Software Update: VeraCrypt 1.19

Version 1.19 of VeraCrypt has been released. VeraCrypt is a fork of TrueCrypt, which was discontinued a while ago. This open source encryption program can encrypt entire hard drives or partitions and virtual volumes, such as a file accessed as a partition. VeraCrypt uses the original source code of TrueCrypt, but includes several security improvements. Volumes created with TrueCrypt can be opened and converted from this version. The Frenchman Mounir Idrassi has been working on this project since the summer of 2013. This release fixes issues that occur in the Quarkslab audit have emerged.

All OSs:

• Fix issues raised by Quarkslab audit.
  • Remove GOST89 encryption algorithm.
  • Make PBKDF2 and HMAC code clearer and easier to analyze.
  • Add test vectors for Kuznyechik.
  • Update documentation to warn about risks of using command line switch ”tokenpin”.
• Use SSE2 optimized Serpent algorithm implementation from Botan project (2.5 times faster on 64-bit platforms).

Windows:

• Fix keyboard issues in EFI Boot Loader.
• Fix crash on 32-bit machines when creating a volume that uses Streebog as PRF.
• Fix false positive detection of Evil-Maid attacks in some cases (eg hidden OS creation)
• Fix failure to access EFS data on VeraCrypt volumes under Windows 10.
• Fix wrong password error in the process of copying hidden OS.
• Fix issues raised by Quarkslab audit:
  • Fix leak of password length in MBR bootloader inherited from TrueCrypt.
  • EFI bootloader: Fix various leaks and erase keyboard buffer after password is typed.
  • Use libzip library for handling zip Rescue Disk file instead of vulnerable XUnzip library.
• Support EFI system encryption for 32-bit Windows.
• Perform shutdown instead of reboot during Pre-Test of EFI system encryption to detect incompatible motherboards.
• Minor GUI and translation fixes.

macOS:

• Remove dependency to MacFUSE compatibility layer in OSXFuse.