Onlangs is versie 1.22 van VeraCrypt uitgekomen. De update bevat onder andere snelheidsverbeteringen. VeraCrypt is een fork van TrueCrypt, dat er jaren geleden mee is opgehouden. Met dit opensource-encryptieprogramma kunnen complete harde schijven of partities en virtuele volumes, zoals een bestand dat als partitie wordt benaderd, worden versleuteld. VeraCrypt gebruikt de originele broncode van TrueCrypt, maar bevat diverse verbeteringen met betrekking tot de beveiliging.
Veracrypt 1.22
All OSs:
- SIMD speed optimization for Kuznyechik cipher implementation (up to 2x speedup).
- Add 5 new cascades of cipher algorithms: Camellia-Kuznyechik, Camellia-Serpent, Kuznyechik-AES, Kuznyechik-Serpent-Camellia and Kuznyechik-Twofish.
Windows:
- MBR Bootloader: Fix failure to boot hidden OS on some machines.
- MBR Bootloader: Reduce CPU usage during password prompt.
- Security enhancement: Add option to block TRIM command for system encryption on SSD drives.
- Implement TRIM support for non-system SSD drives and add option to enable it (TRIM is disabled by default for non-system volumes).
- Better fix for "Parameter Incorrect" issues during EFI system encryption in some machines.
- Driver: remove unnecessary dependency to wcsstr which can cause issues on some machines.
- Driver: Fix "Incorrect Parameter" error when mounting volumes on some machines.
- Fix failure to mount system favorites during boot on some machines.
- Fix current application losing focus when VeraCrypt is run in command line with /quit /silent switches.
- Fix some cases of external applications freezing during mount/dismount.
- Fix rare cases of secure desktop for password dialog not visible which caused UI to block.
- Update libzip to version 1.5.0 that include fixes for some security issues.
- Extend Secure Desktop feature to smart card PIN entry dialog.
- Fix truncated license text in installer wizard.
- Add portable package that allows extracting binaries without asking for admin privileges.
- Simplify format of language XML files.
- Workaround for cases where password dialog doesn't get keyboard focus if Secure Desktop is not enabled.
Linux:
- Fix failure to install GUI version under recent versions of KDE.
- Fix wxWidgets assertion failed when backing up/restoring volume header.
MacOSX:
- Fix issue preventing some local help files from opening in the browser.
VeraCrypt 1.21
All OSs:
- Fix 1.20 regression crash when running on CPU not supporting extended features.
Windows:
- Fix 1.20 regression that caused PIM value stored in favorites to be ignored during mount.
- Fix 1.20 regression that causes system favorites not to mount in some cases.
- Fix some cases of "Parameter Incorrect" error during EFI system encryption wizard.
- Install PDF documents related to EFI system encryption configuration for advanced users:
- disk_encryption_v1_2.pdf related to EFI hidden OS and full fisk encryption
- dcs_tpm_owner_02.pdf related to TPM configuration for EFI system encryption.
FreeBSD:
- Add support for building on FreeBSD.
VeraCrypt 1.20
All OSs:
- Use 64-bit optimized assembly implementation of Twofish and Camellia by Jussi Kivilinna.
- Camellia 2.5 faster when AES-NI supported by CPU. 30% faster without it.
- Use optimized implementation for SHA-512/SHA256.
- 33% speedup on 64-bit systems.
- Deploy local HTML documentation instead of User Guide PDF.
- Change links in UI from ones on Codeplex to ones hosted at veracrypt.fr
- Security: build binaries with support for Address Space Layout Randomization (ASLR).
Windows:
- Several fixes and modifications for EFI System Encryption:
- Fix bug in EFI system decryption using EFI Rescue Disk
- Add support for TPM 1.2 and TPM 2.0 (experimental) through DCS low level configuration.
- Add Support for EFI full disk encryption and hidden OS using manual procedure (not exposed in UI).
- Enable using Secure Desktop for password entry. Add preferences option and command line switch (/secureDesktop) to activate it.
- Use default mount parameters when mounting multiple favorites with password caching.
- Enable specifying PRF and TrueCryptMode for favorites.
- Preliminary driver changes to support EFI hidden OS functionality.
- Fix Streebog not recognized by /hash command line.
- Add support for ReFS filesystem on Windows 10 when creating normal volumes
- Fix high CPU usage when favorite configured to mount with VolumeID on arrival.
- Use CHM file for User Guide instead of PDF.
- Fix false warning in case of EFI system encryption about Windows not installed on boot drive.
- Enhancements to driver handling of various disk IOCTL.
- Enhancements to EFI bootloader. Add possibility to manually edit EFI configuration file.
- Driver Security: Use enhanced protection of NX pool under Windows 8 and later.
- Reduce performance impact of internal check for disconnected network drives.
- Minor fixes.
MacOSX:
- OSX 10.7 or newer is required to run VeraCrypt.
- Make VeraCrypt default handler of .hc & .tc files.
- Add custom VeraCrypt icon to .hc and .tc files in Finder.
- Check TrueCryptMode in password dialog when opening container file with .tc extension.
Linux:
- Check TrueCryptMode in password dialog when opening container file with .tc extension.
- Fix executable stack in resulting binary which was caused by crypto assembly files missing the GNU-stack note.
:strip_exif()/i/2000958181.png?f=thumbmedium)
:strip_exif()/u/1658/elmuerte-avatar60.gif?f=community){kind=avatar}
:strip_icc():strip_exif()/u/8379/crop568422c027ddc_cropped.jpeg?f=community){kind=small}
:strip_icc():strip_exif()/u/474290/crop5612d647692a7.jpeg?f=community){kind=small}
:strip_exif()/u/59205/crop604b5f62ad6ec_cropped.gif?f=community){kind=small}
:strip_icc():strip_exif()/u/118562/crop635c3e935d159_cropped.jpg?f=community){kind=small}
:strip_exif()/u/57096/crop64cbdcb3776f4_cropped.gif?f=community){kind=small}
Het is nou eenmaal zou dat je een combinatie van tools moet gebruiken die elkaar ondersteunen, al dan niet indirect, om de wat zwaardere manieren van privacy gedaan te krijgen.
:strip_icc():strip_exif()/u/192670/download.jpg?f=community){kind=small}