Windows: restore Visual Studio solution and project files to default configuration

created on disk or partition.

License.txt

@@ -770,3 +770,40 @@ IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
 OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
 IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 ____________________________________________________________
+Copyright (c) 2013-2018 Stephan Mueller <smueller@chronox.de>
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+1. Redistributions of source code must retain the above copyright
+   notice, and the entire permission notice in its entirety, 
+   including the disclaimer of warranties.
+
+2. Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in
+   the documentation and/or other materials provided with the
+   distribution.
+
+3. The name of the author may not be used to endorse or promote
+   products derived from this software without specific prior
+   written permission.
+
+ALTERNATIVELY, this product may be distributed under the terms of
+the GNU General Public License, in which case the provisions of the
+GPL2 are required INSTEAD OF the above restrictions. (This clause is
+necessary due to a potential bad interaction between the GPL and the
+restrictions contained in a BSD-style copyright.)
+
+THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
+WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ALL OF WHICH
+ARE HEREBY DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
+BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF NOT ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+____________________________________________________________

README.md

@@ -68,7 +68,7 @@ IDRIX certificate).
 Keep this in mind if you compile VeraCrypt
 and compare your binaries with the official binaries. If your binaries are
 unsigned, the sizes of the official binaries will usually be approximately
-10 KB greater than sizes of your binaries (there may be further differences
+10 KiB greater than sizes of your binaries (there may be further differences
 if you use a different version of the compiler, or if you install a different
 or no service pack for Visual Studio, or different hotfixes for it, or if you
 use different versions of the required SDKs).
@@ -241,18 +241,19 @@ Copyright Information
 ---------------------
 
 This software as a whole:  
-Copyright (c) 2013-2018 IDRIX. All rights reserved.
+Copyright (c) 2013-2019 IDRIX. All rights reserved.
 
 Portions of this software:  
-Copyright (c) 2013-2018 IDRIX. All rights reserved.  
+Copyright (c) 2013-2019 IDRIX. All rights reserved.  
 Copyright (c) 2003-2012 TrueCrypt Developers Association. All rights reserved.  
 Copyright (c) 1998-2000 Paul Le Roux. All rights reserved.  
 Copyright (c) 1998-2008 Brian Gladman, Worcester, UK. All rights reserved.  
 Copyright (c) 1995-2017 Jean-loup Gailly and Mark Adler.  
 Copyright (c) 2016 Disk Cryptography Services for EFI (DCS), Alex Kolotnikov  
-Copyright (C) 1999-2017 Dieter Baron and Thomas Klausner.  
+Copyright (c) 1999-2017 Dieter Baron and Thomas Klausner.  
 Copyright (c) 2013, Alexey Degtyarev. All rights reserved.  
-Copyright (c) 1999-2016 Jack Lloyd. All rights reserved.
+Copyright (c) 1999-2016 Jack Lloyd. All rights reserved.  
+Copyright (c) 2013-2018 Stephan Mueller <smueller@chronox.de>
 
 For more information, please see the legal notices attached to parts of the
 source code.

Translations/Language.ar.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="ar" name="العربية" en-name="Arabic" version="0.2.0" translators="Ahmad Gharbeia, Khaled Hosny, Ali Khojah" />
     <font lang="ar" class="normal" size="11" face="default" />
     <font lang="ar" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="ar" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">‮أدخل كلمة السر و\\أو ملفات المفاتيح للمجلد الذي لغير نظام التشغيل الذي تريد معاودة صيرورة تعميته في موضعه. ‮ ‮ملاحظة: بعد أن تنقر 'اللاحق' فإن ڤيراكربت سيحاول إيجاد المجلدات التي لغير النظام التي قوطعت صيرورة تعميتها و التي يمكن تظهير ترويستها باستخدام كلمة السر و\\أو الملفات المفاتيح المعطاة. إن وجد أكثر من مجلد بهذه الصفة فسيكون عليك أن تختار أحدها في الخطوة التالية.</entry>
     <entry lang="ar" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">‮أدخل أحد المجلدات المدرجة. تحوي القائمة كل مجلدات غير النظام التي يمكن النفاذ إليها و التي قوطعت صيرورة تعميتها و التي أمكن تظهير ترويستها باستخدام كلمة السر و\\أو الملفات المفاتيح المعطاة.</entry>
     <entry lang="ar" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">الرجاء إدخال كلمة السر أو تحديد ملف/ملفات المفتاح لقرص فيراكربت غير النظامي الذي تود في فك تشفيره.</entry>
-    <entry lang="ar" key="PASSWORD_HELP">‮من المهم أن تضع كلمة سر جيدة. تجنب وضع كلمة سر تحوي كلمات من المعجم (أو توافيق من كلمتين أو ثلاثة أو أربعة)، كما أنها ينبغي ألا تحوي أية أسماء أو تواريخ ميلاد؛ فيجب ألا يَسهُل تخمينها. كلمة السر الجيدة تتألف من توفيقة عشوائية من الأحرف و الأرقام و المحارف الخاصة، مثل @ ^ = $ * + إلخ. نوصي بوضع كلمة سر تتألف من أكثر من 20 خانة (كلما طالت كان أفضل). الطول الأقصى المسموح به هو 64 خانة.</entry>
+    <entry lang="ar" key="PASSWORD_HELP">‮من المهم أن تضع كلمة سر جيدة. تجنب وضع كلمة سر تحوي كلمات من المعجم (أو توافيق من كلمتين أو ثلاثة أو أربعة)، كما أنها ينبغي ألا تحوي أية أسماء أو تواريخ ميلاد؛ فيجب ألا يَسهُل تخمينها. كلمة السر الجيدة تتألف من توفيقة عشوائية من الأحرف و الأرقام و المحارف الخاصة، مثل @ ^ = $ * + إلخ. نوصي بوضع كلمة سر تتألف من أكثر من 20 خانة (كلما طالت كان أفضل). الطول الأقصى المسموح به هو 128 خانة.</entry>
     <entry lang="ar" key="PASSWORD_HIDDENVOL_HELP">‮اختر كلمة سر للمجلد المخفي. </entry>
     <entry lang="ar" key="PASSWORD_HIDDEN_OS_HELP">‮ضع كلمة سر لنظام التشغيل المخفي (أي للمجلد المخفي). </entry>
     <entry lang="ar" key="PASSWORD_HIDDEN_OS_NOTE">‮هام: كلمة السر التي تضعها لنظام التشغيل المخفي في هذه الخطوة يجب أن تختلف كليا عن كلمتي السر الأخريين (أي عن كلمة سر المجلد الخارجي، و عن كلمة سر نظام التشغيل التمويهي).</entry>
     <entry lang="ar" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">‮أدخل كلمة سر المجلد الذى تريد أن تنشئ المجلد المخفي داخله. ‮ ‮بعد أن تنقر 'اللاحق'، سيحاول ڤيراكربت وصل المجلد. بمجرد وصل المجلد فإن خارطة بتات عناقيده ستفحص لتحديد حجم المساحة المتصلة الشاغرة (إن وُجدت) التي تتماس نهايتها مع نهاية المجلد. ستحوي هذه المساحة المجلد المخفي، لذا ستحدد حجمه الأقصى الممكن. فحص خارطة بتات العناقيد ضروري لضمان أن البيانات في المجلد الخارجي لن يطمسها المجلد المخفي.</entry>
-    <entry lang="ar" key="PASSWORD_HIDDENVOL_HOST_HELP">\nn‮ضع كلمة سر للمجلد الخارجي. هذه هي كلمة السر التي سيكون بوسعك الإفصاح عنها إن اضطررت أو أجبرت. ‮ ‮هام: كلمة السر هذه يجب أن تختلف كليا عن التي تضعها للمجلد المخفي. ‮ ‮ملاحظة: الطول الأقصى لكلمة السر هو 64 خانة.</entry>
+    <entry lang="ar" key="PASSWORD_HIDDENVOL_HOST_HELP">\nn‮ضع كلمة سر للمجلد الخارجي. هذه هي كلمة السر التي سيكون بوسعك الإفصاح عنها إن اضطررت أو أجبرت. ‮ ‮هام: كلمة السر هذه يجب أن تختلف كليا عن التي تضعها للمجلد المخفي. ‮ ‮ملاحظة: الطول الأقصى لكلمة السر هو 128 خانة.</entry>
     <entry lang="ar" key="PASSWORD_SYSENC_OUTERVOL_HELP">‮ضع كلمة سر للمجلد الخارجي. هذه هي كلمة السر التي يمكنك كشفها لمن يجبرك على الإفصاح عن كلمة سر أول قسم يلي قسم النظام و الذي سيكون فيه كل من المجلدين الخارجي و المخفي (الذي يحوي نظام التخزين المخفي)، و سيظل وجود المجلد المخفي (و نظام التشغيل المخفي بداخله) سرا. لاحظ أن كلمة السر هذه ليست لنظام التشغيل التمويهي. ‮ ‮هام: يجب أن تختلف كلمة السر هذه كليا عن التي ستضعها للمجلد المخفي (أي التي لنظام التشغيل المخفي).</entry>
     <entry lang="ar" key="PASSWORD_HIDVOL_HOST_TITLE">‮كلمة سر المجلد الخارجي</entry>
     <entry lang="ar" key="PASSWORD_HIDVOL_TITLE">‮كلمة سر المجلد المخفي</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="ar" key="IDC_BOOT_LOADER_CACHE_PIM">اشمل &amp;PIM حينما يتم تخزين كلمة سر الإقلاع مؤقتا في الكاش</entry>
     <entry lang="ar" key="IDC_PREF_CACHE_PIM">اشمل PIM حينتخزين كلمة سر الإقلاع مؤقتا</entry>
     <entry lang="ar" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">اجعل أقراص الشبكة المفصولة متاحة للتحميل</entry>
-    <entry lang="ar" key="PASSWORD_UTF8_TOO_LONG">كلمة السر المدخلة طويلة: تمثيلها بصيغة UTF-8 يزيد عن 64 بايت.</entry>
+    <entry lang="ar" key="PASSWORD_UTF8_TOO_LONG">كلمة السر المدخلة طويلة: تمثيلها بصيغة UTF-8 يزيد عن 128 بايت.</entry>
     <entry lang="ar" key="PASSWORD_UTF8_INVALID">كلمة السر المدخلة تحوي أحرفا لم يمكن تحويل ترميزها لصيغة UTF-8 </entry>
     <entry lang="ar" key="INIT_DLL">خطأ: فشل في تحميل برامج النظام.</entry>
     <entry lang="ar" key="ERR_EXFAT_INVALID_VOLUME_SIZE">حجم القرص المحدد في سطر الأوامر لا يتطابق مع نظام الملفات exFAT المختار.</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="ar" key="IDC_BLOCK_SYSENC_TRIM">امنع أمر TRIM للقسم/المحارف النظامي</entry>
     <entry lang="ar" key="WINDOWS_EFI_BOOT_LOADER_MISSING">خطأ: لم يمكن إيجاد مُقلع EFI لنظام ويندوز على القرص. سيتم إنهاء العملية.</entry>
     <entry lang="ar" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">لا يمكن حاليا تشفير النظام إذا كان الإقلاع الآمن SecureBoot مفعلا وكذلك إذا لم يتم تحميل مفاتيح فيراكريبت المخصصة في البرنامج الثابت للجهاز. الإقلاع الآمن ينبغي تعطيله في إعدادات بايوس لتستطيع إستكمال عملية تشفير النظام.</entry>
-    <entry lang="ar" key="PASSWORD_PASTED_TRUNCATED">النص الملصق سوف يتم اجتزاؤه لأن الحد الأقصى لطول كلمة السر هو 64 خانة.</entry>
-    <entry lang="ar" key="PASSWORD_MAXLENGTH_REACHED">لقد وصلت كلمة السر إلى أقصى طول الذي هو 64 خانة. لا يمكن إضافة أي خانة.</entry>
+    <entry lang="ar" key="PASSWORD_PASTED_TRUNCATED">النص الملصق سوف يتم اجتزاؤه لأن الحد الأقصى لطول كلمة السر هو 128 خانة.</entry>
+    <entry lang="ar" key="PASSWORD_MAXLENGTH_REACHED">لقد وصلت كلمة السر إلى أقصى طول الذي هو 128 خانة. لا يمكن إضافة أي خانة.</entry>
     <entry lang="ar" key="IDC_SELECT_LANGUAGE_LABEL">اختر اللغة التي ستستخدم أثناء التثبيت :</entry>
     <entry lang="ar" key="VOLUME_TOO_LARGE_FOR_HOST">خطأ: حجم ملف الحاوية أكبر من حجم المساحة المتاحة على القرص.</entry>
     <entry lang="ar" key="IDC_ALLOW_WINDOWS_DEFRAG">اسمح لملغي تجزئة القرص من ويندوز أن يقوم بإلغاء تجزئة القرص أو القسم غي النظامي.</entry>    
     <entry lang="ar" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">تحذير: إلغاء تجزئة قسم أو قرص غير نظامي يمكن أن يؤدي لتسريب بيانات وصفية عن الجزء أو القسم، أو يتسبب في مشكلات للقسم المخفي الموجود بهما.\n\nهل ترغب بالاستمرار؟</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="ar" key="IDT_BENCHMARK">مقايسة الأداء:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="ar" key="LEGACY_PASSWORD_UTF8_TOO_LONG">كلمة السر المدخلة طويلة: تمثيلها بصيغة UTF-8 يزيد عن 128 بايت.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.be.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="be" name="Беларуская" en-name="Belarusian" version="0.1.0" translators="Aleg Azarousky" />
     <font lang="be" class="normal" size="11" face="default" />
     <font lang="be" class="bold" size="13" face="Arial" />
@@ -25,7 +25,7 @@
     <entry lang="be" key="IDT_INSTALL_DESTINATION">Абярыце або ўвядзіце месца на дыску, дзе Вы жадаеце ўсталяваць праграмныя файлы VeraCrypt. Калі азначанай тэчкі не існуе, яна будзе створана аўтаматычна.</entry>
     <entry lang="be" key="IDT_UNINSTALL_DIR">Націсніце 'Дэўсталяваць' для выдалення VeraCrypt з сістэмы.</entry>
     <entry lang="be" key="IDC_ABORT_BUTTON">Спыніць</entry>
-    <entry lang="en" key="IDC_BENCHMARK">&amp;Benchmark</entry>
+    <entry lang="be" key="IDC_BENCHMARK">&amp;Тэст хуткасці</entry>
     <entry lang="be" key="IDC_CIPHER_TEST">Тэст</entry>
     <entry lang="en" key="IDC_DEVICE_TRANSFORM_MODE_FORMAT">Create encrypted volume and format it</entry>
     <entry lang="en" key="IDC_DEVICE_TRANSFORM_MODE_INPLACE">Encrypt partition in place</entry>
@@ -618,12 +618,12 @@
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system volume where you want to resume the process of in-place encryption.\n\n\nRemark: After you click Next, VeraCrypt will attempt to find all non-system volumes where the process of encryption has been interrupted and where the VeraCrypt volume header can be decrypted using the supplied password and/or keyfile(s). If more than one such volume is found, you will need to select one of them in the next step.</entry>
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Please select one of the listed volumes. The list contains every accessible non-system volume where the process of encryption has been interrupted and whose header could be decrypted using the supplied password and/or keyfile(s).</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 128 characters.</entry>
     <entry lang="be" key="PASSWORD_HIDDENVOL_HELP">Абярыце пароль для ўтоенага тома. </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_HELP">Please choose a password for the hidden operating system (i.e. for the hidden volume). </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANT: The password that you choose for the hidden operating system in this step must be substantially different from the other two passwords (i.e. from the password for the outer volume and from the password for the decoy operating system).</entry>
     <entry lang="be" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Увядзіце пароль для тома, усярэдзіне якога вы жадаеце стварыць утоены том.\n\nПасля націску 'Далей' VeraCrypt паспрабуе змантаваць том, пасля чаго праглядзіць карту кластараў змантаванага тома ў пошуку бесперапыннай вольнай вобласці, у канцы якой будзе канец тома. У гэтай вобласці размесціцца ўтоены том, г.зн. яна вызначае яго найбольшы памер. Прагляд карты патрэбен для гарантыі таго, што дадзеныя ў вонкавым томе не будуць перазапісаныя ўкладзеным томам.</entry>
-    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 128 characters.</entry>
     <entry lang="en" key="PASSWORD_SYSENC_OUTERVOL_HELP">Please choose a password for the outer volume. This will be the password you will be able to reveal to anyone forcing you to disclose the password for the first partition behind the system partition, where both the outer volume and the hidden volume (containing the hidden operating system) will reside. The existence of the hidden volume (and of the hidden operating system) will remain secret. Note that this password is not for the decoy operating system.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume (i.e. for the hidden operating system).</entry>
     <entry lang="be" key="PASSWORD_HIDVOL_HOST_TITLE">Пароль вонкавага тома</entry>
     <entry lang="be" key="PASSWORD_HIDVOL_TITLE">Пароль утоенага тома</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1407,7 +1407,7 @@
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="be" key="IDT_BENCHMARK">Тэст хуткасці:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">
@@ -1470,4 +1481,4 @@
       </xs:complexType>
     </xs:element>
   </xs:schema>
-</VeraCrypt>
+</VeraCrypt>

