macOS: prepare APFS formatter device aliases

When creating an APFS filesystem inside a newly created device-hosted volume, VeraCrypt prepared only the raw hdiutil device path before invoking newfs_apfs. On macOS, newfs_apfs may resolve or reopen the corresponding block device path, which can fail with Permission denied for non-root GUI runs.

Prepare both raw and block aliases for the temporary formatter device, restore changed owners afterward, and share the helper between GUI and text-mode volume creation. Restore each changed alias independently so one restore failure does not skip the rest.

.github/FUNDING.yml

@@ -0,0 +1 @@
+custom: "https://veracrypt.jp/en/Donation.html"

.github/ISSUE_TEMPLATE/bug.md

@@ -0,0 +1,34 @@
+---
+name: Bug Report
+about: Found a bug? Let us know! 🐛
+labels: bug, unreviewed
+
+---
+
+<!-- Please provide a general summary of the issue in the title above. -->
+
+# Expected behavior
+<!-- Describe here what you have expected to happen -->
+
+# Observed behavior
+<!-- Describe here what happened instead of the expected behavior -->
+
+# Steps to reproduce
+<!-- Tell use all the steps you did so we can reproduce the problem -->
+1. 
+2. 
+3. 
+4.
+
+# Screenshots
+<!-- Add additional screenshots -->
+
+# Your Environment
+
+Please tell us more about your environment
+
+**VeraCrypt version:** <!-- f.e. 1.24-Update7 -->
+
+**Operating system and version:** <!-- f.e. Windows 10 build 19042 -->
+
+**System type:** <!-- f.e. 64-bit -->

.github/ISSUE_TEMPLATE/change.md

@@ -0,0 +1,30 @@
+---
+name: Change
+about: Change or extend functionality that already exists.
+labels: change, unreviewed
+
+---
+
+<!-- Please provide a general summary of your change in the title above. -->
+
+# Current behavior
+<!-- Describe here how it actually works -->
+
+# Desired behavior
+<!-- Describe here the difference from current behavior-->
+
+# Screenshots/Mockup/Designs
+<!-- Add additional screenshots, mockups or design proposals -->
+
+# Additional information
+<!-- Are there any additional requirements? Further ideas, ... -->
+
+# Your Environment
+
+Please tell us more about your environment
+
+**VeraCrypt version:** <!-- f.e. 1.24-Update7 -->
+
+**Operating system and version:** <!-- f.e. Windows 10 build 19042 -->
+
+**System type:** <!-- f.e. 64-bit -->

.github/ISSUE_TEMPLATE/feature.md

@@ -0,0 +1,27 @@
+---
+name: Feature
+about: Add new functionality or suggest an idea to the project.
+labels: feature, unreviewed
+
+---
+
+<!-- Please provide a general summary of your feature in the title above. -->
+
+# Desired behavior
+<!-- Describe here what and why your feature should be added -->
+
+# Screenshots/Mockup/Designs
+<!-- Add additional screenshots, mockups or design proposals -->
+
+# Additional information
+<!-- Are there any additional requirements? Further ideas, ... -->
+
+# Your Environment
+
+Please tell us more about your environment
+
+**VeraCrypt version:** <!-- f.e. 1.24-Update7 -->
+
+**Operating system and version:** <!-- f.e. Windows 10 build 19042 -->
+
+**System type:** <!-- f.e. 64-bit -->

.github/stale.yml

@@ -0,0 +1,25 @@
+# Number of days of inactivity before an issue becomes stale
+daysUntilStale: 60
+# Number of days of inactivity before a stale issue is closed
+daysUntilClose: 7
+# Issues with these labels will never be considered stale
+exemptLabels:
+  - pinned
+  - security
+# Label to use when marking an issue as stale
+staleLabel: wontfix
+# Comment to post when marking an issue as stale. Set to `false` to disable
+markComment: >
+  This issue has been automatically marked as stale because it has not had
+  recent activity. It will be closed if no further activity occurs. Thank you
+  for your contributions.
+# Comment to post when closing a stale issue. Set to `false` to disable
+closeComment: >
+  This issue has been automatically closed because it has not had
+  recent activity. This probably means that it is not reproducible
+  or it has been fixed in a newer version. If it’s an enhancement
+  and hasn't been taken on for so long, then it seems no one has
+  the time to implement this.
+  Please reopen if you still encounter this issue with the [latest stable version](https://veracrypt.jp/en/Downloads.html).
+  You can also contribute directly by providing a pull request.
+  Thank you!

.github/workflows/build-linux.yml

@@ -0,0 +1,213 @@
+name: Build and test Linux
+
+on:
+  push:
+    branches: [ "master" ]
+    paths:
+      - 'src/Build/Include/Makefile.inc'
+      - 'src/Build/CMakeLists.txt'
+      - 'src/Build/build_cmake_deb.sh'
+      - 'src/Common/*.h'
+      - 'src/Common/*.cpp'
+      - 'src/Common/*.c'
+      - 'src/Core/**'
+      - 'src/Crypto/**'
+      - 'src/Driver/Fuse/**'
+      - 'src/Main/**'
+      - 'src/PKCS11/**'
+      - 'src/Platform/**'
+      - 'src/Resources/**'
+      - 'src/Setup/Linux/**'
+      - 'src/Volume/**'
+      - 'src/Makefile'
+      - '.github/workflows/build-linux.yml'
+  pull_request:
+    branches: [ "master" ]
+    paths:
+      - 'src/Build/Include/Makefile.inc'
+      - 'src/Build/CMakeLists.txt'
+      - 'src/Build/build_cmake_deb.sh'
+      - 'src/Common/*.h'
+      - 'src/Common/*.cpp'
+      - 'src/Common/*.c'
+      - 'src/Core/**'
+      - 'src/Crypto/**'
+      - 'src/Driver/Fuse/**'
+      - 'src/Main/**'
+      - 'src/PKCS11/**'
+      - 'src/Platform/**'
+      - 'src/Resources/**'
+      - 'src/Setup/Linux/**'
+      - 'src/Volume/**'
+      - 'src/Makefile'
+      - '.github/workflows/build-linux.yml'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+env:
+  WXWIDGETS_VERSION: 3.2.5
+
+jobs:
+  ubuntu-build:
+
+    runs-on: ubuntu-22.04
+    timeout-minutes: 30
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    - name: Generate cache key
+      id: cache-key
+      run: |
+        echo "cache_key=$(echo ${{ env.WXWIDGETS_VERSION }}-$(sha256sum src/Makefile .github/workflows/build-linux.yml | awk '{print $1}'))" >> $GITHUB_OUTPUT
+
+    - name: Cache wxBuildConsole
+      uses: actions/cache@v3
+      id: cache-wxbuildconsole
+      with:
+        path: /tmp/wxBuildConsole
+        key: wxBuildConsole-${{ steps.cache-key.outputs.cache_key }}
+
+    - name: Cache wxBuildGUI
+      uses: actions/cache@v3
+      id: cache-wxbuildgui
+      with:
+        path: /tmp/wxBuildGUI
+        key: wxBuildGUI-${{ steps.cache-key.outputs.cache_key }}
+
+    - name: Cache wxWidgets
+      uses: actions/cache@v3
+      id: cache-wxwidgets
+      with:
+        path: /tmp/wxWidgets-${{ env.WXWIDGETS_VERSION }}
+        key: wxWidgets-${{ steps.cache-key.outputs.cache_key }}
+
+    - name: Install dependencies
+      run: sudo apt-get update && sudo apt-get install -y wget tar libpcsclite-dev libfuse-dev yasm libgtk-3-dev libayatana-appindicator3-dev cmake debhelper
+
+    - name: Download and extract wxWidgets to /tmp if build folders are missing
+      if: steps.cache-wxbuildconsole.outputs.cache-hit != 'true' || steps.cache-wxbuildgui.outputs.cache-hit != 'true' || steps.cache-wxwidgets.outputs.cache-hit != 'true'
+      run: |
+        wget https://github.com/wxWidgets/wxWidgets/releases/download/v${{ env.WXWIDGETS_VERSION }}/wxWidgets-${{ env.WXWIDGETS_VERSION }}.tar.bz2 -O /tmp/wxWidgets-${{ env.WXWIDGETS_VERSION }}.tar.bz2
+        mkdir -p /tmp/wxWidgets-${{ env.WXWIDGETS_VERSION }}
+        tar -xjf /tmp/wxWidgets-${{ env.WXWIDGETS_VERSION }}.tar.bz2 -C /tmp/wxWidgets-${{ env.WXWIDGETS_VERSION }} --strip-components=1
+
+    - name: Build VeraCrypt .deb packages
+      run: |
+        chmod +x src/Build/build_cmake_deb.sh
+        src/Build/build_cmake_deb.sh WXSTATIC INDICATOR
+
+    - name: Upload GUI .deb packages
+      uses: actions/upload-artifact@v4
+      with:
+        name: veracrypt-gui-debs
+        path: /tmp/VeraCrypt_Packaging/GUI/Packaging/veracrypt-*.*
+
+    - name: Upload Console .deb packages
+      uses: actions/upload-artifact@v4
+      with:
+        name: veracrypt-console-debs
+        path: /tmp/VeraCrypt_Packaging/Console/Packaging/veracrypt-console-*.*
+
+    - name: Install and test VeraCrypt GUI .deb packages
+      run: |
+        sudo apt install -y /tmp/VeraCrypt_Packaging/GUI/Packaging/veracrypt-*.deb
+        veracrypt --text --test && veracrypt --text --version
+        sudo veracrypt --text --non-interactive Tests/test.sha256.hc --hash sha256 --slot 1 --password test --mount-options=ro
+        sudo veracrypt --text --non-interactive Tests/test.sha512.hc --hash sha512 --slot 2 --password test --mount-options=ro
+        sudo veracrypt --text --non-interactive Tests/test.streebog.hc --hash streebog --slot 3 --password test --mount-options=ro
+        sudo veracrypt --text --non-interactive Tests/test.whirlpool.hc --hash whirlpool --slot 4 --password test --mount-options=ro
+        sudo veracrypt --text --list
+        echo -n "Dummy" > /tmp/expected_content.txt
+        if cmp -s /media/veracrypt1/Dummy.txt /tmp/expected_content.txt; then
+          echo "Content of test.sha256.hc is valid."
+        else
+          echo "Content of test.sha256.hc is invalid!"
+          exit 1
+        fi
+        if cmp -s /media/veracrypt2/Dummy.txt /tmp/expected_content.txt; then
+          echo "Content of test.sha512.hc is valid."
+        else
+          echo "Content of test.sha512.hc is invalid!"
+          exit 1
+        fi
+        if cmp -s /media/veracrypt3/Dummy.txt /tmp/expected_content.txt; then
+          echo "Content of test.streebog.hc is valid."
+        else
+          echo "Content of test.streebog.hc is invalid!"
+          exit 1
+        fi
+        if cmp -s /media/veracrypt4/Dummy.txt /tmp/expected_content.txt; then
+          echo "Content of test.whirlpool.hc is valid."
+        else
+          echo "Content of test.whirlpool.hc is invalid!"
+          exit 1
+        fi
+        sudo veracrypt -d
+        sudo apt remove -y veracrypt
+
+    - name: Install and test VeraCrypt Console .deb packages
+      run: |
+        sudo apt install -y /tmp/VeraCrypt_Packaging/Console/Packaging/veracrypt-console-*.deb
+        veracrypt --test && veracrypt --version
+        sudo veracrypt --non-interactive Tests/test.sha256.hc --hash sha256 --slot 1 --password test --mount-options=ro
+        sudo veracrypt --non-interactive Tests/test.sha512.hc --hash sha512 --slot 2 --password test --mount-options=ro
+        sudo veracrypt --non-interactive Tests/test.streebog.hc --hash streebog --slot 3 --password test --mount-options=ro
+        sudo veracrypt --non-interactive Tests/test.whirlpool.hc --hash whirlpool --slot 4 --password test --mount-options=ro
+        sudo veracrypt --list
+        echo -n "Dummy" > /tmp/expected_content.txt
+        if cmp -s /media/veracrypt1/dummy.txt /tmp/expected_content.txt; then
+          echo "Content of test.sha256.hc is valid."
+        else
+          echo "Content of test.sha256.hc is invalid!"
+          exit 1
+        fi
+        if cmp -s /media/veracrypt2/dummy.txt /tmp/expected_content.txt; then
+          echo "Content of test.sha512.hc is valid."
+        else
+          echo "Content of test.sha512.hc is invalid!"
+          exit 1
+        fi
+        if cmp -s /media/veracrypt3/dummy.txt /tmp/expected_content.txt; then
+          echo "Content of test.streebog.hc is valid."
+        else
+          echo "Content of test.streebog.hc is invalid!"
+          exit 1
+        fi
+        if cmp -s /media/veracrypt4/dummy.txt /tmp/expected_content.txt; then
+          echo "Content of test.whirlpool.hc is valid."
+        else
+          echo "Content of test.whirlpool.hc is invalid!"
+          exit 1
+        fi
+        sudo veracrypt -d
+        sudo apt remove -y veracrypt-console
+
+    - name: Cleanup old caches
+      uses: actions/github-script@v6
+      if: always()
+      with:
+        github-token: ${{ secrets.GITHUB_TOKEN }}
+        script: |
+          const caches = await github.rest.actions.getActionsCacheList({
+            owner: context.repo.owner,
+            repo: context.repo.repo,
+          })
+          for (const cache of caches.data.actions_caches) {
+            if (cache.key.startsWith('wxBuildConsole-') || cache.key.startsWith('wxBuildGUI-') || cache.key.startsWith('wxWidgets-')) {
+              if (cache.key !== `wxBuildConsole-${{ steps.cache-key.outputs.cache_key }}` &&
+                  cache.key !== `wxBuildGUI-${{ steps.cache-key.outputs.cache_key }}` &&
+                  cache.key !== `wxWidgets-${{ steps.cache-key.outputs.cache_key }}`) {
+                console.log(`Deleting cache with key: ${cache.key}`)
+                await github.rest.actions.deleteActionsCacheById({
+                  owner: context.repo.owner,
+                  repo: context.repo.repo,
+                  cache_id: cache.id,
+                })
+              }
+            }
+          }
+

