VeraCrypt 1.19

VeraCrypt is a great application to establish and maintain an on-the-fly-encrypted volume. On-the-fly encryption means that data is automatically encrypted right before it is saved and decrypted right after it is loaded, without any user intervention. This is a very secure method of data encryption as any data that is stored on an encrypted volume cannot be read (decrypted) without using the correct password/keyfile(s) or correct encryption keys. The entire file system is encrypted (e.g. file names, folder names, contents of every file, free space, meta data, etc) to give you as much security as possible.

Key features include:

• Easy to use interface.
• Lightweight.
• Enhanced security.

VeraCrypt is a free disk encryption software based on TrueCrypt 7.1a. It adds enhanced security to the algorithms used for system and partitions encryption making it immune to new developments in brute-force attacks. VeraCrypt has been specifically designed to give you better security with the data you want to encrypt. It is relatively lightweight, and has an easy to use interface.

# All OSes:
- Fix issues raised by Quarkslab audit.
> Remove GOST89 encryption algorithm.
> Make PBKDF2 and HMAC code clearer and easier to analyze.
> Add test vectors for Kuznyechik.
> Update documentation to warn about risks of using command line switch ”tokenpin”.
- Use SSE2 optimized Serpent algorithm implementation from Botan project (2.5 times faster on 64-bit platforms).
# Windows:
- Fix keyboard issues in EFI Boot Loader.
- Fix crash on 32-bit machines when creating a volume that uses Streebog as PRF.
- Fix false positive detection of Evil-Maid attacks in some cases (e.g. hidden OS creation)
- Fix failure to access EFS data on VeraCrypt volumes under Windows 10.
- Fix wrong password error in the process of copying hidden OS.
- Fix issues raised by Quarkslab audit:
> Fix leak of password length in MBR bootloader inherited from TrueCrypt.
> EFI bootloader: Fix various leaks and erase keyboard buffer after password is typed.
> Use libzip library for handling zip Rescue Disk file instead of vulnerable XUnzip library.
- Support EFI system encryption for 32-bit Windows.
- Perform shutdown instead of reboot during Pre-Test of EFI system encryption to detect incompatible motherboards.
- Minor GUI and translations fixes.
# MacOSX:
- Remove dependency to MacFUSE compatibility layer in OSXFuse.