Translations/Language.bg.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="bg" name="Български" en-name="Bulgarian" version="0.1.0" translators="Lachezar Gorchev" />
     <font lang="bg" class="normal" size="11" face="default" />
     <font lang="bg" class="bold" size="13" face="Arial" />
@@ -132,7 +132,7 @@
     <entry lang="en" key="IDC_FAVORITE_MOVE_DOWN">Move &amp;Down</entry>
     <entry lang="en" key="IDC_FAVORITE_MOVE_UP">Move &amp;Up</entry>
     <entry lang="en" key="IDC_FAVORITE_OPEN_EXPLORER_WIN_ON_MOUNT">Open &amp;Explorer window for selected volume when successfully mounted</entry>
-    <entry lang="en" key="IDC_FAVORITE_REMOVE">&amp;Remove</entry>
+    <entry lang="bg" key="IDC_FAVORITE_REMOVE">&amp;Премахване</entry>
     <entry lang="en" key="IDC_FAVORITE_USE_LABEL_IN_EXPLORER">Use favorite label as Explorer drive label</entry>
     <entry lang="en" key="IDC_FAV_VOL_OPTIONS_GLOBAL_SETTINGS_BOX">Global Settings</entry>
     <entry lang="en" key="IDC_HK_DISMOUNT_BALLOON_TOOLTIP">Display balloon tooltip after successful hot-key dismount</entry>
@@ -145,8 +145,8 @@
     <entry lang="bg" key="IDC_HOTKEY_REMOVE">Премахване</entry>
     <entry lang="bg" key="IDC_KEYFILES">Ключ-файлове...</entry>
     <entry lang="en" key="IDC_LIMIT_ENC_THREAD_POOL">Do not use the following number of processors for encryption/decryption:</entry>
-    <entry lang="en" key="IDC_MORE_INFO_ON_HW_ACCELERATION">More information</entry>
-    <entry lang="en" key="IDC_MORE_INFO_ON_THREAD_BASED_PARALLELIZATION">More information</entry>
+    <entry lang="bg" key="IDC_MORE_INFO_ON_HW_ACCELERATION">Повече информация</entry>
+    <entry lang="bg" key="IDC_MORE_INFO_ON_THREAD_BASED_PARALLELIZATION">Повече информация</entry>
     <entry lang="bg" key="IDC_MORE_SETTINGS">Още настройки...</entry>
     <entry lang="bg" key="IDC_MOUNTALL">&amp;Авто-монтиране</entry>
     <entry lang="bg" key="IDC_MOUNT_OPTIONS">&amp;Опции...</entry>
@@ -217,7 +217,7 @@
     <entry lang="en" key="IDM_DECRYPT_NONSYS_VOL">Permanently Decrypt...</entry>
     <entry lang="bg" key="IDM_DEFAULT_KEYFILES">Ключ-файлове по подразбиране...</entry>
     <entry lang="en" key="IDM_DEFAULT_MOUNT_PARAMETERS">Default Mount Parameters...</entry>
-    <entry lang="en" key="IDC_DONATE">Donate now...</entry>
+    <entry lang="en" key="IDM_DONATE">Donate now...</entry>
     <entry lang="bg" key="IDM_ENCRYPT_SYSTEM_DEVICE">Криптиране на системен дял/устройство...</entry>
     <entry lang="bg" key="IDM_FAQ">Често задавани въпроси</entry>
     <entry lang="bg" key="IDM_HELP">Ръководство на потребителя</entry>
@@ -445,7 +445,7 @@
     <entry lang="bg" key="DISK_FREE_PB">Свободното място на устройство %s е %.2f PB</entry>
     <entry lang="bg" key="DRIVELETTERS">Няма налични букви за устройства.</entry>
     <entry lang="bg" key="DRIVER_NOT_FOUND">Грешка: VeraCrypt драйвера не е намерен!\n\nМоля копирайте файловете 'veracrypt.sys' и 'veracrypt-x64.sys' в директорията, където се намира главното VeraCrypt приложение (VeraCrypt.exe).</entry>
-    <entry lang="en" key="DRIVER_VERSION">Error: An incompatible version of the VeraCrypt driver is currently running.\n\nIf you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already installed, you must uninstall it first (or upgrade it using the VeraCrypt installer). To uninstall it, follow these steps: On Windows Vista or later, select 'Start Menu' > Computer > 'Uninstall or change a program' > VeraCrypt > Uninstall; on Windows XP, select 'Start Menu' > Settings > 'Control Panel' > 'Add Or Remove Programs' > VeraCrypt > Remove.\n\nSimilarly, if you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already running in portable mode, you must restart the system first and then run only this new version.</entry>
+    <entry lang="en" key="DRIVER_VERSION">Error: An incompatible version of the VeraCrypt driver is currently running.\n\nIf you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already installed, you must uninstall it first (or upgrade it using the VeraCrypt installer). To uninstall it, follow these steps: On Windows Vista or later, select 'Start Menu' &gt; Computer &gt; 'Uninstall or change a program' &gt; VeraCrypt &gt; Uninstall; on Windows XP, select 'Start Menu' &gt; Settings &gt; 'Control Panel' &gt; 'Add Or Remove Programs' &gt; VeraCrypt &gt; Remove.\n\nSimilarly, if you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already running in portable mode, you must restart the system first and then run only this new version.</entry>
     <entry lang="bg" key="ERR_CIPHER_INIT_FAILURE">Грешка: Неуспешна инициализация на шифъра.</entry>
     <entry lang="bg" key="ERR_CIPHER_INIT_WEAK_KEY">Грешка: Открит е слаб или потенциално слаб ключ. Ключът ще бъде отхвърлен. Моля, опитайте отново.</entry>
     <entry lang="bg" key="EXCEPTION_REPORT">Възникна критична грешка и VeraCrypt трябва да бъде спрян. Ако това е причинено от проблем в VeraCrypt, ние бихме желали да го поправим. За да ни помогнете, можете да ни изпратите автоматично генериран репорт за грешки съдържащ следните данни:\n\n- Версия на програмата\n- Версия на операционната система\n- Тип на процесора (CPU)\n- Име на VeraCrypt компонента\n- Контролна сума на VeraCrypt изпълнимия файл\n- Символно име на диалоговия прозорец\n- Категория на грешката\n- Адрес на грешката\n- VeraCrypt стек с извиквания\n\nАко изберете 'Да', следният адрес (който съдържа цялият репорт за грешка) ще бъде отворен във вашия Internet браузър (имайте предвид, че понякога това може да отнеме до 30 секунди).\n\n%hs\n\nЖелаете ли да изпратите по-горния репорт за грешка?</entry>
@@ -499,7 +499,7 @@
     <entry lang="bg" key="WIPE_FINISHED">Съдържанието на дяла/устройството беше изтрито успешно.</entry>
     <entry lang="bg" key="WIPE_FINISHED_DECOY_SYSTEM_PARTITION">Съдържанието на дяла, където оригиналната система (от която е клонирана скритата система) е разположена беше изтрит успешно.</entry>
     <entry lang="en" key="DECOY_OS_VERSION_WARNING">Please make sure the version of Windows you are going to install (on the wiped partition) is the same as the version of Windows you are currently running. This is required due to the fact that both systems will share a common boot partition.</entry>
-    <entry lang="en" key="SYSTEM_ENCRYPTION_FINISHED">The system partition/drive has been successfully encrypted.\n\nNote: If there are non-system VeraCrypt volumes that you need to have mounted automatically every time Windows starts, you can set it up by mounting each of them and selecting 'Favorites' > 'Add Mounted Volume to System Favorites').</entry>
+    <entry lang="en" key="SYSTEM_ENCRYPTION_FINISHED">The system partition/drive has been successfully encrypted.\n\nNote: If there are non-system VeraCrypt volumes that you need to have mounted automatically every time Windows starts, you can set it up by mounting each of them and selecting 'Favorites' &gt; 'Add Mounted Volume to System Favorites').</entry>
     <entry lang="bg" key="SYSTEM_DECRYPTION_FINISHED">Системният дял/устройство е декриптиран успешно.</entry>
     <entry lang="bg" key="FORMAT_FINISHED_HELP">\n\nVeraCrypt томът е създаден и е готов за употреба. За да създадете друг VeraCrypt том, натиснете Напред. В противен случай, натиснете Изход.</entry>
     <entry lang="bg" key="SYSENC_HIDDEN_VOL_FORMAT_FINISHED_HELP">\n\nСкритият VeraCrypt том е създаден успешно (скритата операционна система ще се намира в този скрит том).\n\nНатиснете Напред за да продължите.</entry>
@@ -536,8 +536,8 @@
     <entry lang="bg" key="HIDVOL_PROT_WARN_AFTER_MOUNT">Скритият том сега е защитен от повреда докато външният том не е демонтиран.\n\nВНИМАНИЕ: При опит за запис на някакви данни върху скрития том, VeraCrypt ще започне да защитава от запис целия том (и външната и скритата част) докато не бъде демонтиран. Това може да доведе до грешки във файловата система на външния том, което (ако се повтори) може да засегне правдоподобната отказваемост на скрития том. За това, трябва да положите всички усилия да не записвате върху зоната на скрития том. Всички данни записвани върху зоната на скрития том няма да бъдат записани и ще бъдат изгубени. Windows може да докладва за това като грешка при запис ("Delayed Write Failed" или "The parameter is incorrect").</entry>
     <entry lang="bg" key="HIDVOL_PROT_WARN_AFTER_MOUNT_PLURAL">Всеки от скритите томове в току що монтираните томове е защитен от повреда докато не е демонтиран.\n\nВНИМАНИЕ: При опит за запис на някакви данни върху някой от скритите томове, VeraCrypt ще започне да защитава от запис целия том (и външната и скритата част) докато не бъде демонтиран. За това, трябва да положите всички усилия да не записвате върху зоната на скрития том. Всички данни записвани върху зоната на скрития том няма да бъдат записани и ще бъдат изгубени. Windows може да докладва за това като грешка при запис ("Delayed Write Failed" или "The parameter is incorrect").</entry>
     <entry lang="bg" key="DAMAGE_TO_HIDDEN_VOLUME_PREVENTED">ВНИМАНИЕ: Има опит за запис на данни в скрития том в тома монтиран като %c:! VeraCrypt предотврати запис на тези данни за да защити скрития том. Това може да е довело до грешки във файловата система на външния том и Windows може да го е докладвал като грешка при запис ("Delayed Write Failed" или "The parameter is incorrect"). Целият том (и външната и скритата част) ще бъдат защитени от запис докато не бъдат демонтирани. Ако това не е първият път когато VeraCrypt предотвратява запис на данни върху скрития том на този том, правдоподобната отказваемост на този скрит том може да е засегната (поради вероятна необичайна корелативна неконсистентност във файловата система на външния том). За това, трябва да помислите за създаване на нов VeraCrypt том (като опцията за бързо форматиране е изключена) и да преместите файловете от този том в новия том; този том би трябвало да бъде невъзстановимо изтрит (и външната и скритата част). Силно препоръчваме да рестартирате операционната система сега.</entry>
-    <entry lang="en" key="CANNOT_SATISFY_OVER_4G_FILE_SIZE_REQ">You have indicated intent to store files larger than 4 GB on the volume. This requires the volume to be formatted as NTFS, which, however, will not be possible.</entry>
-    <entry lang="en" key="CANNOT_CREATE_NON_HIDDEN_NTFS_VOLUMES_UNDER_HIDDEN_OS">Please note that when a hidden operating system is running, non-hidden VeraCrypt volumes cannot be formatted as NTFS. The reason is that the volume would need to be temporarily mounted without write protection in order to allow the operating system to format it as NTFS (whereas formatting as FAT is performed by VeraCrypt, not by the operating system, and without mounting the volume). For further technical details, see below. You can create a non-hidden NTFS volume from within the decoy operating system.</entry>
+    <entry lang="en" key="CANNOT_SATISFY_OVER_4G_FILE_SIZE_REQ">You have indicated intent to store files larger than 4 GB on the volume. This requires the volume to be formatted as NTFS/exFAT/ReFS, which, however, will not be possible.</entry>
+    <entry lang="en" key="CANNOT_CREATE_NON_HIDDEN_NTFS_VOLUMES_UNDER_HIDDEN_OS">Please note that when a hidden operating system is running, non-hidden VeraCrypt volumes cannot be formatted as NTFS/exFAT/ReFS. The reason is that the volume would need to be temporarily mounted without write protection in order to allow the operating system to format it as NTFS (whereas formatting as FAT is performed by VeraCrypt, not by the operating system, and without mounting the volume). For further technical details, see below. You can create a non-hidden NTFS/exFAT/ReFS volume from within the decoy operating system.</entry>
     <entry lang="en" key="HIDDEN_VOL_CREATION_UNDER_HIDDEN_OS_HOWTO">For security reasons, when a hidden operating system is running, hidden volumes can be created only in the 'direct' mode (because outer volumes must always be mounted as read-only). To create a hidden volume securely, follow these steps:\n\n1) Boot the decoy system.\n\n2) Create a normal VeraCrypt volume and, to this volume, copy some sensitive-looking files that you actually do NOT want to hide (the volume will become the outer volume).\n\n3) Boot the hidden system and start the VeraCrypt Volume Creation Wizard. If the volume is file-hosted, move it to the system partition or to another hidden volume (otherwise, the newly created hidden volume would be mounted as read-only and could not be formatted). Follow the instructions in the wizard so as to select the 'direct' hidden volume creation mode.\n\n4) In the wizard, select the volume you created in step 2 and then follow the instructions to create a hidden volume within it.</entry>
     <entry lang="bg" key="HIDDEN_OS_WRITE_PROTECTION_BRIEF_INFO">Поради съображения за сигурност, когато е стартирана скрита операционна система, локални некриптирани файлови системи и нескрити VeraCrypt томове се монтират 'само за четене' (не могат да се записват данни върху такива файлови системи или VeraCrypt томове).\n\nДАнни могат да се записват върху всяка файлова система, която се намира в скрит VeraCrypt том (в случай, че скритият том не се намира в контейнер съхраняван върху некриптирана файлова система или на файлова система 'само за четене').</entry>
     <entry lang="en" key="HIDDEN_OS_WRITE_PROTECTION_EXPLANATION">There are three main reasons why such countermeasures have been implemented:\n\n- It enables the creation of a secure platform for mounting of hidden VeraCrypt volumes. Note that we officially recommend that hidden volumes are mounted only when a hidden operating system is running. (For more information, see the subsection 'Security Requirements and Precautions Pertaining to Hidden Volumes' in the documentation.)\n\n- In some cases, it is possible to determine that, at a certain time, a particular filesystem was not mounted under (or that a particular file on the filesystem was not saved or accessed from within) a particular instance of an operating system (e.g. by analyzing and comparing filesystem journals, file timestamps, application logs, error logs, etc). This might indicate that a hidden operating system is installed on the computer. The countermeasures prevent these issues.\n\n- It prevents data corruption and allows safe hibernation. When Windows resumes from hibernation, it assumes that all mounted filesystems are in the same state as when the system entered hibernation. VeraCrypt ensures this by write-protecting any filesystem accessible both from within the decoy and hidden systems. Without such protection, the filesystem could become corrupted when mounted by one system while the other system is hibernated.</entry>
@@ -618,12 +618,12 @@
     <entry lang="bg" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Моля, въведете паролата и/или ключ-файла(овете) за несистемния том, за който желаете да продължите процеса на криптиране на място.\n\n\nЗабележка: След като натиснете Напред, VeraCrypt ще опита ад намери всички несистемни томове, за които има прекъснат процес на криптиране и където VeraCrypt заглавната част на тома може да бъде декриптирана с помощта на зададените парола и/или ключ-файл(ове). Ако са открити повече от един такъв том, ще трябва да изберете един от тях на следващата стъпка.</entry>
     <entry lang="bg" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Моля, изберете един от изброените томове. Списъкът съдържа всички достъпни несистемни томове, за които има прекъснат процес на криптиране и чиито заглавни части могат да бъдат декриптирани с помощта на зададените парола и/или ключ-файл(ове).</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="bg" key="PASSWORD_HELP">Много е важно да изберете добра парола. Трябва да избягвате пароли, които се състоят от една единствена дума, която може да бъде намерена в речник (или комбинация от 2, 3, или 4 такива думи). Не трябва да съдържа имена или дати на раждане. Не трябва да бъде лесна за познаване. Добра парола е случайна комбинация от главни и малки букви, цифри, и специални символи като @ ^ = $ * + и т.н. Препоръчваме избор на парола състояща се от повече от 20 знака (колкото по-дълга, толкова по-добре). Максималната възможна дължина е 64 знака.</entry>
+    <entry lang="bg" key="PASSWORD_HELP">Много е важно да изберете добра парола. Трябва да избягвате пароли, които се състоят от една единствена дума, която може да бъде намерена в речник (или комбинация от 2, 3, или 4 такива думи). Не трябва да съдържа имена или дати на раждане. Не трябва да бъде лесна за познаване. Добра парола е случайна комбинация от главни и малки букви, цифри, и специални символи като @ ^ = $ * + и т.н. Препоръчваме избор на парола състояща се от повече от 20 знака (колкото по-дълга, толкова по-добре). Максималната възможна дължина е 128 знака.</entry>
     <entry lang="bg" key="PASSWORD_HIDDENVOL_HELP">Моля, изберете парола за скрития том. </entry>
     <entry lang="bg" key="PASSWORD_HIDDEN_OS_HELP">Моля, изберете парола за скритата операционна система (т.е. за скрития том). </entry>
