Software Update: VeraCrypt 1.25

Version 1.25 of VeraCrypt has been released. VeraCrypt, a fork of TrueCrypt, is an open source encryption program that can encrypt entire hard drives or partitions and virtual volumes. VeraCrypt uses the original source code of TrueCrypt, but includes several security improvements. Volumes created with TrueCrypt can simply be opened and converted. Support for Windows 11 has been added in this release, but at least Windows 10 is required. Support for Apple’s M1 and OpenBSD has also been added. The complete changelog can be found below:

All OSes:

• Speed ​​optimization of Streebog.
• Update translations.

Windows:

• Add support for Windows on ARM64 (eg Microsoft Surface Pro X) but system encryption not yet supported.
• Add MSI installer for silent mode deployment (ACCEPTLICENSE=YES must be set in msiexec command line).
  • For now, MSI installer cannot be used if system partition is encrypted with VeraCrypt
  • MSI installer requires Windows 10 or newer
• Drop support of Windows Vista, Windows 7, Windows 8 and Windows 8.1 because of new requirement for driver code signing.
• Reduce time of mount when PRF auto-detection is selected.
• Fix potential memory corruption in driver caused by integer overflow in IOCTL_STORAGE_MANAGE_DATA_SET_ATTRIBUTES (reported by Ilja van Sprundel).
• Replace insecure wcscpy/wcscat/strcpy runtime functions with secure equivalents.
• Changes to EFI boot loader:
  • Fix memory leak in some cases caused by wrong check of pointer for calling MEM_FREE
  • Clear bootParams variable that may contain sensitive information when halting the system in case of fatal error
  • Add option “KeyboardInputDelay” in DcsProp to control the minimum delay supported between two key strokes
• Try to workaround Windows Feature Updates issues with system encryption by fixing of bootloader and SetupConfig.ini when system resumes or when session is opened/unlocked
• Fix failure to load local HTML documentation if application running with administrative privileges
• Fix freeze when password dialog displayed in secure desktop and try to access token keyfiles protected by PIN
• Fix failure to launch keyfile generator in secure desktop mode
• Block Windows from resizing system partition if it is encrypted
• Add keyboard shortcut to “TrueCrypt mode” in the mount dialog.

macOS:

• Native support or Apple Silicon M1.
• Drop official support of Mac OS X 10.7 Lion and Mac OS X 10.8 Mountain Lion.
• Add UI language support using installed XML files. Language is automatically detected using “LANG” environment variable
• Add CLI switch (–size=max) and UI option to give a file container all available free space on the disk where it is created.
• Return error if unknown filesystem value specified in CLI –filesystem switch instead of silently skipping filesystem creation.

Linux:

• Add UI language support using installed XML files. Language is automatically detected using “LANG” environment variable
• Compatibility with with pam_tmpdir.
• Display icon in notification area on Ubuntu 18.04 and newer (contibuted by
• Add CLI switch (–size=max) and UI option to give a file container all available free space on the disk where it is created.
• Return error if unknown filesystem value specified in CLI –filesystem switch instead of silently skipping filesystem creation.

FreeBSD:

• Make system devices work under FreeBSD
• Add CLI switch (–size=max) and UI option to give a file container all available free space on the disk where it is created.
• Return error if unknown filesystem value specified in CLI –filesystem switch instead of silently skipping filesystem creation.

OpenBSD:

• Add basic support or OpenBSD
• Add CLI switch (–size=max) and UI option to give a file container all available free space on the disk where it is created.
• Return error if unknown filesystem value specified in CLI –filesystem switch instead of silently skipping filesystem creation.