.github/workflows/xmlvalidate.sh

@@ -0,0 +1,196 @@
+#!/bin/bash
+set -euo pipefail # Exit on error, undefined variable, or pipe failure
+
+# --- Configuration ---
+SCRIPT_NAME=$(basename "$0")
+FAIL_FLAG=false
+
+# --- Colors ---
+COLOR_RED='\033[0;31m'
+COLOR_GREEN='\033[0;32m'
+COLOR_YELLOW='\033[0;33m'
+COLOR_CYAN='\033[0;36m'
+COLOR_MAGENTA='\033[0;35m'
+COLOR_RESET='\033[0m' # No Color
+
+# --- Helper Functions for Output ---
+log_info() { echo -e "${COLOR_CYAN}$1${COLOR_RESET}"; }
+log_success() { echo -e "${COLOR_GREEN}$1${COLOR_RESET}"; }
+log_warning() { echo -e "${COLOR_YELLOW}Warning: $1${COLOR_RESET}"; }
+log_error() { echo -e "${COLOR_RED}Error: $1${COLOR_RESET}" >&2; }
+log_detail() { echo -e "  $1"; }
+log_detail_success() { echo -e "  ${COLOR_GREEN}$1${COLOR_RESET}"; }
+log_detail_error() { echo -e "  ${COLOR_RED}$1${COLOR_RESET}"; }
+log_detail_warning() { echo -e "  ${COLOR_YELLOW}$1${COLOR_RESET}"; }
+log_detail_magenta() { echo -e "    ${COLOR_MAGENTA}$1${COLOR_RESET}"; }
+
+# --- Parameter Validation ---
+if [ "$#" -ne 1 ]; then
+    log_error "Usage: $SCRIPT_NAME <Path_To_VeraCrypt_Root>"
+    log_error "Example: $SCRIPT_NAME /path/to/VeraCrypt"
+    exit 1
+fi
+
+ROOT_PATH="$1"
+
+if [ ! -d "$ROOT_PATH" ]; then
+    log_error "Root path '$ROOT_PATH' not found or is not a directory."
+    exit 1
+fi
+
+# Define the path to the common Language.xml
+COMMON_FILE="$ROOT_PATH/src/Common/Language.xml"
+
+# Check if the common Language.xml exists
+if [ ! -f "$COMMON_FILE" ]; then
+    log_error "Common Language.xml not found or is not a file at path: $COMMON_FILE"
+    exit 1
+fi
+
+log_info "Extracting keys from $COMMON_FILE"
+
+# Define regex pattern to extract 'key' attributes from <entry> elements
+KEY_EXTRACTION_PATTERN='<entry\s+lang="[^"]+"\s+key="([^"]+)"'
+
+# Extract all keys using grep with PCRE (-P) and only outputting the captured group (-o)
+# Use process substitution and readarray to populate the KEYS array
+# Ensure grep returns 0 even if no match, or handle non-zero for no match
+KEYS_STRING=$(grep -oP "$KEY_EXTRACTION_PATTERN" "$COMMON_FILE" | sed -E 's/.*key="([^"]+)".*/\1/' || true)
+if [ -z "$KEYS_STRING" ]; then
+    KEYS=()
+else
+    readarray -t KEYS < <(echo "$KEYS_STRING")
+fi
+
+
+if [ ${#KEYS[@]} -eq 0 ]; then
+    log_warning "No keys found in $COMMON_FILE using pattern: $KEY_EXTRACTION_PATTERN"
+    # If this should be an error, uncomment next lines:
+    # log_error "No keys found in $COMMON_FILE."
+    # exit 1
+else
+    log_info "Found ${#KEYS[@]} keys."
+fi
+
+# Define the regex for finding invalid escape sequences.
+# Valid sequences: \n, \r, \t, \\, \"
+INVALID_ESCAPE_REGEX='(?<!\\)(?:\\\\)*\\([^nrt\\"])' # This is better
+ALLOWED_ESCAPES_MESSAGE="Allowed sequences are: \\n, \\r, \\t, \\\\ (for literal backslash), \\\" (for literal quote)"
+
+# Retrieve all translation XML files in the Translations folder
+TRANSLATION_FOLDER="$ROOT_PATH/Translations"
+FILES_TO_PROCESS=()
+
+# Add common file first
+FILES_TO_PROCESS+=("$COMMON_FILE")
+
+if [ ! -d "$TRANSLATION_FOLDER" ]; then
+    log_warning "Translations folder not found at path: $TRANSLATION_FOLDER. Skipping translation files."
+else
+    # Use find to get translation files. nullglob helps avoid errors if no files match.
+    shopt -s nullglob
+    for lang_file in "$TRANSLATION_FOLDER"/Language.*.xml; do
+        FILES_TO_PROCESS+=("$lang_file")
+    done
+    shopt -u nullglob # Reset nullglob
+    if [ ${#FILES_TO_PROCESS[@]} -eq 1 ]; then # Only common file was added
+        log_warning "No Language.*.xml files found in $TRANSLATION_FOLDER."
+    fi
+fi
+
+if [ ${#FILES_TO_PROCESS[@]} -eq 0 ]; then
+    log_warning "No files found to process."
+    exit 0 # Or 1 if this is an error condition
+fi
+
+# Iterate through each file and perform validations
+for file in "${FILES_TO_PROCESS[@]}"; do
+    if [ ! -f "$file" ]; then
+        log_warning "File not found or is not a file, skipping: $file"
+        continue
+    fi
+    echo # Newline for readability
+    log_info "Processing file: $file"
+    CURRENT_FILE_PASSES=true
+
+    # 1. Validate XML using fxparser
+    log_detail "Validating XML structure..."
+    # Capture stdout and stderr, get exit code
+    FXPARSER_OUTPUT=$(fxparser -V "$file" 2>&1)
+    FXPARSER_EXIT_CODE=$?
+
+    if [ "$FXPARSER_EXIT_CODE" -ne 0 ]; then
+        CURRENT_FILE_PASSES=false
+        FAIL_FLAG=true
+        log_detail_error "XML Validation Failed for $file (fxparser exit code: $FXPARSER_EXIT_CODE):"
+        while IFS= read -r line; do
+            log_detail_error "    $line"
+        done <<< "$FXPARSER_OUTPUT"
+    else
+        log_detail_success "XML structure is valid."
+    fi
+
+    # 2. Check for invalid backslash escape sequences
+    log_detail "Checking for invalid escape sequences..."
+    # Use grep -P for PCRE, -n for line numbers. --color=never to avoid grep's own coloring here.
+    # We check grep's exit code: 0 if found, 1 if not found, >1 for error.
+    INVALID_ESCAPE_MATCHES=$(grep -P -n --color=never "$INVALID_ESCAPE_REGEX" "$file" || true)
+
+    if [ -n "$INVALID_ESCAPE_MATCHES" ]; then
+        log_detail_error "File '$file' contains potentially invalid backslash escape sequences."
+        log_detail_error "$ALLOWED_ESCAPES_MESSAGE"
+        log_detail_error "Instances found:"
+        while IFS= read -r line_match; do
+            # Extract line number and the line content from grep's output (e.g., "123:content")
+            LINE_NUMBER=$(echo "$line_match" | cut -d: -f1)
+            LINE_CONTENT=$(echo "$line_match" | cut -d: -f2-)
+            # Trim whitespace (optional, but PowerShell did it)
+            TRIMMED_LINE_CONTENT=$(echo "$LINE_CONTENT" | sed 's/^[[:space:]]*//;s/[[:space:]]*$//')
+            log_detail_magenta "Line $LINE_NUMBER: $TRIMMED_LINE_CONTENT"
+        done <<< "$INVALID_ESCAPE_MATCHES"
+        CURRENT_FILE_PASSES=false
+        FAIL_FLAG=true
+    else
+        log_detail_success "No invalid escape sequences found."
+    fi
+
+    # 3. Check for the presence of each key in the current file (if keys were found)
+    if [ ${#KEYS[@]} -gt 0 ]; then
+        log_detail "Checking for key completeness..."
+        KEYS_MISSING_IN_CURRENT_FILE=0
+        for key_entry in "${KEYS[@]}"; do
+            # Search for key="KEY_NAME"
+            SEARCH_PATTERN_FOR_KEY="key=\"$key_entry\""
+            if ! grep -q "$SEARCH_PATTERN_FOR_KEY" "$file"; then
+                log_detail_error "Key '$key_entry' (from $COMMON_FILE) not found in $file"
+                CURRENT_FILE_PASSES=false
+                FAIL_FLAG=true
+                ((KEYS_MISSING_IN_CURRENT_FILE++))
+            fi
+        done
+        if [ "$KEYS_MISSING_IN_CURRENT_FILE" -eq 0 ]; then
+            log_detail_success "All keys from $COMMON_FILE are present."
+        else
+            log_detail_error "$KEYS_MISSING_IN_CURRENT_FILE key(s) missing."
+        fi
+    else
+        log_detail_warning "Skipping key completeness check as no keys were extracted from $COMMON_FILE."
+    fi
+
+    # Output the result for the current file
+    if [ "$CURRENT_FILE_PASSES" = true ]; then
+        log_success "$file PASSED all checks."
+    else
+        log_error "$file FAILED one or more checks."
+    fi
+done
+
+# Exit with appropriate status code
+echo # Newline for readability
+if [ "$FAIL_FLAG" = true ]; then
+    log_error "Overall Result: One or more files failed validation."
+    exit 1
+else
+    log_success "Overall Result: All processed files passed all checks successfully."
+    exit 0
+fi

.github/workflows/xmlvalidate.yml

@@ -0,0 +1,36 @@
+name: Validate XML
+
+on:
+  push:
+    branches: [ "master" ]
+    paths:
+      - 'Translations/*'
+      - 'src/Common/Language.xml'
+      - '.github/workflows/xmlvalidate.*'
+  pull_request:
+    branches: [ "master" ]
+    paths:
+      - 'Translations/*'
+      - 'src/Common/Language.xml'
+      - '.github/workflows/xmlvalidate.*'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  validate:
+
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    steps:
+    - uses: actions/checkout@v4
+    - name: Setup Node.js
+      uses: actions/setup-node@v4
+      with:
+        node-version: 'latest'
+    - name: Install fast-xml-parser
+      run: npm install fast-xml-parser@4.5.2 -g
+    - name: Run XML validator script
+      run: ${{ github.workspace }}/.github/workflows/xmlvalidate.sh "${{ github.workspace }}"

.gitignore

@@ -0,0 +1,113 @@
+# For those using Visual Studio Code for development
+.vscode/
+
+# CLion
+.idea/
+
+# VC Linux build artifacts
+*.o
+*.o0
+*.d
+*.a
+*.bmp.h
+*.xml.h
+*.txt.h
+*.h.gch
+src/Main/veracrypt
+*.osse41
+*.ossse3
+*.oshani
+*.oaesni
+*.oarmv8crypto
+
+# VC macOS build artifacts
+src/Main/VeraCrypt
+src/Main/VeraCrypt.app
+src/Main/*.dmg
+src/Setup/MacOSX/*.pkg
+*.oo
+*.o.32
+*.o.64
+.DS_Store
+
+# wxWidgets Linux build artifacts
+src/wxrelease
+src/wxdebug
+
+src/.vs
+
+src/Boot/Windows/obj
+src/Boot/Windows/Release
+src/Boot/Windows/Release_AES
+src/Boot/Windows/Release_AES_SHA2
+src/Boot/Windows/Release_Camellia
+src/Boot/Windows/Release_Camellia_SHA2
+src/Boot/Windows/Release_Serpent
+src/Boot/Windows/Release_Serpent_SHA2
+src/Boot/Windows/Release_SHA2
+src/Boot/Windows/Release_Twofish
+src/Boot/Windows/Release_Twofish_SHA2
+src/Boot/Windows/Rescue
+src/Boot/Windows/Rescue_AES
+src/Boot/Windows/Rescue_AES_SHA2
+src/Boot/Windows/Rescue_Camellia
+src/Boot/Windows/Rescue_Camellia_SHA2
+src/Boot/Windows/Rescue_Serpent
+src/Boot/Windows/Rescue_Serpent_SHA2
+src/Boot/Windows/Rescue_SHA2
+src/Boot/Windows/Rescue_Twofish
+src/Boot/Windows/Rescue_Twofish_SHA2
+
+src/Common/Debug
+src/Common/obj_driver_debug
+src/Common/obj_driver_release
+src/Common/Release
+src/Common/x64
+src/Common/ARM64
+src/Common/*.log
+
+src/Crypto/Debug
+src/Crypto/obj_driver_debug
+src/Crypto/obj_driver_release
+src/Crypto/Release
+src/Crypto/x64
+src/Crypto/ARM64
+
+src/Debug
+
+src/Driver/Debug
+src/Driver/obj
+src/Driver/obj_driver_debug
+src/Driver/obj_driver_release
+src/Driver/Release
+src/Driver/ARM64
+
+src/ExpandVolume/Debug
+src/ExpandVolume/Release
+src/ExpandVolume/x64
+src/ExpandVolume/ARM64
+src/ExpandVolume/*.tlb
+
+src/Format/Debug
+src/Format/Release
+src/Format/x64
+src/Format/ARM64
+src/Format/*.tlb
+src/Format/FormatCom_h.h
+src/Format/FormatCom_i.c
+
+src/Mount/Debug
+src/Mount/Release
+src/Mount/x64
+src/Mount/ARM64
+src/Mount/*.tlb
+src/Mount/MainCom_h.h
+src/Mount/MainCom_i.c
+
+src/Setup/Debug
+src/Setup/PortableDebug
+src/Setup/Release
+src/Setup/PortableRelease
+
+src/SetupDLL/Debug
+src/SetupDLL/Release

License.txt

@@ -14,7 +14,7 @@ licenses can be found below.
 
 This license does not grant you rights to use any
 contributors' name, logo, or trademarks, including IDRIX,
-VeraCrypt and all derivative names.
+AM Crypto, VeraCrypt and all derivative names.
 For example, the following names are not allowed: VeraCrypt,
 VeraCrypt+, VeraCrypt Professional, iVeraCrypt, etc. Nor any
 other names confusingly similar to the name VeraCrypt (e.g.,
@@ -679,7 +679,7 @@ warranties in respect of its properties, including, but not
 limited to, correctness and/or fitness for purpose.
 ____________________________________________________________
 
-Copyright (C) 1995-2017 Jean-loup Gailly and Mark Adler
+Copyright (C) 1995-2023 Jean-loup Gailly and Mark Adler
 
   This software is provided 'as-is', without any express or implied
   warranty.  In no event will the authors be held liable for any damages
@@ -700,7 +700,7 @@ Copyright (C) 1995-2017 Jean-loup Gailly and Mark Adler
   Jean-loup Gailly        Mark Adler
   jloup@gzip.org          madler@alumni.caltech.edu
 ____________________________________________________________
-Copyright (C) 1999-2016 Dieter Baron and Thomas Klausner
+Copyright (C) 1999-2023 Dieter Baron and Thomas Klausner
 
 The authors can be contacted at <libzip@nih.at>
 
@@ -742,3 +742,80 @@ version 3.0 (LGPL-3.0).
 
 The full text of the license may be found at https://opensource.org/licenses/LGPL-3.0
 ____________________________________________________________
+Copyright (c) 1999-2016 Jack Lloyd. 
+
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+1. Redistributions of source code must retain the above copyright
+  notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright
+  notice, this list of conditions and the following disclaimer in
+  the documentation and/or other materials provided with the
+  distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE AUTHORS ``AS IS'' AND ANY EXPRESS
+OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
+GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER
+IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
+OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
+IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+____________________________________________________________
+Copyright (c) 2013-2019 Stephan Mueller <smueller@chronox.de>
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+1. Redistributions of source code must retain the above copyright
+   notice, and the entire permission notice in its entirety, 
+   including the disclaimer of warranties.
+
+2. Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in
+   the documentation and/or other materials provided with the
+   distribution.
+
+3. The name of the author may not be used to endorse or promote
+   products derived from this software without specific prior
+   written permission.
+
+ALTERNATIVELY, this product may be distributed under the terms of
+the GNU General Public License, in which case the provisions of the
+GPL2 are required INSTEAD OF the above restrictions. (This clause is
+necessary due to a potential bad interaction between the GPL and the
+restrictions contained in a BSD-style copyright.)
+
+THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
+WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ALL OF WHICH
+ARE HEREBY DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
+BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF NOT ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+____________________________________________________________
+Copyright (c) 1999-2023 Igor Pavlov
+
+LZMA SDK is written and placed in the public domain by Igor Pavlov.
+
+Some code in LZMA SDK is based on public domain code from another developers:
+  1) PPMd var.H (2001): Dmitry Shkarin
+  2) SHA-256: Wei Dai (Crypto++ library)
+
+Anyone is free to copy, modify, publish, use, compile, sell, or distribute the 
+original LZMA SDK code, either in source code form or as a compiled binary, for 
+any purpose, commercial or non-commercial, and by any means.
+____________________________________________________________

README.md

@@ -1,9 +1,7 @@
 This archive contains the source code of VeraCrypt.
-It is based on original TrueCrypt 7.1a with security enhancements and modifications.
+It is based on the original TrueCrypt 7.1a with security enhancements and modifications.
 
-
-Important
-=========
+# Important
 
 You may use the source code contained in this archive only if you accept and
 agree to the license terms contained in the file 'License.txt', which is
@@ -12,155 +10,113 @@ included in this archive.
 Note that the license specifies, for example, that a derived work must not be
 called 'TrueCrypt' or 'VeraCrypt'
 
+# Contents
 
+[I. Windows](#i-windows)
 
-Contents
-========
+[II. Linux and Mac OS X](#ii-linux-and-mac-os-x)
 
-I. Windows
-   Requirements for Building VeraCrypt for Windows.
-   Instructions for Building VeraCrypt for Windows.
-	Instructions for Signing and Packaging VeraCrypt for Windows.
+[III. FreeBSD](#iii-freebsd)
 
-II. Linux and Mac OS X
-    Requirements for Building VeraCrypt for Linux and Mac OS X.
-    Instructions for Building VeraCrypt for Linux and Mac OS X.
-	Mac OS X specifics
+[IV. Third-Party Developers (Contributors)](#iv-third-party-developers-contributors)
 
-III. FreeBSD and OpenSolaris
+[V. Legal Information](#v-legal-information)
 
-IV. Third-Party Developers (Contributors)
+[VI. Further Information](#vi-further-information)
 
-V. Legal Information
+# I. Windows
 
-VI. Further Information
+## Requirements for Building VeraCrypt for Windows:
 
-
-
-I. Windows
-==========
-
-Requirements for Building VeraCrypt for Windows:
-------------------------------------------------
-
-- Microsoft Visual C++ 2010 SP1 (Professional Edition or compatible)
-- Microsoft Visual C++ 1.52 (available from MSDN Subscriber Downloads)
-- Microsoft Windows SDK for Windows 7.1 (configured for Visual C++ 2010)
-- Microsoft Windows SDK for Windows 8.1 (needed for SHA-256 code signing)
-- Microsoft Windows Driver Kit 7.1.0 (build 7600.16385.1)
-- NASM assembler 2.08 or compatible
-- YASM 1.3.0 or newer.
-- gzip compressor
-- upx packer (available at https://upx.github.io/)
+A detailed guide on how to build VeraCrypt on Windows can be found in
+the [documentation](./doc/html/en/CompilingGuidelineWin.html) in the repository and
+it is also available [online](https://veracrypt.jp/en/CompilingGuidelineWin.html) or on the [mirror](https://veracrypt.io/en/CompilingGuidelineWin.html).
 
