Password ProtectedHidVolPassword; /* Password to the hidden volume to be protected against overwriting */

BOOL UseBackupHeader;

BOOL RecoveryMode;

} MOUNT_STRUCT;

typedef struct

typedef struct

{

Password VolumePassword;

} ReopenBootVolumeHeaderRequest;

// Initial rescue disk assumes encryption of the drive has been completed (EncryptedAreaLength == volumeSize)

memcpy (RescueVolumeHeader, VolumeHeader, sizeof (RescueVolumeHeader));

DecryptBuffer (RescueVolumeHeader + HEADER_ENCRYPTED_DATA_OFFSET, HEADER_ENCRYPTED_DATA_SIZE, cryptoInfo);

}

{

BootEncryptionStatus encStatus = GetStatus();

PCRYPTO_INFO cryptoInfo = NULL;

finally_do_arg (PCRYPTO_INFO, cryptoInfo, { if (finally_arg) crypto_close (finally_arg); });

if (status != 0)

{

ReopenBootVolumeHeaderRequest reopenRequest;

reopenRequest.VolumePassword = *newPassword;

finally_do_arg (ReopenBootVolumeHeaderRequest*, &reopenRequest, { burn (finally_arg, sizeof (*finally_arg)); });

CallDriver (TC_IOCTL_REOPEN_BOOT_VOLUME_HEADER, &reopenRequest, sizeof (reopenRequest));

void AbortSetup ();

void AbortSetupWait ();

void CallDriver (DWORD ioctl, void *input = nullptr, DWORD inputSize = 0, void *output = nullptr, DWORD outputSize = 0);

void CheckDecoyOSWipeResult ();

void CheckEncryptionSetupResult ();

void CheckRequirements ();

int cacheEmpty = 1;

static int nPasswordIdx = 0;

{

int nReturnCode = ERR_PASSWORD_WRONG;

int i;

/* Attempt to recognize volume using mount password */

if (password->Length > 0)

{

/* Save mount passwords back into cache if asked to do so */

if (bCache && (nReturnCode == 0 || nReturnCode == ERR_CIPHER_INIT_WEAK_KEY))

{

if (CachedPasswords[i].Length > 0)

{

if (nReturnCode != ERR_PASSWORD_WRONG)

break;

extern int cacheEmpty;

void AddPasswordToCache (Password *password);

void WipeCache (void);

Password ProtectedHidVolPassword; /* Password of hidden volume to protect against overwriting */

BOOL UseBackupHeader;

BOOL RecoveryMode;

} MountOptions;

#endif

PUSHBUTTON "Cancel",IDCANCEL,248,190,50,14

END

STYLE DS_SETFONT | DS_MODALFRAME | DS_FIXEDSYS | DS_CENTER | WS_POPUP | WS_CAPTION | WS_SYSMENU

CAPTION "VeraCrypt - Mount Options"

FONT 8, "MS Shell Dlg", 400, 0, 0x1

CONTROL "&Protect hidden volume against damage caused by writing to outer volume",IDC_PROTECT_HIDDEN_VOL,

"Button",BS_AUTOCHECKBOX | WS_TABSTOP,16,86,252,10

EDITTEXT IDC_PASSWORD_PROT_HIDVOL,112,104,151,14,ES_PASSWORD | ES_AUTOHSCROLL

DEFPUSHBUTTON "OK",IDOK,211,7,60,14

PUSHBUTTON "Cancel",IDCANCEL,211,24,60,14

RTEXT "P&assword to hidden volume:\n(if empty, cache is used)",IDT_HIDDEN_PROT_PASSWD,15,103,91,17,0,WS_EX_RIGHT

CONTROL "Use backup header embedded in &volume if available",IDC_USE_EMBEDDED_HEADER_BAK,

"Button",BS_AUTOCHECKBOX | WS_TABSTOP,12,39,257,11

END

IDD_KEYFILES DIALOGEX 0, 0, 345, 237

LTEXT "Please wait. This process may take a long time...",IDT_STATIC_MODELESS_WAIT_DLG_INFO,9,8,274,9

END

STYLE DS_SETFONT | DS_MODALFRAME | DS_SETFOREGROUND | DS_FIXEDSYS | DS_CENTER | WS_POPUP | WS_CAPTION

CAPTION "VeraCrypt"

