Copyright (c) 2008-2012 TrueCrypt Developers Association and which is governed

by the TrueCrypt License 3.0.

and all other portions of this file are Copyright (c) 2013-2016 IDRIX

and are governed by the Apache License 2.0 the full text of which is

contained in the file License.txt included in VeraCrypt binary and source

return ::ChangePwd (volumePath, oldPassword, old_pkcs5, old_pim, truecryptMode, newPassword, pkcs5, pim, wipePassCount, (HWND) hWnd);

}

protected:

DWORD MessageThreadId;

LONG RefCount;

Copyright (c) 2008-2012 TrueCrypt Developers Association and which is governed

by the TrueCrypt License 3.0.

and all other portions of this file are Copyright (c) 2013-2016 IDRIX

and are governed by the Apache License 2.0 the full text of which is

contained in the file License.txt included in VeraCrypt binary and source

[

uuid(9ACF6176-5FC4-4690-A025-B3306A50EB6A),

helpstring("VeraCrypt Main UAC Support Library"),

]

library TrueCryptMainCom

{

int ChangePasswordEx (BSTR volumePath, Password *oldPassword, int old_pkcs5, Password *newPassword, int pkcs5, int wipePassCount, LONG_PTR hWnd);

int ChangePasswordEx2 (BSTR volumePath, Password *oldPassword, int old_pkcs5, BOOL truecryptMode, Password *newPassword, int pkcs5, int wipePassCount, LONG_PTR hWnd);

int ChangePasswordEx3 (BSTR volumePath, Password *oldPassword, int old_pkcs5, int old_pim, BOOL truecryptMode, Password *newPassword, int pkcs5, int pim, int wipePassCount, LONG_PTR hWnd);

};

[

BOOL ServiceMode = FALSE;

BOOL UsePreferences = TRUE;

int HiddenSysLeakProtectionNotificationStatus = TC_HIDDEN_OS_READ_ONLY_NOTIF_MODE_NONE;

int MaxVolumeIdleTime = -120;

int nCurrentShowType = 0; /* current display mode, mount, unmount etc */

int cmdUnmountDrive = -2; /* Volume drive letter to unmount (-1 = all) */

Password VolumePassword; /* Password used for mounting volumes */

Password CmdVolumePassword; /* Password passed from command line */

int VolumePkcs5 = 0;

int CmdVolumePkcs5 = 0;

int VolumePim = -1;

burn (&mountOptions, sizeof (mountOptions));

burn (&defaultMountOptions, sizeof (defaultMountOptions));

burn (szFileName, sizeof(szFileName));

/* Cleanup common code resources */

cleanup ();

SetMenuItemInfoW (GetMenu (hwndDlg), i, TRUE, &info);

}

// Disable menu item for changing system header key derivation algorithm until it's implemented

EnableMenuItem (GetMenu (hwndDlg), IDM_CHANGE_SYS_HEADER_KEY_DERIV_ALGO, MF_GRAYED);

static void PopulateSysEncContextMenu (HMENU popup, BOOL bToolsOnly)

{

try

{

BootEncStatus = BootEncObj->GetStatus();

}

catch (Exception &e)

{

}

{

wchar_t t[TC_MAX_PATH + 1024] = {L'"',0};

wchar_t *tmp;

if (!FileExists(t))

Error ("VOL_CREATION_WIZARD_NOT_FOUND", hwndDlg); // Display a user-friendly error message and advise what to do

else

{

}

}

}

case IDC_PKCS5_PRF_ID:

if (bSysEncPwdChangeDlgMode)

{

SendMessage (GetDlgItem (hwndDlg, IDC_PKCS5_PRF_ID), CB_GETCURSEL, 0, 0), 0);

{

int new_hash_algo_id = DEFAULT_HASH_ALGORITHM_BOOT;

Info ("ALGO_NOT_SUPPORTED_FOR_SYS_ENCRYPTION", hwndDlg);

for (i = FIRST_PRF_ID; i <= LAST_PRF_ID; i++)

{

{

nIndex = (int) SendMessage (hComboBox, CB_ADDSTRING, 0, (LPARAM) get_pkcs5_prf_name(i));

SendMessage (hComboBox, CB_SETITEMDATA, nIndex, (LPARAM) i);

// Initiates or resumes encryption of the system partition/drive

static void EncryptSystemDevice (HWND hwndDlg)

{

try

{

BootEncStatus = BootEncObj->GetStatus();

}

catch (Exception &e)

{

e.Show (MainDlg);

}

&& !BootEncStatus.DriveMounted

&& !SysEncryptionOrDecryptionRequired ())

{

if (!MutexExistsOnSystem (TC_MUTEX_NAME_SYSENC)) // If no instance of the wizard is currently taking care of system encryption