 IMPORTANT:
 
 The 64-bit editions of Windows Vista and later versions of Windows, and in
-some cases (e.g. playback of HD DVD content) also the 32-bit editions, do not
+some cases (e.g. playback of HD DVD content) also the 32-bit editions do not
 allow the VeraCrypt driver to run without an appropriate digital signature.
 Therefore, all .sys files in official VeraCrypt binary packages are digitally
-signed with the digital certificate of the IDRIX, which was
-issued by Thawte certification authority. At the end of each official .exe and
+signed with the digital certificate of the IDRIX, which was issued by
+GlobalSign certification authority. At the end of each official .exe and
 .sys file, there are embedded digital signatures and all related certificates
 (i.e. all certificates in the relevant certification chain, such as the
 certification authority certificates, CA-MS cross-certificate, and the
 IDRIX certificate).
-Keep this in mind if you compile VeraCrypt
-and compare your binaries with the official binaries. If your binaries are
-unsigned, the sizes of the official binaries will usually be approximately
-10 KB greater than sizes of your binaries (there may be further differences
-if you use a different version of the compiler, or if you install a different
-or no service pack for Visual Studio, or different hotfixes for it, or if you
-use different versions of the required SDKs).
 
+Keep this in mind if you compile VeraCrypt and compare your binaries with the
+official binaries. If your binaries are unsigned, the sizes of the official
+binaries will usually be approximately 10 KiB greater than the sizes of your
+binaries (there may be further differences if you use a different version of
+the compiler, or if you install a different or no service pack for Visual
+Studio, or different hotfixes for it, or if you use different versions of
+the required SDKs).
 
-Instructions for Building VeraCrypt for Windows:
-------------------------------------------------
-
-1) Create an environment variable 'MSVC16_ROOT' pointing to the folder 'MSVC15'
-   extracted from the Visual C++ 1.52 self-extracting package.
-
-   Note: The 16-bit installer MSVC15\SETUP.EXE cannot be run on 64-bit Windows,
-   but it is actually not necessary to run it. You only need to extract the
-   folder 'MSVC15', which contains the 32-bit binaries required to build the
-   VeraCrypt Boot Loader.
-
-2) If you have installed the Windows Driver Development Kit in another
-   directory than '%SYSTEMDRIVE%\WinDDK', create an environment variable
-   'WINDDK_ROOT' pointing to the DDK installation directory.
-
-3) Open the solution file 'VeraCrypt.sln' in Microsoft Visual Studio 2010.
-
-4) Select 'All' as the active solution configuration.
-
-5) Build the solution.
-
-6) If successful, there should be newly built VeraCrypt binaries in the
-   'Release' folder.
-
-Instructions for Signing and Packaging VeraCrypt for Windows:
--------------------------------------------------------------
+## Instructions for Signing and Packaging VeraCrypt for Windows:
 
 First, create an environment variable 'WSDK81' pointing to the Windows SDK
 for Windows 8.1 installation directory.
+
 The folder "Signing" contains a batch file (sign.bat) that will sign all
 VeraCrypt components using a code signing certificate present on the
-certificate store and also build the final installation setup.
-The batch file suppose that the code signing certificate is issued by Thawt.
-This is the case for IDRIX's certificate. If yours is issued by another CA,
-then you should put the Root and Intermediate certificates in the "Signing"
-folder and then modify sign.bat accordingly.
+certificate store and build the final installation setup and MSI package.
+The batch file assumes that the code signing certificate is issued by
+GlobalSign. This is the case for IDRIX's certificate. If yours is issued by
+another CA, then you should put its intermediate certificates in the "Signing"
+folder and modify sign.bat accordingly.
 
-VeraCrypt EFI Boot Loader:
---------------------------
+To generate MSI packages, WiX Toolset v3.11 must be installed.
+
+## VeraCrypt EFI Boot Loader:
 
 VeraCrypt source code contains pre-built EFI binaries under src\Boot\EFI.
-The source code of VeraCrypt EFI Boot Loader is licensed under LGPL and 
+The source code of VeraCrypt EFI Boot Loader is licensed under LGPL and
 it is available at https://github.com/veracrypt/VeraCrypt-DCS.
 For build instructions, please refer to the file src\Boot\EFI\Readme.txt.
 
+# II. Linux and Mac OS X
 
-II. Linux and Mac OS X
-======================
+A detailed guide on how to build VeraCrypt on Linux can be found in
+the [documentation](./doc/html/en/CompilingGuidelineLinux.html) in the repository and
+it is also available [online](https://veracrypt.jp/en/CompilingGuidelineLinux.html) or on the [mirror](https://veracrypt.io/en/CompilingGuidelineLinux.html).
 
-Requirements for Building VeraCrypt for Linux and Mac OS X:
------------------------------------------------------------
+## Requirements for Building VeraCrypt for Linux and Mac OS X:
 
 - GNU Make
 - GNU C++ Compiler 4.0 or compatible
-- Apple Xcode (Mac OS X only)
+- Apple Xcode or Xcode command line tools (Mac OS X only)
 - YASM 1.3.0 or newer (Linux only, x86/x64 architecture only)
 - pkg-config
 - wxWidgets 3.0 shared library and header files installed or
   wxWidgets 3.0 library source code (available at https://www.wxwidgets.org)
 - FUSE library and header files (available at https://github.com/libfuse/libfuse
-  and https://osxfuse.github.io/)
+  and https://macfuse.github.io/)
+- PCSC-lite library and header files (available at https://github.com/LudovicRousseau/PCSC)
 
+## Instructions for Building VeraCrypt for Linux and Mac OS X:
 
-Instructions for Building VeraCrypt for Linux and Mac OS X:
------------------------------------------------------------
+1. Change the current directory to the root of the VeraCrypt source code.
 
-1) Change the current directory to the root of the VeraCrypt source code.
-
-2) If you have no wxWidgets shared library installed, run the following
+2. If you have no wxWidgets shared library installed, run the following
    command to configure the wxWidgets static library for VeraCrypt and to
    build it:
 
-   $ make WXSTATIC=1 WX_ROOT=/usr/src/wxWidgets wxbuild
+   `$ make WXSTATIC=1 WX_ROOT=/usr/src/wxWidgets wxbuild`
 
-   The variable WX_ROOT must point to the location of the source code of the
+   The variable `WX_ROOT` must point to the location of the source code of the
    wxWidgets library. Output files will be placed in the './wxrelease/'
    directory.
 
-3) To build VeraCrypt, run the following command:
+3. To build VeraCrypt, run the following command:
 
-   $ make
+   `$ make`
 
    or if you have no wxWidgets shared library installed:
 
-   $ make WXSTATIC=1
+   `$ make WXSTATIC=1`
 
-4) If successful, the VeraCrypt executable should be located in the directory
+4. If successful, the VeraCrypt executable should be located in the directory
    'Main'.
 
 By default, a universal executable supporting both graphical and text user
@@ -168,102 +124,115 @@ interface (through the switch --text) is built.
 On Linux, a console-only executable, which requires no GUI library, can be
 built using the 'NOGUI' parameter:
 
-   $ make NOGUI=1 WXSTATIC=1 WX_ROOT=/usr/src/wxWidgets wxbuild
-   $ make NOGUI=1 WXSTATIC=1
+`$ make NOGUI=1 WXSTATIC=1 WX_ROOT=/usr/src/wxWidgets wxbuild`
+
+`$ make NOGUI=1 WXSTATIC=1`
 
 On MacOSX, building a console-only executable is not supported.
 
-Mac OS X specifics:
------------------------------------------------------------
+## Mac OS X specifics:
 
-Under MacOSX, the SDK for OSX 10.7 is used by default. To use another version
-of the SDK (i.e. 10.6), you can export the environment variable VC_OSX_TARGET:
+Under MacOSX, the latest installed SDK is used by default. To use a different version
+of the SDK when building using make, you can export the environment variable VC_OSX_SDK:
 
-	$ export VC_OSX_TARGET=10.6
+`$ export VC_OSX_SDK=13.0`
 
+For development dependencies management, you can use [homebrew](https://brew.sh).
 
-Before building under MacOSX, pkg-config must be installed if not yet available.
-Get it from https://pkgconfig.freedesktop.org/releases/pkg-config-0.28.tar.gz and
-compile using the following commands :
+`$ brew install pkg-config yasm wxwidgets`
 
-	$ ./configure --with-internal-glib
-	$ make
-	$ sudo make install
+You also need system dependencies
 
-After making sure pkg-config is available, download and install OSXFuse from
-https://osxfuse.github.io/ (MacFUSE compatibility layer must selected)
+`$ brew install --cask macfuse packages`
 
-The script build_veracrypt_macosx.sh available under "src/Build" performs the
+After installing dependencies via brew, you can build a local development build
+
+`$ ./src/Build/build_veracrypt_macosx.sh -b`
+
+If you want to build the package, you must pass `-p` to the build script above. The built
+executable will be in `.src/Main`
+
+If you prefer to build from sources, or without homebrew, pkg-config and packages must be installed.
+
+Get pkg-config from https://pkgconfig.freedesktop.org/releases/pkg-config-0.29.2.tar.gz and
+compile using the following commands:
+
+`$ CFLAGS="-Wno-int-conversion" CXXFLAGS="-Wno-int-conversion" ./configure --with-internal-glib`
+
+`$ make`
+
+`$ sudo make install`
+
+After making sure pkg-config is available, download and install macFUSE from
+https://macfuse.github.io/
+
+The [build_veracrypt_macosx.sh](./src/Build/build_veracrypt_macosx.sh) script performs the
 full build of VeraCrypt including the creation of the installer pkg. It expects
-to find the wxWidgets 3.0.3 sources at the same level as where you put
+to find the wxWidgets 3.2.5 sources at the same level as where you put
 VeraCrypt sources (i.e. if "src" path is "/Users/joe/Projects/VeraCrypt/src"
-then wxWidgets should be at "/Users/joe/Projects/wxWidgets-3.0.3")
+then wxWidgets should be at "/Users/joe/Projects/wxWidgets-3.2.5")
 
-The build process uses Code Signing certificates whose ID is specified in
-src/Main/Main.make (look for lines containing "Developer ID Application" and 
+The make build process uses Code Signing certificates whose ID is specified in
+src/Main/Main.make (look for lines containing "Developer ID Application" and
 "Developer ID Installer"). You'll have to modify these lines to put the ID of
-your Code Signing certificates or comment them if you don't have one.
+your Code Signing certificates or comment them out if you don't have one.
 
-Because of incompatibility issues with OSXFUSE, the SDK 10.9 generates a
-VeraCrypt binary that has issues communicating with the OSXFUSE kernel extension.
-Thus, we recommend using a different OSX SDK version for building VeraCrypt.
+Because of incompatibility issues with macFUSE, the SDK 10.9 generates a
+VeraCrypt binary that has issues communicating with the macFUSE kernel extension.
+Thus, we recommend using a different macOS SDK version for building VeraCrypt.
 
+The Packages installer that is used for the VeraCrypt official build has been notarized by IDRIX and it is available at
+https://github.com/idrassi/packages/releases
 
+# III. FreeBSD
 
-III. FreeBSD and OpenSolaris
-============================
+FreeBSD is supported starting from version 11.
+The build requirements and instructions are the same as Linux except that gmake
+should be used instead of make.
 
-FreeBSD and OpenSolaris are not yet supported.
-
-
-
-IV. Third-Party Developers (Contributors)
-=========================================
+# IV. Third-Party Developers (Contributors)
 
 If you intend to implement a feature, please contact us first to make sure:
 
-1) That the feature has not been implemented (we may have already implemented
+1. That the feature has not been implemented (we may have already implemented
    it, but haven't released the code yet).
-2) That the feature is acceptable.
-3) Whether we need help of third-party developers with implementing the feature.
+2. That the feature is acceptable.
+3. Whether we need the help of third-party developers with implementing the feature.
 
 Information on how to contact us can be found at:
-https://www.veracrypt.fr/
+https://veracrypt.jp/
+https://veracrypt.io/ (mirror)
 
+# V. Legal Information
 
+## Copyright Information
 
-V. Legal Information
-====================
+This software as a whole:  
+Copyright (c) 2025 AM Crypto. All rights reserved.  
 
-Copyright Information
----------------------
-
-This software as a whole:
-Copyright (c) 2013-2017 IDRIX. All rights reserved.
-
-Portions of this software:
-Copyright (c) 2013-2017 IDRIX. All rights reserved.
-Copyright (c) 2003-2012 TrueCrypt Developers Association. All rights reserved.
-Copyright (c) 1998-2000 Paul Le Roux. All rights reserved.
-Copyright (c) 1998-2008 Brian Gladman, Worcester, UK. All rights reserved.
-Copyright (c) 1995-2017 Jean-loup Gailly and Mark Adler.
-Copyright (c) 2016 Disk Cryptography Services for EFI (DCS), Alex Kolotnikov
-Copyright (c) Dieter Baron and Thomas Klausner.
-Copyright (c) 2013, Alexey Degtyarev. All rights reserved.
-Copyright (c) 1999-2013,2014,2015,2016 Jack Lloyd. All rights reserved.
+Portions of this software:  
+Copyright (c) 2025 AM Crypto. All rights reserved.  
+Copyright (c) 2013-2025 IDRIX. All rights reserved.  
+Copyright (c) 2003-2012 TrueCrypt Developers Association. All rights reserved.  
+Copyright (c) 1998-2000 Paul Le Roux. All rights reserved.  
+Copyright (c) 1998-2008 Brian Gladman, Worcester, UK. All rights reserved.  
+Copyright (c) 1995-2023 Jean-loup Gailly and Mark Adler.  
+Copyright (c) 2016 Disk Cryptography Services for EFI (DCS), Alex Kolotnikov  
+Copyright (c) 1999-2023 Dieter Baron and Thomas Klausner.  
+Copyright (c) 2013, Alexey Degtyarev. All rights reserved.  
+Copyright (c) 1999-2016 Jack Lloyd. All rights reserved.  
+Copyright (c) 2013-2019 Stephan Mueller <smueller@chronox.de>  
+Copyright (c) 1999-2023 Igor Pavlov  
 
 For more information, please see the legal notices attached to parts of the
 source code.
 
-Trademark Information
----------------------
+## Trademark Information
 
 Any trademarks contained in the source code, binaries, and/or in the
 documentation, are the sole property of their respective owners.
 
+# VI. Further Information
 
-
-VI. Further Information
-=======================
-
-https://www.veracrypt.fr
+https://veracrypt.jp
+https://veracrypt.io (mirror)

Tests/bench.bat

@@ -1,331 +1,90 @@
 @echo off
+setlocal EnableDelayedExpansion
 
-setlocal
+:: Define constants
+set "VERACRYPT_PATH=c:\Program Files\VeraCrypt\veracrypt.exe"
+set "PASSWORD=test"
+set "HIDDEN_PASSWORD=testhidden"
 
-call :freedrive mydriveletter && goto :cont
-echo ERROR: No free drive letter found.
+:: Find a free drive letter
+call :freedrive mydriveletter || (
+    echo ERROR: No free drive letter found.
+    goto :exit
+)
+
+echo Using drive letter !mydriveletter!: for our tests
+echo.
+
+:: Define an array of hash algorithms and their corresponding container files
+set "algorithms[0]=sha512,test.sha512.hc"
+set "algorithms[1]=whirlpool,test.whirlpool.hc"
+set "algorithms[2]=sha256,test.sha256.hc"
+set "algorithms[3]=blake2s,test.blake2s.hc"
+set "algorithms[4]=streebog,test.streebog.hc"
+
+:: Loop through each algorithm
+for /L %%i in (0,1,4) do (
+    for /F "tokens=1,2 delims=," %%a in ("!algorithms[%%i]!") do (
+        set "hash=%%a"
+        set "container=%%b"
+        
+        if exist "!container!" (
+            call :mount_and_measure "!hash!" "!container!" "Normal" "!PASSWORD!"
+            call :mount_and_measure "!hash!" "!container!" "Hidden" "!HIDDEN_PASSWORD!"
+            echo.
+        )
+    )
+)
+
+:: Autodetect test
+call :availablevolume testvolume || goto :exit
+
+call :measure_time "Wrong Password (PRF Auto-detection)" ^
+    "/volume !testvolume! /l !mydriveletter! /password wrongpassword /q /silent /m ro"
+
+echo.
 goto :exit
-:cont
 
-echo Using drive letter %mydriveletter%: for our tests
-echo.
+:: Subroutine to mount a volume and measure the time taken
+:mount_and_measure
+setlocal 
+set "hash=%~1"
+set "container=%~2"
+set "type=%~3"
+set "volumepassword=%~4"
 
-IF NOT EXIST test.sha512.hc GOTO :whirlpool
+call :measure_time "%hash% (%type%)" ^
+    "/volume !container! /hash !hash! /l !mydriveletter! /password !volumepassword! /q /silent /m ro"
 
-rem Get start time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "start=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
+if not exist !mydriveletter!:\ (
+    echo ERROR: Drive letter !mydriveletter!: does not exist after mount operation.
+    goto :exit
 )
 
-rem Mount SHA-512 container (Normal)
-"c:\Program Files\VeraCrypt\veracrypt.exe" /volume test.sha512.hc /hash sha512 /l %mydriveletter% /password test /q /silent /m ro
+"!VERACRYPT_PATH!" /unmount !mydriveletter! /silent /q
+exit /b
 
