VeraCrypt
aboutsummaryrefslogtreecommitdiff
path: root/src/Common/BootEncryption.cpp
AgeCommit message (Collapse)AuthorFilesLines
2021-01-02Revert "Windows: Don't check for availability of 32KB of free space for ↵Mounir IDRASSI1-1/+1
bootloader in UEFI boot mode" More work is needed to reduce the 32KB free space requirement without creating regressions.
2021-01-02Windows: Add support for ARM64 platform (e.g. Microsoft Surface Pro X). ↵Mounir IDRASSI1-2/+3
System encryption still not implemented on ARM64
2020-12-11Windows: Don't check for availability of 32KB of free space for bootloader ↵Mounir IDRASSI1-1/+1
in UEFI boot mode since in this case bootloader will be stored in EFI partition and not in the unallocated space at the beginning of the drive
2020-08-03Windows: Use correct parameters for 2nd call to SetStartExec in ↵Mounir IDRASSI1-1/+1
BootEncryption::InstallBootLoader
2020-07-22Windows: Warn about Fast Startup if it is enabled during system encryption ↵Mounir IDRASSI1-0/+10
or volume creation and propose to disable it
2020-07-02Windows: Don't allow to encrypt the system drive if it is already encrypted ↵Mounir IDRASSI1-0/+6
by BitLocker
2020-06-28Windows: remove unused code targeting Windows 2000.Mounir IDRASSI1-4/+1
2019-11-27Windows: compatibility with multi-OS boot configuration by only setting ↵Mounir IDRASSI1-2/+21
VeraCrypt as first bootloader of the system if the current first bootloader is Windows one.
2019-11-27Windows: Don't restore MBR to VeraCrypt value if it is coming from a loader ↵Mounir IDRASSI1-2/+25
different from us or different from Microsoft one.
2019-11-22Windows: Add new registry flags for SystemFavoritesService to control ↵Mounir IDRASSI1-19/+31
updating of EFI BIOS boot menu on shutdown. This will help better manage multi-boot scenarios where we should not mess up with boot order (e.g. grub2 case)
2019-10-27Windows: fix failure to create rescue and thus to encrypt the system if the ↵Mounir IDRASSI1-6/+13
Windows username contains a UNICODE non-ASCII character (cf https://github.com/veracrypt/VeraCrypt/issues/441)
2019-10-27Windows: code refactoring and convert NTSTATUS error code to WIN32 ↵Mounir IDRASSI1-38/+21
equivalent before displaying error message.
2019-10-27Windows: Make EFI System Encryption PostOOBE code more robust to failure to ↵Mounir IDRASSI1-90/+101
access "\\\\?\\GLOBALROOT" disk namespace
2019-10-27Windows: Update EFI NVRAM variable only if changed or doesn't exist and add ↵Mounir IDRASSI1-9/+19
configuration to force setting EFI BootNext to veraCrypt bootloader before each shutdown
2019-10-26Windows: Restore veraCrypt boot meny entry for system encryption more often, ↵Mounir IDRASSI1-7/+16
especially during PostOOBE calls, and handle additional corner cases.
2019-10-25Windows: Fix test of GetPrivateProfileString output since this function ↵Mounir IDRASSI1-1/+1
discards double quotation marks
2019-10-25Windows: only update MBR first 512 bytes if they have changed and don't ↵Mounir IDRASSI1-30/+45
update full MBR bootload in case of PostOOBE
2019-10-25Windows: Avoid unnecessarily update of system encryption SetupConfig related ↵Mounir IDRASSI1-4/+53
files if there content didn't change
2019-10-20Windows: Avoid unnecessary write operations when copying/modifying EFI ↵Mounir IDRASSI1-6/+124
bootloader files in order to avoid leaking modification timestamp
2019-10-20Windows: add more checks to correctly identify Microsoft original bootloader.Mounir IDRASSI1-3/+24
2019-10-20Windows: Add checks that the System Favorites service is running. Warn user ↵Mounir IDRASSI1-1/+39
if he enabled option to clear RAM encryption keys and the service is stopped.
2019-10-18Windows: handle case of DcsProp configuration file for EFI system encryption ↵Mounir IDRASSI1-30/+91
contains wrong "ActionSuccess" entry that points towards bootmgfw.efi which is now our bootloader and not Microsoft one.
2019-10-14Windows: Fix regression that causes system favorites not to mount if ↵Mounir IDRASSI1-1/+9
VeraCrypt 1.24 is freshly installed and not updated.