     <entry lang="bg" key="PASSWORD_HIDDEN_OS_NOTE">ВАЖНО: Паролата, която избирате за скритата операционна система в тази стъпка трябва да бъде значително по-различна от другите две пароли (т.е. от паролата за външния том и от паролата за заблуждаващата операционна система).</entry>
     <entry lang="bg" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Моля, въведете паролата за тома, в който желаете да създадете скрит том.\n\nСлед като натиснете Напред, VeraCrypt ще се опита да монтира тома. Когато тома бъде монтиран, неговата карта на клъстерите ще бъде сканирана за да се определи размера на непрекъснатата зона от свободно пространство (ако има такава), чийто край е напаснат с края на тома. Тази зона ще се приспособи към скрития том, така, че ще ограничи максималният му възможен размер. Сканирането на картата на клъстерите осигурява това, че данни от външния том няма да бъдат препокрити от скрития том.</entry>
-    <entry lang="bg" key="PASSWORD_HIDDENVOL_HOST_HELP">\nМоля, изберете парола за външния том. Това ще бъде паролата, която ще можете да разкриете на неприятел ако сте накарани или принудени да го направите.\n\nВАЖНО: Паролата трябва да бъде значително по-различна от паролата, която ще изберете за скрития том.\n\nЗабележка: Максималната възможна дължина за парола е 64 знака.</entry>
+    <entry lang="bg" key="PASSWORD_HIDDENVOL_HOST_HELP">\nМоля, изберете парола за външния том. Това ще бъде паролата, която ще можете да разкриете на неприятел ако сте накарани или принудени да го направите.\n\nВАЖНО: Паролата трябва да бъде значително по-различна от паролата, която ще изберете за скрития том.\n\nЗабележка: Максималната възможна дължина за парола е 128 знака.</entry>
     <entry lang="bg" key="PASSWORD_SYSENC_OUTERVOL_HELP">Моля, изберете парола за външния том. Това ще бъде паролата, която ще можете да разкриете на някой който ви принуждава да издадете паролата за първия дял след системния дял, където и външния и скрития том (съдържащ скритата операционна система) ще се намират. Съществуването на скрития том (и на скритата операционна система) ще останат в тайна. Забележете, че тази парола не е за заблуждаващата операционна система.\n\nВАЖНО: Паролата трябва да е значиелно по-различна от паролата, която ще изберете за скрития том (т.е. за скритата операционна система).</entry>
     <entry lang="bg" key="PASSWORD_HIDVOL_HOST_TITLE">Парола за външния том</entry>
     <entry lang="bg" key="PASSWORD_HIDVOL_TITLE">Парола за скрития том</entry>
@@ -648,7 +648,7 @@
     <entry lang="en" key="PIM_SMALL_WARNING">You have chosen a Personal Iterations Multiplier (PIM) that is smaller than the default VeraCrypt value. Please note that if your password is not strong enough, this could lead to a weaker security.\n\nDo you confirm that you are using a strong password?</entry>
     <entry lang="en" key="PIM_SYSENC_TOO_BIG">Personal Iterations Multiplier (PIM) maximum value for system encryption is 65535.</entry>
     <entry lang="en" key="PIM_TITLE">Volume PIM</entry>
-    <entry lang="en" key="HIDDEN_FILES_PRESENT_IN_KEYFILE_PATH">\n\nWARNING: Hidden file(s) have been found in a keyfile search path. Such hidden files cannot be used as keyfiles. If you need to use them as keyfiles, remove their 'Hidden' attribute (right-click each of them, select 'Properties', uncheck 'Hidden' and click OK). Note: Hidden files are visible only if the corresponding option is enabled (Computer > Organize > 'Folder and search options' > View).</entry>
+    <entry lang="en" key="HIDDEN_FILES_PRESENT_IN_KEYFILE_PATH">\n\nWARNING: Hidden file(s) have been found in a keyfile search path. Such hidden files cannot be used as keyfiles. If you need to use them as keyfiles, remove their 'Hidden' attribute (right-click each of them, select 'Properties', uncheck 'Hidden' and click OK). Note: Hidden files are visible only if the corresponding option is enabled (Computer &gt; Organize &gt; 'Folder and search options' &gt; View).</entry>
     <entry lang="bg" key="HIDDEN_VOL_PROT_PASSWORD_US_KEYB_LAYOUT">Ако се опитвате да защитите скрит том съдържащ скрита система, моля, уверете се, че използвате стандартната US клавишна подредба, когато въвеждате паролата за скрития том. Това се изисква въпреки факта, че паролата трябва да бъде въведена в средата преди стартиране (преди да стартира Windows), където не-US Windows клавишна подредба не е достъпна.</entry>
     <entry lang="bg" key="FOUND_NO_PARTITION_W_DEFERRED_INPLACE_ENC">VeraCrypt не намира том, където има прекъснато несистемно криптиране и където заглавната част на тома може да бъде декриптирана с помощта на зададените парола и/или ключ-файл(ове).\n\nМоля, уверете се, че паролата и/или ключ-файла(овете) са правилни и че дялът/томът не се използва от системата или от приложение (включително антивирусен софтуер).</entry>
     <entry lang="en" key="SELECTED_PARTITION_ALREADY_INPLACE_ENC">The selected partition/device is already fully encrypted.\nHeader Flags = 0x%.8X</entry>
@@ -666,7 +666,7 @@
     <entry lang="en" key="SELECT_KEYFILE_GENERATION_DIRECTORY">Select a directory where to store the keyfiles.</entry>
     <entry lang="en" key="SELECTED_KEYFILE_IS_CONTAINER_FILE">The current container file was selected as a keyfile. It will be skipped.</entry>
     <entry lang="bg" key="SERPENT_HELP">Разработен от Ross Anderson, Eli Biham, и Lars Knudsen. Публикуван през 1998. 256-битов ключ, 128-битов блок. Режима на работа е XTS. Serpent е един от финалистите на AES.</entry>
-    <entry lang="en" key="SIZE_HELP">Please specify the size of the container you want to create.\n\nIf you create a dynamic (sparse-file) container, this parameter will specify its maximum possible size.\n\nNote that the minimum possible size of a FAT volume is 292 KB. The minimum possible size of an NTFS volume is 3792 KB.</entry>
+    <entry lang="en" key="SIZE_HELP">Please specify the size of the container you want to create.\n\nIf you create a dynamic (sparse-file) container, this parameter will specify its maximum possible size.\n\nNote that the minimum possible size of a FAT volume is 292 KB. The minimum possible size of an exFAT volume is 424 KB. The minimum possible size of an NTFS volume is 3792 KB. The minimum possible size of an ReFS volume is 642 MB.</entry>
     <entry lang="en" key="SIZE_HELP_HIDDEN_HOST_VOL">Please specify the size of the outer volume to be created (you will first create the outer volume and then a hidden volume within it). The minimum possible size of a volume within which a hidden volume is intended to be created is 340 KB.</entry>
     <entry lang="en" key="SIZE_HELP_HIDDEN_VOL">Please specify the size of the hidden volume to create. The minimum possible size of a hidden volume is 40 KB (or 3664 KB if it is formatted as NTFS). The maximum possible size you can specify for the hidden volume is displayed above.</entry>
     <entry lang="bg" key="SIZE_HIDVOL_HOST_TITLE">Размер на външния том</entry>
@@ -847,7 +847,7 @@
     <entry lang="bg" key="AFTER_INSTALL_TUTORIAL">Ако никога не сте използвали VeraCrypt преди, препоръчваме ви да прочетете главата Beginner's Tutorial в VeraCrypt ръководството на потребителя. Желаете ли да погледнете инструкциите?</entry>
     <entry lang="bg" key="SELECT_AN_ACTION">Моля, изберете действие за изпълнение от следните:</entry>
     <entry lang="bg" key="REPAIR_REINSTALL">Поправка/Преинсталация</entry>
-    <entry lang="en" key="UPGRADE">Upgrade</entry>
+    <entry lang="bg" key="UPGRADE">Обновяване на версията</entry>
     <entry lang="bg" key="UNINSTALL">Деинсталация</entry>
     <entry lang="bg" key="SETUP_ADMIN">За да инсталирате/деинсталирате VeraCrypt успешно, трябва да имате администраторски права. Желаете ли да продължите?</entry>
     <entry lang="bg" key="TC_INSTALLER_IS_RUNNING">Инсталатора на VeraCrypt в момента е стартиран на тази система и подготвя или извършва инсталация или обновяване на VeraCrypt. Преди да продължите, моля изчакайте го да свърши или го затворете. Ако не можете да го затворите, моля рестартирайте вашия компютър преди да продължите.</entry>
@@ -863,7 +863,7 @@
     <entry lang="bg" key="INSTALL_OK">VeraCrypt е инсталиран успешно.</entry>
     <entry lang="bg" key="SETUP_UPDATE_OK">VeraCrypt е обновен успешно.</entry>
     <entry lang="en" key="UPGRADE_OK_REBOOT_REQUIRED">VeraCrypt has been successfully upgraded. However, before you can start using it, the computer must be restarted.\n\nDo you want to restart it now?</entry>
-    <entry lang="en" key="SYS_ENC_UPGRADE_FAILED">Failed to upgrade VeraCrypt!\n\nIMPORTANT: Before you shut down or restart the system, we strongly recommend that you use System Restore (Windows Start menu > All programs > Accessories > System Tools > System Restore) to restore your system to the restore point named 'VeraCrypt installation'. If System Restore is not available, you should try installing the original or the new version of VeraCrypt again before you shut down or restart the system.</entry>
+    <entry lang="en" key="SYS_ENC_UPGRADE_FAILED">Failed to upgrade VeraCrypt!\n\nIMPORTANT: Before you shut down or restart the system, we strongly recommend that you use System Restore (Windows Start menu &gt; All programs &gt; Accessories &gt; System Tools &gt; System Restore) to restore your system to the restore point named 'VeraCrypt installation'. If System Restore is not available, you should try installing the original or the new version of VeraCrypt again before you shut down or restart the system.</entry>
     <entry lang="bg" key="UNINSTALL_OK">VeraCrypt е деинсталиран успешно.\n\nНатиснете 'Край' за да премахнете VeraCrypt инсталатора и директорията %s. Забележете, че директорията няма да бъде премахната ако съдържа някакви файлове, които не са били инсталирани от VeraCrypt инсталатора или създаден от VeraCrypt.</entry>
     <entry lang="bg" key="REMOVING_REG">Премахване на записите на VeraCrypt в регистрите</entry>
     <entry lang="bg" key="ADDING_REG">Добавяне на записи в регистрите</entry>
@@ -984,7 +984,7 @@
     <entry lang="bg" key="NOT_APPLICABLE_OR_NOT_AVAILABLE">-</entry>
     <entry lang="bg" key="UISTR_YES">Да</entry>
     <entry lang="bg" key="UISTR_NO">Не</entry>
-    <entry lang="en" key="UISTR_DISABLED">Disabled</entry>
+    <entry lang="bg" key="UISTR_DISABLED">Деактивирано</entry>
     <entry lang="bg" key="DIGIT_ONE">1</entry>
     <entry lang="bg" key="TWO_OR_MORE">2 или повече</entry>
     <entry lang="bg" key="MODE_OF_OPERATION">Режим на операция</entry>
@@ -1096,7 +1096,7 @@
     <entry lang="en" key="DECOY_OS_REINSTALL_WARNING">WARNING: During the process of creation of the hidden operating system, you will be required to fully reinstall the currently running system (in order to create a decoy system securely).\n\nNote: The currently running operating system and the entire content of the system partition will be copied to the hidden volume (in order to create the hidden system).\n\n\nAre you sure you will be able to install Windows using a Windows Setup medium (or using a service partition)?</entry>
     <entry lang="en" key="DECOY_OS_REQUIREMENTS">For security reasons, if the currently running operating system requires activation, it must be activated before proceeding. Note that the hidden operating system will be created by copying the content of the system partition to a hidden volume (so if this operating system is not activated, the hidden operating system will not be activated either). For more information, see the section "Security Requirements and Precautions Pertaining to Hidden Volumes" in the VeraCrypt User's Guide.\n\nImportant: Before proceeding, please make sure you have read the section "Security Requirements and Precautions Pertaining to Hidden Volumes" in the VeraCrypt User's Guide.\n\n\nDoes the currently running operating system meet the above condition?</entry>
     <entry lang="en" key="CONFIRM_HIDDEN_OS_EXTRA_BOOT_PARTITION">Your system uses an extra boot partition. VeraCrypt does not support hibernation on hidden operating systems that use an extra boot partition (decoy systems can be hibernated without any problems).\n\nPlease note that the boot partition would be shared by both the decoy and the hidden system. Therefore, in order to prevent data leaks and problems while resuming from hibernation, VeraCrypt has to prevent the hidden system from writing to the shared boot partition and from hibernating.\n\n\nDo you want to continue? If you select 'No', instructions for removing the extra boot partition will be displayed.</entry>
-    <entry lang="en" key="EXTRA_BOOT_PARTITION_REMOVAL_INSTRUCTIONS">\nThe extra boot partition can be removed before installing Windows. To do so, follow these steps:\n\n1) Boot your Windows installation disc.\n\n2) In the Windows installer screen, click 'Install now' > 'Custom (advanced)'.\n\n3) Click 'Drive Options'.\n\n4) Select the main system partition and delete it by clicking 'Delete' and 'OK'.\n\n5) Select the 'System Reserved' partition, click 'Extend', and increase its size so that the operating system can be installed to it.\n\n6) Click 'Apply' and 'OK'.\n\n7) Install Windows on the 'System Reserved' partition.\n\n\nShould an attacker ask why you removed the extra boot partition, you can answer that you wanted to prevent any possible data leaks to the unencrypted boot partition.\n\nNote: You can print this text by clicking the 'Print' button below. If you save a copy of this text or print it (strongly recommended, unless your printer stores copies of documents it prints on its internal drive), you should destroy any copies of it after removing the extra boot partition (otherwise, if such a copy was found, it might indicate that there is a hidden operating system on this computer).</entry>
+    <entry lang="en" key="EXTRA_BOOT_PARTITION_REMOVAL_INSTRUCTIONS">\nThe extra boot partition can be removed before installing Windows. To do so, follow these steps:\n\n1) Boot your Windows installation disc.\n\n2) In the Windows installer screen, click 'Install now' &gt; 'Custom (advanced)'.\n\n3) Click 'Drive Options'.\n\n4) Select the main system partition and delete it by clicking 'Delete' and 'OK'.\n\n5) Select the 'System Reserved' partition, click 'Extend', and increase its size so that the operating system can be installed to it.\n\n6) Click 'Apply' and 'OK'.\n\n7) Install Windows on the 'System Reserved' partition.\n\n\nShould an attacker ask why you removed the extra boot partition, you can answer that you wanted to prevent any possible data leaks to the unencrypted boot partition.\n\nNote: You can print this text by clicking the 'Print' button below. If you save a copy of this text or print it (strongly recommended, unless your printer stores copies of documents it prints on its internal drive), you should destroy any copies of it after removing the extra boot partition (otherwise, if such a copy was found, it might indicate that there is a hidden operating system on this computer).</entry>
     <entry lang="bg" key="GAP_BETWEEN_SYS_AND_HIDDEN_OS_PARTITION">Внимание: Има неразпределено пространство между системния дял и първия дял след него. След като създадете скритата операционна система, не трябва да създавате нови дялове в това неразпределено пространство. В противен случай, няма да бъде възможно да се стартира скритата операционна система (докато не изтриете такива новосъздадени дялове).</entry>
     <entry lang="bg" key="ALGO_NOT_SUPPORTED_FOR_SYS_ENCRYPTION">За момента този алгоритъм не се поддържа з системно криптиране.</entry>
     <entry lang="en" key="ALGO_NOT_SUPPORTED_FOR_TRUECRYPT_MODE">This algorithm is not supported for TrueCrypt mode.</entry>
@@ -1120,8 +1120,8 @@
     <entry lang="bg" key="CANNOT_INITIATE_SYS_ENCRYPTION_PRETEST">Не може да се стартира предварителния тест на системното криптиране.</entry>
     <entry lang="bg" key="CANNOT_INITIATE_HIDDEN_OS_CREATION">Не може да се инициализира процеса на създаване на скритата операционна система.</entry>
     <entry lang="bg" key="WIPE_MODE_TITLE">Режим на заличаване</entry>
-    <entry lang="en" key="INPLACE_ENC_WIPE_MODE_INFO">On some types of storage media, when data is overwritten with other data, it may be possible to recover the overwritten data using techniques such as magnetic force microscopy. This also applies to data that are overwritten with their encrypted form (which happens when VeraCrypt initially encrypts an unencrypted partition or drive). According to some studies and governmental publications, recovery of overwritten data can be prevented (or made very difficult) by overwritting the data with pseudorandom and certain non-random data a certain number of times. Therefore, if you believe that an adversary might be able to use such techniques to recover the data you intend encrypt, you may want to select one of the wipe modes (existing data will NOT be lost). Note that wiping will NOT be performed after the partition/drive is encrypted. When the partition/drive is fully encrypted, no unencrypted data is written to it. Any data being written to it is first encrypted on the fly in memory and only then is the (encrypted) data written to the disk.</entry>
