *password, uint32 *headerSaltCrc32)

{

BOOL hiddenVolume = (BootArgs.HiddenSystemPartitionStart != 0);

{

// Header decrypted

status = STATUS_SUCCESS;

Dump ("Header decrypted\n");

if (Extension->Queue.CryptoInfo->hiddenVolume)

{

int64 hiddenPartitionOffset = BootArgs.HiddenSystemPartitionStart;

if (ReadVolumeHeader (!BootDriveFilterExtension->HiddenSystem, header, &request->VolumePassword, request->pkcs5_prf, request->pim, FALSE, NULL, BootDriveFilterExtension->HeaderCryptoInfo) == 0)

{

Dump ("Header reopened\n");

BootDriveFilterExtension->Queue.CryptoInfo->header_creation_time = BootDriveFilterExtension->HeaderCryptoInfo->header_creation_time;

BootDriveFilterExtension->Queue.CryptoInfo->pkcs5 = BootDriveFilterExtension->HeaderCryptoInfo->pkcs5;

BootDriveFilterExtension->Queue.CryptoInfo->noIterations = BootDriveFilterExtension->HeaderCryptoInfo->noIterations;

}

}

}

void GetBootEncryptionAlgorithmName (PIRP irp, PIO_STACK_LOCATION irpSp)

{

if (ValidateIOBufferSize (irp, sizeof (GetBootEncryptionAlgorithmNameRequest), ValidateOutput))

void GetBootDriveVolumeProperties (PIRP irp, PIO_STACK_LOCATION irpSp);

void GetBootEncryptionAlgorithmName (PIRP irp, PIO_STACK_LOCATION irpSp);

void GetBootEncryptionStatus (PIRP irp, PIO_STACK_LOCATION irpSp);

void GetBootLoaderVersion (PIRP irp, PIO_STACK_LOCATION irpSp);

NTSTATUS GetSetupResult ();

DriveFilterExtension *GetBootDriveFilterExtension ();

CRYPTO_INFO *GetSystemDriveCryptoInfo ();

BOOL IsBootDriveMounted ();

UNICODE_STRING FullFileName;

IO_STATUS_BLOCK IoStatus;

LARGE_INTEGER offset;

byte readBuffer [TC_SECTOR_SIZE_BIOS];

if (!ValidateIOBufferSize (Irp, sizeof (GetSystemDriveConfigurationRequest), ValidateInputOutput))

break;

EnsureNullTerminatedString (request->DevicePath, sizeof (request->DevicePath));

case TC_IOCTL_REOPEN_BOOT_VOLUME_HEADER:

ReopenBootVolumeHeader (Irp, irpSp);

break;

case TC_IOCTL_GET_BOOT_ENCRYPTION_ALGORITHM_NAME:

GetBootEncryptionAlgorithmName (Irp, irpSp);

break;

ExtractCommandLine (hwndDlg, (char *) lParam);

try

{

BootEncStatus = BootEncObj->GetStatus();

RecentBootEncStatus = BootEncStatus;

}

catch (...)

try

{

if (IsHiddenOSRunning())

{

Warning ("UPDATE_TC_IN_HIDDEN_OS_TOO", hwndDlg);

}

{

}

}

catch (...) { }