-rem Get end time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "end=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
+:: Subroutine to measure the time taken for a command to execute
+:measure_time
+setlocal 
+set "oper=%~1"
+set "command=%~2"
+
+for /F "tokens=1-4 delims=:.," %%a in ("!time!") do set /A "start=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
+
+"!VERACRYPT_PATH!" %command%
+
+for /F "tokens=1-4 delims=:.," %%a in ("!time!") do set /A "end=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
 
-rem Get elapsed time:
 set /A elapsed=end-start
-
-rem Show elapsed time:
 set /A hh=elapsed/(60*60*100), rest=elapsed%%(60*60*100), mm=rest/(60*100), rest%%=60*100, ss=rest/100, cc=rest%%100
 if %hh% lss 10 set hh=0%hh%
 if %mm% lss 10 set mm=0%mm%
 if %ss% lss 10 set ss=0%ss%
 if %cc% lss 10 set cc=0%cc%
-echo SHA-512 (Normal) = %hh%:%mm%:%ss%,%cc%
 
-"c:\Program Files\VeraCrypt\veracrypt.exe" /dismount %mydriveletter% /silent /q
-
-rem Get start time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "start=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Mount SHA-512 container (Hidden)
-"c:\Program Files\VeraCrypt\veracrypt.exe" /volume test.sha512.hc /hash sha512 /l %mydriveletter% /password testhidden /q /silent /m ro
-
-rem Get end time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "end=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Get elapsed time:
-set /A elapsed=end-start
-
-rem Show elapsed time:
-set /A hh=elapsed/(60*60*100), rest=elapsed%%(60*60*100), mm=rest/(60*100), rest%%=60*100, ss=rest/100, cc=rest%%100
-if %hh% lss 10 set hh=0%hh%
-if %mm% lss 10 set mm=0%mm%
-if %ss% lss 10 set ss=0%ss%
-if %cc% lss 10 set cc=0%cc%
-echo SHA-512 (Hidden) = %hh%:%mm%:%ss%,%cc%
-echo.
-
-"c:\Program Files\VeraCrypt\veracrypt.exe" /dismount %mydriveletter% /silent /q
-
-:whirlpool
-
-IF NOT EXIST test.whirlpool.hc GOTO :sha256
-
-rem Get start time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "start=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Mount Whirlpool container (Normal).
-"c:\Program Files\VeraCrypt\veracrypt.exe" /volume test.whirlpool.hc /hash whirlpool /l %mydriveletter% /password test /q /silent /m ro
-
-rem Get end time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "end=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Get elapsed time:
-set /A elapsed=end-start
-
-rem Show elapsed time:
-set /A hh=elapsed/(60*60*100), rest=elapsed%%(60*60*100), mm=rest/(60*100), rest%%=60*100, ss=rest/100, cc=rest%%100
-if %hh% lss 10 set hh=0%hh%
-if %mm% lss 10 set mm=0%mm%
-if %ss% lss 10 set ss=0%ss%
-if %cc% lss 10 set cc=0%cc%
-echo Whirlpool (Normal) = %hh%:%mm%:%ss%,%cc%
-
-"c:\Program Files\VeraCrypt\veracrypt.exe" /dismount %mydriveletter% /silent /q
-
-rem Get start time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "start=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Mount Whirlpool container (Hidden).
-"c:\Program Files\VeraCrypt\veracrypt.exe" /volume test.whirlpool.hc /hash whirlpool /l %mydriveletter% /password testhidden /q /silent /m ro
-
-rem Get end time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "end=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Get elapsed time:
-set /A elapsed=end-start
-
-rem Show elapsed time:
-set /A hh=elapsed/(60*60*100), rest=elapsed%%(60*60*100), mm=rest/(60*100), rest%%=60*100, ss=rest/100, cc=rest%%100
-if %hh% lss 10 set hh=0%hh%
-if %mm% lss 10 set mm=0%mm%
-if %ss% lss 10 set ss=0%ss%
-if %cc% lss 10 set cc=0%cc%
-echo Whirlpool (Hidden) = %hh%:%mm%:%ss%,%cc%
-echo.
-
-"c:\Program Files\VeraCrypt\veracrypt.exe" /dismount %mydriveletter% /silent /q
-
-:sha256
-
-IF NOT EXIST test.sha256.hc GOTO :ripemd160
-
-rem Get start time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "start=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Mount SHA-256 container (Normal)
-"c:\Program Files\VeraCrypt\veracrypt.exe" /volume test.sha256.hc /hash sha256 /l %mydriveletter% /password test /q /silent /m ro
-
-rem Get end time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "end=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Get elapsed time:
-set /A elapsed=end-start
-
-rem Show elapsed time:
-set /A hh=elapsed/(60*60*100), rest=elapsed%%(60*60*100), mm=rest/(60*100), rest%%=60*100, ss=rest/100, cc=rest%%100
-if %hh% lss 10 set hh=0%hh%
-if %mm% lss 10 set mm=0%mm%
-if %ss% lss 10 set ss=0%ss%
-if %cc% lss 10 set cc=0%cc%
-echo SHA-256 (Normal) = %hh%:%mm%:%ss%,%cc%
-
-"c:\Program Files\VeraCrypt\veracrypt.exe" /dismount %mydriveletter% /silent /q
-
-rem Get start time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "start=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Mount SHA-256 container (Hidden)
-"c:\Program Files\VeraCrypt\veracrypt.exe" /volume test.sha256.hc /hash sha256 /l %mydriveletter% /password testhidden /q /silent /m ro
-
-rem Get end time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "end=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Get elapsed time:
-set /A elapsed=end-start
-
-rem Show elapsed time:
-set /A hh=elapsed/(60*60*100), rest=elapsed%%(60*60*100), mm=rest/(60*100), rest%%=60*100, ss=rest/100, cc=rest%%100
-if %hh% lss 10 set hh=0%hh%
-if %mm% lss 10 set mm=0%mm%
-if %ss% lss 10 set ss=0%ss%
-if %cc% lss 10 set cc=0%cc%
-echo SHA-256 (Hidden) = %hh%:%mm%:%ss%,%cc%
-echo.
-
-"c:\Program Files\VeraCrypt\veracrypt.exe" /dismount %mydriveletter% /silent /q
-
-:ripemd160
-
-IF NOT EXIST test.ripemd160.hc GOTO :streebog
-
-rem Get start time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "start=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Mount RIPEMD-160 container (Normal)
-"c:\Program Files\VeraCrypt\veracrypt.exe" /volume test.ripemd160.hc /hash ripemd160 /l %mydriveletter% /password test /q /silent /m ro
-
-rem Get end time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "end=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Get elapsed time:
-set /A elapsed=end-start
-
-rem Show elapsed time:
-set /A hh=elapsed/(60*60*100), rest=elapsed%%(60*60*100), mm=rest/(60*100), rest%%=60*100, ss=rest/100, cc=rest%%100
-if %hh% lss 10 set hh=0%hh%
-if %mm% lss 10 set mm=0%mm%
-if %ss% lss 10 set ss=0%ss%
-if %cc% lss 10 set cc=0%cc%
-echo RIPEMD-160 (Normal) = %hh%:%mm%:%ss%,%cc%
-
-"c:\Program Files\VeraCrypt\veracrypt.exe" /dismount %mydriveletter% /silent /q
-
-rem Get start time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "start=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Mount RIPEMD-160 container (Hidden)
-"c:\Program Files\VeraCrypt\veracrypt.exe" /volume test.ripemd160.hc /hash ripemd160 /l %mydriveletter% /password testhidden /q /silent /m ro
-
-rem Get end time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "end=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Get elapsed time:
-set /A elapsed=end-start
-
-rem Show elapsed time:
-set /A hh=elapsed/(60*60*100), rest=elapsed%%(60*60*100), mm=rest/(60*100), rest%%=60*100, ss=rest/100, cc=rest%%100
-if %hh% lss 10 set hh=0%hh%
-if %mm% lss 10 set mm=0%mm%
-if %ss% lss 10 set ss=0%ss%
-if %cc% lss 10 set cc=0%cc%
-echo RIPEMD-160 (Hidden) = %hh%:%mm%:%ss%,%cc%
-echo.
-
-"c:\Program Files\VeraCrypt\veracrypt.exe" /dismount %mydriveletter% /silent /q
-
-:streebog
-
-IF NOT EXIST test.streebog.hc GOTO :autodetect
-
-rem Get start time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "start=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Mount Streebog container (Normal)
-"c:\Program Files\VeraCrypt\veracrypt.exe" /volume test.streebog.hc /hash streebog /l %mydriveletter% /password test /q /silent /m ro
-
-rem Get end time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "end=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Get elapsed time:
-set /A elapsed=end-start
-
-rem Show elapsed time:
-set /A hh=elapsed/(60*60*100), rest=elapsed%%(60*60*100), mm=rest/(60*100), rest%%=60*100, ss=rest/100, cc=rest%%100
-if %hh% lss 10 set hh=0%hh%
-if %mm% lss 10 set mm=0%mm%
-if %ss% lss 10 set ss=0%ss%
-if %cc% lss 10 set cc=0%cc%
-echo Streebog (Normal) = %hh%:%mm%:%ss%,%cc%
-
-"c:\Program Files\VeraCrypt\veracrypt.exe" /dismount %mydriveletter% /silent /q
-
-rem Get start time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "start=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Mount Streebog container (Hidden)
-"c:\Program Files\VeraCrypt\veracrypt.exe" /volume test.streebog.hc /hash streebog /l %mydriveletter% /password testhidden /q /silent /m ro
-
-rem Get end time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "end=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Get elapsed time:
-set /A elapsed=end-start
-
-rem Show elapsed time:
-set /A hh=elapsed/(60*60*100), rest=elapsed%%(60*60*100), mm=rest/(60*100), rest%%=60*100, ss=rest/100, cc=rest%%100
-if %hh% lss 10 set hh=0%hh%
-if %mm% lss 10 set mm=0%mm%
-if %ss% lss 10 set ss=0%ss%
-if %cc% lss 10 set cc=0%cc%
-echo Streebog (Hidden) = %hh%:%mm%:%ss%,%cc%
-echo.
-
-"c:\Program Files\VeraCrypt\veracrypt.exe" /dismount %mydriveletter% /silent /q
-
-:autodetect
-
-call :availablevolume testvolume && goto :contautodetect
-goto :exit
-:contautodetect
-
-rem Get start time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "start=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Try to mount with a wrong password and PRF autodetection
-"c:\Program Files\VeraCrypt\veracrypt.exe" /volume %testvolume% /l %mydriveletter% /password wrongpassword /q /silent /m ro
-
-rem Get end time:
-for /F "tokens=1-4 delims=:.," %%a in ("%time%") do (
-   set /A "end=(((%%a*60)+1%%b %% 100)*60+1%%c %% 100)*100+1%%d %% 100"
-)
-
-rem Get elapsed time:
-set /A elapsed=end-start
-
-rem Show elapsed time:
-set /A hh=elapsed/(60*60*100), rest=elapsed%%(60*60*100), mm=rest/(60*100), rest%%=60*100, ss=rest/100, cc=rest%%100
-if %hh% lss 10 set hh=0%hh%
-if %mm% lss 10 set mm=0%mm%
-if %ss% lss 10 set ss=0%ss%
-if %cc% lss 10 set cc=0%cc%
-echo Wrong Password (PRF Auto-detection)= %hh%:%mm%:%ss%,%cc%
-echo.
-
-
-goto :exit
+echo %oper% = %hh%:%mm%:%ss%,%cc%
+exit /b
 
 rem Finds a free drive letter.
 rem
@@ -360,11 +119,12 @@ set drive=
 :freedrive0
 endlocal & set "%output_var%=%drive%" & exit /b %exitcode%
 
+:: Subroutine to find an available volume
 :availablevolume
 setlocal EnableDelayedExpansion
 set exitcode=0
 set "output_var=%~1"
-for %%i in (test.sha512.hc,test.sha256.hc,test.whirlpool.hc,test.ripemd160.hc) do (
+for %%i in (test.sha512.hc,test.sha256.hc,test.whirlpool.hc,test.blake2s.hc) do (
     if exist %%i (
         set "volume=%%i"
         goto :availablevolume0