2019-01-26Windows: Add a build configuration containing EFI bootloader signed with ↵Mounir IDRASSI1-1/+4
custom SecureBoot key instead
2019-01-15Windows: enhancements to EFI system encryption, like handling of Multi-Boot ↵Mounir IDRASSI1-38/+71
and better compatibility with Windows Upgrade process.
2019-01-14Windows: enhance support of new behavior of favorite service which is now ↵Mounir IDRASSI1-5/+6
always running in case of system encryption
2019-01-14Windows: Implement feature that enables clearing of encryption keys when a ↵Mounir IDRASSI1-51/+23
new device is inserted. Better implementation for update of EFI bootloader without usage of drive letters (this can fix random issues encountered during Windows upgrade).
2018-10-10Windows: zero TC_IOCTL_GET_SYSTEM_DRIVE_CONFIG input/output parameter as it ↵Mounir IDRASSI1-0/+2
is done for other IOCTLs
2018-09-03Windows: handle case of inconsistencies in EFI system partition content ↵Mounir IDRASSI1-5/+32
during system encryption wizard caused by older VeraCrypt system encryption not properly uninstalled (e.g. reinstall Windows without decryption first).
2018-09-03Windows: add define to support case of using EFI bootloader signed by ↵Mounir IDRASSI1-3/+24
Microsoft (no check on custom keys in BIOS + removal of DcsBml EFI driver since it can not be signed).
2018-08-15Windows: Add various checks and replace STL code after Coverity reportMounir IDRASSI1-1/+1
2018-08-06Windows: Fix hidden OS boot after upgrade to version 1.23 by explicitly ↵Mounir IDRASSI1-3/+2
specifying the new name for the bootloader to launch after password validation.
2018-05-03Windows: Support machines without "EFI\Boot" folder for EFI system ↵Mounir IDRASSI1-70/+105
encryption (e.g. Windows LTSB). Compatibility enhancements for EFI system encryption.
2018-04-23Windows: Don't start EFI system encryption process if SecureBoot is enabled ↵Mounir IDRASSI1-5/+290
and VeraCrypt-DCS custom keys were not loaded in the machine firmware.
2018-04-23Windows: Fix system encryption issues on machines that always force booting ↵Mounir IDRASSI1-6/+128
on Microsoft bootloader (e.g. HP).
2018-04-23Windows: enhance ReflectDrivers mechanism by persisting it across major ↵Mounir IDRASSI1-3/+32
Windows upgrades.
2018-04-23Windows: code refactoringMounir IDRASSI1-15/+10
2018-04-23Windows: remove ending backslash from installation path written to ↵Mounir IDRASSI1-0/+7
SetupConfig.ini
2018-04-23Windows: implement compatibility for Windows 10 major updates using ↵Mounir IDRASSI1-0/+59
ReflectDrivers mechanism whose support started from Windows 10 version 1607.
2018-03-28Windows: use the same default value for EFI system encryption password ↵Mounir IDRASSI1-2/+2
prompt as in the one used in the bootloader.
2017-07-20Windows: better workaround for cases where ERROR_INVALID_PARAMETER is ↵Mounir IDRASSI1-34/+106
returned during system encryption which is due to 4096-bytes alignment of disk.
2017-07-03Windows: workaround for some cases where the system return ↵Mounir IDRASSI1-8/+35
ERROR_INVALID_PARAMETER when we try to write EFI bootloader files into ESP partition.
2017-06-29Windows: reduce size of 64-bit binaries by not embedding 32-bit EFI ↵Mounir IDRASSI1-2/+54
bootloader files in their resources.
2017-06-23Update IDRIX copyright yearMounir IDRASSI1-1/+1
2017-06-21Windows EFI Bootloader: Add new attributes "DcsBmlDriver" and ↵Mounir IDRASSI1-1/+8
"DcsBmlLockFlags" to EFI configuration DcsProp. Set their values to 0 to disable DcsBml functionality.
2017-06-11Windows: various fixes following Coverity analysis.Mounir IDRASSI1-2/+3
2017-06-11Windows: Remove unused method ReadEfiConfigMounir IDRASSI1-52/+1
2017-06-11Windows: fix compiler warningsMounir IDRASSI1-2/+0
2017-06-11Windows: code refactoring for handling of ESP files (DcsProp and PlatformInfo).Mounir IDRASSI1-22/+84
2017-06-09Windows: Fix false warning in case of GPT about Windows not installed on ↵Mounir IDRASSI1-1/+1
boot drive. This is caused by the fact that presence of "bootmgr" file is not mandatory in case of EFI Boot Loader.