wchar_t szHelpFile[TC_MAX_PATH];

wchar_t szHelpFile2[TC_MAX_PATH];

wchar_t SecurityTokenLibraryPath[TC_MAX_PATH];

HFONT hFixedDigitFont = NULL;

HFONT hBoldFont = NULL;

void cleanup ()

{

/* Cleanup the GDI fonts */

if (hFixedFont != NULL)

DeleteObject (hFixedFont);

InitOSVersionInfo();

InitializeCriticalSection (&csWNetCalls);

LoadSystemDll (L"ntmarta.dll", &hntmartadll, TRUE, SRC_POS);

PinRequestHandler(HWND hwnd) : m_hwnd(hwnd) {}

virtual void operator() (string &str)

{

if (hCursor != NULL)

SetCursor (hCursor);

}

};

struct WarningHandler : public SendExceptionFunctor

extern wchar_t szHelpFile[TC_MAX_PATH];

extern wchar_t szHelpFile2[TC_MAX_PATH];

extern wchar_t SecurityTokenLibraryPath[TC_MAX_PATH];

extern HFONT hFixedDigitFont;

extern HFONT hBoldFont;

extern HFONT hTitleFont;

BOOL KeyFilesApply (HWND hwndDlg, Password *password, KeyFile *firstKeyFile, const wchar_t* volumeFileName)

{

BOOL status = TRUE;

KeyFile kfSubStruct;

KeyFile *kf;

// Apply security token keyfile

vector <byte> keyfileData;

SecurityTokenKeyfilePath secPath (kf->FileName);

if (keyfileData.empty())

{

KeyFile *KeyFileClone (KeyFile *keyFile);

void KeyFileCloneAll (KeyFile *firstKeyFile, KeyFile **outputKeyFile);

BOOL KeyFilesApply (HWND hwndDlg, Password *password, KeyFile *firstKeyFilem, const wchar_t* volumeFileName);

BOOL CALLBACK KeyFilesDlgProc (HWND hwndDlg, UINT msg, WPARAM wParam, LPARAM lParam);

BOOL KeyfilesPopupMenu (HWND hwndDlg, POINT popupPosition, KeyFilesDlgParam *dialogParam);

namespace VeraCrypt

{

{

wstring pathStr = path;

unsigned long slotId;

Id = pathStr.substr (keyIdPos + wstring (L"/" TC_SECURITY_TOKEN_KEYFILE_URL_FILE L"/").size());

if (keyfiles.empty())

throw SecurityTokenKeyfileNotFound();

throw Pkcs11Exception (status);

}

{

bool unrecognizedTokenPresent = false;

vector <SecurityTokenKeyfile> keyfiles;

try

{

token = GetTokenInfo (slotId);

}

catch (UserAbort &)

void SecurityToken::GetKeyfileData (const SecurityTokenKeyfile &keyfile, vector <byte> &keyfileData)

{

GetObjectAttribute (keyfile.SlotId, keyfile.Handle, CKA_VALUE, keyfileData);

}

Sessions[slotId].UserLoggedIn = true;

}

{

CheckLibraryStatus();

CK_RV status;

if (status != CKR_OK)

throw Pkcs11Exception (status);

}

else

{

string pin = tokenInfo.LabelUtf8;

}

else if (error == CKR_PIN_INCORRECT && !(tokenInfo.Flags & CKF_PROTECTED_AUTHENTICATION_PATH))

{

PinCallback->notifyIncorrectPin ();

(*WarningCallback) (Pkcs11Exception (CKR_PIN_INCORRECT));

continue;

struct SecurityTokenKeyfile

{

SecurityTokenKeyfile () : Handle(CK_INVALID_HANDLE), SlotId(CK_UNAVAILABLE_INFORMATION) { Token.SlotId = CK_UNAVAILABLE_INFORMATION; Token.Flags = 0; }

operator SecurityTokenKeyfilePath () const;

static void CloseLibrary ();

static void CreateKeyfile (CK_SLOT_ID slotId, vector <byte> &keyfileData, const string &name);

static void DeleteKeyfile (const SecurityTokenKeyfile &keyfile);

static void GetKeyfileData (const SecurityTokenKeyfile &keyfile, vector <byte> &keyfileData);

static list <SecurityTokenInfo> GetAvailableTokens ();

static SecurityTokenInfo GetTokenInfo (CK_SLOT_ID slotId);

#ifdef TC_WINDOWS

static void GetObjectAttribute (CK_SLOT_ID slotId, CK_OBJECT_HANDLE tokenObject, CK_ATTRIBUTE_TYPE attributeType, vector <byte> &attributeValue);

static list <CK_SLOT_ID> GetTokenSlots ();

static void Login (CK_SLOT_ID slotId, const char* pin);

static void OpenSession (CK_SLOT_ID slotId);

static void CheckLibraryStatus ();

#include "Volumes.h"

#include "Wipe.h"

#include "Xml.h"

#include <Strsafe.h>

OptionNoIsoCheck,

OptionQuit,

OptionTokenLib,

CommandResumeSysEncLogOn,

CommandResumeSysEnc,

CommandDecryptSysEnc,

{ OptionHistory, L"/history", L"/h", FALSE },

{ OptionNoIsoCheck, L"/noisocheck", L"/n", FALSE },

{ OptionTokenLib, L"/tokenlib", NULL, FALSE },

{ OptionQuit, L"/quit", L"/q", FALSE },

{ OptionEncryption, L"/encryption", NULL , FALSE },

{ OptionFilesystem, L"/filesystem", NULL , FALSE },

break;

case OptionQuit:

{

// Used to indicate non-install elevation

int cmdUnmountDrive = -2; /* Volume drive letter to unmount (-1 = all) */

Password VolumePassword; /* Password used for mounting volumes */

Password CmdVolumePassword; /* Password passed from command line */

int VolumePkcs5 = 0;

int CmdVolumePkcs5 = 0;

int VolumePim = -1;

burn (&mountOptions, sizeof (mountOptions));

burn (&defaultMountOptions, sizeof (defaultMountOptions));

burn (szFileName, sizeof(szFileName));

/* Cleanup common code resources */

cleanup ();

BOOL reportBadPasswd = CmdVolumePassword.Length > 0;

if (FirstCmdKeyFile)

mounted = MountVolume (hwndDlg, szDriveLetter[0] - L'A',

szFileName, &CmdVolumePassword, EffectiveVolumePkcs5, CmdVolumePim, EffectiveVolumeTrueCryptMode, bCacheInDriver, bIncludePimInCache, bForceMount,

WaitCursor ();

if (KeyFilesEnable && FirstKeyFile)

mounted = MountVolume (hwndDlg, szDriveLetter[0] - L'A', szFileName, &VolumePassword, VolumePkcs5, VolumePim, VolumeTrueCryptMode, bCacheInDriver, bIncludePimInCache, bForceMount, &mountOptions, FALSE, TRUE);

wchar_t szTmp[SecurityToken::MaxPasswordLength + 1] = {0};

if (GetArgumentValue (lpszCommandLineArgs, &i, nNoCommandLineArgs, szTmp, ARRAYSIZE (szTmp)) == HAS_ARGUMENT)

{

AbortProcess ("COMMAND_LINE_ERROR");

}

else

VirtualLock (&mountOptions, sizeof (mountOptions));

VirtualLock (&defaultMountOptions, sizeof (defaultMountOptions));

VirtualLock (&szFileName, sizeof(szFileName));

DetectX86Features ();