-    <entry lang="en" key="WIPE_MODE_INFO">On some types of storage media, when data is overwritten with other data (e.g. when the data is erased), it may be possible to recover the overwritten data using techniques such as magnetic force microscopy. According to some studies and governmental publications, recovery of overwritten data can be prevented (or made very difficult) by overwritting the data with pseudorandom and certain non-random data a certain number of times. Therefore, if you believe that an adversary might be able to use such techniques to recover the data that is to be erased, you may want to select one of the multi-pass wipe modes.\n\nNote: The more wipe passes you use, the longer it takes to erase the data.</entry>
+    <entry lang="en" key="INPLACE_ENC_WIPE_MODE_INFO">On some types of storage media, when data is overwritten with other data, it may be possible to recover the overwritten data using techniques such as magnetic force microscopy. This also applies to data that are overwritten with their encrypted form (which happens when VeraCrypt initially encrypts an unencrypted partition or drive). According to some studies and governmental publications, recovery of overwritten data can be prevented (or made very difficult) by overwriting the data with pseudorandom and certain non-random data a certain number of times. Therefore, if you believe that an adversary might be able to use such techniques to recover the data you intend to encrypt, you may want to select one of the wipe modes (existing data will NOT be lost). Note that wiping will NOT be performed after the partition/drive is encrypted. When the partition/drive is fully encrypted, no unencrypted data is written to it. Any data being written to it is first encrypted on the fly in memory and only then is the (encrypted) data written to the disk.</entry>
+    <entry lang="en" key="WIPE_MODE_INFO">On some types of storage media, when data is overwritten with other data (e.g. when the data is erased), it may be possible to recover the overwritten data using techniques such as magnetic force microscopy. According to some studies and governmental publications, recovery of overwritten data can be prevented (or made very difficult) by overwriting the data with pseudorandom and certain non-random data a certain number of times. Therefore, if you believe that an adversary might be able to use such techniques to recover the data that is to be erased, you may want to select one of the multi-pass wipe modes.\n\nNote: The more wipe passes you use, the longer it takes to erase the data.</entry>
     <entry lang="en" key="DEVICE_WIPE_PAGE_TITLE">Wiping</entry>
     <entry lang="en" key="DEVICE_WIPE_PAGE_INFO_HIDDEN_OS">\nNote: You can interrupt the process of wiping, shut down your computer, start the hidden system again and then resume the process (this wizard will be launched automatically). However, if you interrupt it, the entire process of wiping will have to start from the beginning.</entry>
     <entry lang="en" key="DEVICE_WIPE_PAGE_INFO">\n\nNote: If you interrupt the process of wiping and then attempt to resume it, the entire process will have to start from the beginning.</entry>
@@ -1235,7 +1235,7 @@
     <entry lang="bg" key="SYSTEM_ENCRYPTION_IN_PROGRESS_ELSEWHERE">В момента има стартиран VeraCrypt помощник за създаване на томове, който извършва или подготвя криптиране/декриптиране на системния дял/устройство. Преди да продължите, моля, изчакайте го да свърши или го затворете. Ако не можете да го затворите, моля, рестаритрайте вашия компютър преди да продължите.</entry>
     <entry lang="bg" key="SYSTEM_ENCRYPTION_NOT_COMPLETED">Процеса на криптиране или декриптиране на дял/устройство не е завършен. Моля, изчакайте докато завърши, преди да продължите.</entry>
     <entry lang="bg" key="ERR_ENCRYPTION_NOT_COMPLETED">Грешка: Процеса на криптиране на дял/устройство не е завършен. Първо трябва да бъде завършен.</entry>
-    <entry lang="en" key="ERR_NONSYS_INPLACE_ENC_INCOMPLETE">Error: The process of encryption of the partition/volume has not been completed. It must be completed first.\n\nNote: To resume the process, select 'Volumes' &gt; 'Resume Interrupted Process' from the menu bar of the main VeraCrypt window.</entry>
+    <entry lang="en" key="ERR_NONSYS_INPLACE_ENC_INCOMPLETE">Error: The process of encryption or decryption of the partition/volume has not been completed. It must be completed first.\n\nNote: To resume the process, select 'Volumes' &gt; 'Resume Interrupted Process' from the menu bar of the main VeraCrypt window.</entry>
     <entry lang="en" key="ERR_SYS_HIDVOL_HEAD_REENC_MODE_WRONG">The password is correct, VeraCrypt has successfully decrypted the volume header and detected that this volume is a hidden system volume. However, you cannot modify the header of a hidden system volume this way.\n\nTo change the password for a hidden system volume, boot the operating system residing in the hidden volume, and then select 'System' &gt; 'Change Password' from the menu bar of the main VeraCrypt window.\n\nTo set the header key derivation algorithm, boot the hidden operating system and then select 'System' &gt; 'Set Header Key Derivation Algorithm'.</entry>
     <entry lang="en" key="CANNOT_DECRYPT_HIDDEN_OS">VeraCrypt does not support in-place decryption of a hidden system partition.\n\nNote: If you want to decrypt the decoy system partition, boot the decoy system, and then select 'System' &gt; 'Permanently Decrypt System Partition/Drive' from the menu bar of the main VeraCrypt window.</entry>
     <entry lang="bg" key="ERR_PARAMETER_INCORRECT">Грешка: Неправилен/невалиден параметър.</entry>
@@ -1250,7 +1250,7 @@
     <entry lang="bg" key="NOTE_CASCADE_FOR_SYS_ENCRYPTION">Ако ви се случат някои от вече описаните проблеми, декриптирайте дяла/устройството (ако е криптиран) и и опитайте да го криптирате отново, каот използвате не-каскаден криптиращ алгоритъм (т.е. AES).</entry>
     <entry lang="en" key="UPDATE_TC_IN_DECOY_OS_FIRST">WARNING: For safety and security reasons, you should update VeraCrypt on the decoy operating system before you update it on the hidden operating system.\n\nTo do so, boot the decoy system and run the VeraCrypt installer from within it. Then boot the hidden system and run the installer from within it as well.\n\nNote: The decoy system and the hidden system share a single boot loader. If you upgraded VeraCrypt only on the hidden system (but not on the decoy system), the decoy system would contain a VeraCrypt driver and VeraCrypt applications whose version numbers are different from the version number of the VeraCrypt Boot Loader. Such a discrepancy might indicate that there is a hidden operating system on this computer.\n\n\nDo you want to continue?</entry>
     <entry lang="en" key="UPDATE_TC_IN_HIDDEN_OS_TOO">The version number of the VeraCrypt Boot Loader that booted this operating system is different from the version number of the VeraCrypt driver (and of the VeraCrypt applications) installed on this system.\n\nYou should run the VeraCrypt installer (whose version number is the same as the one of the VeraCrypt Boot Loader) to update VeraCrypt on this operating system.</entry>
-    <entry lang="en" key="BOOT_LOADER_VERSION_DIFFERENT_FROM_DRIVER_VERSION">The version number of the VeraCrypt Boot Loader that booted this operating system is different from the version number of the VeraCrypt driver (and of the VeraCrypt applications) installed on this system. Note that older versions may contain bugs fixed in later versions.\n\nIf you did not boot from the VeraCrypt Rescue Disk, you should reinstall VeraCrypt or upgrade it to the latest stable version (the boot loader will be updated too).\n\nIf you booted from the VeraCrypt Rescue Disk, you should update it ('System' > 'Create Rescue Disk').</entry>
+    <entry lang="en" key="BOOT_LOADER_VERSION_DIFFERENT_FROM_DRIVER_VERSION">The version number of the VeraCrypt Boot Loader that booted this operating system is different from the version number of the VeraCrypt driver (and of the VeraCrypt applications) installed on this system. Note that older versions may contain bugs fixed in later versions.\n\nIf you did not boot from the VeraCrypt Rescue Disk, you should reinstall VeraCrypt or upgrade it to the latest stable version (the boot loader will be updated too).\n\nIf you booted from the VeraCrypt Rescue Disk, you should update it ('System' &gt; 'Create Rescue Disk').</entry>
     <entry lang="bg" key="BOOT_LOADER_UPGRADE_OK">VeraCrypt Boot Loader е обновен.\n\nСилно се препоръчва да създадете нов VeraCrypt Спасителен Диск (който ще съдържа новата версия на VeraCrypt Boot Loader) като изберете 'Система' &gt; 'Създаване на Спасителен Диск' след като рестартирате вашия компютър.</entry>
     <entry lang="en" key="BOOT_LOADER_UPGRADE_OK_HIDDEN_OS">The VeraCrypt Boot Loader has been upgraded.\n\nIt is strongly recommended that you boot the decoy operating system and then create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' &gt; 'Create Rescue Disk'.</entry>
     <entry lang="bg" key="BOOT_LOADER_UPGRADE_FAILED">Неуспешен опит за обновяване на VeraCrypt Boot Loader.</entry>
@@ -1275,7 +1275,7 @@
     <entry lang="en" key="INVALID_TOKEN_KEYFILE_PATH">Security token keyfile path is invalid.</entry>
     <entry lang="en" key="SECURITY_TOKEN_ERROR">Security token error</entry>
     <entry lang="en" key="CKR_PIN_INCORRECT">Password for security token is incorrect.</entry>
-    <entry lang="en" key="CKR_DEVICE_MEMORY">The security token does not have enough memory/space to perform the requested operation.\n\nIf you are attempting to import a keyfile, you should select a smaller file or use a keyfile generated by VeraCrypt (select 'Tools' > 'Keyfile Generator').</entry>
+    <entry lang="en" key="CKR_DEVICE_MEMORY">The security token does not have enough memory/space to perform the requested operation.\n\nIf you are attempting to import a keyfile, you should select a smaller file or use a keyfile generated by VeraCrypt (select 'Tools' &gt; 'Keyfile Generator').</entry>
     <entry lang="en" key="ALL_TOKEN_SESSIONS_CLOSED">All open security token sessions have been closed.</entry>
     <entry lang="en" key="SELECT_TOKEN_KEYFILES">Select Security Token Keyfiles</entry>
     <entry lang="en" key="TOKEN_SLOT_ID">Slot</entry>
@@ -1300,8 +1300,8 @@
     <entry lang="en" key="MOUNTED_DEVICE_FORCED_READ_ONLY_WRITE_PROTECTION">Volume '%s' has been mounted as read-only because the operating system reported the host device to be write-protected.\n\nPlease note that some custom chipset drivers have been reported to cause writable media to falsely appear write-protected. This problem is not caused by VeraCrypt. It may be solved by updating or uninstalling any custom (non-Microsoft) chipset drivers that are currently installed on this system.</entry>
     <entry lang="en" key="LIMIT_ENC_THREAD_POOL_NOTE">Note that the Hyper-Threading technology provides multiple logical cores per a single physical core. When Hyper Threading is enabled, the number selected above represents the number of logical processors/cores.</entry>
     <entry lang="en" key="NUMBER_OF_THREADS">%d threads</entry>
-    <entry lang="en" key="DISABLED_HW_AES_AFFECTS_PERFORMANCE">Note that hardware-accelerated AES is disabled, which will affect benchmark results (worse performance).\n\nTo enable hardware acceleration, select 'Settings' > 'Performance' and enable the corresponding option.</entry>
-    <entry lang="en" key="LIMITED_THREAD_COUNT_AFFECTS_PERFORMANCE">Note that the number of threads is currently limited, which will affect benchmark results (worse performance).\n\nTo utilize the full potential of the processor(s), select 'Settings' > 'Performance' and disable the corresponding option.</entry>
+    <entry lang="en" key="DISABLED_HW_AES_AFFECTS_PERFORMANCE">Note that hardware-accelerated AES is disabled, which will affect benchmark results (worse performance).\n\nTo enable hardware acceleration, select 'Settings' &gt; 'Performance' and enable the corresponding option.</entry>
+    <entry lang="en" key="LIMITED_THREAD_COUNT_AFFECTS_PERFORMANCE">Note that the number of threads is currently limited, which will affect benchmark results (worse performance).\n\nTo utilize the full potential of the processor(s), select 'Settings' &gt; 'Performance' and disable the corresponding option.</entry>
     <entry lang="en" key="ASK_REMOVE_DEVICE_WRITE_PROTECTION">Do you want VeraCrypt to attempt to disable write protection of the partition/drive?</entry>
     <entry lang="en" key="CONFIRM_SETTING_DEGRADES_PERFORMANCE">WARNING: This setting may degrade performance.\n\nAre you sure you want to use this setting?</entry>
     <entry lang="en" key="HOST_DEVICE_REMOVAL_DISMOUNT_WARN_TITLE">Warning: VeraCrypt volume auto-dismounted</entry>
@@ -1374,11 +1374,11 @@
     <entry lang="bg" key="GB_PER_SEC">GB/s</entry>
     <entry lang="bg" key="TB_PER_SEC">TB/s</entry>
     <entry lang="bg" key="PB_PER_SEC">PB/s</entry>
-    <entry lang="en" key="TRIPLE_DOT_GLYPH_ELLIPSIS">…</entry>
+    <entry lang="en" key="TRIPLE_DOT_GLYPH_ELLIPSIS">...</entry>
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1397,7 +1397,7 @@
     <entry lang="en" key="IDC_DISABLE_BOOT_LOADER_HASH_PROMPT">Do not request Hash algorithm in the pre-boot authentication screen</entry>
     <entry lang="en" key="KUZNYECHIK_HELP">Kuznyechik is a block cipher first published in 2015 and defined in the National Standard of the Russian Federation GOST R 34.12-2015 and also in RFC 7801. 256-bit key, 128-bit block. Mode of operation is XTS.</entry>
     <entry lang="en" key="CAMELLIA_HELP">Jointly developed by Mitsubishi Electric and NTT of Japan. First published on 2000. 256-bit key, 128-bit block. Mode of operation is XTS. It has been approved for use by the ISO/IEC, the European Union's NESSIE project and the Japanese CRYPTREC project.</entry>
-    <entry lang="en" key="TIME">Time</entry>
+    <entry lang="bg" key="TIME">Време</entry>
     <entry lang="en" key="ITERATIONS">Iterations</entry>
     <entry lang="en" key="PRE-BOOT">Pre-Boot</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_INFO">Before you can encrypt the partition, you must create a VeraCrypt Rescue Disk (VRD), which serves the following purposes:\n\n- If the VeraCrypt Boot Loader, master key, or other critical data gets damaged, the VRD allows you to restore it (note, however, that you will still have to enter the correct password then).\n\n- If Windows gets damaged and cannot start, the VRD allows you to permanently decrypt the partition before Windows starts.\n\n- The VRD will contain a backup of the present EFI boot loader and will allow you to restore it if necessary.\n\nThe VeraCrypt Rescue Disk ZIP image will be created in the location specified below.</entry>
@@ -1405,9 +1405,9 @@
     <entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NO_CHECK">The Rescue Disk ZIP image has been created and stored in this file:\n%s\n\nNow you should either extract the image to a USB stick that is formatted as FAT/FAT32 or move it to a safe location for later use.\n\n%lsClick Next to continue.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NOTE">IMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\n</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
-    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
-    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' &gt; 'Create Rescue Disk'.</entry>
+    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' &gt; 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1415,18 +1415,29 @@
     <entry lang="en" key="EFI_PLATFORM_INFORMATION">EFI Platform Information</entry>
     <entry lang="en" key="EDIT_DCSPROP_FOR_ADVANCED_ONLY">WARNING: Inexperienced users should never attempt to manually edit boot loader configurations.\n\nContinue?</entry>
     <entry lang="en" key="DCSPROP_XML_VALIDATION_FAILED">WARNING: Failed to validate the XML format of the Boot Loader configuration. Please check your modifications.</entry>
-    <entry lang="en" key="IDT_ADVANCED_OPTIONS">Advanced Options</entry>
-    <entry lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' > 'Create Rescue Disk'.\nDo you want to do it now?</entry>
+    <entry lang="bg" key="IDT_ADVANCED_OPTIONS">Разширени възможности</entry>
+    <entry lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' &gt; 'Create Rescue Disk'.\nDo you want to do it now?</entry>
     <entry lang="en" key="IDC_ALLOW_TRIM_NONSYS_SSD">Allow TRIM command for non-system SSD partition/drive</entry>
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="bg" key="IDT_BENCHMARK">Тест:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">
@@ -1470,4 +1481,4 @@
       </xs:complexType>
     </xs:element>
   </xs:schema>
-</VeraCrypt>
+</VeraCrypt>

