Copyright (c) 2008-2012 TrueCrypt Developers Association and which is governed

by the TrueCrypt License 3.0.

and all other portions of this file are Copyright (c) 2013-2016 IDRIX

and are governed by the Apache License 2.0 the full text of which is

contained in the file License.txt included in VeraCrypt binary and source

BOOL BootArgsValid = FALSE;

BootArguments BootArgs;

static BOOL BootDriveSignatureValid = FALSE;

static KMUTEX MountMutex;

PKTHREAD DecoySystemWipeThread = NULL;

static NTSTATUS DecoySystemWipeResult;

NTSTATUS LoadBootArguments ()

{

NTSTATUS status = STATUS_UNSUCCESSFUL;

PHYSICAL_ADDRESS bootArgsAddr;

byte *mappedBootArgs;

KeInitializeMutex (&MountMutex, 0);

{

Dump ("Checking BootArguments at 0x%x\n", bootArgsAddr.LowPart);

mappedBootArgs = MmMapIoSpace (bootArgsAddr, sizeof (BootArguments), MmCached);

// Sanity check: for valid boot argument, the password is less than 64 bytes long

if (bootArguments->BootPassword.Length <= MAX_PASSWORD)

{

BootArgs = *bootArguments;

BootArgsValid = TRUE;

Extension = (DriveFilterExtension *) filterDeviceObject->DeviceExtension;

memset (Extension, 0, sizeof (DriveFilterExtension));

if (!NT_SUCCESS (status))

{

goto err;

Extension->IsDriveFilterDevice = Extension->Queue.IsFilterDevice = TRUE;

Extension->DeviceObject = Extension->Queue.DeviceObject = filterDeviceObject;

Extension->Pdo = pdo;

Extension->Queue.LowerDeviceObject = Extension->LowerDeviceObject;

IoInitializeRemoveLock (&Extension->Queue.RemoveLock, 'LRCV', 0, 0);

{

Dump ("Dismounting drive\n");

ASSERT (Extension->DriveMounted);

if (stopIoQueue && EncryptedIoQueueIsRunning (&Extension->Queue))

EncryptedIoQueueStop (&Extension->Queue);

// TC_BOOT_SECTOR_USER_CONFIG_OFFSET = 438

//

// we have: TC_BOOT_SECTOR_USER_MESSAGE_OFFSET = TC_BOOT_SECTOR_OUTER_VOLUME_BAK_HEADER_CRC_OFFSET + TC_BOOT_SECTOR_OUTER_VOLUME_BAK_HEADER_CRC_SIZE

WHIRLPOOL_init (&whirlpool);

sha512_begin (&sha2);

// read the first 512 bytes

char *header;

int pkcs5_prf = 0, pim = 0;

byte *mappedCryptoInfo = NULL;

Dump ("MountDrive pdo=%p\n", Extension->Pdo);

ASSERT (KeGetCurrentIrql() == PASSIVE_LEVEL);

goto ret;

}

{

#ifdef DEBUG

Dump ("Wiping memory %x %d\n", cryptoInfoAddress.LowPart, BootArgs.CryptoInfoLength);

#endif

/* Get the parameters used for booting to speed up driver startup and avoid testing irrelevant PRFs */

BOOT_CRYPTO_HEADER* pBootCryptoInfo = (BOOT_CRYPTO_HEADER*) mappedCryptoInfo;

Hash* pHash = HashGet(pBootCryptoInfo->pkcs5);

pkcs5_prf = pBootCryptoInfo->pkcs5;

}

}

// calculate Fingerprint

ComputeBootLoaderFingerprint (Extension->LowerDeviceObject, header);

if (Extension->Queue.CryptoInfo->hiddenVolume)

{

int64 hiddenPartitionOffset = BootArgs.HiddenSystemPartitionStart;

Dump ("Hidden volume start offset = %I64d\n", Extension->Queue.CryptoInfo->EncryptedAreaStart.Value + hiddenPartitionOffset);