contrib/EncryptData.ps1

@@ -0,0 +1,444 @@
+<#
+.SYNOPSIS
+    Create a VeraCrypt container just large enough for the supplied file or
+    directory and copy the data into it.
+
+.DESCRIPTION
+    • Chooses an exFAT cluster size (auto or explicit).
+    • Calculates the minimum container size using an iterative approach for FAT/Bitmap sizing, plus safety margin.
+    • Creates, mounts, copies, verifies, and unmounts – all guarded by -WhatIf/-Confirm (SupportsShouldProcess).
+    • Finds VeraCrypt automatically or takes a -VeraCryptDir override.
+    • Encryption and hash algorithms are parameters.
+    • Password can be passed via SecureString prompt or pipeline.
+    • Enhanced parameterization for safety margins and VeraCrypt overhead.
+
+.PARAMETER InputPath        File or directory to store in the container.
+.PARAMETER ContainerPath    Dest *.hc* file. Default: InputPath + '.hc'.
+.PARAMETER ClusterSizeKB    4–512 KiB or 'Auto' (default 32).
+.PARAMETER VeraCryptDir     Optional folder containing VeraCrypt *.exe* files.
+.PARAMETER EncryptionAlg    Any algorithm VeraCrypt accepts (default AES).
+.PARAMETER HashAlg          VeraCrypt hash (default SHA512).
+.PARAMETER SafetyPercent    Safety margin as percentage of calculated size (default 1.0 for small, 0.1 for large).
+.PARAMETER VCOverheadMiB    VeraCrypt overhead in MiB (default varies by size).
+.PARAMETER Force            If specified, allows overwriting the output container if it already exists.
+.PARAMETER Password         Optional SecureString password for automation (prompts if not provided).
+
+.EXAMPLE
+    .\EncryptData.ps1 -InputPath C:\Data -ContainerPath C:\EncryptedData.hc -ClusterSizeKB Auto
+.NOTES
+    Author: Mounir IDRASSI
+    Email: mounir.idrassi@amcrypto.jp
+    Date: 30 April 2025
+    License: This script is licensed under the Apache License 2.0
+#>
+
+[CmdletBinding(SupportsShouldProcess)]
+param(
+    [Parameter(Mandatory)][string]$InputPath,
+    [string]$ContainerPath,
+    [ValidateSet('Auto','4','8','16','32','64','128','256','512')]
+    [string]$ClusterSizeKB = '32',
+    [string]$VeraCryptDir,
+    [string]$EncryptionAlg = 'AES',
+    [string]$HashAlg = 'SHA512',
+    # 0 ⇒ use built-in logic; otherwise 0–100 %  
+    [ValidateRange(0.0,100.0)]  
+    [double]$SafetyPercent = 0,  
+    # 0 ⇒ auto. 1-8192 MiB accepted.  
+    [ValidateRange(0,8192)]  
+    [int]$VCOverheadMiB    = 0,
+    [Parameter(ValueFromPipeline = $true)][System.Security.SecureString]$Password,
+    [switch]$Force
+)
+
+Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
+
+function Get-AbsolutePath([string]$Path) {
+    if ([System.IO.Path]::IsPathRooted($Path)) {
+        return [System.IO.Path]::GetFullPath($Path)
+    } else {
+        $combined = Join-Path -Path (Get-Location) -ChildPath $Path
+        return [System.IO.Path]::GetFullPath($combined)
+    }
+}
+
+# Helper creates a temp file, registers it for secure deletion in finally  
+function New-VcErrFile {  
+    $tmp = [System.IO.Path]::GetTempFileName()  
+    # Pre-allocate 0-byte file; caller overwrites  
+    return $tmp  
+}
+
+# Constants for exFAT sizing
+$EXFAT_MIN_CLUSTERS = 2
+$EXFAT_PRACTICAL_MIN_CLUSTERS = 65533
+$INITIAL_VBR_SIZE = 32KB
+$BACKUP_VBR_SIZE = 32KB
+$RAW_UPCASE_BYTES = 128KB
+
+#----------------------- Locate VeraCrypt executables --------------------------
+if (-not $VeraCryptDir) {
+    $candidates = @(Join-Path $env:ProgramFiles 'VeraCrypt')
+    $VeraCryptDir = $candidates |
+        Where-Object { Test-Path (Join-Path $_ 'VeraCrypt.exe') } |
+        Select-Object -First 1
+    if (-not $VeraCryptDir) {
+        $cmd = Get-Command 'VeraCrypt.exe' -ErrorAction SilentlyContinue
+        if ($cmd) { $VeraCryptDir = Split-Path $cmd.Path }
+    }
+    if (-not $VeraCryptDir) { throw 'VeraCrypt executables not found – specify -VeraCryptDir.' }
+}
+
+$VeraCryptExe = Join-Path $VeraCryptDir 'VeraCrypt.exe'
+$VeraCryptFormatExe = Join-Path $VeraCryptDir 'VeraCrypt Format.exe'
+if (-not (Test-Path $VeraCryptExe) -or -not (Test-Path $VeraCryptFormatExe)) {
+    throw 'VeraCrypt executables missing.'
+}
+
+#--------------------------- Input / Output Paths ------------------------------
+$InputPath = Get-AbsolutePath $InputPath
+if (-not (Test-Path $InputPath)) { throw "InputPath '$InputPath' does not exist." }
+
+if (-not $ContainerPath) {
+    $ContainerPath = ($InputPath.TrimEnd('\') + '.hc')
+} else {
+    $ContainerPath = Get-AbsolutePath $ContainerPath
+}
+if (Test-Path $ContainerPath) {
+    if ($Force) {
+        Write-Verbose "Container '$ContainerPath' already exists and will be overwritten."
+        if ($PSCmdlet.ShouldProcess("File '$ContainerPath'", "Remove existing container")) {
+            Remove-Item $ContainerPath -Force
+        } else {
+            throw "Operation cancelled by user. Cannot overwrite '$ContainerPath'."
+        }
+    } else {
+        throw "Container '$ContainerPath' already exists. Use -Force to overwrite."
+    }
+}
+
+#----------------------------- Cluster Size -------------------------------------
+[UInt32]$ClusterSize = if ($ClusterSizeKB -eq 'Auto') { $null } else { [int]$ClusterSizeKB * 1KB }
+
+#--------------------------- exFAT Size Helpers --------------------------------
+function Get-DirectoryStats {
+    param([string]$Path)
+
+    $fileLengths = [System.Collections.Generic.List[UInt64]]::new()
+    $dirLengths  = [System.Collections.Generic.List[UInt64]]::new()
+    [UInt64]$metaSum = 0
+
+    function WalkDir {
+        param([System.IO.DirectoryInfo]$Dir)
+
+        [UInt64]$thisDirBytes = 0
+
+        # Use -ErrorAction SilentlyContinue for potentially inaccessible items (like system junctions)
+        Get-ChildItem -LiteralPath $Dir.FullName -Force -ErrorAction SilentlyContinue | ForEach-Object {
+
+            $nameLen   = $_.Name.Length
+            $nameSlots = [math]::Ceiling($nameLen / 15)          # name entries
+            $dirSlots  = 2 + $nameSlots                          # File + Stream + Names
+            $entryBytes = $dirSlots * 32
+
+            $metaSum      += $entryBytes
+            $thisDirBytes += $entryBytes
+
+            if ($_.PSIsContainer) {
+                WalkDir $_
+            } else {
+                # Handle potential errors reading length (e.g., locked files)
+                try {
+                    $fileLengths.Add([UInt64]$_.Length)
+                } catch {
+                    Write-Warning "Could not get length for file: $($_.FullName). Error: $($_.Exception.Message)"
+                }
+            }
+        }
+
+        # At least one 32-byte entry so the directory is not “empty”
+        if ($thisDirBytes -lt 32) { $thisDirBytes = 32 }
+
+        $dirLengths.Add($thisDirBytes)
+    }
+
+    $startItem = Get-Item -LiteralPath $Path -Force
+    if ($startItem -isnot [System.IO.DirectoryInfo]) {
+        # Handle case where InputPath is a single file
+        $nameLen   = $startItem.Name.Length
+        $nameSlots = [math]::Ceiling($nameLen / 15)
+        $dirSlots  = 2 + $nameSlots
+        $entryBytes = $dirSlots * 32
+        $metaSum = $entryBytes
+        $fileLengths.Add([UInt64]$startItem.Length)
+        $dirLengths.Add(32) # Minimal directory entry size for the root
+    } else {
+        WalkDir $startItem
+    }
+
+    [PSCustomObject]@{
+        MetadataSum = $metaSum      # pure 32-byte entry bytes (used for info, not size calc)
+        FileLengths = $fileLengths  # payload of regular files
+        DirLengths  = $dirLengths   # payload of *directory files* (containing entries)
+    }
+}
+
+function Compute-ExFatSize {
+    param(
+        [Parameter(Mandatory)][UInt64[]] $FileLengths,
+        [Parameter(Mandatory)][UInt64[]] $DirLengths,
+        [Parameter(Mandatory)][UInt32]   $Cluster
+    )
+
+    # --- Calculate base size (VBR, UpCase Table, File Payloads, Directory Payloads) ---
+    # These parts don't depend on the total cluster count directly.
+    [UInt64]$baseSize = $INITIAL_VBR_SIZE + $BACKUP_VBR_SIZE
+    $baseSize += [math]::Ceiling($RAW_UPCASE_BYTES / $Cluster) * $Cluster  # up-case tbl aligned
+
+    foreach ($len in $FileLengths) { $baseSize += [math]::Ceiling($len / $Cluster) * $Cluster }
+    foreach ($len in $DirLengths ) { $baseSize += [math]::Ceiling($len / $Cluster) * $Cluster }
+
+    # --- Iterative FAT/Bitmap Calculation ---
+    # The size of FAT and Bitmap depends on the total cluster count, which depends on the total size (including FAT/Bitmap).
+    # We iterate until the calculated total size stabilizes.
+
+    [UInt64]$currentTotalSize = $baseSize # Initial guess: size without FAT/Bitmap
+    [UInt64]$previousTotalSize = 0
+    $maxIterations = 10 # Safety break to prevent infinite loops
+    $iteration = 0
+
+    while ($currentTotalSize -ne $previousTotalSize -and $iteration -lt $maxIterations) {
+        $previousTotalSize = $currentTotalSize
+        $iteration++
+        Write-Verbose "Compute-ExFatSize Iteration '$iteration': Starting size = '$previousTotalSize' bytes"
+
+        # Calculate cluster count based on the size from the *start* of this iteration
+        $clusterCount = [math]::Ceiling($previousTotalSize / $Cluster)
+        # Ensure minimum cluster count if needed (exFAT has minimums, though usually covered by VBR etc.)
+        if ($clusterCount -lt $EXFAT_PRACTICAL_MIN_CLUSTERS) { $clusterCount = $EXFAT_PRACTICAL_MIN_CLUSTERS } # Practical minimum for FAT entries > sector size
+
+        # Allocation bitmap (1 bit per cluster, aligned to cluster size)
+        $bitmapBytes = [math]::Ceiling($clusterCount / 8)
+        $bitmapBytesAligned = [math]::Ceiling($bitmapBytes / $Cluster) * $Cluster
+        Write-Verbose "  Clusters: '$clusterCount', Bitmap Bytes: '$bitmapBytes', Aligned Bitmap: '$bitmapBytesAligned'"
+
+        # FAT (4 bytes per cluster, +2 reserved entries, aligned to cluster size)
+        $fatBytes = ([UInt64]$clusterCount + 2) * 4 # Use UInt64 to avoid overflow on large volumes
+        $fatBytesAligned = [math]::Ceiling($fatBytes / $Cluster) * $Cluster
+        Write-Verbose "  FAT Bytes: '$fatBytes', Aligned FAT: '$fatBytesAligned'"
+
+        # Calculate the new total size estimate including FAT and Bitmap
+        $currentTotalSize = $baseSize + $bitmapBytesAligned + $fatBytesAligned
+        Write-Verbose "  New Estimated Total Size: '$currentTotalSize' bytes"
+    }
+
+    if ($iteration -ge $maxIterations) {
+        Write-Warning "FAT/Bitmap size calculation did not converge after '$maxIterations' iterations. Using last calculated size ('$currentTotalSize' bytes). This might indicate an issue or extremely large dataset."
+    }
+
+    Write-Verbose "Compute-ExFatSize Converged Size: '$currentTotalSize' bytes after '$iteration' iterations."
+    return [PSCustomObject]@{
+        TotalSize = $currentTotalSize
+        ClusterCount = $clusterCount
+        IterationHistory = @()
+    }
+}
+
+function Get-RecommendedCluster {
+    param([UInt64]$VolumeBytes)
+    switch ($VolumeBytes) {
+        { $_ -le 256MB } { return 4KB }
+        { $_ -le 32GB } { return 32KB }
+        { $_ -le 256TB } { return 128KB }
+        default { return 512KB }
+    }
+}
+
+#----------------------------------------------- Drive the two-pass logic
+Write-Host "Calculating required size for '$InputPath'..."
+$stats = Get-DirectoryStats -Path $InputPath
+Write-Verbose "Stats: $($stats.FileLengths.Count) files, $($stats.DirLengths.Count) directories, Metadata: $($stats.MetadataSum) bytes."
+
+if (-not $ClusterSize) {
+    Write-Verbose "Cluster size set to 'Auto'. Performing first pass calculation with 4KB cluster..."
+    $firstPassResult = Compute-ExFatSize -FileLengths $stats.FileLengths -DirLengths $stats.DirLengths -Cluster 4KB
+    $firstPassSize = $firstPassResult.TotalSize
+    Write-Verbose "First pass estimated size: '$firstPassSize' bytes"
+
+    $ClusterSize = Get-RecommendedCluster -VolumeBytes $firstPassSize
+    Write-Host "Auto-selected Cluster size: $($ClusterSize / 1KB) KiB based on estimated size."
+    Write-Verbose "Performing second pass calculation with selected cluster size ($($ClusterSize / 1KB) KiB)..."
+    $sizeResult = Compute-ExFatSize -FileLengths $stats.FileLengths -DirLengths $stats.DirLengths -Cluster $ClusterSize
+    $rawSize = $sizeResult.TotalSize
+} else {
+    Write-Host "Using specified Cluster size: $($ClusterSize / 1KB) KiB."
+    Write-Verbose "Performing calculation with specified cluster size..."
+    $sizeResult = Compute-ExFatSize -FileLengths $stats.FileLengths -DirLengths $stats.DirLengths -Cluster $ClusterSize
+    $rawSize = $sizeResult.TotalSize
+}
+
+#---------------------------- Container Sizing ---------------------------------
+$safetyPercentUsed = if ($SafetyPercent -gt 0.0) { $SafetyPercent } else { if ($rawSize -lt 100MB) { 1.0 } else { 0.1 } }
+$safety = if ($rawSize -lt 100MB) { [math]::Max(64KB, [math]::Ceiling($rawSize * $safetyPercentUsed / 100)) }
+          else { [math]::Max(1MB, [math]::Ceiling($rawSize * $safetyPercentUsed / 100)) }
+$contBytes = $rawSize + [UInt64]$safety
+$contMiB = [int][math]::Ceiling($contBytes / 1MB)
+if ($contMiB -lt 2) { $contMiB = 2 }
+
+$vcOverheadMiBUsed = if ($VCOverheadMiB -gt 0) { $VCOverheadMiB } else {
+    if ($contMiB -lt 10) { 1 } elseif ($contMiB -lt 100) { 2 } else { [math]::Ceiling($contMiB * 0.01) }
+}
+$finalContMiB = $contMiB + $vcOverheadMiBUsed
+
+Write-Host ("Cluster Size  : {0} KiB`nCalculated FS: {1:N0} bytes`nSafety Margin: {2:N0} bytes ({3}%)`nVC Overhead  : {4} MiB`nFinal Size   : {5} MiB" -f
+    ($ClusterSize/1KB), $rawSize, $safety, $safetyPercentUsed, $vcOverheadMiBUsed, $finalContMiB)
+
+#---- Secure Password Prompt ----
+if (-not $Password) {
+    $Password = Read-Host -AsSecureString -Prompt "Enter container password"
+}
+$cred = New-Object System.Management.Automation.PSCredential ("VeraCryptUser", $Password)
+$plainPassword = $cred.GetNetworkCredential().Password
+
+if ([string]::IsNullOrWhiteSpace($plainPassword)) {
+    Write-Host "Error: Password cannot be empty. Please provide a non-empty password." -ForegroundColor Red
+    exit 1
+}
+
+#---- Main Action ----
+$mounted = $false
+$driveLetter = $null
+
+$errFile   = New-VcErrFile  
+$mountFile = New-VcErrFile
+
+try {
+    #--- Create Container ----
+    if ($PSCmdlet.ShouldProcess("File '$ContainerPath'", "Create VeraCrypt container ($finalContMiB MiB)")) {
+        $formatArgs = @(
+            '/create', $ContainerPath,
+            '/size', "$($finalContMiB)M",
+            '/password', $plainPassword,
+            '/encryption', $EncryptionAlg,
+            '/hash', $HashAlg,
+            '/filesystem', 'exFAT',
+            '/quick', '/silent',
+            '/force'
+        )
+        $maskedArgs = $formatArgs.Clone()
+        $pwIndex = [array]::IndexOf($maskedArgs, '/password')
+        if ($pwIndex -ge 0 -and $pwIndex + 1 -lt $maskedArgs.Length) { $maskedArgs[$pwIndex+1] = '********' }
+        Write-Verbose "Executing: `"$VeraCryptFormatExe`" $($maskedArgs -join ' ')"
+
+        $proc = Start-Process -FilePath $VeraCryptFormatExe -ArgumentList $formatArgs -NoNewWindow -Wait -PassThru -RedirectStandardError $errFile
+        if ($proc.ExitCode -ne 0) {
+            $errMsg = if (Test-Path $errFile) { Get-Content $errFile -Raw } else { "No error output captured." }
+            throw "VeraCrypt Format failed (code $($proc.ExitCode)). Error: $errMsg"
+        }
+        Write-Verbose "VeraCrypt Format completed successfully."
+    } else {
+        Write-Host "Container creation skipped due to -WhatIf."
+        exit
+    }
+
+    #--- Choose Drive Letter ----
+    $used = (Get-PSDrive -PSProvider FileSystem).Name
+    $driveLetter = (67..90 | ForEach-Object {[char]$_}) |
+        Where-Object { $_ -notin $used } |
+        Select-Object -First 1
+    if (-not $driveLetter) { throw 'No free drive letters found (C-Z).' }
+    Write-Verbose "Selected drive letter: $driveLetter"
+
+    #--- Mount ----
+    if ($PSCmdlet.ShouldProcess("Drive $driveLetter", "Mount VeraCrypt volume '$ContainerPath'")) {
+        $mountArgs = @(
+            '/volume', $ContainerPath,
+            '/letter', $driveLetter,
+            '/m', 'rm',
+            '/password', $plainPassword,
+            '/quit', '/silent'
+        )
+        $maskedArgs = $mountArgs.Clone()
+        $pwIndex = [array]::IndexOf($maskedArgs, '/password')
+        if ($pwIndex -ge 0 -and $pwIndex + 1 -lt $maskedArgs.Length) { $maskedArgs[$pwIndex+1] = '********' }
+        Write-Verbose "Executing: `"$VeraCryptExe`" $($maskedArgs -join ' ')"
+
+        $mountProc = Start-Process -FilePath $VeraCryptExe -ArgumentList $mountArgs -NoNewWindow -Wait -PassThru -RedirectStandardError $mountFile
+        if ($mountProc.ExitCode -ne 0) {
+            $errMsg = if (Test-Path $mountFile) { Get-Content $mountFile -Raw } else { "No error output captured." }
+            throw "VeraCrypt mount failed (code $($mountProc.ExitCode)). Error: $errMsg"
+        }
+
+        $root = "$($driveLetter):\"
+        Write-Verbose "Waiting for drive $root to become available..."
+        $mountTimeoutSeconds = 30
+        $mountCheckInterval = 0.5
+        $elapsed = 0
+        while (-not (Test-Path $root) -and $elapsed -lt $mountTimeoutSeconds) {
+            Start-Sleep -Seconds $mountCheckInterval
+            $elapsed += $mountCheckInterval
+        }
+
+        if (-not (Test-Path $root)) { throw "Drive $driveLetter did not appear within $mountTimeoutSeconds seconds." }
+        $mounted = $true
+        Write-Verbose "Drive $root mounted successfully."
+    } else {
+        Write-Host "Mounting skipped due to -WhatIf."
+        exit
+    }
+
+    #--- Copy Data ----
+    $destinationPath = "$($driveLetter):\"
+    if ($PSCmdlet.ShouldProcess("'$InputPath' -> '$destinationPath'", "Copy input data into container")) {
+        Write-Verbose "Starting data copy..."
+        if (Test-Path $InputPath -PathType Container) {
+            Copy-Item -Path "$InputPath\*" -Destination $destinationPath -Recurse -Force -ErrorAction Stop
+            Write-Verbose "Copied directory contents recursively."
+        } else {
+            Copy-Item -Path $InputPath -Destination $destinationPath -Force -ErrorAction Stop
+            Write-Verbose "Copied single file."
+        }
+        try {
+            $driveInfo = Get-PSDrive $driveLetter -ErrorAction Stop
+            $freeSpace = $driveInfo.Free
+            Write-Verbose "Free space after copy: $freeSpace bytes."
+            if ($freeSpace -lt 0) {
+                Write-Warning 'Reported free space is negative. This might indicate an issue, but the copy might still be okay.'
+            } elseif ($freeSpace -lt 1MB) {
+                Write-Warning "Very low free space remaining ($freeSpace bytes). The container might be too small if data changes slightly."
+            }
+        } catch {
+            Write-Warning "Could not verify free space on drive $driveLetter after copy. Error: $($_.Exception.Message)"
+        }
+        Write-Host "Data copy completed."
+    } else {
+        Write-Host "Data copy skipped due to -WhatIf."
+    }
+} catch {
+    Write-Error "An error occurred: $($_.Exception.Message)"
+} finally {
+    if (Test-Path variable:plainPassword) { Clear-Variable plainPassword -ErrorAction SilentlyContinue }
+    if ($mounted) {
+        if ($PSCmdlet.ShouldProcess("Drive $driveLetter", "Unmount VeraCrypt volume")) {
+            Write-Verbose "Unmounting drive $driveLetter..."
+            $unmountArgs = @('/unmount', $driveLetter, '/force', '/quit', '/silent')
+            Start-Process -FilePath $VeraCryptExe -ArgumentList $unmountArgs -NoNewWindow -Wait -ErrorAction SilentlyContinue
+            Write-Verbose "Unmount command issued."
+        } else {
+            Write-Host "Unmount skipped due to -WhatIf."
+        }
+    }
+    foreach($f in @($errFile,$mountFile) | Where-Object { $_ }) {  
+        if(Test-Path $f){  
+            try { Set-Content -Path $f -Value ($null) -Encoding Byte -Force } catch{}  
+            Remove-Item $f -Force -ErrorAction SilentlyContinue  
+        }  
+    }
+}
+
+if ($PSCmdlet.ShouldProcess("File '$ContainerPath'", "Create VeraCrypt container ($finalContMiB MiB)")) {
+    Write-Host ("Script finished. VeraCrypt container created at '{0}' ({1} MiB)." -f $ContainerPath, $finalContMiB)
+} else {
+    Write-Host ("Script finished (simulation mode).")
+}

doc/chm/create_chm.bat

@@ -1,13 +1,41 @@
 PATH=%PATH%;C:\Program Files (x86)\HTML Help Workshop
 
 set CHMBUILDPATH=%~dp0
-cd %CHMBUILDPATH%
+cd %CHMBUILDPATH%\en
 
-copy ..\html\* .
+xcopy /E ..\..\html\en\* .
 