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

END

BEGIN

LEFTMARGIN, 7

TOPMARGIN, 7

END

IDD_KEYFILES, DIALOG

LEFTMARGIN, 7

RIGHTMARGIN, 285

TOPMARGIN, 7

END

END

#endif // APSTUDIO_INVOKED

{

int ea; /* Encryption algorithm ID */

int mode; /* Mode of operation (e.g., XTS) */

unsigned __int8 ks[MAX_EXPANDED_KEY]; /* Primary key schedule (if it is a cascade, it conatins multiple concatenated keys) */

unsigned __int8 ks2[MAX_EXPANDED_KEY]; /* Secondary key schedule (if cascade, multiple concatenated) for XTS mode. */

UINT64_STRUCT EncryptedAreaLength;

uint32 HeaderFlags;

} CRYPTO_INFO, *PCRYPTO_INFO;

PCRYPTO_INFO crypto_open (void);

void crypto_loadkey (PKEY_INFO keyInfo, char *lpszUserKey, int nUserKeyLen);

void crypto_close (PCRYPTO_INFO cryptoInfo);

char *HashGetName (int hash_algo_id);

#ifndef TC_WINDOWS_BOOT

void HashGetName2 (char *buf, int hashId);

BOOL HashIsDeprecated (int hashId);

BOOL HashForSystemEncryption (int hashId);

{

MountThreadParam* thParam = (MountThreadParam*) lParam;

HANDLE hThread = NULL;

thParam->hwnd = hwndDlg;

int driveNo,

char *volumePath,

Password *password,

BOOL cachePassword,

BOOL sharedAccess,

const MountOptions* const mountOptions,

{

mount.ProtectedHidVolPassword = mountOptions->ProtectedHidVolPassword;

mount.bProtectHiddenVolume = TRUE;

}

else

mount.bProtectHiddenVolume = FALSE;

mount.bPreserveTimestamp = mountOptions->PreserveTimestamp;

mount.bMountManager = TRUE;

// Windows 2000 mount manager causes problems with remounted volumes

if (CurrentOSMajor == 5 && CurrentOSMinor == 0)

burn (&mount.VolumePassword, sizeof (mount.VolumePassword));

burn (&mount.ProtectedHidVolPassword, sizeof (mount.ProtectedHidVolPassword));

if (bResult == FALSE)

{

#ifndef SETUP

{

int status = ERR_PARAMETER_INCORRECT;

int volumeType;

}

// Decrypt volume header

if (status == ERR_PASSWORD_WRONG)

continue; // Try next volume type

BOOL IsDeviceMounted (char *deviceName);

int DriverUnmountVolume (HWND hwndDlg, int nDosDriveNo, BOOL forced);

void BroadcastDeviceChange (WPARAM message, int nDosDriveNo, DWORD driveMap);

BOOL UnmountVolume (HWND hwndDlg , int nDosDriveNo, BOOL forceUnmount);

BOOL IsPasswordCacheEmpty (void);

BOOL IsMountedVolume (const char *volname);

void AccommodateTextField (HWND hwndDlg, UINT ctrlId, BOOL bFirstUpdate, HFONT hFont);

BOOL GetDriveLabel (int driveNo, wchar_t *label, int labelSize);

BOOL DoDriverInstall (HWND hwndDlg);

void CloseVolume (OpenVolumeContext *context);

int ReEncryptVolumeHeader (char *buffer, BOOL bBoot, CRYPTO_INFO *cryptoInfo, Password *password, BOOL wipeMode);

BOOL IsPagingFileActive (BOOL checkNonWindowsPartitionsOnly);

mountOptions.PartitionInInactiveSysEncScope = FALSE;

mountOptions.UseBackupHeader = FALSE;

{

MessageBoxW (volParams->hwndDlg, GetString ("CANT_MOUNT_VOLUME"), lpszTitle, ICON_HAND);

MessageBoxW (volParams->hwndDlg, GetString ("FORMAT_NTFS_STOP"), lpszTitle, ICON_HAND);

<control lang="en" key="IDT_PARALLELIZATION_OPTIONS">Thread-Based Parallelization</control>

<control lang="en" key="IDT_PKCS11_LIB_PATH">PKCS #11 Library Path</control>

<control lang="en" key="IDT_PKCS5_PRF">PKCS-5 PRF:</control>

<control lang="en" key="IDT_PW_CACHE_OPTIONS">Password Cache</control>

<control lang="en" key="IDT_SECURITY_OPTIONS">Security Options</control>

<control lang="en" key="IDT_TASKBAR_ICON">VeraCrypt Background Task</control>

<control lang="en" key="IDT_SECURITY_TOKEN">Security token:</control>

<control lang="en" key="IDT_SORT_METHOD">Sort Method:</control>

<control lang="en" key="IDT_STATIC_MODELESS_WAIT_DLG_INFO">Please wait. This process may take a long time...</control>