Extension->HiddenSystem = TRUE;

Extension->Queue.RemapEncryptedArea = TRUE;

Extension->Queue.RemappedAreaOffset = hiddenPartitionOffset + Extension->Queue.CryptoInfo->EncryptedAreaStart.Value - BootArgs.DecoySystemPartitionStart;

Extension->Queue.RemappedAreaDataUnitOffset = Extension->Queue.CryptoInfo->EncryptedAreaStart.Value / ENCRYPTION_DATA_UNIT_SIZE - BootArgs.DecoySystemPartitionStart / ENCRYPTION_DATA_UNIT_SIZE;

Extension->Queue.CryptoInfo->EncryptedAreaStart.Value = BootArgs.DecoySystemPartitionStart;

if (Extension->Queue.CryptoInfo->VolumeSize.Value > hiddenPartitionOffset - BootArgs.DecoySystemPartitionStart)

TC_THROW_FATAL_EXCEPTION;

}

status = SendDeviceIoControlRequest (Extension->LowerDeviceObject, IOCTL_DISK_GET_LENGTH_INFO, NULL, 0, &BootDriveLength, sizeof (BootDriveLength));

if (!NT_SUCCESS (status))

{

Dump ("Failed to get drive length - error %x\n", status);

}

else

Extension->Queue.MaxReadAheadOffset = BootDriveLength;

status = EncryptedIoQueueStart (&Extension->Queue);

if (!NT_SUCCESS (status))

TC_BUG_CHECK (status);

Dump ("Saving: ConfiguredEncryptedAreaStart=%I64d (%I64d) ConfiguredEncryptedAreaEnd=%I64d (%I64d)\n", Extension->ConfiguredEncryptedAreaStart / 1024 / 1024, Extension->ConfiguredEncryptedAreaStart, Extension->ConfiguredEncryptedAreaEnd / 1024 / 1024, Extension->ConfiguredEncryptedAreaEnd);

Dump ("Saving: EncryptedAreaStart=%I64d (%I64d) EncryptedAreaEnd=%I64d (%I64d)\n", Extension->Queue.EncryptedAreaStart / 1024 / 1024, Extension->Queue.EncryptedAreaStart, Extension->Queue.EncryptedAreaEnd / 1024 / 1024, Extension->Queue.EncryptedAreaEnd);

if (Extension->Queue.EncryptedAreaStart == -1 || Extension->Queue.EncryptedAreaEnd == -1

|| Extension->Queue.EncryptedAreaEnd <= Extension->Queue.EncryptedAreaStart)

{

}

KeInitializeEvent (&Extension->MountWorkItemCompletedEvent, SynchronizationEvent, FALSE);

KeWaitForSingleObject (&Extension->MountWorkItemCompletedEvent, Executive, KernelMode, FALSE, NULL);

IoFreeWorkItem (workItem);

if (Extension->BootDrive)

{

status = EncryptedIoQueueAddIrp (&Extension->Queue, Irp);

if (status != STATUS_PENDING)

TCCompleteDiskIrp (Irp, status, 0);

{

Dump ("Header reopened\n");

ComputeBootLoaderFingerprint (BootDriveFilterExtension->LowerDeviceObject, header);

BootDriveFilterExtension->Queue.CryptoInfo->header_creation_time = BootDriveFilterExtension->HeaderCryptoInfo->header_creation_time;

BootDriveFilterExtension->Queue.CryptoInfo->pkcs5 = BootDriveFilterExtension->HeaderCryptoInfo->pkcs5;

BootDriveFilterExtension->Queue.CryptoInfo->noIterations = BootDriveFilterExtension->HeaderCryptoInfo->noIterations;

if (writeB)

return (*OriginalHiberDriverWriteFunctionsB[filterNumber]) (writeOffset, encryptedDataMdl);

return (*OriginalHiberDriverWriteFunctionsA[filterNumber]) (arg0WriteA, writeOffset, encryptedDataMdl, arg3WriteA);