{

}

else

Warning ("SYSTEM_ENCRYPTION_IN_PROGRESS_ELSEWHERE", hwndDlg);

if (!MutexExistsOnSystem (TC_MUTEX_NAME_SYSENC)) // If no instance of the wizard is currently taking care of system encryption

{

}

else

Warning ("SYSTEM_ENCRYPTION_IN_PROGRESS_ELSEWHERE", hwndDlg);

// Initiates decryption of the system partition/drive

static void DecryptSystemDevice (HWND hwndDlg)

{

try

{

BootEncStatus = BootEncObj->GetStatus();

}

catch (Exception &e)

{

return;

}

}

else

Warning ("SYSTEM_ENCRYPTION_IN_PROGRESS_ELSEWHERE", hwndDlg);

// such information, but will exit (displaying only an error meessage).

Info("HIDDEN_OS_PREINFO", hwndDlg);

}

static void DecryptNonSysDevice (HWND hwndDlg, BOOL bResolveAmbiguousSelection, BOOL bUseDriveListSel)

if (AskWarnNoYes ("CONFIRM_DECRYPT_NON_SYS_DEVICE_CAUTION", hwndDlg) == IDNO)

return;

}

// Blindly attempts (without any checks) to instruct the wizard to resume whatever system encryption process

{

if (!MutexExistsOnSystem (TC_MUTEX_NAME_SYSENC)) // If no instance of the wizard is currently taking care of system encryption

{

}

else

Warning ("SYSTEM_ENCRYPTION_IN_PROGRESS_ELSEWHERE", hwndDlg);

wchar_t initialDir[MAX_PATH];

SHGetFolderPath (NULL, CSIDL_MYDOCUMENTS, NULL, 0, initialDir);

{

CloseSysEncMutex ();

return;

WaitCursor();

BootEncObj->CreateRescueIsoImage (false, szRescueDiskISO);

{

}

else

}

catch (Exception &e)

{

Warning ("SYSTEM_ENCRYPTION_IN_PROGRESS_ELSEWHERE", hwndDlg);

}

{

try

{

{

try

{

{

CloseSysEncMutex ();

return;

BootEncObj->CreateRescueIsoImage (false, L"");

{

wchar_t initialDir[MAX_PATH];

SHGetFolderPath (NULL, CSIDL_MYDOCUMENTS, NULL, 0, initialDir);

{

CloseSysEncMutex ();

return;

}

WaitCursor();

Error ("RESCUE_DISK_ISO_IMAGE_CHECK_FAILED", hwndDlg);

else

Info ("RESCUE_DISK_ISO_IMAGE_CHECK_PASSED", hwndDlg);

{

WaitCursor();

if (!BootEncObj->VerifyRescueDisk ())

else

Info ("RESCUE_DISK_NON_WIZARD_CHECK_PASSED", hwndDlg);

}

catch (Exception &e)

{

e.Show (MainDlg);

}

CloseSysEncMutex ();

// IMPORTANT: This function must not check any config files! Otherwise, if a config file was lost or corrupt,

// the user would not be able resume encryption and the data on the volume would be inaccessible.

}

BOOL SelectContainer (HWND hwndDlg)

static void Benchmark (HWND hwndDlg)

{

DialogBoxParamW (hInst, MAKEINTRESOURCEW (IDD_BENCHMARK_DLG), hwndDlg,

}

BootEncObj->SetParentWindow (hwndDlg);

BootEncStatus = BootEncObj->GetStatus();

RecentBootEncStatus = BootEncStatus;

}

catch (...)

{

// NOP

}

if (UsePreferences)

{

// General preferences

BOOL reportBadPasswd = CmdVolumePassword.Length > 0;

if (FirstCmdKeyFile)

mounted = MountVolume (hwndDlg, szDriveLetter[0] - L'A',

szFileName, &CmdVolumePassword, EffectiveVolumePkcs5, CmdVolumePim, EffectiveVolumeTrueCryptMode, bCacheInDriver, bIncludePimInCache, bForceMount,

WaitCursor ();

if (KeyFilesEnable && FirstKeyFile)

mounted = MountVolume (hwndDlg, szDriveLetter[0] - L'A', szFileName, &VolumePassword, VolumePkcs5, VolumePim, VolumeTrueCryptMode, bCacheInDriver, bIncludePimInCache, bForceMount, &mountOptions, FALSE, TRUE);

{

// The wizard was not launched during the system startup seq, or the user may have forgotten

// to resume the encryption/decryption process.