Translations/Language.ca.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="ca" name="Català" en-name="Catalan" version="0.1.0" translators="CESICAT, Centre de Seguretat de la Informació de Catalunya" />
     <font lang="ca" class="normal" size="11" face="default" />
     <font lang="ca" class="bold" size="13" face="Arial" />
@@ -445,7 +445,7 @@
     <entry lang="ca" key="DISK_FREE_PB">La unitat %s té %.2f PB lliures.</entry>
     <entry lang="ca" key="DRIVELETTERS">No s'han pogut obtenir les lletres d'unitat disponibles.</entry>
     <entry lang="ca" key="DRIVER_NOT_FOUND">Error: No s'ha pogut trobar el controlador VeraCrypt.\n\nSi us plau, copii els fitxers 'veracrypt.sys' i 'truecrypy-x64.sys' al directori on es trobi l'executable del VeraCrypt (VeraCrypt.exe).</entry>
-    <entry lang="en" key="DRIVER_VERSION">Error: An incompatible version of the VeraCrypt driver is currently running.\n\nIf you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already installed, you must uninstall it first (or upgrade it using the VeraCrypt installer). To uninstall it, follow these steps: On Windows Vista or later, select 'Start Menu' > Computer > 'Uninstall or change a program' > VeraCrypt > Uninstall; on Windows XP, select 'Start Menu' > Settings > 'Control Panel' > 'Add Or Remove Programs' > VeraCrypt > Remove.\n\nSimilarly, if you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already running in portable mode, you must restart the system first and then run only this new version.</entry>
+    <entry lang="en" key="DRIVER_VERSION">Error: An incompatible version of the VeraCrypt driver is currently running.\n\nIf you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already installed, you must uninstall it first (or upgrade it using the VeraCrypt installer). To uninstall it, follow these steps: On Windows Vista or later, select 'Start Menu' &gt; Computer &gt; 'Uninstall or change a program' &gt; VeraCrypt &gt; Uninstall; on Windows XP, select 'Start Menu' &gt; Settings &gt; 'Control Panel' &gt; 'Add Or Remove Programs' &gt; VeraCrypt &gt; Remove.\n\nSimilarly, if you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already running in portable mode, you must restart the system first and then run only this new version.</entry>
     <entry lang="ca" key="ERR_CIPHER_INIT_FAILURE">Error: No s'ha pogut inicialitzar el xifrat.</entry>
     <entry lang="ca" key="ERR_CIPHER_INIT_WEAK_KEY">Error: S'ha detectat una clau vulnerable o potencialment vulnerable. La clau s'ha descartat. Si us plau, torni-ho a provar.</entry>
     <entry lang="ca" key="EXCEPTION_REPORT">S'ha produït un error crític i el VeraCrypt s'ha de tancar. Si això s'ha degut a un error en el VeraCrypt, ens agradaria arreglar-lo. Per ajudar-nos, pot enviar un informe de l'error generat automàticament que conté la següent informació:\n\n- Versió del programa\n- Versió del sistema operatiu\n- Tipus de CPU\n- Nom del component VeraCrypt\n- Suma de verificació de l'executable\n- El nom simbòlic de la finestra de diàleg.\n- Direcció de l'error\n- Estat de la pila del VeraCrypt.\n\nSi fa clic a 'Si', la següent URL (que conté l'informe complet) s'obirarà al seu navegador per defecte.\n\n%hs\n\nVol enviar-nos aquest informa d'error?</entry>
@@ -618,12 +618,12 @@
     <entry lang="ca" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Si us plau, introdueixi la contrasenya i/o el(s) fitxer(s) de claus pel volum del que vol continuar el procés de xifrat in-situ.\n\nObservació: Quan faci clic a 'Següent' el VeraCrypt provarà de buscar tots els volums que no siguin de sistema que hagin interromput el procés de xifrat i que es puguin desxifrar amb les dades proporcionades. Si hi ha més d'un volum que cumpleix aquests requisits haurà de seleccionar-ne un al següent pas.</entry>
     <entry lang="ca" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Si us plau, seleccioni un volum de la llista. La llista conté tots els volums accessibles que han interromput el procés de xifrat i capçalera dels quals pot ser desxifrada utilitzant la contrasenya i/o els fitxers de claus que s'han proporcionat.</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="ca" key="PASSWORD_HELP">És molt important triar una bona contrasenya. Hauria d'evitat escollir-ne una que només contingui una paraula que es pot trobar a un diccionari (o una combinació de 2, 3 o 4 d'aquestes paraules). No hauria de contenir noms o dates de naixement. Ha de ser dificil d'endevinar. Una bona contrasenya és una combinació aleatòria de lletres majúscules i minúscules, números i caràcters especials, com ara @, ^, =, $, *, +, etc. Recomenem escollir una contrasenya de més de 20 caràcters (com més llarga, millor). La mida màxima de la contrasenya és de 64 caràcters.</entry>
+    <entry lang="ca" key="PASSWORD_HELP">És molt important triar una bona contrasenya. Hauria d'evitat escollir-ne una que només contingui una paraula que es pot trobar a un diccionari (o una combinació de 2, 3 o 4 d'aquestes paraules). No hauria de contenir noms o dates de naixement. Ha de ser dificil d'endevinar. Una bona contrasenya és una combinació aleatòria de lletres majúscules i minúscules, números i caràcters especials, com ara @, ^, =, $, *, +, etc. Recomenem escollir una contrasenya de més de 20 caràcters (com més llarga, millor). La mida màxima de la contrasenya és de 128 caràcters.</entry>
     <entry lang="ca" key="PASSWORD_HIDDENVOL_HELP">Esculli la contrasenya del volum ocult. </entry>
     <entry lang="ca" key="PASSWORD_HIDDEN_OS_HELP">Esculli la contrasenya del sistema operatiu ocult (o sigui, pel volum ocult). </entry>
     <entry lang="ca" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANT: La contrasenya triada pel sistema operatiu ocult en aquest punt ha de ser substancialment diferent de les altres dues contrasenyes (la contrasenya del volum exterior i la del sistema operatiu esquer).</entry>
     <entry lang="ca" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Si us plau, introdueixi la contrasenya del volum ón vol crear el nou volum ocult.\n\nDesprés de fer clic a 'Següent', el VeraCrypt intentarà muntar el volum. Tan aviat com el volum estigui muntat, s'escannejarà per determinar la mida de l'area ininterrompuda d'espai lliure (si hi és) el final de la qual s'alinii amb el final del volum. Aquesta àrea allotjarà el volum ocult i per tant delimitarà la seva mida màxima. Aquest escanneig és necessari per assegurar que no se sobreescriguin dades del volum ocult des del volum exterior.</entry>
-    <entry lang="ca" key="PASSWORD_HIDDENVOL_HOST_HELP">\nEsculli la contrassenya del volum exterior. Aquesta és la contrasenya que podria revelar quan se li pregunti o el forcin a fer-ho.\n\nIMPORTANT: La contrasenya hauria de ser substancialment diferent de la que es trii pel volum ocult.\n\nNota: La contrasenya pot tenir fins a 64 caràcters.</entry>
+    <entry lang="ca" key="PASSWORD_HIDDENVOL_HOST_HELP">\nEsculli la contrassenya del volum exterior. Aquesta és la contrasenya que podria revelar quan se li pregunti o el forcin a fer-ho.\n\nIMPORTANT: La contrasenya hauria de ser substancialment diferent de la que es trii pel volum ocult.\n\nNota: La contrasenya pot tenir fins a 128 caràcters.</entry>
     <entry lang="ca" key="PASSWORD_SYSENC_OUTERVOL_HELP">Esculli la contrassenya del volum exterior. Aquesta és la contrasenya que podrà rebelar si algú el força a dir la contrasenya de la primera partició després de la partició de sistema, ón hi ha tant el volum exterior com l'ocult (que conté el sistema operatiu ocult). L'existència del volum ocult romandrà en secret. Aquesta contrasenya no és pel sistema operatiu esquer.\n\nIMPORANT: Aquesta contrasenya ha de ser significativament diferent de la que esculli pel volum ocult.</entry>
     <entry lang="ca" key="PASSWORD_HIDVOL_HOST_TITLE">Contrasenya del volum exterior</entry>
     <entry lang="ca" key="PASSWORD_HIDVOL_TITLE">Contrasenya del volum ocult</entry>
@@ -648,7 +648,7 @@
     <entry lang="en" key="PIM_SMALL_WARNING">You have chosen a Personal Iterations Multiplier (PIM) that is smaller than the default VeraCrypt value. Please note that if your password is not strong enough, this could lead to a weaker security.\n\nDo you confirm that you are using a strong password?</entry>
     <entry lang="en" key="PIM_SYSENC_TOO_BIG">Personal Iterations Multiplier (PIM) maximum value for system encryption is 65535.</entry>
     <entry lang="en" key="PIM_TITLE">Volume PIM</entry>
-    <entry lang="en" key="HIDDEN_FILES_PRESENT_IN_KEYFILE_PATH">\n\nWARNING: Hidden file(s) have been found in a keyfile search path. Such hidden files cannot be used as keyfiles. If you need to use them as keyfiles, remove their 'Hidden' attribute (right-click each of them, select 'Properties', uncheck 'Hidden' and click OK). Note: Hidden files are visible only if the corresponding option is enabled (Computer > Organize > 'Folder and search options' > View).</entry>
+    <entry lang="en" key="HIDDEN_FILES_PRESENT_IN_KEYFILE_PATH">\n\nWARNING: Hidden file(s) have been found in a keyfile search path. Such hidden files cannot be used as keyfiles. If you need to use them as keyfiles, remove their 'Hidden' attribute (right-click each of them, select 'Properties', uncheck 'Hidden' and click OK). Note: Hidden files are visible only if the corresponding option is enabled (Computer &gt; Organize &gt; 'Folder and search options' &gt; View).</entry>
     <entry lang="ca" key="HIDDEN_VOL_PROT_PASSWORD_US_KEYB_LAYOUT">Si està intentant protegir un volum ocult que conté un sistema ocult, si us plau asseguri's d'utilitzar la disposició de teclat estàndard als EUA quan escrigui la contrasenya pel volum ocult. Això és necessari degut al fet que la contrasenya s'ha d'escriuer en un entor de prearrencada (abans d'engegar el Windows) on només hi ha aquesta disposició de teclat disponible.</entry>
     <entry lang="ca" key="FOUND_NO_PARTITION_W_DEFERRED_INPLACE_ENC">No s'ha trobat cap volum que hagués interromput el xifrat i que es pugui desxifrar amb la contrasenya i/o fitxer(s) de claus que ha introduït.\n\nSi us plau asseguri's que aquestes dades són correctes i que la partició/volum no s'està utilitzant pel sistema o per alguna aplicació (incloent l'antivirus)</entry>
     <entry lang="en" key="SELECTED_PARTITION_ALREADY_INPLACE_ENC">The selected partition/device is already fully encrypted.\nHeader Flags = 0x%.8X</entry>
@@ -863,7 +863,7 @@
     <entry lang="ca" key="INSTALL_OK">S'ha instal·lat el VeraCrypt amb èxit.</entry>
     <entry lang="ca" key="SETUP_UPDATE_OK">S'ha actualitzat el VeraCrypt amb èxit.</entry>
     <entry lang="en" key="UPGRADE_OK_REBOOT_REQUIRED">VeraCrypt has been successfully upgraded. However, before you can start using it, the computer must be restarted.\n\nDo you want to restart it now?</entry>
-    <entry lang="en" key="SYS_ENC_UPGRADE_FAILED">Failed to upgrade VeraCrypt!\n\nIMPORTANT: Before you shut down or restart the system, we strongly recommend that you use System Restore (Windows Start menu > All programs > Accessories > System Tools > System Restore) to restore your system to the restore point named 'VeraCrypt installation'. If System Restore is not available, you should try installing the original or the new version of VeraCrypt again before you shut down or restart the system.</entry>
+    <entry lang="en" key="SYS_ENC_UPGRADE_FAILED">Failed to upgrade VeraCrypt!\n\nIMPORTANT: Before you shut down or restart the system, we strongly recommend that you use System Restore (Windows Start menu &gt; All programs &gt; Accessories &gt; System Tools &gt; System Restore) to restore your system to the restore point named 'VeraCrypt installation'. If System Restore is not available, you should try installing the original or the new version of VeraCrypt again before you shut down or restart the system.</entry>
     <entry lang="ca" key="UNINSTALL_OK">El VeraCrypt s'ha desinstal·lat amb èxit.\n\nFaci clic a 'Acabar' per eliminar l'instal·lador del VeraCrypt i el directori %s. Tingui en compte que el directori no s'esborrarà si conté fitxers que no hagi instal·lat o creat el VeraCrypt.</entry>
     <entry lang="ca" key="REMOVING_REG">Eliminant les entrades al registre del TruCrypt</entry>
     <entry lang="ca" key="ADDING_REG">Afegint l'entrada al registre</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1397,7 +1397,7 @@
     <entry lang="en" key="IDC_DISABLE_BOOT_LOADER_HASH_PROMPT">Do not request Hash algorithm in the pre-boot authentication screen</entry>
     <entry lang="en" key="KUZNYECHIK_HELP">Kuznyechik is a block cipher first published in 2015 and defined in the National Standard of the Russian Federation GOST R 34.12-2015 and also in RFC 7801. 256-bit key, 128-bit block. Mode of operation is XTS.</entry>
     <entry lang="en" key="CAMELLIA_HELP">Jointly developed by Mitsubishi Electric and NTT of Japan. First published on 2000. 256-bit key, 128-bit block. Mode of operation is XTS. It has been approved for use by the ISO/IEC, the European Union's NESSIE project and the Japanese CRYPTREC project.</entry>
-    <entry lang="en" key="TIME">Time</entry>
+    <entry lang="ca" key="TIME">Temps</entry>
     <entry lang="en" key="ITERATIONS">Iterations</entry>
     <entry lang="en" key="PRE-BOOT">Pre-Boot</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_INFO">Before you can encrypt the partition, you must create a VeraCrypt Rescue Disk (VRD), which serves the following purposes:\n\n- If the VeraCrypt Boot Loader, master key, or other critical data gets damaged, the VRD allows you to restore it (note, however, that you will still have to enter the correct password then).\n\n- If Windows gets damaged and cannot start, the VRD allows you to permanently decrypt the partition before Windows starts.\n\n- The VRD will contain a backup of the present EFI boot loader and will allow you to restore it if necessary.\n\nThe VeraCrypt Rescue Disk ZIP image will be created in the location specified below.</entry>
@@ -1405,9 +1405,9 @@
     <entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NO_CHECK">The Rescue Disk ZIP image has been created and stored in this file:\n%s\n\nNow you should either extract the image to a USB stick that is formatted as FAT/FAT32 or move it to a safe location for later use.\n\n%lsClick Next to continue.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NOTE">IMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\n</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
-    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
-    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' &gt; 'Create Rescue Disk'.</entry>
+    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' &gt; 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1415,18 +1415,29 @@
     <entry lang="en" key="EFI_PLATFORM_INFORMATION">EFI Platform Information</entry>
     <entry lang="en" key="EDIT_DCSPROP_FOR_ADVANCED_ONLY">WARNING: Inexperienced users should never attempt to manually edit boot loader configurations.\n\nContinue?</entry>
     <entry lang="en" key="DCSPROP_XML_VALIDATION_FAILED">WARNING: Failed to validate the XML format of the Boot Loader configuration. Please check your modifications.</entry>
-    <entry lang="en" key="IDT_ADVANCED_OPTIONS">Advanced Options</entry>
-    <entry lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' > 'Create Rescue Disk'.\nDo you want to do it now?</entry>
+    <entry lang="ca" key="IDT_ADVANCED_OPTIONS">Opcions Avançades</entry>
+    <entry lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' &gt; 'Create Rescue Disk'.\nDo you want to do it now?</entry>
     <entry lang="en" key="IDC_ALLOW_TRIM_NONSYS_SSD">Allow TRIM command for non-system SSD partition/drive</entry>
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="ca" key="IDC_SELECT_LANGUAGE_LABEL">Trieu idioma a emprar durant la instal·lació:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
-    <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="ca" key="IDC_SELECT_LANGUAGE_LABEL">Trieu idioma a emprar durant la instal·lació:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="ca" key="IDT_BENCHMARK">Prova de rendiment:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">
@@ -1470,4 +1481,4 @@
       </xs:complexType>
     </xs:element>
   </xs:schema>
-</VeraCrypt>
+</VeraCrypt>