 hhc VeraCrypt.hhp
 
-del /F /Q *.html *.css *.jpg *.gif *.png
+del /F /Q *.html *.css *.jpg *.gif *.png *.svg *.js
+rmdir /s /Q CompilingGuidelineWin
+
+move /Y "VeraCrypt User Guide.chm" "..\VeraCrypt User Guide.chm"
+
+cd %CHMBUILDPATH%\zh-cn
+
+xcopy /E ..\..\html\zh-cn\* .
+
+hhc VeraCrypt.zh-cn.hhp
+
+del /F /Q *.html *.css *.jpg *.gif *.png *.svg *.js
+rmdir /s /Q CompilingGuidelineWin
+
+move /Y "VeraCrypt User Guide.zh-cn.chm" "..\VeraCrypt User Guide.zh-cn.chm"
+
+cd %CHMBUILDPATH%\ru
+
+xcopy /E ..\..\html\ru\* .
+
+hhc VeraCrypt.ru.hhp
+
+del /F /Q *.html *.css *.jpg *.gif *.png *.svg *.js
+rmdir /s /Q CompilingGuidelineWin
+
+move /Y "VeraCrypt User Guide.ru.chm" "..\VeraCrypt User Guide.ru.chm"
+
+cd %CHMBUILDPATH%
+
 
 
 

doc/chm/en/VeraCrypt.hhc

@@ -95,6 +95,14 @@
 			<param name="Local" value="Mounting VeraCrypt Volumes.html">
 			</OBJECT>
 	</UL>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="Normal Unmount vs Force Unmount ">
+		<param name="Local" value="Normal Unmount vs Force Unmount.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="Avoid Third-Party File Extensions">
+		<param name="Local" value="Avoid Third-Party File Extensions.html">
+		</OBJECT>
 	<LI> <OBJECT type="text/sitemap">
 		<param name="Name" value="Parallelization">
 		<param name="Local" value="Parallelization.html">
@@ -131,6 +139,10 @@
 		<param name="Name" value="Converting TrueCrypt Volumes &amp; Partitions">
 		<param name="Local" value="Converting TrueCrypt volumes and partitions.html">
 		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="Conversion Guide for Versions 1.26 and Later">
+		<param name="Local" value="Conversion_Guide_VeraCrypt_1.26_and_Later.html">
+		</OBJECT>
 	<LI> <OBJECT type="text/sitemap">
 		<param name="Name" value="Default Mount Parameters">
 		<param name="Local" value="Default Mount Parameters.html">
@@ -175,8 +187,8 @@
 		</OBJECT>
 	<UL>
 		<LI> <OBJECT type="text/sitemap">
-			<param name="Name" value="RIPEMD-160">
-			<param name="Local" value="RIPEMD-160.html">
+			<param name="Name" value="BLAKE2s-256">
+			<param name="Local" value="BLAKE2s-256.html">
 			</OBJECT>
 		<LI> <OBJECT type="text/sitemap">
 			<param name="Name" value="SHA-256">
@@ -195,6 +207,20 @@
 			<param name="Local" value="Streebog.html">
 			</OBJECT>
 	</UL>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="Key Derivation Algorithms">
+		<param name="Local" value="Key Derivation Algorithms.html">
+		</OBJECT>
+	<UL>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="Argon2id">
+			<param name="Local" value="Argon2id.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="PBKDF2">
+			<param name="Local" value="pbkdf2.html">
+			</OBJECT>
+	</UL>
 	<LI> <OBJECT type="text/sitemap">
 		<param name="Name" value="Supported Operating Systems">
 		<param name="Local" value="Supported Operating Systems.html">
@@ -203,6 +229,16 @@
 		<param name="Name" value="Command Line Usage">
 		<param name="Local" value="Command Line Usage.html">
 		</OBJECT>
+	<UL>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="Windows">
+			<param name="Local" value="Command Line Usage for Windows.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="Linux and macOS">
+			<param name="Local" value="Command Line Usage for Unix.html">
+			</OBJECT>
+	</UL>
 	<LI> <OBJECT type="text/sitemap">
 		<param name="Name" value="Security Model">
 		<param name="Local" value="Security Model.html">
@@ -234,6 +270,14 @@
 			<param name="Name" value="Unencrypted Data in RAM">
 			<param name="Local" value="Unencrypted Data in RAM.html">
 			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="VeraCrypt RAM Encryption">
+			<param name="Local" value="VeraCrypt RAM Encryption.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="VeraCrypt Memory Protection">
+			<param name="Local" value="VeraCrypt Memory Protection.html">
+			</OBJECT>
 		<LI> <OBJECT type="text/sitemap">
 			<param name="Name" value="Physical Security">
 			<param name="Local" value="Physical Security.html">
@@ -390,6 +434,20 @@
 			<param name="Name" value="Source Code">
 			<param name="Local" value="Source Code.html">
 			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="Building VeraCrypt From Source">
+			<param name="Local" value="CompilingGuidelines.html">
+			</OBJECT>
+		<UL>
+			<LI> <OBJECT type="text/sitemap">
+				<param name="Name" value="Windows Build Guide">
+				<param name="Local" value="CompilingGuidelineWin.html">
+				</OBJECT>
+			<LI> <OBJECT type="text/sitemap">
+				<param name="Name" value="Linux Build Guide">
+				<param name="Local" value="CompilingGuidelineLinux.html">
+				</OBJECT>
+		</UL>
 	</UL>
 	<LI> <OBJECT type="text/sitemap">
 		<param name="Name" value="Contact">

doc/chm/en/VeraCrypt.hhp

@@ -13,10 +13,14 @@ Title=VeraCrypt User Guide
 Acknowledgements.html
 Additional Security Requirements and Precautions.html
 AES.html
+Argon2id.html
 arrow_right.gif
 Authenticity and Integrity.html
 Authors.html
+Avoid Third-Party File Extensions.html
 bank_30x30.png
+BC_Logo_30x30.png
+BCH_Logo_30x30.png
 Beginner's Tutorial.html
 Beginner's Tutorial_Image_001.jpg
 Beginner's Tutorial_Image_002.jpg
@@ -42,13 +46,20 @@ Beginner's Tutorial_Image_022.jpg
 Beginner's Tutorial_Image_023.gif
 Beginner's Tutorial_Image_024.gif
 Beginner's Tutorial_Image_034.png
+BLAKE2s-256.html
 Camellia.html
 Cascades.html
 Changing Passwords and Keyfiles.html
 Choosing Passwords and Keyfiles.html
 Command Line Usage.html
+Command Line Usage for Windows.html
+Command Line Usage for Unix.html
+CompilingGuidelineLinux.html
+CompilingGuidelines.html
+CompilingGuidelineWin.html
 Contact.html
 Contributed Resources.html
+Conversion_Guide_VeraCrypt_1.26_and_Later.html
 Converting TrueCrypt volumes and partitions.html
 Converting TrueCrypt volumes and partitions_truecrypt_convertion.jpg
 Creating New Volumes.html
@@ -59,13 +70,6 @@ Defragmenting.html
 Digital Signatures.html
 Disclaimers.html
 Documentation.html
-Donation.html
-Donation_donate_CHF.gif
-Donation_donate_Dollars.gif
-Donation_donate_Euros.gif
-Donation_donate_GBP.gif
-Donation_donate_YEN.gif
-Donation_VeraCrypt_Bitcoin.png
 Encryption Algorithms.html
 Encryption Scheme.html
 FAQ.html
@@ -80,7 +84,6 @@ Hidden Operating System.html
 Hidden Volume.html
 Home_facebook_veracrypt.png
 Home_reddit.png
-Home_tibitDonateButton.png
 Home_utilities-file-archiver-3.png
 Home_VeraCrypt_Default_Mount_Parameters.png
 Home_VeraCrypt_menu_Default_Mount_Parameters.png
@@ -90,22 +93,29 @@ Incompatibilities.html
 Introduction.html
 Issues and Limitations.html
 Journaling File Systems.html
+Key Derivation Algorithms.html
 Keyfiles in VeraCrypt.html
 Keyfiles in VeraCrypt_Image_040.gif
 Keyfiles.html
 Kuznyechik.html
 Language Packs.html
 Legal Information.html
+liberapay_donate.svg
+LTC_Logo_30x30.png
 Main Program Window.html
 Malware.html
+mastodon_veracrypt.PNG
 Memory Dump Files.html
 Miscellaneous.html
 Modes of Operation.html
+Monero_Logo_30x30.png
 Mounting VeraCrypt Volumes.html
 Multi-User Environment.html
 Notation.html
 Paging File.html
 Parallelization.html
+paypal_30x30.png
+pbkdf2.html
 Personal Iterations Multiplier (PIM).html
 Personal Iterations Multiplier (PIM)_VeraCrypt_ChangePIM_Step1.png
 Personal Iterations Multiplier (PIM)_VeraCrypt_ChangePIM_Step2.png
@@ -131,7 +141,6 @@ References.html
 Release Notes.html
 Removable Medium Volume.html
 Removing Encryption.html
-RIPEMD-160.html
 Security Model.html
 Security Requirements and Precautions.html
 Security Requirements for Hidden Volumes.html
@@ -161,6 +170,8 @@ Using VeraCrypt Without Administrator Privileges.html
 VeraCrypt Background Task.html
 VeraCrypt Hidden Operating System.html
 VeraCrypt License.html
+VeraCrypt Memory Protection.html
+VeraCrypt RAM Encryption.html
 VeraCrypt Rescue Disk.html
 VeraCrypt System Files.html
 VeraCrypt Volume Format Specification.html
@@ -171,4 +182,3 @@ Wear-Leveling.html
 Whirlpool.html
 