}

}

}

if (lw == IDC_CREATE_VOLUME || lw == IDM_CREATE_VOLUME || lw == IDM_VOLUME_WIZARD)

{

return 1;

}

if (lw == IDM_SYSENC_SETTINGS || lw == IDM_SYS_ENC_SETTINGS)

{

return 1;

}

wchar_t szTmp[SecurityToken::MaxPasswordLength + 1] = {0};

if (GetArgumentValue (lpszCommandLineArgs, &i, nNoCommandLineArgs, szTmp, ARRAYSIZE (szTmp)) == HAS_ARGUMENT)

{

AbortProcess ("COMMAND_LINE_ERROR");

}

else

VirtualLock (&mountOptions, sizeof (mountOptions));

VirtualLock (&defaultMountOptions, sizeof (defaultMountOptions));

VirtualLock (&szFileName, sizeof(szFileName));

DetectX86Features ();

OpenVolumeContext hiddenVolume;

Password hiddenVolPassword;

int hiddenVolPkcs5 = 0, hiddenVolPim = 0;

int EffectiveVolumePkcs5 = CmdVolumePkcs5;

int EffectiveVolumePim = CmdVolumePim;

}

catch (...)

{

}

{

byte userConfig;

string customUserMessage;

uint16 bootLoaderVersion;

if (bootLoaderVersion != VERSION_NUM)

Warning ("BOOT_LOADER_VERSION_INCORRECT_PREFERENCES", hwndDlg);

else

userConfig &= ~TC_BOOT_USER_CFG_FLAG_DISABLE_HW_ENCRYPTION;

}

SetDriverConfigurationFlag (TC_DRIVER_CONFIG_DISABLE_HARDWARE_ENCRYPTION, disableHW);

{

case WM_INITDIALOG:

{

{

Warning ("SYS_DRIVE_NOT_ENCRYPTED", hwndDlg);

EndDialog (hwndDlg, IDCANCEL);

uint32 driverConfig = ReadDriverConfigurationFlags();

byte userConfig;

string customUserMessage;

BOOL bPasswordCacheEnabled = (driverConfig & TC_DRIVER_CONFIG_CACHE_BOOT_PASSWORD)? TRUE : FALSE;

BOOL bPimCacheEnabled = (driverConfig & TC_DRIVER_CONFIG_CACHE_BOOT_PIM)? TRUE : FALSE;

if (bootLoaderVersion != VERSION_NUM)

Warning ("BOOT_LOADER_VERSION_INCORRECT_PREFERENCES", hwndDlg);

CheckDlgButton (hwndDlg, IDC_DISABLE_BOOT_LOADER_PIM_PROMPT, (userConfig & TC_BOOT_USER_CFG_FLAG_DISABLE_PIM) ? BST_CHECKED : BST_UNCHECKED);

CheckDlgButton (hwndDlg, IDC_BOOT_LOADER_CACHE_PASSWORD, bPasswordCacheEnabled ? BST_CHECKED : BST_UNCHECKED);

EnableWindow (GetDlgItem (hwndDlg, IDC_BOOT_LOADER_CACHE_PIM), bPasswordCacheEnabled);

CheckDlgButton (hwndDlg, IDC_BOOT_LOADER_CACHE_PIM, (bPasswordCacheEnabled && bPimCacheEnabled)? BST_CHECKED : BST_UNCHECKED);

}

catch (Exception &e)

{

return 1;

}

byte userConfig;

try

{

}

catch (Exception &e)

{

else

userConfig &= ~TC_BOOT_USER_CFG_FLAG_DISABLE_PIM;

userConfig |= TC_BOOT_USER_CFG_FLAG_SILENT_MODE;

else

userConfig &= ~TC_BOOT_USER_CFG_FLAG_SILENT_MODE;

userConfig |= TC_BOOT_USER_CFG_FLAG_DISABLE_ESC;

else

userConfig &= ~TC_BOOT_USER_CFG_FLAG_DISABLE_ESC;

try

{

BOOL bPasswordCacheEnabled = IsDlgButtonChecked (hwndDlg, IDC_BOOT_LOADER_CACHE_PASSWORD);

BOOL bPimCacheEnabled = IsDlgButtonChecked (hwndDlg, IDC_BOOT_LOADER_CACHE_PIM);

SetDriverConfigurationFlag (TC_DRIVER_CONFIG_CACHE_BOOT_PASSWORD, bPasswordCacheEnabled);

SetDriverConfigurationFlag (TC_DRIVER_CONFIG_CACHE_BOOT_PIM, (bPasswordCacheEnabled && bPimCacheEnabled)? TRUE : FALSE);

SetDriverConfigurationFlag (TC_DRIVER_CONFIG_DISABLE_EVIL_MAID_ATTACK_DETECTION, IsDlgButtonChecked (hwndDlg, IDC_DISABLE_EVIL_MAID_ATTACK_DETECTION));