Translations/Language.cs.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="cs" name="Čeština" en-name="Czech" version="1.1.0" translators="Vítek Moser, Lagardere" />
     <font lang="cs" class="normal" size="11" face="default" />
     <font lang="cs" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="cs" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Zadejte prosím heslo a/nebo souborový klíč/e k nesystémovému svazku, u kterého chcete pokračovat v úkonu šifrování za běhu.\n\n\nPoznámka: až klikněte na „Další”, VeraCrypt se pokusí najít všechny nesystémové svazky, u kterých byl přerušen úkon šifrování a u kterých může být VeraCrypt hlavička dešifrována použitím uvedeného hesla a/nebo souborového klíče/ů. Bude-li nalezen více než jeden svazek, budete muset v příštím kroku vybrat jeden z nich.</entry>
     <entry lang="cs" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Vyberte, prosím, jeden svazek ze seznamu. Seznam obsahuje všechny přístupné ne-systémové svazky, kde byl přerušen úkon šifrování a jejichž hlavičky mohou být dešifrovány s použitím použitého hesla a souborového klíče.</entry>
     <entry lang="cs" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Prosím, zadejte heslo a/nebo souborový/é klíč/e pro nesystémový svazek VeraCrypt, který chcete dešifrovat.</entry>
-    <entry lang="cs" key="PASSWORD_HELP">Je velmi důležité, abyste zadali dobré heslo. Měli byste se vyvarovat takového hesla, které obsahuje jen jedno slovo nebo může být nalezeno ve slovníku (nebo kombinace 2, 3 nebo 4 takovýchto slov). Nemělo by obsahovat žádná jména nebo data narození. Nemělo by být lehce uhodnutelné. Dobré heslo se skládá z kombinace různých velkých a malých písmen, čísel a speciálních znaků jako např. @ ^ = $ * + atd. Doporučujeme zvolit heslo skládající se z 20 znaků a více (čím delší, tím lepší). Maximální možná délka je 64 znaků.</entry>
+    <entry lang="cs" key="PASSWORD_HELP">Je velmi důležité, abyste zadali dobré heslo. Měli byste se vyvarovat takového hesla, které obsahuje jen jedno slovo nebo může být nalezeno ve slovníku (nebo kombinace 2, 3 nebo 4 takovýchto slov). Nemělo by obsahovat žádná jména nebo data narození. Nemělo by být lehce uhodnutelné. Dobré heslo se skládá z kombinace různých velkých a malých písmen, čísel a speciálních znaků jako např. @ ^ = $ * + atd. Doporučujeme zvolit heslo skládající se z 20 znaků a více (čím delší, tím lepší). Maximální možná délka je 128 znaků.</entry>
     <entry lang="cs" key="PASSWORD_HIDDENVOL_HELP">Zadejte heslo pro skrytý svazek. </entry>
     <entry lang="cs" key="PASSWORD_HIDDEN_OS_HELP">Zadejte, prosím, heslo pro skrytý operační systém (např. pro skrytý svazek). </entry>
     <entry lang="cs" key="PASSWORD_HIDDEN_OS_NOTE">DŮLEŽITÉ: heslo, které vyberete v tomto kroku pro skrytý operační systém, musí být podstatně odlišné od ostatních dvou hesel (např. od hesla k vnějšímu svazku a hesla pro klamný operační systém).</entry>
     <entry lang="cs" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Zadejte prosím heslo pro svazek, ve kterém si přejete vytvořit skrytý svazek.\n\nPo kliknutí Další se VeraCrypt pokusí svazek připojit. Jakmile bude svazek připojen, jeho clusterová bitmapa bude oskenována pro zjištění velikosti nepřerušené oblasti volného místa (je-li takové) jehož konec tvoří i konec svazku. Tato oblast bude obsahovat skrytý svazek, a proto bude jeho maximální velikost omezena. Skenování clusterové mapy je nutné, aby bylo zajištěno, že žádná data na vnějším disku nebudou přepsána skrytým svazkem.</entry>
-    <entry lang="cs" key="PASSWORD_HIDDENVOL_HOST_HELP">\nZadejte heslo pro vnější svazek. Toto heslo budete moci prozradit útočníkovi, donutí-li vás k tomu.\n\nDŮLEŽITÉ: heslo musí být úplně odlišné od toho, které zvolíte pro skrytý svazek.\n\nPoznámka: maximální možná délka hesla je 64 znaků.</entry>
+    <entry lang="cs" key="PASSWORD_HIDDENVOL_HOST_HELP">\nZadejte heslo pro vnější svazek. Toto heslo budete moci prozradit útočníkovi, donutí-li vás k tomu.\n\nDŮLEŽITÉ: heslo musí být úplně odlišné od toho, které zvolíte pro skrytý svazek.\n\nPoznámka: maximální možná délka hesla je 128 znaků.</entry>
     <entry lang="cs" key="PASSWORD_SYSENC_OUTERVOL_HELP">Zadejte heslo pro vnější svazek. Toto heslo budete moci prozradit komukoliv, kdo by po vás chtěl vědět heslo k prvnímu diskovému oddílu za systémovým diskovým oddílem, kde je umístěn jak vnější tak skrytý svazek (bude obsahovat skrytý operační systém). Existence skrytého svazku (a skrytého operačního systému) zůstane utajena. Toto heslo není pro klamný operační systém.\n\nDŮLEŽITÉ: heslo musí být úplně odlišné od toho, které zvolíte pro skrytý svazek. (např. pro skrytý operační systém).</entry>
     <entry lang="cs" key="PASSWORD_HIDVOL_HOST_TITLE">Heslo vnějšího svazku</entry>
     <entry lang="cs" key="PASSWORD_HIDVOL_TITLE">Heslo skrytého svazku</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="cs" key="IDC_BOOT_LOADER_CACHE_PIM">Zahrnout &amp;PIM s ověřovacím heslem do mezipaměti</entry>
     <entry lang="cs" key="IDC_PREF_CACHE_PIM">Zahrnout PIM při uložení hesla do mezipaměti</entry>
     <entry lang="cs" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Odpojené síťové disky budou dostupné pro připojení</entry>
-    <entry lang="cs" key="PASSWORD_UTF8_TOO_LONG">Zadané heslo je moc dlouhé: jeho reprezentace v UTF-8 přesahuje 64 bajtů.</entry>
+    <entry lang="cs" key="PASSWORD_UTF8_TOO_LONG">Zadané heslo je moc dlouhé: jeho reprezentace v UTF-8 přesahuje 128 bajtů.</entry>
     <entry lang="cs" key="PASSWORD_UTF8_INVALID">Zadané heslo obsahuje znaky v Unicode, které nemohou být převedeny do UTF-8.</entry>
     <entry lang="cs" key="INIT_DLL">Chyba: nebylo možné načíst systémovou knihovnu.</entry>
     <entry lang="cs" key="ERR_EXFAT_INVALID_VOLUME_SIZE">Velikost souboru ve svazku specifikovaná v příkazovém řádku je nekompatibilní s vybraným souborovým systémem exFAT.</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="cs" key="IDC_BLOCK_SYSENC_TRIM">Zakázat příkazy TRIM na systémových diskových oddílech/discích</entry>
     <entry lang="cs" key="WINDOWS_EFI_BOOT_LOADER_MISSING">CHYBA: systémový zavaděč Windows EFI nebyl na disku nalezen. Úkon bude přerušen.</entry>
     <entry lang="cs" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">Je-li SecureBoot povolen a uživatelské klíče Veracryptu nejsou načteny do firmware přístroje, není možné zašifrovat systém. Aby mohl být systém zašifrován, musí být v BIOSu zakázán SecureBoot.</entry>
-    <entry lang="cs" key="PASSWORD_PASTED_TRUNCATED">Vložený text byl zkrácen, neboť maximální délka hesla je 64 znaků.</entry>
-    <entry lang="cs" key="PASSWORD_MAXLENGTH_REACHED">Heslo je již dlouhé 64 znaků.\nDalší znaky nejsou již umožněny.</entry>
+    <entry lang="cs" key="PASSWORD_PASTED_TRUNCATED">Vložený text byl zkrácen, neboť maximální délka hesla je 128 znaků.</entry>
+    <entry lang="cs" key="PASSWORD_MAXLENGTH_REACHED">Heslo je již dlouhé 128 znaků.\nDalší znaky nejsou již umožněny.</entry>
     <entry lang="cs" key="IDC_SELECT_LANGUAGE_LABEL">Vyberte si jazyk instalace:</entry>
     <entry lang="cs" key="VOLUME_TOO_LARGE_FOR_HOST">CHYBA: velikost kontejneru souboru je větší, než je volné místo na disku.</entry>
     <entry lang="cs" key="IDC_ALLOW_WINDOWS_DEFRAG">Povolit systému Windows vlastním nástrojem defragmentovat nesystémový diskový oddíl/disk</entry>
     <entry lang="cs" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">UPOZORNĚNÍ: defragmentace nesystémových diskových oddílů/disků může způsobit únik metadat týkajících se obsahu nebo způsobit problémy u obsažených skrytých svazků.\n\nPokračovat?</entry>
+    <entry lang="cs" key="VIRTUAL_DEVICE">Virtuální zařízení</entry>
+    <entry lang="cs" key="MOUNTED_VOLUME_NOT_ASSOCIATED">Vybraný připojený svazek nemá přiřazeno písmeno ve Windows, proto nemůže být otevřen v průzumníkovi Windows.</entry>
+    <entry lang="cs" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Smazat šifrovací klíč z paměti, je-li připojeno nové zařízení</entry>
+    <entry lang="cs" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">DŮLEŽITÉ UPOZORNĚNÍ:\n - Mějte na paměti, že tato možnost nepřetrvá po vypnutí/restartu systému, proto ji budete muset znovu zapnout po spuštění.\n\n - Je-li tato možnost povolena a bude připojeno nové zařízení, počítač zamrzne a může přejít do BSOD, jelikož Windows nebude mít přístup k zašifrovanému disku, smažete-li klíče z paměti.\n</entry>
+    <entry lang="cs" key="STARTING">Spuštění</entry>
+    <entry lang="cs" key="IDC_ENABLE_CPU_RNG">Použít náhodné hardwarové generování v CPU jako dodatečný zdroj entropie</entry> 
+    <entry lang="cs" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Použít starou maximální délku hesla (64 znaků)</entry>
+    <entry lang="cs" key="IDC_ENABLE_RAM_ENCRYPTION">Aktivovat šifrování klíčů a hesel uložených v paměti RAM</entry>
+    <entry lang="cs" key="IDT_BENCHMARK">Test výkonu:</entry>
+    <entry lang="cs" key="IDC_DISABLE_MOUNT_MANAGER">Vytvořit virtuální zařízení bez připojení na vybrané písmeno jednotky</entry>
+    <entry lang="cs" key="LEGACY_PASSWORD_UTF8_TOO_LONG">Zadané heslo je moc dlouhé: jeho reprezentace v UTF-8 přesahuje 64 bajtů.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.da.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="da" name="Dansk" en-name="Danish" version="0.1.0" translators="Lasse Bond" />
     <font lang="da" class="normal" size="11" face="default" />
     <font lang="da" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system volume where you want to resume the process of in-place encryption.\n\n\nRemark: After you click Next, VeraCrypt will attempt to find all non-system volumes where the process of encryption has been interrupted and where the VeraCrypt volume header can be decrypted using the supplied password and/or keyfile(s). If more than one such volume is found, you will need to select one of them in the next step.</entry>
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Please select one of the listed volumes. The list contains every accessible non-system volume where the process of encryption has been interrupted and whose header could be decrypted using the supplied password and/or keyfile(s).</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="da" key="PASSWORD_HELP">Det er meget vigtigt at du vælger et godt kodeord. Du bør undgå at vælge et der kun indeholder et enkelt ord der kan findes i en ordbog (eller en kombination af 2, 3 eller 4 af sådanne ord). Det bør ikke indeholde nogle navne eller fødselsdatoer. Det skal ikke være nemt at gætte. Et godt kodeord er en tilfældig kombination af store og små bogstaver, tal, og specielle karakterer, så som @ ^ = $ * + osv. Vi anbefaler at du vælger et kodeord der består af mere end 20 karakterer (jo længere, jo bedre). Det maksimalt mulige længde er 64 karakterer.</entry>
+    <entry lang="da" key="PASSWORD_HELP">Det er meget vigtigt at du vælger et godt kodeord. Du bør undgå at vælge et der kun indeholder et enkelt ord der kan findes i en ordbog (eller en kombination af 2, 3 eller 4 af sådanne ord). Det bør ikke indeholde nogle navne eller fødselsdatoer. Det skal ikke være nemt at gætte. Et godt kodeord er en tilfældig kombination af store og små bogstaver, tal, og specielle karakterer, så som @ ^ = $ * + osv. Vi anbefaler at du vælger et kodeord der består af mere end 20 karakterer (jo længere, jo bedre). Det maksimalt mulige længde er 128 karakterer.</entry>
     <entry lang="da" key="PASSWORD_HIDDENVOL_HELP">Vælg venligst et kodeord til det skjulte bind. </entry>
     <entry lang="da" key="PASSWORD_HIDDEN_OS_HELP">Vælg venligst et kodeord til det skjulte operativsystem (f.eks. til det skjulte bind). </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANT: The password that you choose for the hidden operating system in this step must be substantially different from the other two passwords (i.e. from the password for the outer volume and from the password for the decoy operating system).</entry>
     <entry lang="da" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Indtast venligst kodeordet til det bind hvori du ønsker at oprette et skjult bind.\n\nEfter du har klikket Næste, vil VeraCrypt forsøge at tilslutte bindet. Så snart at bindet er tilsluttet, vil dets cluster bitmap bliver skannet for at afgøre størrelsen af det ubrudte område af ledig plads (hvis der er noget) hvis slutning ligger lige med slutningen af bindet. Dette område vil indeholde det skjulte bind og vil derfor begrænse dets maksimale mulige størrelse. Cluster map skanning er nødvendigt for at sikre at ingen data i det ydre bind, vil blive overskrevet af det skjulte bind.</entry>
-    <entry lang="da" key="PASSWORD_HIDDENVOL_HOST_HELP">\nVælg venligst et kodeord til det ydre bind. Dette vil være det kodeord som du vil kunne afsløre i det tilfælde du bliver spurgt eller tvunget til at afsløre det.\n\nVIGTIGT: Kodeordet du vælger skal være mærkbart forskelligt fra det du vælger til det skjulte bind.\n\nBemærk: Den maksimalt mulige kodeords længde er på 64 karakterer.</entry>
+    <entry lang="da" key="PASSWORD_HIDDENVOL_HOST_HELP">\nVælg venligst et kodeord til det ydre bind. Dette vil være det kodeord som du vil kunne afsløre i det tilfælde du bliver spurgt eller tvunget til at afsløre det.\n\nVIGTIGT: Kodeordet du vælger skal være mærkbart forskelligt fra det du vælger til det skjulte bind.\n\nBemærk: Den maksimalt mulige kodeords længde er på 128 karakterer.</entry>
     <entry lang="da" key="PASSWORD_SYSENC_OUTERVOL_HELP">Vælg venligst et kodeord til det ydre bind. Dette vil være det kodeord som du vil kunne afsløre i det tilfælde du bliver spurgt eller tvunget til at afsløre det for den første partition bag system partitionen, hvor både det ydre bind og det skjulte bind (indeholdende det skjulte operativsystem) vil være placeret. Eksistensen af det skjulte bind (og det skjulte operativsystem) vil forblive hemmeligt. Bemærk at kodeordet ikke er til aflednings systemet.\n\nVIGTIGT: Kodeordet du vælger skal være mærkbart forskelligt fra det du vælger til det skjulte bind (dvs. til det skjulte operativsystem).</entry>
     <entry lang="da" key="PASSWORD_HIDVOL_HOST_TITLE">Ydre Bind kodeord</entry>
     <entry lang="da" key="PASSWORD_HIDVOL_TITLE">Skjult Bind kodeord</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1407,7 +1407,7 @@
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="da" key="IDC_SELECT_LANGUAGE_LABEL">Vælg det sprog der skal vises under installationen:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="da" key="IDC_SELECT_LANGUAGE_LABEL">Vælg det sprog der skal vises under installationen:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="en" key="IDT_BENCHMARK">Benchmark:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">
@@ -1470,4 +1481,4 @@
       </xs:complexType>
     </xs:element>
   </xs:schema>
-</VeraCrypt>
+</VeraCrypt>