 [INFOTYPES]
-

doc/chm/ru/VeraCrypt.ru.hhc

@@ -0,0 +1,449 @@
+<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
+<HTML>
+<HEAD>
+<meta name="GENERATOR" content="Microsoft&reg; HTML Help Workshop 4.1">
+<!-- Sitemap 1.0 -->
+</HEAD><BODY>
+<UL>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Äîêóìåíòàöèÿ">
+        <param name="Local" value="Documentation.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ïðåäèñëîâèå">
+        <param name="Local" value="Preface.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ââåäåíèå">
+        <param name="Local" value="Introduction.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ðóêîâîäñòâî äëÿ íà÷èíàþùèõ">
+        <param name="Local" value="Beginner's Tutorial.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Òîì VeraCrypt">
+        <param name="Local" value="VeraCrypt Volume.html">
+        </OBJECT>
+    <UL>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ñîçäàíèå íîâîãî òîìà VeraCrypt">
+            <param name="Local" value="Creating New Volumes.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Èçáðàííûå òîìà">
+            <param name="Local" value="Favorite Volumes.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ñèñòåìíûå èçáðàííûå òîìà">
+            <param name="Local" value="System Favorite Volumes.html">
+            </OBJECT>
+    </UL>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Øèôðîâàíèå ñèñòåìû">
+        <param name="Local" value="System Encryption.html">
+        </OBJECT>
+    <UL>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ñêðûòàÿ îïåðàöèîííàÿ ñèñòåìà">
+            <param name="Local" value="Hidden Operating System.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Îïåðàöèîííûå ñèñòåìû, ïîääåðæèâàþùèå ñèñòåìíîå øèôðîâàíèå">
+            <param name="Local" value="Supported Systems for System Encryption.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Äèñê âîññòàíîâëåíèÿ VeraCrypt (Rescue Disk)">
+            <param name="Local" value="VeraCrypt Rescue Disk.html">
+            </OBJECT>
+    </UL>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ïðàâäîïîäîáíîå îòðèöàíèå íàëè÷èÿ øèôðîâàíèÿ">
+        <param name="Local" value="Plausible Deniability.html">
+        </OBJECT>
+    <UL>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ñêðûòûé òîì">
+            <param name="Local" value="Hidden Volume.html">
+            </OBJECT>
+        <UL>
+            <LI> <OBJECT type="text/sitemap">
+                <param name="Name" value="Çàùèòà ñêðûòûõ òîìîâ îò ïîâðåæäåíèé">
+                <param name="Local" value="Protection of Hidden Volumes.html">
+                </OBJECT>
+            <LI> <OBJECT type="text/sitemap">
+                <param name="Name" value="Òðåáîâàíèÿ áåçîïàñíîñòè è ìåðû ïðåäîñòîðîæíîñòè, êàñàþùèåñÿ ñêðûòûõ òîìîâ">
+                <param name="Local" value="Security Requirements for Hidden Volumes.html">
+                </OBJECT>
+        </UL>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ñêðûòàÿ îïåðàöèîííàÿ ñèñòåìà">
+            <param name="Local" value="VeraCrypt Hidden Operating System.html">
+            </OBJECT>
+    </UL>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ãëàâíîå îêíî ïðîãðàììû">
+        <param name="Local" value="Main Program Window.html">
+        </OBJECT>
+    <UL>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ìåíþ ïðîãðàììû">
+            <param name="Local" value="Program Menu.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ìîíòèðîâàíèå òîìîâ">
+            <param name="Local" value="Mounting VeraCrypt Volumes.html">
+            </OBJECT>
+    </UL>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Îáû÷íîå ðàçìîíòèðîâàíèå ïðîòèâ ïðèíóäèòåëüíîãî">
+        <param name="Local" value="Normal Unmount vs Force Unmount.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Î ðèñêàõ, ñâÿçàííûõ ñî ñòîðîííèìè ðàñøèðåíèÿìè ôàéëîâ">
+        <param name="Local" value="Avoid Third-Party File Extensions.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ðàñïàðàëëåëèâàíèå">
+        <param name="Local" value="Parallelization.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Êîíâåéåðèçàöèÿ">
+        <param name="Local" value="Pipelining.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Àïïàðàòíîå óñêîðåíèå">
+        <param name="Local" value="Hardware Acceleration.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ãîðÿ÷èå êëàâèøè">
+        <param name="Local" value="Hot Keys.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Êëþ÷åâûå ôàéëû">
+        <param name="Local" value="Keyfiles in VeraCrypt.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Òîêåíû áåçîïàñíîñòè è ñìàðò-êàðòû">
+        <param name="Local" value="Security Tokens & Smart Cards.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ïîðòàòèâíûé (ïåðåíîñíîé) ðåæèì">
+        <param name="Local" value="Portable Mode.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ïîääåðæêà TrueCrypt">
+        <param name="Local" value="TrueCrypt Support.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ïðåîáðàçîâàíèå òîìîâ è ðàçäåëîâ TrueCrypt â ôîðìàò VeraCrypt">
+        <param name="Local" value="Converting TrueCrypt volumes and partitions.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ðóêîâîäñòâî ïî ïðåîáðàçîâàíèþ òîìîâ äëÿ âåðñèé 1.26 è íîâåå">
+        <param name="Local" value="Conversion_Guide_VeraCrypt_1.26_and_Later.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ïàðàìåòðû ìîíòèðîâàíèÿ ïî óìîë÷àíèþ">
+        <param name="Local" value="Default Mount Parameters.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="ßçûêîâûå ïàêåòû">
+        <param name="Local" value="Language Packs.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Àëãîðèòìû øèôðîâàíèÿ">
+        <param name="Local" value="Encryption Algorithms.html">
+        </OBJECT>
+    <UL>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="AES">
+            <param name="Local" value="AES.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Camellia">
+            <param name="Local" value="Camellia.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Kuznyechik">
+            <param name="Local" value="Kuznyechik.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Serpent">
+            <param name="Local" value="Serpent.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Twofish">
+            <param name="Local" value="Twofish.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Êàñêàäû øèôðîâ">
+            <param name="Local" value="Cascades.html">
+            </OBJECT>
+    </UL>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Àëãîðèòìû õåøèðîâàíèÿ">
+        <param name="Local" value="Hash Algorithms.html">
+        </OBJECT>
+    <UL>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="BLAKE2s-256">
+            <param name="Local" value="BLAKE2s-256.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="SHA-256">
+            <param name="Local" value="SHA-256.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="SHA-512">
+            <param name="Local" value="SHA-512.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Whirlpool">
+            <param name="Local" value="Whirlpool.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Streebog">
+            <param name="Local" value="Streebog.html">
+            </OBJECT>
+    </UL>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ïîääåðæèâàåìûå îïåðàöèîííûå ñèñòåìû">
+        <param name="Local" value="Supported Operating Systems.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Èñïîëüçîâàíèå â êîìàíäíîé ñòðîêå">
+        <param name="Local" value="Command Line Usage.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ìîäåëü áåçîïàñíîñòè">
+        <param name="Local" value="Security Model.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Òðåáîâàíèÿ áåçîïàñíîñòè è ìåðû ïðåäîñòîðîæíîñòè">
+        <param name="Local" value="Security Requirements and Precautions.html">
+        </OBJECT>
+    <UL>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Óòå÷êè äàííûõ">
+            <param name="Local" value="Data Leaks.html">
+            </OBJECT>
+        <UL>
+            <LI> <OBJECT type="text/sitemap">
+                <param name="Name" value="Ôàéë ïîäêà÷êè">
+                <param name="Local" value="Paging File.html">
+                </OBJECT>
+            <LI> <OBJECT type="text/sitemap">
+                <param name="Name" value="Ôàéëû äàìïà ïàìÿòè">
+                <param name="Local" value="Memory Dump Files.html">
+                </OBJECT>
+            <LI> <OBJECT type="text/sitemap">
+                <param name="Name" value="Ôàéë ãèáåðíàöèè">
+                <param name="Local" value="Hibernation File.html">
+                </OBJECT>
+        </UL>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Íåçàøèôðîâàííûå äàííûå â ÎÇÓ">
+            <param name="Local" value="Unencrypted Data in RAM.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Øèôðîâàíèå îïåðàòèâíîé ïàìÿòè â VeraCrypt">
+            <param name="Local" value="VeraCrypt RAM Encryption.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Çàùèòà ïàìÿòè â VeraCrypt">
+            <param name="Local" value="VeraCrypt Memory Protection.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ôèçè÷åñêàÿ áåçîïàñíîñòü">
+            <param name="Local" value="Physical Security.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Âðåäîíîñíîå ÏÎ (malware)">
+            <param name="Local" value="Malware.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ìíîãîïîëüçîâàòåëüñêàÿ ñðåäà">
+            <param name="Local" value="Multi-User Environment.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ïîäëèííîñòü è öåëîñòíîñòü äàííûõ">
+            <param name="Local" value="Authenticity and Integrity.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Âûáîð ïàðîëåé è êëþ÷åâûõ ôàéëîâ">
+            <param name="Local" value="Choosing Passwords and Keyfiles.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Èçìåíåíèå ïàðîëåé è êëþ÷åâûõ ôàéëîâ">
+            <param name="Local" value="Changing Passwords and Keyfiles.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Îïåðàöèÿ Trim">
+            <param name="Local" value="Trim Operation.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ðàñïðåäåëåíèå èçíîñà (Wear-Leveling)">
+            <param name="Local" value="Wear-Leveling.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ïåðåðàñïðåäåë¸ííûå ñåêòîðà">
+            <param name="Local" value="Reallocated Sectors.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Äåôðàãìåíòàöèÿ">
+            <param name="Local" value="Defragmenting.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Æóðíàëèðóåìûå ôàéëîâûå ñèñòåìû">
+            <param name="Local" value="Journaling File Systems.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Êëîíèðîâàíèå òîìîâ">
+            <param name="Local" value="Volume Clones.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Äîïîëíèòåëüíûå òðåáîâàíèÿ áåçîïàñíîñòè è ìåðû ïðåäîñòîðîæíîñòè">
+            <param name="Local" value="Additional Security Requirements and Precautions.html">
+            </OBJECT>
+    </UL>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Î áåçîïàñíîì ðåçåðâíîì êîïèðîâàíèè">
+        <param name="Local" value="How to Back Up Securely.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ðàçíîå">
+        <param name="Local" value="Miscellaneous.html">
+        </OBJECT>
+    <UL>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Èñïîëüçîâàíèå VeraCrypt áåç ïðàâ àäìèíèñòðàòîðà">
+            <param name="Local" value="Using VeraCrypt Without Administrator Privileges.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Îáùèé äîñòóï ïî ñåòè">
+            <param name="Local" value="Sharing over Network.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ðàáîòà VeraCrypt â ôîíîâîì ðåæèìå">
+            <param name="Local" value="VeraCrypt Background Task.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Òîì, ñìîíòèðîâàííûé êàê ñìåííûé íîñèòåëü">
+            <param name="Local" value="Removable Medium Volume.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ñèñòåìíûå ôàéëû VeraCrypt è ïðîãðàììíûå äàííûå">
+            <param name="Local" value="VeraCrypt System Files.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Êàê óäàëèòü øèôðîâàíèå">
+            <param name="Local" value="Removing Encryption.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Óäàëåíèå VeraCrypt">
+            <param name="Local" value="Uninstalling VeraCrypt.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Öèôðîâûå ïîäïèñè">
+            <param name="Local" value="Digital Signatures.html">
+            </OBJECT>
+    </UL>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Óñòðàíåíèå çàòðóäíåíèé">
+        <param name="Local" value="Troubleshooting.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Íåñîâìåñòèìîñòè">
+        <param name="Local" value="Incompatibilities.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Çàìå÷åííûå ïðîáëåìû è îãðàíè÷åíèÿ">
+        <param name="Local" value="Issues and Limitations.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Âîïðîñû è îòâåòû">
+        <param name="Local" value="FAQ.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Òåõíè÷åñêèå ïîäðîáíîñòè">
+        <param name="Local" value="Technical Details.html">
+        </OBJECT>
+    <UL>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ñèñòåìà îáîçíà÷åíèé">
+            <param name="Local" value="Notation.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ñõåìà øèôðîâàíèÿ">
+            <param name="Local" value="Encryption Scheme.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ðåæèìû ðàáîòû">
+            <param name="Local" value="Modes of Operation.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ôîðìèðîâàíèå êëþ÷à çàãîëîâêà, ñîëü è êîëè÷åñòâî èòåðàöèé">
+            <param name="Local" value="Header Key Derivation.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ãåíåðàòîð ñëó÷àéíûõ ÷èñåë">
+            <param name="Local" value="Random Number Generator.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Êëþ÷åâûå ôàéëû">
+            <param name="Local" value="Keyfiles.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="PIM (Ïåðñîíàëüíûé ìíîæèòåëü èòåðàöèé)">
+            <param name="Local" value="Personal Iterations Multiplier (PIM).html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ñïåöèôèêàöèÿ ôîðìàòà òîìîâ VeraCrypt">
+            <param name="Local" value="VeraCrypt Volume Format Specification.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ñîîòâåòñòâèå ñòàíäàðòàì è ñïåöèôèêàöèÿì">
+            <param name="Local" value="Standard Compliance.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Èñõîäíûé êîä ïðîãðàììû">
+            <param name="Local" value="Source Code.html">
+            </OBJECT>
+        <LI> <OBJECT type="text/sitemap">
+            <param name="Name" value="Ñáîðêà VeraCrypt èç èñõîäíîãî êîäà">
+            <param name="Local" value="CompilingGuidelines.html">
+            </OBJECT>
+        <UL>
+            <LI> <OBJECT type="text/sitemap">
+                <param name="Name" value="Ðóêîâîäñòâî ïî ñáîðêå â Windows">
+                <param name="Local" value="CompilingGuidelineWin.html">
+                </OBJECT>
+            <LI> <OBJECT type="text/sitemap">
+                <param name="Name" value="Ðóêîâîäñòâî ïî ñáîðêå â Linux">
+                <param name="Local" value="CompilingGuidelineLinux.html">
+                </OBJECT>
+        </UL>
+    </UL>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ñâÿçü ñ àâòîðàìè">
+        <param name="Local" value="Contact.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ïðàâîâàÿ èíôîðìàöèÿ">
+        <param name="Local" value="Legal Information.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Èñòîðèÿ âåðñèé">
+        <param name="Local" value="Release Notes.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Áëàãîäàðíîñòè">
+        <param name="Local" value="Acknowledgements.html">
+        </OBJECT>
+    <LI> <OBJECT type="text/sitemap">
+        <param name="Name" value="Ññûëêè">
+        <param name="Local" value="References.html">
+        </OBJECT>
+</UL>
+</BODY></HTML>

doc/chm/ru/VeraCrypt.ru.hhk

@@ -0,0 +1,13 @@
+<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
+<HTML>
+<HEAD>
+<!-- Sitemap 1.0 -->
+</HEAD><BODY>
+<UL>
+<LI> <OBJECT type="text/sitemap">
+     <param name="Name" value="Äîêóìåíòàöèÿ">
+     <param name="Local" value="Documentation.html">
+     </OBJECT>
+
+</UL>
+</BODY></HTML>

doc/chm/ru/VeraCrypt.ru.hhp

@@ -0,0 +1,181 @@
+[OPTIONS]
+Compatibility=1.1 or later
+Compiled file=VeraCrypt User Guide.ru.chm
+Contents file=VeraCrypt.ru.hhc
+Default topic=Documentation.html
+Default Font=Tahoma,9,0
+Display compile progress=No
+Full-text search=Yes
+Index file=VeraCrypt.ru.hhk
+Language=0x419 Ðóññêèé(Ðîññèÿ)
+Title=Ðóêîâîäñòâî ïîëüçîâàòåëÿ VeraCrypt
+
+[FILES]
+Acknowledgements.html
+Additional Security Requirements and Precautions.html
+AES.html
+arrow_right.gif
+Authenticity and Integrity.html
+Authors.html
+Avoid Third-Party File Extensions.html
+bank_30x30.png
+BC_Logo_30x30.png
+BCH_Logo_30x30.png
+Beginner's Tutorial.html
+Beginner's Tutorial_Image_001.png
+Beginner's Tutorial_Image_002.png
+Beginner's Tutorial_Image_003.png
+Beginner's Tutorial_Image_004.png
+Beginner's Tutorial_Image_005.png
+Beginner's Tutorial_Image_007.png
+Beginner's Tutorial_Image_008.png
+Beginner's Tutorial_Image_009.png
+Beginner's Tutorial_Image_010.png
+Beginner's Tutorial_Image_011.png
+Beginner's Tutorial_Image_012.png
+Beginner's Tutorial_Image_013.png
+Beginner's Tutorial_Image_014.png
+Beginner's Tutorial_Image_015.png
+Beginner's Tutorial_Image_016.png
+Beginner's Tutorial_Image_017.png
+Beginner's Tutorial_Image_018.png
+Beginner's Tutorial_Image_019.png
+Beginner's Tutorial_Image_020.png
+Beginner's Tutorial_Image_021.png
+Beginner's Tutorial_Image_022.png
+Beginner's Tutorial_Image_023.png
+Beginner's Tutorial_Image_024.png
+Beginner's Tutorial_Image_034.png
+BLAKE2s-256.html
+Camellia.html
+Cascades.html
+Changing Passwords and Keyfiles.html
+Choosing Passwords and Keyfiles.html
+Command Line Usage.html
+CompilingGuidelineLinux.html
+CompilingGuidelines.html
+CompilingGuidelineWin.html
+Contact.html
+Contributed Resources.html
+Conversion_Guide_VeraCrypt_1.26_and_Later.html
+Converting TrueCrypt volumes and partitions.html
+Converting TrueCrypt volumes and partitions_truecrypt_convertion.png
+Creating New Volumes.html
+Data Leaks.html
+Default Mount Parameters.html
+Default Mount Parameters_VeraCrypt_password_using_default_parameters.png
+Defragmenting.html
+Digital Signatures.html
+Disclaimers.html
+Documentation.html
+Encryption Algorithms.html
+Encryption Scheme.html
+FAQ.html
+Favorite Volumes.html
+flattr-badge-large.png
+gf2_mul.gif
+Hardware Acceleration.html
+Hash Algorithms.html
+Header Key Derivation.html
+Hibernation File.html
+Hidden Operating System.html
+Hidden Volume.html
+Home_facebook_veracrypt.png
+Home_reddit.png
+Home_utilities-file-archiver-3.png
+Home_VeraCrypt_Default_Mount_Parameters.png
+Home_VeraCrypt_menu_Default_Mount_Parameters.png
+Hot Keys.html
+How to Back Up Securely.html
+Incompatibilities.html
+Introduction.html
+Issues and Limitations.html
+Journaling File Systems.html
+Keyfiles in VeraCrypt.html
+Keyfiles in VeraCrypt_Image_040.png
+Keyfiles.html
+Kuznyechik.html
+Language Packs.html
+Legal Information.html
+liberapay_donate.svg
+LTC_Logo_30x30.png
+Main Program Window.html
+Malware.html
+mastodon_veracrypt.PNG
+Memory Dump Files.html
+Miscellaneous.html
+Modes of Operation.html
+Monero_Logo_30x30.png
+Mounting VeraCrypt Volumes.html
+Multi-User Environment.html
+Notation.html
+Paging File.html
+Parallelization.html
+paypal_30x30.png
+Personal Iterations Multiplier (PIM).html
+Personal Iterations Multiplier (PIM)_VeraCrypt_ChangePIM_Step1.png
+Personal Iterations Multiplier (PIM)_VeraCrypt_ChangePIM_Step2.png
+Personal Iterations Multiplier (PIM)_VeraCrypt_ChangePIM_System_Step1.png
+Personal Iterations Multiplier (PIM)_VeraCrypt_ChangePIM_System_Step2.png
+Personal Iterations Multiplier (PIM)_VeraCrypt_UsePIM_Step1.png
+Personal Iterations Multiplier (PIM)_VeraCrypt_UsePIM_Step2.png
+Physical Security.html
+Pipelining.html
+Plausible Deniability.html
+Portable Mode.html
+Preface.html
+Program Menu.html
+Protection of Hidden Volumes.html
+Protection of Hidden Volumes_Image_027.png
+Protection of Hidden Volumes_Image_028.png
+Protection of Hidden Volumes_Image_029.png
+Protection of Hidden Volumes_Image_030.png
+Protection of Hidden Volumes_Image_031.png
+Random Number Generator.html
+Reallocated Sectors.html
+References.html
+Release Notes.html
+Removable Medium Volume.html
+Removing Encryption.html
+Security Model.html
+Security Requirements and Precautions.html
+Security Requirements for Hidden Volumes.html
+Security Tokens & Smart Cards.html
+Serpent.html
+SHA-256.html
+SHA-512.html
+Sharing over Network.html
+Source Code.html
+Standard Compliance.html
+Streebog.html
+styles.css
+Supported Operating Systems.html
+Supported Systems for System Encryption.html
+System Encryption.html
+System Favorite Volumes.html
+Technical Details.html
+Trim Operation.html
+Troubleshooting.html
+TrueCrypt Support.html
+TrueCrypt Support_truecrypt_mode_gui.png
+twitter_veracrypt.PNG
+Twofish.html
+Unencrypted Data in RAM.html
+Uninstalling VeraCrypt.html
+Using VeraCrypt Without Administrator Privileges.html
+VeraCrypt Background Task.html
+VeraCrypt Hidden Operating System.html
+VeraCrypt License.html
+VeraCrypt Memory Protection.html
+VeraCrypt RAM Encryption.html
+VeraCrypt Rescue Disk.html
+VeraCrypt System Files.html
+VeraCrypt Volume Format Specification.html
+VeraCrypt Volume.html
+VeraCrypt128x128.png
+Volume Clones.html
+Wear-Leveling.html
+Whirlpool.html
+
+[INFOTYPES]
+