/*

Legal Notice: Some portions of the source code contained in this file were

governed by the TrueCrypt License 3.0, also from the source code of

Encryption for the Masses 2.02a, which is Copyright (c) 1998-2000 Paul Le Roux

and all other portions of this file are Copyright (c) 2013-2016 IDRIX

and are governed by the Apache License 2.0 the full text of which is

contained in the file License.txt included in VeraCrypt binary and source

int GetCipherBlockSizeByDriveNo (int nDosDriveNo);

int GetModeOfOperationByDriveNo (int nDosDriveNo);

void ChangeMainWindowVisibility ();

BOOL WholeSysDriveEncryption (BOOL bSilent);

BOOL CheckSysEncMountWithoutPBA (HWND hwndDlg, const wchar_t *devicePath, BOOL quiet);

BOOL TCBootLoaderOnInactiveSysEncDrive (wchar_t *szDevicePath);

LTEXT "",IDT_PKCS11_LIB_HELP,16,63,286,65

END

STYLE DS_SETFONT | DS_MODALFRAME | DS_FIXEDSYS | DS_CENTER | WS_POPUP | WS_CAPTION | WS_SYSMENU

CAPTION "VeraCrypt - System Encryption Settings"

FONT 8, "MS Shell Dlg", 400, 0, 0x1

BEGIN

CONTROL "&Cache pre-boot authentication password in driver memory (for mounting of non-system volumes)",IDC_BOOT_LOADER_CACHE_PASSWORD,

CONTROL "Include PIM when caching pre-boot authentication password",IDC_BOOT_LOADER_CACHE_PIM,

CONTROL "Do not request PIM in the pre-boot authentication screen (PIM value is stored unencrypted on disk)",IDC_DISABLE_BOOT_LOADER_PIM_PROMPT,

"Button",BS_AUTOCHECKBOX | WS_TABSTOP,18,20,339,9

END

IDD_PERFORMANCE_SETTINGS DIALOGEX 0, 0, 370, 248

CONTROL "TrueCrypt Mode",IDC_TRUECRYPT_MODE,"Button",BS_AUTOCHECKBOX | WS_TABSTOP,7,7,76,10

END

/////////////////////////////////////////////////////////////////////////////

//

//

#ifdef APSTUDIO_INVOKED

BEGIN

IDD_PREFERENCES_DLG, DIALOG

BEGIN

BOTTOMMARGIN, 192

END

BEGIN

LEFTMARGIN, 7

RIGHTMARGIN, 363

TOPMARGIN, 7

END

IDD_PERFORMANCE_SETTINGS, DIALOG

TOPMARGIN, 7

BOTTOMMARGIN, 58

END

END

#endif // APSTUDIO_INVOKED

// TEXTINCLUDE

//

BEGIN

"resource.h\0"

END

BEGIN

"#include ""afxres.h""\r\n"

"#include ""..\\\\common\\\\resource.h""\r\n"

"\0"

END

BEGIN

"#include ""..\\\\common\\\\common.rc""\r\n"

"\0"

// Menu

//

BEGIN

POPUP "&Volumes"

BEGIN

MENUITEM SEPARATOR

MENUITEM "Create Rescue Disk...", IDM_CREATE_RESCUE_DISK

MENUITEM "Verify Rescue Disk", IDM_VERIFY_RESCUE_DISK

MENUITEM SEPARATOR

MENUITEM "Mount Without Pre-Boot &Authentication...", IDM_MOUNT_SYSENC_PART_WITHOUT_PBA

MENUITEM SEPARATOR

// String Table

//

BEGIN

IDS_UACSTRING "VeraCrypt"

END

#define IDD_SYSENC_SETTINGS 116

#define IDD_FAVORITE_VOLUMES 117

#define IDD_DEFAULT_MOUNT_PARAMETERS 118

#define IDC_PREF_MOUNT_READONLY 1000

#define IDC_PREF_MOUNT_REMOVABLE 1001

#define IDC_VERIFY 1002

#define IDT_VOLUME_ID 1157

#define IDC_FAVORITE_VOLUME_ID 1158

#define IDC_FAVORITE_USE_VOLUME_ID 1159

#define IDC_HIDE_WAITING_DIALOG 1161

#define IDM_HELP 40001

#define IDM_ABOUT 40002

#define IDM_UNMOUNT_VOLUME 40003

#define IDM_VERIFY_RESCUE_DISK_ISO 40068

// Next default values for new objects

#ifdef APSTUDIO_INVOKED

#ifndef APSTUDIO_READONLY_SYMBOLS

#define _APS_NO_MFC 1

#define _APS_NEXT_COMMAND_VALUE 40069

#define _APS_NEXT_SYMED_VALUE 101

#endif

#endif