Translations/Language.de.xml

@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <!-- Sprachen -->
-    <language langid="de" name="Deutsch" en-name="German" version="1.1.8" translators="Harry Haller, Alexander Schorg, Simon Frankenberger, David Arndt, H. Sauer, Dulla, Ettore Atalan, Matthias Kolja Miehl" />
+    <language langid="de" name="Deutsch" en-name="German" version="1.1.8" translators="Harry Haller, Alexander Schorg, Simon Frankenberger, David Arndt, H. Sauer, Dulla, Ettore Atalan, Matthias Kolja Miehl, Felix Reichmann" />
     <!-- Schriftarten -->
     <font lang="de" class="normal" size="11" face="default" />
     <font lang="de" class="bold" size="13" face="Arial" />
@@ -44,7 +44,7 @@
     <entry lang="de" key="IDC_HIDVOL_WIZ_MODE_DIRECT">Direkter Modus</entry>
     <entry lang="de" key="IDC_HIDVOL_WIZ_MODE_FULL">Kompletter Modus</entry>
     <entry lang="de" key="IDC_KB">&amp;KB</entry>
-    <entry lang="de" key="IDC_KEYFILES_ENABLE">Schlüsselda&amp;t. verwenden</entry>
+    <entry lang="de" key="IDC_KEYFILES_ENABLE">Schlüsselda&amp;tei verwenden</entry>
     <entry lang="de" key="IDC_KEYFILES_TRY_EMPTY_PASSWORD">Versuche zuerst ohne Passwort einzubinden</entry>
     <entry lang="de" key="IDC_KEYFILES_RANDOM_SIZE">Zufällige Größe (64 &lt;-&gt; 1048576)</entry>
     <entry lang="de" key="IDC_KEY_FILES">Schlüsselda&amp;teien ...</entry>
@@ -56,7 +56,7 @@
     <entry lang="de" key="IDC_MORE_INFO_ON_SYS_ENCRYPTION">Mehr Informationen über die Systemverschlüsselung</entry>
     <entry lang="de" key="IDC_MORE_INFO_SYS_ENCRYPTION">Mehr Informationen</entry>
     <entry lang="de" key="IDC_MULTI_BOOT">Mehrere Betriebssysteme</entry>
-    <entry lang="de" key="IDC_NONSYS_DEVICE">Verschlüsselt eine Partition/ein Laufwerk</entry>
+    <entry lang="de" key="IDC_NONSYS_DEVICE">Eine Partition/ein Laufwerk verschlüsseln</entry>
     <entry lang="de" key="IDC_NO_HISTORY">Verlauf &amp;nicht speichern</entry>
     <entry lang="de" key="IDC_OPEN_OUTER_VOLUME">Äußeres Volume öffnen</entry>
     <entry lang="de" key="IDC_PAUSE">&amp;Pause</entry>
@@ -70,7 +70,7 @@
     <entry lang="de" key="IDC_STD_VOL">Standard VeraCrypt-Volume</entry>
     <entry lang="de" key="IDC_SYSENC_HIDDEN">V&amp;ersteckt</entry>
     <entry lang="de" key="IDC_SYSENC_NORMAL">Normal</entry>
-    <entry lang="de" key="IDC_SYS_DEVICE">System-Partition bzw. System-Laufwerk verschlüsseln</entry>
+    <entry lang="de" key="IDC_SYS_DEVICE">Eine System-Partition bzw. ein System-Laufwerk verschlüsseln</entry>
     <entry lang="de" key="IDC_SYS_PARTITION">Die Windows System-Partition verschlüsseln</entry>
     <entry lang="de" key="IDC_WHOLE_SYS_DRIVE">Gesamtes Laufwerk verschlüsseln</entry>
     <entry lang="de" key="IDD_VOL_CREATION_WIZARD_DLG">Assistent zum Erstellen eines VeraCrypt-Volumes</entry>
@@ -88,7 +88,7 @@
     <entry lang="de" key="IDT_LEFT">Rest</entry>
     <entry lang="de" key="IDT_MASTER_KEY">Hauptschlüssel: </entry>
     <entry lang="de" key="IDT_MULTI_BOOT">Diese Option wählen, falls zwei oder mehrere Betriebssysteme auf diesem System installiert sind.\n\nZum Beispiel:\n- Windows 8 und Windows 8\n- Windows 8 und Windows 10\n- Windows und Mac OS X\n- Windows und Linux\n- Windows, Linux und Mac OS X</entry>
-    <entry lang="de" key="IDT_NON_SYS_DEVICE">Verschlüsselt eine Nicht-Systempartition auf internen oder externen Laufwerken (als normales oder verstecktes Volume).</entry>
+    <entry lang="de" key="IDT_NON_SYS_DEVICE">Verschlüsselt eine Nicht-Systempartition auf internen oder externen Laufwerken (als normales oder verstecktes Volumen).</entry>
     <entry lang="de" key="IDT_PARTIAL_POOL_CONTENTS">Aktueller Inhalte-Pool (teilweise)</entry>
     <entry lang="de" key="IDT_PASS">Durchgang</entry>
     <entry lang="de" key="IDT_PASSWORD">&amp;Passwort:</entry>
@@ -621,12 +621,12 @@
     <entry lang="de" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Bitte geben Sie das Passwort und/oder die Schlüsseldatei(en) für das Nicht-System Volume an, von dem Sie den „in-place“ Verschlüsselungsprozess fortsetzen möchten.\n\n\nHinweis: Nachdem Sie auf Weiter klicken wird VeraCrypt versuchen alle Nicht-System Volumes zu finden, wo der Verschlüsselungsprozess unterbrochen wurde und wo die VeraCrypt-Volume-Kopfdaten mit dem angegebenen Passwort und/oder der Schlüsseldatei(en) entschlüsselt werden kann. Wenn mehr als ein solches Volume gefunden wird, dann müssen Sie eines davon im nächsten Schritt auswählen.</entry>
     <entry lang="de" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Bitte wählen Sie eines der aufgelisteten Volumes. Die Liste enthält jedes zugängliche Nicht-System Volume, bei dem der Verschlüsselungsprozess unterbrochen wurde und wo mithilfe des Passwortes und/oder der Schlüsseldatei(en) die Kopfdaten entschlüsselt werden konnten.</entry>
     <entry lang="de" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Bitte geben Sie das Passwort und/oder die Schlüsseldatei(en) für das Nicht-System Volume an, welches Sie entschlüsseln möchten.</entry>
-    <entry lang="de" key="PASSWORD_HELP">Es wird dringend empfohlen ein gutes Passwort zu wählen. Passwörter die in einem Wörterbuch zu finden sind (und ebenso Kombinationen aus 2, 3 oder 4 solcher Wörter) sollten nicht verwendet werden. Das Passwort sollte keine Namen oder Geburtstage enthalten, und nicht leicht zu erraten sein. Ein gutes Passwort ist eine zufällige Kombination aus Groß- und Kleinbuchstaben, Zahlen, und Sonderzeichen wie @ ^ = $ * + etc. Es ist zudem empfehlenswert ein Passwort mit mehr als 20 Zeichen zu wählen (je länger umso besser). Die mögliche Länge ist auf 64 Zeichen beschränkt.</entry>
+    <entry lang="de" key="PASSWORD_HELP">Es wird dringend empfohlen ein gutes Passwort zu wählen. Passwörter die in einem Wörterbuch zu finden sind (und ebenso Kombinationen aus 2, 3 oder 4 solcher Wörter) sollten nicht verwendet werden. Das Passwort sollte keine Namen oder Geburtstage enthalten, und nicht leicht zu erraten sein. Ein gutes Passwort ist eine zufällige Kombination aus Groß- und Kleinbuchstaben, Zahlen, und Sonderzeichen wie @ ^ = $ * + etc. Es ist zudem empfehlenswert ein Passwort mit mehr als 20 Zeichen zu wählen (je länger umso besser). Die mögliche Länge ist auf 128 Zeichen beschränkt.</entry>
     <entry lang="de" key="PASSWORD_HIDDENVOL_HELP">Wählen Sie bitte ein Passwort für das versteckte Volume. </entry>
     <entry lang="de" key="PASSWORD_HIDDEN_OS_HELP">Wählen Sie ein Passwort für das versteckte Betriebssystem (d.h. für das versteckte Volume). </entry>
     <entry lang="de" key="PASSWORD_HIDDEN_OS_NOTE">WICHTIG: Das Passwort, dass Sie in diesem Schritt für das versteckte Betriebssystem auswählen, muss sich erheblich von den zwei anderen Passwörtern unterscheiden (d.h. von dem Passwort für das äußere Volume und von dem Passwort für das Köder-Betriebssystem).</entry>
     <entry lang="de" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Geben Sie bitte das Passwort für das Volume ein, innerhalb welchem das versteckte Volume erstellt werden soll. Nachdem Sie "Weiter" angeklickt haben, wird VeraCrypt versuchen das Volume einzubinden. Sobald das Volume eingebunden ist, wird dessen Clusterbelegung analysiert, um festzustellen, wie viel freier zusammenhängender Speicher vom Ende des Volumes aus verfügbar ist. Der gefundene Bereich wird für die Unterbringung des versteckten Volumes verwendet. Dessen Größe legt zugleich auch die maximale Größe des versteckten Volumes festlegt. Das Analysieren der Clusterbelegung ist notwendig, um sicherzustellen, dass keine Daten des äußeren Volumes durch das versteckte Volume überschrieben werden.</entry>
-    <entry lang="de" key="PASSWORD_HIDDENVOL_HOST_HELP">\nWählen Sie ein Passwort für das äußere Volume. Das Passwort wird das sein, welches Sie einem Angreifer aushändigen können, wenn Sie dazu aufgefordert oder gezwungen werden.\n\nWICHTIG: Das Passwort muss sich erheblich von dem unterscheiden, welches Sie für das versteckte Volume auswählen werden.\n\nHinweis: Die maximal mögliche Passwortlänge beträgt 64 Zeichen.</entry>
+    <entry lang="de" key="PASSWORD_HIDDENVOL_HOST_HELP">\nWählen Sie ein Passwort für das äußere Volume. Das Passwort wird das sein, welches Sie einem Angreifer aushändigen können, wenn Sie dazu aufgefordert oder gezwungen werden.\n\nWICHTIG: Das Passwort muss sich erheblich von dem unterscheiden, welches Sie für das versteckte Volume auswählen werden.\n\nHinweis: Die maximal mögliche Passwortlänge beträgt 128 Zeichen.</entry>
     <entry lang="de" key="PASSWORD_SYSENC_OUTERVOL_HELP">Bitte wählen Sie ein Passwort für das äußere Volume. Dies wird das Passwort sein das Sie einem Angreifer verraten können, wenn Sie aufgefordert oder gezwungen werden das Passwort für die erste Partition hinter der Systempartition herauszugeben, auf der sich das äußere Volume und das versteckte Volume (mit dem ausgeblendete Betriebssystem) befinden wird. Die Existenz des versteckten Volumes (und des versteckten Betriebssystems) bleibt geheim. Beachten Sie, dass dieses Passwort nicht für das Köder-Betriebssystem ist.\n\nWICHTIG: Das Passwort muss sich erheblich von dem unterscheiden, welches von Ihnen für das versteckte Volume (d.h. für das versteckte Betriebssystem) ausgewählt wird.</entry>
     <entry lang="de" key="PASSWORD_HIDVOL_HOST_TITLE">Passwort des äußeren Volumes</entry>
     <entry lang="de" key="PASSWORD_HIDVOL_TITLE">Passwort des versteckten Volumes</entry>
@@ -809,7 +809,7 @@
     <entry lang="de" key="SYSTEM_PARTITION_PARTIALLY_ENCRYPTED">Systempartition (%.2f%% verschlüsselt)</entry>
     <entry lang="de" key="HID_VOL_DAMAGE_PREVENTED">Ja (vor Beschädigung bewahrt!)</entry>
     <entry lang="de" key="NONE">Keins</entry>
-    <entry lang="de" key="KEY_SIZE">Primärschlüssel Größe</entry>
+    <entry lang="de" key="KEY_SIZE">Primärschlüsselgröße</entry>
     <entry lang="de" key="SECONDARY_KEY_SIZE_XTS">Sekundärschlüssellänge (XTS-Modus)</entry>
     <entry lang="de" key="SECONDARY_KEY_SIZE_LRW">Tweak-Schlüssellänge (LRW-Modus)</entry>
     <entry lang="de" key="BITS">Bit</entry>
@@ -1008,7 +1008,7 @@
     <entry lang="de" key="FREE_SPACE_FOR_WRITING_TO_OUTER_VOLUME">WARNUNG: Wenn Sie nachträglich noch weitere Daten/Dateien im äußeren Volume speichern möchten, dann sollten Sie eine kleinere Größe des versteckten Volumes in Betracht ziehen.\n\nMöchten Sie tatsächlich mit der von Ihnen angegebenen Größe fortsetzen?</entry>
     <entry lang="de" key="NO_VOLUME_SELECTED">Es wurde kein Volume ausgewählt.\n\nKlicken Sie bitte auf „Datenträger“ oder „Datei“ und wählen Sie ein VeraCrypt-Volume aus.</entry>
     <entry lang="de" key="NO_SYSENC_PARTITION_SELECTED">Keine Partition ausgewählt.\n\nKlicken Sie „Datenträger ...“ um eine getrennte Partition zu wählen, welche sonst Prä-Boot-Authentifikation voraussetzt (z.B. eine Partition auf einem verschlüsselten Systemlaufwerk mit einem Betriebssystem darauf welches gerade nicht läuft, oder die verschlüsselte Systempartition eines anderen Betriebssystems).\n\nHinweis: Die Ausgewählte Partition wird als reguläres VeraCrypt-Volume eingebunden, ohne Prä-Boot-Authentifikation. Das ist hilfreich für Sicherungs- oder Reparaturvorgänge.</entry>
-    <entry lang="de" key="CONFIRM_SAVE_DEFAULT_KEYFILES">WARNUNG: Wenn Standardschlüsseldateien festgelegt und aktiviert sind, dann können Volumes, die diese nicht verwenden, nicht eingebunden werden. Daher sollten Sie, nachdem Sie die Standardschlüsseldateien aktiviert haben, das Häkchen bei „Schlüsseldat. verw.“ (unterhalb des Passwort-Eingabefeldes) entfernen sobald Sie solche Volumes einbinden möchten.\n\nSind Sie sicher dass Sie die Schlüsseldateien/-pfade als Standard speichern möchten?</entry>
+    <entry lang="de" key="CONFIRM_SAVE_DEFAULT_KEYFILES">WARNUNG: Wenn Standardschlüsseldateien festgelegt und aktiviert sind, dann können Volumes, die diese nicht verwenden, nicht eingebunden werden. Daher sollten Sie, nachdem Sie die Standardschlüsseldateien aktiviert haben, das Häkchen bei „Schlüsseldatei verwenden“ (unterhalb des Passwort-Eingabefeldes) entfernen sobald Sie solche Volumes einbinden möchten.\n\nSind Sie sicher dass Sie die Schlüsseldateien/-pfade als Standard speichern möchten?</entry>
     <entry lang="de" key="HK_AUTOMOUNT_DEVICES">Alle Datenträger-Volumes automatisch einbinden</entry>
     <entry lang="de" key="HK_DISMOUNT_ALL">Alle Volumes trennen</entry>
     <entry lang="de" key="HK_WIPE_CACHE">Cache sicher löschen</entry>
@@ -1381,7 +1381,7 @@
     <entry lang="de" key="IDC_BOOT_LOADER_CACHE_PIM">&amp;PIM beim Zwischenspeichern eines Prä-Boot-Authentifikationspasswortes einbeziehen</entry>
     <entry lang="de" key="IDC_PREF_CACHE_PIM">PIM beim Zwischenspeichern eines Passwortes einbeziehen</entry>
     <entry lang="de" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Getrennte Netzlaufwerke zum Einbinden verfügbar machen</entry>
-    <entry lang="de" key="PASSWORD_UTF8_TOO_LONG">Das eingegebene Passwort ist zu lang: Kodiert mit UTF-8 überschreitet es 64 Byte.</entry>
+    <entry lang="de" key="PASSWORD_UTF8_TOO_LONG">Das eingegebene Passwort ist zu lang: Kodiert mit UTF-8 überschreitet es 128 Byte.</entry>
     <entry lang="de" key="PASSWORD_UTF8_INVALID">Das eingegebene Passwort enthält Unicode-Zeichen, die nicht mit UTF-8 kodiert werden können.</entry>
     <entry lang="de" key="INIT_DLL">Fehler: Kann eine Systembibliothek nicht laden.</entry>
     <entry lang="de" key="ERR_EXFAT_INVALID_VOLUME_SIZE">Die auf der Kommandozeile angegebene Volume-Größe ist nicht mit dem gewählten exFAT Dateisystem kompatibel.</entry>
@@ -1424,12 +1424,23 @@
     <entry lang="de" key="IDC_BLOCK_SYSENC_TRIM">TRIM-Befehl auf Systempartition/Laufwerk blockieren</entry>
     <entry lang="de" key="WINDOWS_EFI_BOOT_LOADER_MISSING">FEHLER: Windows-EFI-Systemlader konnte nicht auf der Festplatte gefunden werden. Operation wird abgebrochen.</entry>
     <entry lang="de" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">Es ist derzeit nicht möglich, ein System zu verschlüsseln, wenn SecureBoot aktiviert ist und keine benutzerdefinierten Schlüssel von VeraCrypt in die Maschinen-Firmware geladen sind. SecureBoot muss in der BIOS-Konfiguration deaktiviert werden, damit die Systemverschlüsselung fortgesetzt werden kann.</entry>
-    <entry lang="de" key="PASSWORD_PASTED_TRUNCATED">Eingefügter Text wurde abgeschnitten, da die maximale Länge des Passworts 64 Zeichen beträgt</entry>
-    <entry lang="de" key="PASSWORD_MAXLENGTH_REACHED">Passwort hat bereits seine maximale Länge von 64 Zeichen erreicht.\nEs ist kein zusätzliches Zeichen erlaubt.</entry>
+    <entry lang="de" key="PASSWORD_PASTED_TRUNCATED">Eingefügter Text wurde abgeschnitten, da die maximale Länge des Passworts 128 Zeichen beträgt</entry>
+    <entry lang="de" key="PASSWORD_MAXLENGTH_REACHED">Passwort hat bereits seine maximale Länge von 128 Zeichen erreicht.\nEs ist kein zusätzliches Zeichen erlaubt.</entry>
     <entry lang="de" key="IDC_SELECT_LANGUAGE_LABEL">Wählen Sie die Sprache aus, die während der Installation benutzt werden soll:</entry>
     <entry lang="de" key="VOLUME_TOO_LARGE_FOR_HOST">FEHLER: Der Datei-Container ist größer als der verfügbare freie Speicherplatz auf der Festplatte.</entry>
     <entry lang="de" key="IDC_ALLOW_WINDOWS_DEFRAG">Windows-Festplattendefragmentierung die Defragmentierung von Nicht-Systempartitionen/-laufwerken erlauben</entry>    
     <entry lang="de" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNUNG: Defragmentierung von Nicht-Systempartitionen/-laufwerken kann Metadaten über ihren Inhalt preisgeben oder Probleme mit versteckten Volumes verursachen, die sie enthalten können.\n\nFortsetzen?</entry>
+    <entry lang="de" key="VIRTUAL_DEVICE">Virtuelles Gerät</entry>
+    <entry lang="de" key="MOUNTED_VOLUME_NOT_ASSOCIATED">Das ausgewählte eingebundene Volume ist nicht mit seinem Laufwerksbuchstaben in Windows verknüpft und kann daher nicht im Windows Explorer geöffnet werden.</entry>
+    <entry lang="de" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Verschlüsselungsschlüssel aus dem Speicher löschen, wenn ein neues Gerät eingesteckt wird</entry>
+    <entry lang="de" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">WICHTIGE HINWEISE:\n - Bitte beachten Sie, dass diese Option nach einem Herunterfahren/Neustart nicht erhalten bleibt, so dass Sie sie beim nächsten Start der Maschine erneut auswählen müssen.\n\n - Wenn diese Option aktiviert ist, wird der Rechner nach dem Anschließen eines neuen Geräts einfrieren und schließlich mit einem BSOD abstürzen, da Windows nach dem Löschen seiner Schlüssel aus dem Speicher nicht mehr auf die verschlüsselte Festplatte zugreifen kann.\n</entry>
+    <entry lang="de" key="STARTING">Wird gestartet</entry>
+    <entry lang="de" key="IDC_ENABLE_CPU_RNG">CPU-Hardware-Zufallsgenerator als zusätzliche Entropiequelle verwenden</entry>
+    <entry lang="de" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Alte maximale Passwortlänge verwenden (64 Zeichen)</entry>
+    <entry lang="de" key="IDC_ENABLE_RAM_ENCRYPTION">Verschlüsselung der im Arbeitsspeicher gespeicherten Schlüssel und Passwörter aktivieren</entry>
+    <entry lang="de" key="IDT_BENCHMARK">Benchmark:</entry>
+    <entry lang="de" key="IDC_DISABLE_MOUNT_MANAGER">Nur virtuelles Gerät erstellen ohne Einbinden auf dem ausgewählten Laufwerksbuchstaben</entry>
+    <entry lang="de" key="LEGACY_PASSWORD_UTF8_TOO_LONG">Das eingegebene Passwort ist zu lang: Kodiert mit UTF-8 überschreitet es 64 Byte.</entry>
   </localization>
   <!-- XML-Schema -->
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">