doc/chm/zh-cn/VeraCrypt.zh-cn.hhc

@@ -0,0 +1,449 @@
+<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
+<HTML>
+<HEAD>
+<meta name="GENERATOR" content="Microsoft&reg; HTML Help Workshop 4.1">
+<!-- Sitemap 1.0 -->
+</HEAD><BODY>
+<UL>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="目录">
+		<param name="Local" value="Documentation.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="前言">
+		<param name="Local" value="Preface.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="简介">
+		<param name="Local" value="Introduction.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="初学者教程">
+		<param name="Local" value="Beginner's Tutorial.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="VeraCrypt卷">
+		<param name="Local" value="VeraCrypt Volume.html">
+		</OBJECT>
+	<UL>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="创建新的VeraCrypt卷">
+			<param name="Local" value="Creating New Volumes.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="收藏卷">
+			<param name="Local" value="Favorite Volumes.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="系统收藏卷">
+			<param name="Local" value="System Favorite Volumes.html">
+			</OBJECT>
+	</UL>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="系统加密">
+		<param name="Local" value="System Encryption.html">
+		</OBJECT>
+	<UL>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="隐藏操作系统">
+			<param name="Local" value="Hidden Operating System.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="支持系统加密的操作系统">
+			<param name="Local" value="Supported Systems for System Encryption.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="VeraCrypt急救盘">
+			<param name="Local" value="VeraCrypt Rescue Disk.html">
+			</OBJECT>
+	</UL>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="合理否认">
+		<param name="Local" value="Plausible Deniability.html">
+		</OBJECT>
+	<UL>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="隐藏卷">
+			<param name="Local" value="Hidden Volume.html">
+			</OBJECT>
+		<UL>
+			<LI> <OBJECT type="text/sitemap">
+				<param name="Name" value="隐藏卷防损坏保护">
+				<param name="Local" value="Protection of Hidden Volumes.html">
+				</OBJECT>
+			<LI> <OBJECT type="text/sitemap">
+				<param name="Name" value="隐藏卷的安全要求和注意事项">
+				<param name="Local" value="Security Requirements for Hidden Volumes.html">
+				</OBJECT>
+		</UL>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="隐藏操作系统">
+			<param name="Local" value="VeraCrypt Hidden Operating System.html">
+			</OBJECT>
+	</UL>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="主程序窗口">
+		<param name="Local" value="Main Program Window.html">
+		</OBJECT>
+	<UL>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="程序菜单">
+			<param name="Local" value="Program Menu.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="挂载卷">
+			<param name="Local" value="Mounting VeraCrypt Volumes.html">
+			</OBJECT>
+	</UL>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="正常卸载与强制卸载">
+		<param name="Local" value="Normal Unmount vs Force Unmount.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="避免使用第三方文件扩展名">
+		<param name="Local" value="Avoid Third-Party File Extensions.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="并行处理">
+		<param name="Local" value="Parallelization.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="流水线处理">
+		<param name="Local" value="Pipelining.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="硬件加速">
+		<param name="Local" value="Hardware Acceleration.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="热键">
+		<param name="Local" value="Hot Keys.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="密钥文件">
+		<param name="Local" value="Keyfiles in VeraCrypt.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="安全令牌和智能卡">
+		<param name="Local" value="Security Tokens & Smart Cards.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="便携模式">
+		<param name="Local" value="Portable Mode.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="TrueCrypt支持">
+		<param name="Local" value="TrueCrypt Support.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="转换TrueCrypt卷和分区">
+		<param name="Local" value="Converting TrueCrypt volumes and partitions.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="1.26及更高版本转换指南">
+		<param name="Local" value="Conversion_Guide_VeraCrypt_1.26_and_Later.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="默认挂载参数">
+		<param name="Local" value="Default Mount Parameters.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="语言包">
+		<param name="Local" value="Language Packs.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="加密算法">
+		<param name="Local" value="Encryption Algorithms.html">
+		</OBJECT>
+	<UL>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="AES">
+			<param name="Local" value="AES.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="Camellia">
+			<param name="Local" value="Camellia.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="Kuznyechik">
+			<param name="Local" value="Kuznyechik.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="Serpent">
+			<param name="Local" value="Serpent.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="Twofish">
+			<param name="Local" value="Twofish.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="密码级联">
+			<param name="Local" value="Cascades.html">
+			</OBJECT>
+	</UL>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="哈希算法">
+		<param name="Local" value="Hash Algorithms.html">
+		</OBJECT>
+	<UL>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="BLAKE2s-256">
+			<param name="Local" value="BLAKE2s-256.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="SHA-256">
+			<param name="Local" value="SHA-256.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="SHA-512">
+			<param name="Local" value="SHA-512.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="Whirlpool">
+			<param name="Local" value="Whirlpool.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="Streebog">
+			<param name="Local" value="Streebog.html">
+			</OBJECT>
+	</UL>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="支持的操作系统">
+		<param name="Local" value="Supported Operating Systems.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="命令行用法">
+		<param name="Local" value="Command Line Usage.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="安全模型">
+		<param name="Local" value="Security Model.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="安全要求和注意事项">
+		<param name="Local" value="Security Requirements and Precautions.html">
+		</OBJECT>
+	<UL>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="数据泄露">
+			<param name="Local" value="Data Leaks.html">
+			</OBJECT>
+		<UL>
+			<LI> <OBJECT type="text/sitemap">
+				<param name="Name" value="分页文件">
+				<param name="Local" value="Paging File.html">
+				</OBJECT>
+			<LI> <OBJECT type="text/sitemap">
+				<param name="Name" value="内存转储文件">
+				<param name="Local" value="Memory Dump Files.html">
+				</OBJECT>
+			<LI> <OBJECT type="text/sitemap">
+				<param name="Name" value="休眠文件">
+				<param name="Local" value="Hibernation File.html">
+				</OBJECT>
+		</UL>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="RAM中的未加密数据">
+			<param name="Local" value="Unencrypted Data in RAM.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="VeraCrypt RAM加密">
+			<param name="Local" value="VeraCrypt RAM Encryption.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="VeraCrypt内存保护">
+			<param name="Local" value="VeraCrypt Memory Protection.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="物理安全">
+			<param name="Local" value="Physical Security.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="恶意软件">
+			<param name="Local" value="Malware.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="多用户环境">
+			<param name="Local" value="Multi-User Environment.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="真实性和完整性">
+			<param name="Local" value="Authenticity and Integrity.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="选择密码和密钥文件">
+			<param name="Local" value="Choosing Passwords and Keyfiles.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="更改密码和密钥文件">
+			<param name="Local" value="Changing Passwords and Keyfiles.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="Trim操作">
+			<param name="Local" value="Trim Operation.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="磨损均衡">
+			<param name="Local" value="Wear-Leveling.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="重新分配扇区">
+			<param name="Local" value="Reallocated Sectors.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="碎片整理">
+			<param name="Local" value="Defragmenting.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="日志文件系统">
+			<param name="Local" value="Journaling File Systems.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="卷克隆">
+			<param name="Local" value="Volume Clones.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="附加安全要求和注意事项">
+			<param name="Local" value="Additional Security Requirements and Precautions.html">
+			</OBJECT>
+	</UL>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="如何安全备份">
+		<param name="Local" value="How to Back Up Securely.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="杂项">
+		<param name="Local" value="Miscellaneous.html">
+		</OBJECT>
+	<UL>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="无需管理员权限使用VeraCrypt">
+			<param name="Local" value="Using VeraCrypt Without Administrator Privileges.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="网络共享">
+			<param name="Local" value="Sharing over Network.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="VeraCrypt后台任务">
+			<param name="Local" value="VeraCrypt Background Task.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="作为可移动介质挂载的卷">
+			<param name="Local" value="Removable Medium Volume.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="VeraCrypt系统文件和应用数据">
+			<param name="Local" value="VeraCrypt System Files.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="如何移除加密">
+			<param name="Local" value="Removing Encryption.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="卸载VeraCrypt">
+			<param name="Local" value="Uninstalling VeraCrypt.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="数字签名">
+			<param name="Local" value="Digital Signatures.html">
+			</OBJECT>
+	</UL>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="故障排除">
+		<param name="Local" value="Troubleshooting.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="不兼容问题">
+		<param name="Local" value="Incompatibilities.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="已知问题和限制">
+		<param name="Local" value="Issues and Limitations.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="常见问题解答">
+		<param name="Local" value="FAQ.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="技术细节">
+		<param name="Local" value="Technical Details.html">
+		</OBJECT>
+	<UL>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="符号表示">
+			<param name="Local" value="Notation.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="加密方案">
+			<param name="Local" value="Encryption Scheme.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="操作模式">
+			<param name="Local" value="Modes of Operation.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="头部密钥派生、盐和迭代次数">
+			<param name="Local" value="Header Key Derivation.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="随机数生成器">
+			<param name="Local" value="Random Number Generator.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="密钥文件">
+			<param name="Local" value="Keyfiles.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="PIM（个人迭代乘数）">
+			<param name="Local" value="Personal Iterations Multiplier (PIM).html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="VeraCrypt卷格式规范">
+			<param name="Local" value="VeraCrypt Volume Format Specification.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="标准合规性">
+			<param name="Local" value="Standard Compliance.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="源代码">
+			<param name="Local" value="Source Code.html">
+			</OBJECT>
+		<LI> <OBJECT type="text/sitemap">
+			<param name="Name" value="从源代码构建VeraCrypt">
+			<param name="Local" value="CompilingGuidelines.html">
+			</OBJECT>
+		<UL>
+			<LI> <OBJECT type="text/sitemap">
+				<param name="Name" value="Windows构建指南">
+				<param name="Local" value="CompilingGuidelineWin.html">
+				</OBJECT>
+			<LI> <OBJECT type="text/sitemap">
+				<param name="Name" value="Linux构建指南">
+				<param name="Local" value="CompilingGuidelineLinux.html">
+				</OBJECT>
+		</UL>
+	</UL>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="联系我们">
+		<param name="Local" value="Contact.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="法律信息">
+		<param name="Local" value="Legal Information.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="版本历史">
+		<param name="Local" value="Release Notes.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="致谢">
+		<param name="Local" value="Acknowledgements.html">
+		</OBJECT>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="参考文献">
+		<param name="Local" value="References.html">
+		</OBJECT>
+</UL>
+</BODY></HTML>

doc/chm/zh-cn/VeraCrypt.zh-cn.hhk

@@ -0,0 +1,13 @@
+<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
+<HTML>
+<HEAD>
+<meta name="GENERATOR" content="Microsoft&reg; HTML Help Workshop 4.1">
+<!-- Sitemap 1.0 -->
+</HEAD><BODY>
+<UL>
+	<LI> <OBJECT type="text/sitemap">
+		<param name="Name" value="Ŀ¼±í">
+		<param name="Local" value="Documentation.html">
+		</OBJECT>
+</UL>
+</BODY></HTML>

doc/chm/zh-cn/VeraCrypt.zh-cn.hhp

@@ -0,0 +1,182 @@
+[OPTIONS]
+Compatibility=1.1 or later
+Compiled file=VeraCrypt User Guide.zh-cn.chm
+Contents file=VeraCrypt.zh-cn.hhc
+Default Font=微软雅黑,9,0
+Default topic=Documentation.html
+Display compile progress=No
+Full-text search=Yes
+Index file=VeraCrypt.zh-cn.hhk
+Language=0x804 中文(简体，中国)
+Title=VeraCrypt用户指南
+
+
+[FILES]
+Acknowledgements.html
+Additional Security Requirements and Precautions.html
+AES.html
+arrow_right.gif
+Authenticity and Integrity.html
+Authors.html
+Avoid Third-Party File Extensions.html
+bank_30x30.png
+BC_Logo_30x30.png
+BCH_Logo_30x30.png
+Beginner's Tutorial.html
+Beginner's Tutorial_Image_001.jpg
+Beginner's Tutorial_Image_002.jpg
+Beginner's Tutorial_Image_003.jpg
+Beginner's Tutorial_Image_004.jpg
+Beginner's Tutorial_Image_005.jpg
+Beginner's Tutorial_Image_007.jpg
+Beginner's Tutorial_Image_008.jpg
+Beginner's Tutorial_Image_009.jpg
+Beginner's Tutorial_Image_010.jpg
+Beginner's Tutorial_Image_011.jpg
+Beginner's Tutorial_Image_012.jpg
+Beginner's Tutorial_Image_013.jpg
+Beginner's Tutorial_Image_014.jpg
+Beginner's Tutorial_Image_015.jpg
+Beginner's Tutorial_Image_016.jpg
+Beginner's Tutorial_Image_017.jpg
+Beginner's Tutorial_Image_018.jpg
+Beginner's Tutorial_Image_019.jpg
+Beginner's Tutorial_Image_020.jpg
+Beginner's Tutorial_Image_021.jpg
+Beginner's Tutorial_Image_022.jpg
+Beginner's Tutorial_Image_023.gif
+Beginner's Tutorial_Image_024.gif
+Beginner's Tutorial_Image_034.png
+BLAKE2s-256.html
+Camellia.html
+Cascades.html
+Changing Passwords and Keyfiles.html
+Choosing Passwords and Keyfiles.html
+Command Line Usage.html
+CompilingGuidelineLinux.html
+CompilingGuidelines.html
+CompilingGuidelineWin.html
+Contact.html
+Contributed Resources.html
+Conversion_Guide_VeraCrypt_1.26_and_Later.html
+Converting TrueCrypt volumes and partitions.html
+Converting TrueCrypt volumes and partitions_truecrypt_convertion.jpg
+Creating New Volumes.html
+Data Leaks.html
+Default Mount Parameters.html
+Default Mount Parameters_VeraCrypt_password_using_default_parameters.png
+Defragmenting.html
+Digital Signatures.html
+Disclaimers.html
+Documentation.html
+Encryption Algorithms.html
+Encryption Scheme.html
+FAQ.html
+Favorite Volumes.html
+flattr-badge-large.png
+gf2_mul.gif
+Hardware Acceleration.html
+Hash Algorithms.html
+Header Key Derivation.html
+Hibernation File.html
+Hidden Operating System.html
+Hidden Volume.html
+Home_facebook_veracrypt.png
+Home_reddit.png
+Home_utilities-file-archiver-3.png
+Home_VeraCrypt_Default_Mount_Parameters.png
+Home_VeraCrypt_menu_Default_Mount_Parameters.png
+Hot Keys.html
+How to Back Up Securely.html
+Incompatibilities.html
+Introduction.html
+Issues and Limitations.html
+Journaling File Systems.html
+Keyfiles in VeraCrypt.html
+Keyfiles in VeraCrypt_Image_040.gif
+Keyfiles.html
+Kuznyechik.html
+Language Packs.html
+Legal Information.html
+liberapay_donate.svg
+LTC_Logo_30x30.png
+Main Program Window.html
+Malware.html
+mastodon_veracrypt.PNG
+Memory Dump Files.html
+Miscellaneous.html
+Modes of Operation.html
+Monero_Logo_30x30.png
+Mounting VeraCrypt Volumes.html
+Multi-User Environment.html
+Notation.html
+Paging File.html
+Parallelization.html
+paypal_30x30.png
+Personal Iterations Multiplier (PIM).html
+Personal Iterations Multiplier (PIM)_VeraCrypt_ChangePIM_Step1.png
+Personal Iterations Multiplier (PIM)_VeraCrypt_ChangePIM_Step2.png
+Personal Iterations Multiplier (PIM)_VeraCrypt_ChangePIM_System_Step1.png
+Personal Iterations Multiplier (PIM)_VeraCrypt_ChangePIM_System_Step2.png
+Personal Iterations Multiplier (PIM)_VeraCrypt_UsePIM_Step1.png
+Personal Iterations Multiplier (PIM)_VeraCrypt_UsePIM_Step2.png
+Physical Security.html
+Pipelining.html
+Plausible Deniability.html
+Portable Mode.html
+Preface.html
+Program Menu.html
+Protection of Hidden Volumes.html
+Protection of Hidden Volumes_Image_027.jpg
+Protection of Hidden Volumes_Image_028.jpg
+Protection of Hidden Volumes_Image_029.jpg
+Protection of Hidden Volumes_Image_030.jpg
+Protection of Hidden Volumes_Image_031.jpg
+Random Number Generator.html
+Reallocated Sectors.html
+References.html
+Release Notes.html
+Removable Medium Volume.html
+Removing Encryption.html
+Security Model.html
+Security Requirements and Precautions.html
+Security Requirements for Hidden Volumes.html
+Security Tokens & Smart Cards.html
+Serpent.html
+SHA-256.html
+SHA-512.html
+Sharing over Network.html
+Source Code.html
+Standard Compliance.html
+Streebog.html
+styles.css
+Supported Operating Systems.html
+Supported Systems for System Encryption.html
+System Encryption.html
+System Favorite Volumes.html
+Technical Details.html
+Trim Operation.html
+Troubleshooting.html
+TrueCrypt Support.html
+TrueCrypt Support_truecrypt_mode_gui.jpg
+twitter_veracrypt.PNG
+Twofish.html
+Unencrypted Data in RAM.html
+Uninstalling VeraCrypt.html
+Using VeraCrypt Without Administrator Privileges.html
+VeraCrypt Background Task.html
+VeraCrypt Hidden Operating System.html
+VeraCrypt License.html
+VeraCrypt Memory Protection.html
+VeraCrypt RAM Encryption.html
+VeraCrypt Rescue Disk.html
+VeraCrypt System Files.html
+VeraCrypt Volume Format Specification.html
+VeraCrypt Volume.html
+VeraCrypt128x128.png
+Volume Clones.html
+Wear-Leveling.html
+Whirlpool.html
+
+[INFOTYPES]
+