<control lang="en" key="IDT_TEST_BLOCK_NUMBER">Block number:</control>

<control lang="en" key="IDT_TEST_CIPHERTEXT">Ciphertext (hexadecimal)</control>

<control lang="en" key="IDT_TEST_DATA_UNIT_NUMBER">Data unit number (64-bit hexadecimal, data unit size is 512 bytes)</control>

<string lang="en" key="REMOVABLE_DISK">Removable Disk</string>

<string lang="en" key="HARDDISK">Harddisk</string>

<string lang="en" key="UNCHANGED">Unchanged</string>

<string lang="en" key="SETUP_MODE_TITLE">Wizard Mode</string>

<string lang="en" key="SETUP_MODE_INFO">Select one of the modes. If you are not sure which to select, use the default mode.</string>

<string lang="en" key="SETUP_MODE_HELP_INSTALL">Select this option if you want to install VeraCrypt on this system.</string>

return TRUE;

}

{

int nDosLinkCreated = 1, nStatus = ERR_OS_ERROR;

char szDiskFile[TC_MAX_PATH], szCFDevice[TC_MAX_PATH];

/* Try to decrypt the header */

if (nStatus == ERR_CIPHER_INIT_WEAK_KEY)

nStatus = 0; // We can ignore this error here

void VerifyPasswordAndUpdate ( HWND hwndDlg , HWND hButton , HWND hPassword , HWND hVerify , unsigned char *szPassword , char *szVerify, BOOL keyFilesEnabled );

BOOL CheckPasswordLength (HWND hwndDlg, HWND hwndItem);

BOOL CheckPasswordCharEncoding (HWND hPassword, Password *ptrPw);

#endif // defined(_WIN32) && !defined(TC_WINDOWS_DRIVER)

#define IDC_KEYFILES_RANDOM_SIZE 5122

#define IDT_KEYFILES_SIZE 5123

#define IDD_STATIC_MODAL_WAIT_DLG 5124

// Next default values for new objects

//

#define _APS_NO_MFC 1

#define _APS_NEXT_RESOURCE_VALUE 542

#define _APS_NEXT_COMMAND_VALUE 40001

#define _APS_NEXT_SYMED_VALUE 101

#endif

#endif

BOOL ReadVolumeHeaderRecoveryMode = FALSE;

{

char header[TC_VOLUME_HEADER_EFFECTIVE_SIZE];

KEY_INFO keyInfo;

return ERR_OUTOFMEMORY;

}

{

keyDerivationWorkItems = TCalloc (sizeof (KeyDerivationWorkItem) * pkcs5PrfCount);

if (!keyDerivationWorkItems)

// Test all available PKCS5 PRFs

for (enqPkcs5Prf = FIRST_PRF_ID; enqPkcs5Prf <= LAST_PRF_ID || queuedWorkItems > 0; ++enqPkcs5Prf)

{

{

// Enqueue key derivation on thread pool

if (queuedWorkItems < encryptionThreadCount && enqPkcs5Prf <= LAST_PRF_ID)

VirtualUnlock (&dk, sizeof (dk));

#endif

{

TC_WAIT_EVENT (noOutstandingWorkItemEvent);

uint16 GetHeaderField16 (byte *header, int offset);

uint32 GetHeaderField32 (byte *header, int offset);

UINT64_STRUCT GetHeaderField64 (byte *header, int offset);

int ReadVolumeHeader (BOOL bBoot, char *encryptedHeader, Password *password, PCRYPTO_INFO *retInfo, CRYPTO_INFO *retHeaderCryptoInfo);

#if !defined (DEVICE_DRIVER) && !defined (TC_WINDOWS_BOOT)

int CreateVolumeHeaderInMemory (BOOL bBoot, char *encryptedHeader, int ea, int mode, Password *password, int pkcs5_prf, char *masterKeydata, PCRYPTO_INFO *retInfo, unsigned __int64 volumeSize, unsigned __int64 hiddenVolumeSize, unsigned __int64 encryptedAreaStart, unsigned __int64 encryptedAreaLength, uint16 requiredProgramVersion, uint32 headerFlags, uint32 sectorSize, BOOL bWipeMode);