}

byte *wipeBuffer = NULL;

byte wipeRandChars[TC_WIPE_RAND_CHAR_COUNT];

byte wipeRandCharsUpdate[TC_WIPE_RAND_CHAR_COUNT];

KIRQL irql;

NTSTATUS status;

// wipeRandCharsUpdate instead of relying on uninitialized stack memory

LARGE_INTEGER iSeed;

KeQuerySystemTime( &iSeed );

burn (digest, SHA512_DIGESTSIZE);

burn (&tctx, sizeof (tctx));

}

burn (&iSeed, sizeof(iSeed));

SetupResult = STATUS_UNSUCCESSFUL;

}

EncryptedIoQueueResumeFromHold (&Extension->Queue);

Dump ("EncryptedAreaStart=%I64d\n", Extension->Queue.EncryptedAreaStart);

Dump ("EncryptedAreaEnd=%I64d\n", Extension->Queue.EncryptedAreaEnd);

Dump ("ConfiguredEncryptedAreaStart=%I64d\n", Extension->ConfiguredEncryptedAreaStart);

}

EncryptDataUnits (wipeBuffer, &dataUnit, setupBlockSize / ENCRYPTION_DATA_UNIT_SIZE, Extension->Queue.CryptoInfo);

}

status = TCWriteDevice (BootDriveFilterExtension->LowerDeviceObject, wipeBuffer, offset, setupBlockSize);

}

}

}

}

else

SetupInProgress = TRUE;

status = TCStartThread (SetupThreadProc, DeviceObject, &EncryptionSetupThread);

if (!NT_SUCCESS (status))

SetupInProgress = FALSE;

bootEncStatus->HiddenSysLeakProtectionCount = HiddenSysLeakProtectionCount;

bootEncStatus->HiddenSystem = Extension->HiddenSystem;

if (Extension->HiddenSystem)

bootEncStatus->HiddenSystemPartitionStart = BootArgs.HiddenSystemPartitionStart;

}

irp->IoStatus.Information = 0;

if (BootArgsValid && BootDriveFound && BootDriveFilterExtension && BootDriveFilterExtension->DriveMounted && BootDriveFilterExtension->HeaderCryptoInfo)

{

/* compute the fingerprint again and check if it is the same as the one retrieved during boot */

char *header = TCalloc (TC_BOOT_ENCRYPTION_VOLUME_HEADER_SIZE);

}

else

{

}

}

}

DecoySystemWipeResult = STATUS_INSUFFICIENT_RESOURCES;

goto ret;

}

wipeRandBuffer = TCalloc (TC_ENCRYPTION_SETUP_IO_BLOCK_SIZE);

if (!wipeRandBuffer)

{

}

memcpy (wipeCryptoInfo->k2, WipeDecoyRequest.WipeKey + EAGetKeySize (ea), EAGetKeySize (ea));

if (!EAInitMode (wipeCryptoInfo))

{

DecoySystemWipeResult = STATUS_INVALID_PARAMETER;

burn (WipeDecoyRequest.WipeKey, sizeof (WipeDecoyRequest.WipeKey));

offset.QuadPart = Extension->ConfiguredEncryptedAreaStart;

Dump ("Wiping decoy system: start offset = %I64d\n", offset.QuadPart);

while (!DecoySystemWipeThreadAbortRequested)

DecoySystemWipeInProgress = TRUE;

status = TCStartThread (DecoySystemWipeThreadProc, DeviceObject, &DecoySystemWipeThread);

if (!NT_SUCCESS (status))

DecoySystemWipeInProgress = FALSE;

}

else

wipeStatus->WipedAreaEnd = DecoySystemWipedAreaEnd;

irp->IoStatus.Information = sizeof (DecoySystemWipeStatus);

irp->IoStatus.Status = STATUS_SUCCESS;

}