Translations/Language.el.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="el" name="Ελληνικά" en-name="Greek" version="0.1.0" translators="Βασίλης Κοσμίδης" />
     <font lang="el" class="normal" size="11" face="default" />
     <font lang="el" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system volume where you want to resume the process of in-place encryption/decryption.\n\nRemark: After you click Next, VeraCrypt will attempt to find all non-system volumes where the process of encryption/decryption has been interrupted and where the VeraCrypt volume header can be deciphered using the supplied password and/or keyfile(s). If more than one such volume is found, you will need to select one of them in the next step.</entry>
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Please select one of the listed volumes. The list contains each accessible non-system volume where the process of encryption/decryption has been interrupted and where the volume header was successfully deciphered using the supplied password and/or keyfile(s).</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 128 characters.</entry>
     <entry lang="el" key="PASSWORD_HIDDENVOL_HELP">Παρακαλώ επιλέξτε κωδικό για τον κρυφό τόμο. </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_HELP">Please choose a password for the hidden operating system (i.e. for the hidden volume). </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANT: The password that you choose for the hidden operating system in this step must be substantially different from the other two passwords (i.e. from the password for the outer volume and from the password for the decoy operating system).</entry>
     <entry lang="el" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Παρακαλώ εισάγετε τον κωδικό για τον τόμο μέσα στον οποίο επιθυμείτε να δημιουργήσετε έναν κρυφό τόμο.\n\nΑφού επιλέξετε "Επόμενο", το VeraCrypt θα επιχειρήσει να φορτώσει τον τόμο. Μόλις ο τόμος φορτωθεί, το cluster bitmap θα ανιχνευθεί για να προσδιορισθεί το μέγεθος της συνεχούς περιοχής ελεύθερου χώρου (αν υπάρχει) του οποίου το τέλος ευθυγραμμίζεται με το τέλος του τόμου. Αυτή η περιοχή θα φιλοξενήσει τον κρυφό τόμο και συνεπώς θα περιορίσει το πιθανό μέγεθος του. Η ανίχνευση του cluster bitmap είναι απαραίτητη για να διασφαλισθεί ότι δε θα διαγραφούν δεδομένα του εξωτερικού τόμου από τον κρυφό τόμο.</entry>
-    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 128 characters.</entry>
     <entry lang="en" key="PASSWORD_SYSENC_OUTERVOL_HELP">Please choose a password for the outer volume. This will be the password you will be able to reveal to anyone forcing you to disclose the password for the first partition behind the system partition, where both the outer volume and the hidden volume (containing the hidden operating system) will reside. The existence of the hidden volume (and of the hidden operating system) will remain secret. Note that this password is not for the decoy operating system.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume (i.e. for the hidden operating system).</entry>
     <entry lang="el" key="PASSWORD_HIDVOL_HOST_TITLE">Κωδικός εξωτερικού τόμου</entry>
     <entry lang="el" key="PASSWORD_HIDVOL_TITLE">Κωδικός κρυφού τόμου</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1407,7 +1407,7 @@
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="el" key="IDC_SELECT_LANGUAGE_LABEL">Επιλέξτε τη γλώσσα που θα χρησιμοποιηθεί κατά τη διάρκεια της εγκατάστασης:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="el" key="IDC_SELECT_LANGUAGE_LABEL">Επιλέξτε τη γλώσσα που θα χρησιμοποιηθεί κατά τη διάρκεια της εγκατάστασης:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="en" key="IDT_BENCHMARK">Benchmark:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.es.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="es" name="Español" en-name="Spanish" version="1.0.0" translators="Juan Antonio Auñón Ochando" />
     <font lang="es" class="normal" size="11" face="default" />
     <font lang="es" class="bold" size="13" face="Arial" />
@@ -68,7 +68,7 @@
     <entry lang="es" key="IDC_SYSENC_HIDDEN">&amp;Oculto</entry>
     <entry lang="es" key="IDC_SYSENC_NORMAL">Normal</entry>
     <entry lang="es" key="IDC_SYS_DEVICE">Cifrar la partición/unidad del sistema entera</entry>
-    <entry lang="es" key="IDC_SYS_PARTITION">Cifrar la partición de Windows</entry>
+    <entry lang="es" key="IDC_SYS_PARTITION">Cifrar la partición de sistema de Windows</entry>
     <entry lang="es" key="IDC_WHOLE_SYS_DRIVE">Cifrar toda la unidad</entry>
     <entry lang="es" key="IDD_VOL_CREATION_WIZARD_DLG">Asistente de creación de Volumen VeraCrypt</entry>
     <entry lang="es" key="IDT_CLUSTER">Cluster</entry>
@@ -106,22 +106,22 @@
     <entry lang="es" key="IDC_AUTORUN_DISABLE">No hacer nada</entry>
     <entry lang="es" key="IDC_AUTORUN_MOUNT">Montar &amp;Automáticamente volumen VeraCrypt (especificado debajo)</entry>
     <entry lang="es" key="IDC_AUTORUN_START">&amp;Iniciar VeraCrypt</entry>
-    <entry lang="es" key="IDC_AUTO_DETECT_PKCS11_MODULE">&amp;Detección automática</entry>
+    <entry lang="es" key="IDC_AUTO_DETECT_PKCS11_MODULE">&amp;Detección automática de biblioteca</entry>
     <entry lang="es" key="IDC_BOOT_LOADER_CACHE_PASSWORD">Guardar contraseña de autenticación de pre-arranque en &amp;caché (para montar volúmenes secundarios)</entry>
     <entry lang="es" key="IDC_BROWSE_DIRS">Explorar...</entry>
     <entry lang="es" key="IDC_BROWSE_FILES">Explorar...</entry>
-    <entry lang="es" key="IDC_CACHE">Guardar contras&amp;eñas y archivos en caché</entry>
+    <entry lang="es" key="IDC_CACHE">Guardar contras&amp;eñas y archivos-clave en caché</entry>
     <entry lang="es" key="IDC_CLOSE_BKG_TASK_WHEN_NOVOL">Salir cuando no haya volúmenes montados</entry>
     <entry lang="es" key="IDC_CLOSE_TOKEN_SESSION_AFTER_MOUNT">&amp;Cerrar sesión de token (log out) después de montar un volumen con éxito</entry>
     <entry lang="es" key="IDC_COPY_EXPANDER">Incluir Expansor de Volumen VeraCrypt</entry>
     <entry lang="es" key="IDC_COPY_WIZARD">Incluir el Asistente de Creación de Volúmenes VeraCrypt</entry>
     <entry lang="es" key="IDC_CREATE">Crear</entry>
     <entry lang="es" key="IDC_CREATE_VOLUME">&amp;Crear Volumen</entry>
-    <entry lang="es" key="IDC_DISABLE_BOOT_LOADER_OUTPUT">No mo&amp;strar texto en la pantalla de autenticación de pre-arranque (excepto el siguiente mensaje)</entry>
+    <entry lang="es" key="IDC_DISABLE_BOOT_LOADER_OUTPUT">No mo&amp;strar texto en la pantalla de autenticación de pre-arranque (excepto el siguiente mensaje personalizado)</entry>
     <entry lang="es" key="IDC_DISABLE_EVIL_MAID_ATTACK_DETECTION">Desactivar detección del ataque "Evil Maid"</entry>
     <entry lang="es" key="IDC_ENABLE_HARDWARE_ENCRYPTION">Acelerar cifrado/descifrado AES usando instrucciones AES del procesador (si es posible)</entry>
     <entry lang="es" key="IDC_ENABLE_KEYFILES">Usar Archivo-llave</entry>
-    <entry lang="es" key="IDC_ENABLE_NEW_KEYFILES">Usar Archivo-llave</entry>
+    <entry lang="es" key="IDC_ENABLE_NEW_KEYFILES">Usar Archivo-clave</entry>
     <entry lang="es" key="IDC_EXIT">&amp;Salir</entry>
     <entry lang="es" key="IDC_FAVORITES_HELP_LINK">Ayuda sobre volúmenes favoritos</entry>
     <entry lang="es" key="IDC_FAVORITE_DISABLE_HOTKEY">No montar volumen seleccionado cuando se pulse la &amp;tecla 'Montar volúmenes favoritos'</entry>
@@ -149,14 +149,14 @@
     <entry lang="es" key="IDC_MORE_INFO_ON_THREAD_BASED_PARALLELIZATION">Más información</entry>
     <entry lang="es" key="IDC_MORE_SETTINGS">Más opciones</entry>
     <entry lang="es" key="IDC_MOUNTALL">Montar &amp;Autom.</entry>
-    <entry lang="es" key="IDC_MOUNT_OPTIONS">&amp;Opciones Montaje</entry>
+    <entry lang="es" key="IDC_MOUNT_OPTIONS">&amp;Opciones de Montaje</entry>
     <entry lang="es" key="IDC_MOUNT_READONLY">Montar volumen como sól&amp;o lectura</entry>
     <entry lang="es" key="IDC_NEW_KEYFILES">Archivos-llave</entry>
     <entry lang="es" key="IDC_OLD_PIM_HELP">(Vacío ó 0 para iteraciones por defecto)</entry>
     <entry lang="es" key="IDC_PIM_HELP">(Vacío ó 0 para iteraciones por defecto)</entry>
     <entry lang="es" key="IDC_PREF_BKG_TASK_ENABLE">Activado</entry>
     <entry lang="es" key="IDC_PREF_CACHE_PASSWORDS">Guardar contraseñas en caché</entry>
-    <entry lang="es" key="IDC_PREF_DISMOUNT_INACTIVE">Desmontar volumen autom. cuando dejen de leerse/escribirse datos</entry>
+    <entry lang="es" key="IDC_PREF_DISMOUNT_INACTIVE">Desmontar volumen automáticamente cuando hayan dejado de leerse/escribirse datos por</entry>
     <entry lang="es" key="IDC_PREF_DISMOUNT_LOGOFF">Si el usuario cierra sesión</entry>
     <entry lang="es" key="IDC_PREF_DISMOUNT_SESSION_LOCKED">Sesión de usuario bloqueada</entry>
     <entry lang="es" key="IDC_PREF_DISMOUNT_POWERSAVING">Si se entra en "ahorro de energía"</entry>
@@ -189,7 +189,7 @@
     <entry lang="es" key="IDD_FAVORITE_VOLUMES">VeraCrypt - Volúmenes favoritos</entry>
     <entry lang="es" key="IDD_HOTKEYS_DLG">VeraCrypt - Atajos de teclado para sistema completo</entry>
     <entry lang="es" key="IDD_MOUNT_DLG">VeraCrypt</entry>
-    <entry lang="es" key="IDD_PASSWORDCHANGE_DLG">Cambiar contraseña o archivo-llave</entry>
+    <entry lang="es" key="IDD_PASSWORDCHANGE_DLG">Cambiar contraseña o archivo-clave</entry>
     <entry lang="es" key="IDD_PASSWORD_DLG">Introducir Contraseña de Volumen VeraCrypt</entry>
     <entry lang="es" key="IDD_PERFORMANCE_SETTINGS">VeraCrypt - Opciones de Rendimiento y controladores</entry>
     <entry lang="es" key="IDD_PREFERENCES_DLG">VeraCrypt - Preferencias</entry>
@@ -215,7 +215,7 @@
     <entry lang="es" key="IDM_CREATE_RESCUE_DISK">Crear Disco de Rescate</entry>
     <entry lang="es" key="IDM_CREATE_VOLUME">Crear Nuevo Volumen</entry>
     <entry lang="es" key="IDM_DECRYPT_NONSYS_VOL">Descifrar Permanentemente...</entry>
-    <entry lang="es" key="IDM_DEFAULT_KEYFILES">Archivos-llave Por Defecto</entry>
+    <entry lang="es" key="IDM_DEFAULT_KEYFILES">Archivos-clave Por Defecto</entry>
     <entry lang="es" key="IDM_DEFAULT_MOUNT_PARAMETERS">Parámetros de Montaje por Defecto...</entry>
     <entry lang="es" key="IDM_DONATE">Donar ahora...</entry>
     <entry lang="es" key="IDM_ENCRYPT_SYSTEM_DEVICE">Cifrar la Partición/Unidad del Sistema</entry>
@@ -241,7 +241,7 @@
     <entry lang="es" key="IDM_PERMANENTLY_DECRYPT_SYS">Descifrar Permanentemente la Partición/Unidad del Sistema</entry>
     <entry lang="es" key="IDM_PREFERENCES">Preferencias</entry>
     <entry lang="es" key="IDM_REFRESH_DRIVE_LETTERS">Actualizar Letras de Unidad</entry>
-    <entry lang="es" key="IDM_REMOVE_ALL_KEYFILES_FROM_VOL">Eliminar Todos los Archivos-llave de un Volumen</entry>
+    <entry lang="es" key="IDM_REMOVE_ALL_KEYFILES_FROM_VOL">Eliminar Todos los Archivos-clave de un Volumen</entry>
     <entry lang="es" key="IDM_RESTORE_VOL_HEADER">Restaurar Cabecera de Volumen</entry>
     <entry lang="es" key="IDM_RESUME_INTERRUPTED_PROC">Continuar Proceso Interrumpido</entry>
     <entry lang="es" key="IDM_SELECT_DEVICE">Seleccionar Dispositivo</entry>
@@ -270,7 +270,7 @@
     <entry lang="es" key="IDT_ASSIGN_HOTKEY">Atajo de teclado</entry>
     <entry lang="es" key="IDT_AUTORUN">Configuración de Autoarranque (autorun.inf)</entry>
     <entry lang="es" key="IDT_AUTO_DISMOUNT">Desmontar automáticamente</entry>
-    <entry lang="es" key="IDT_AUTO_DISMOUNT_ON">Desmontar Todo:</entry>
+    <entry lang="es" key="IDT_AUTO_DISMOUNT_ON">Desmontar todo cuando:</entry>
     <entry lang="es" key="IDT_BOOT_LOADER_SCREEN_OPTIONS">Opciones de Pantalla del Cargador de Arranque</entry>
     <entry lang="es" key="IDT_CONFIRM_PASSWORD">Confirmar Contraseña:</entry>
     <entry lang="es" key="IDT_CURRENT">Actual</entry>
@@ -308,17 +308,17 @@
     <entry lang="es" key="IDC_DELETE">&amp;Borrar</entry>
     <entry lang="es" key="IDC_ENCRYPT">Ci&amp;frar</entry>
     <entry lang="es" key="IDC_EXPORT">&amp;Exportar</entry>
-    <entry lang="es" key="IDC_GENERATE_AND_SAVE_KEYFILE">Generar y Guardar Archivo-llave</entry>
+    <entry lang="es" key="IDC_GENERATE_AND_SAVE_KEYFILE">Generar y Guardar Archivo-clave</entry>
     <entry lang="es" key="IDC_GENERATE_KEYFILE">&amp;Generar Archivo-llave Aleatorio</entry>
     <entry lang="es" key="IDC_GET_LANG_PACKS">Descargar paquete de idioma</entry>
     <entry lang="es" key="IDC_HW_AES_LABEL_LINK">AES acelerado por hardware:</entry>
     <entry lang="es" key="IDC_IMPORT_KEYFILE">&amp;Importar Archivo-llave a Token</entry>
     <entry lang="es" key="IDC_KEYADD">Añadir Archi&amp;vos</entry>
-    <entry lang="es" key="IDC_KEYFILES_ENABLE_HIDVOL_PROT">Usar Archivos-llave</entry>
-    <entry lang="es" key="IDC_KEYFILES_HIDVOL_PROT">&amp;Archivos-llave</entry>
+    <entry lang="es" key="IDC_KEYFILES_ENABLE_HIDVOL_PROT">Usar Archivos-clave</entry>
+    <entry lang="es" key="IDC_KEYFILES_HIDVOL_PROT">&amp;Archivos-clave</entry>
     <entry lang="es" key="IDC_KEYREMOVE">Elimina&amp;r</entry>
     <entry lang="es" key="IDC_KEYREMOVEALL">Eliminar &amp;todo</entry>
-    <entry lang="es" key="IDC_LINK_HIDVOL_PROTECTION_INFO">¿Que es la protección de volumen oculto?</entry>
+    <entry lang="es" key="IDC_LINK_HIDVOL_PROTECTION_INFO">¿Qué es la protección de volumen oculto?</entry>
     <entry lang="es" key="IDC_LINK_KEYFILES_INFO">Más información</entry>
     <entry lang="es" key="IDC_MOUNT_REMOVABLE">Montar volumen como unidad &amp;extraíble</entry>
     <entry lang="es" key="IDC_MOUNT_SYSENC_PART_WITHOUT_PBA">Montar partición &amp;usando cifrado del sistema sin autenticación de pre-arranque</entry>
@@ -328,7 +328,7 @@
     <entry lang="es" key="IDC_PROTECT_HIDDEN_VOL">&amp;Proteger volumen oculto contra daños por escritura en el volumen externo</entry>
     <entry lang="es" key="IDC_RESET">&amp;Reiniciar</entry>
     <entry lang="es" key="IDC_SHOW_PASSWORD_MO">Mostrar Contraseña</entry>
-    <entry lang="es" key="IDC_TOKEN_FILES_ADD">Archivos &amp;Token</entry>
+    <entry lang="es" key="IDC_TOKEN_FILES_ADD">Añadir archivos &amp;Token...</entry>
     <entry lang="es" key="IDC_USE_EMBEDDED_HEADER_BAK">Usar copia de seguridad de cabecera insertada en &amp;volumen si es posible</entry>
     <entry lang="es" key="IDC_XTS_MODE_ENABLED">Modo XTS</entry>
     <entry lang="es" key="IDD_ABOUT_DLG">Acerca de VeraCrypt</entry>
@@ -336,14 +336,14 @@
     <entry lang="es" key="IDD_CIPHER_TEST_DLG">VeraCrypt - Probar Vectores</entry>
     <entry lang="es" key="IDD_COMMANDHELP_DLG">Ayuda sobre línea de comandos</entry>
     <entry lang="es" key="IDD_KEYFILES">VeraCrypt - Archivos-llave</entry>
-    <entry lang="es" key="IDD_KEYFILE_GENERATOR">VeraCrypt - Generador de Archivos-llave</entry>
+    <entry lang="es" key="IDD_KEYFILE_GENERATOR">VeraCrypt - Generador de Archivos-clave</entry>
     <entry lang="es" key="IDD_LANGUAGE">VeraCrypt - Idioma</entry>
     <entry lang="es" key="IDD_MOUNT_OPTIONS">VeraCrypt - Opciones de Montaje</entry>
-    <entry lang="es" key="IDD_NEW_TOKEN_KEYFILE">Propiedades del Archivo-llave del Nuevo Token de Seguridad</entry>
+    <entry lang="es" key="IDD_NEW_TOKEN_KEYFILE">Propiedades del Archivo-clave del Nuevo Token de Seguridad</entry>
     <entry lang="es" key="IDD_RANDOM_POOL_ENRICHMENT">VeraCrypt - Enriquecimiento del Pool Aleatorio</entry>
     <entry lang="es" key="IDD_RAWDEVICES_DLG">Seleccionar Partición o Dispositivo</entry>
     <entry lang="es" key="IDD_STATIC_MODELESS_WAIT_DLG">VeraCrypt</entry>
-    <entry lang="es" key="IDD_TOKEN_KEYFILES">Archivos-llave de Token de Seguridad</entry>
+    <entry lang="es" key="IDD_TOKEN_KEYFILES">Archivos-clave de Token de Seguridad</entry>
     <entry lang="es" key="IDD_TOKEN_PASSWORD">Se requiere contraseña/PIN de token de seguridad</entry>
     <entry lang="es" key="IDT_ACTIVE_LANG_PACK">Paquete de idioma activo</entry>
     <entry lang="es" key="IDT_BOX_BENCHMARK_INFO">La velocidad se ve afectada por la carga de la CPU y las características del dispositivo de almacenamiento.\n\nÉstas pruebas tienen lugar en RAM.</entry>
@@ -355,11 +355,11 @@
     <entry lang="es" key="IDT_KEYFILE_GENERATOR_NOTE">IMPORTANTE: Mueva el ratón al azar todo lo posible dentro de esta ventana. Cuanto más lo mueva, mejor. Esto incrementa significativamente la fuerza criptográfica del archivo-llave.</entry>
     <entry lang="es" key="IDT_KEYFILE_WARNING">PRECAUCIÓN: ¡si pierde un archivo-llave o si cambian sus primeros 1024 KB, será imposible montar los volúmenes que usan ese archivo-llave!</entry>
     <entry lang="es" key="IDT_KEY_UNIT">bits</entry>
-    <entry lang="es" key="IDT_NUMBER_KEYFILES">Número de ficheros-llave:</entry>
+    <entry lang="es" key="IDT_NUMBER_KEYFILES">Número de archivos-clave:</entry>
     <entry lang="es" key="IDT_KEYFILES_SIZE">Tamaño de los ficheros-llave (en Bytes):</entry>
     <entry lang="es" key="IDT_KEYFILES_BASE_NAME">Nombre base de los ficheros-llave:</entry>
     <entry lang="es" key="IDT_LANGPACK_AUTHORS">Traducido por:</entry>
-    <entry lang="es" key="IDT_PLAINTEXT">Tamaño del texto plano:</entry>
+    <entry lang="es" key="IDT_PLAINTEXT">Tamaño del texto legible:</entry>
     <entry lang="es" key="IDT_PLAINTEXT_SIZE_UNIT">bits</entry>
     <entry lang="es" key="IDT_POOL_CONTENTS">Contenido de Pool Actual</entry>
     <entry lang="es" key="IDT_PRF">Mezcla PRF:</entry>
@@ -374,7 +374,7 @@
     <entry lang="es" key="IDT_TEST_DATA_UNIT_NUMBER">Datos de la unidad (64-bit hexadecimal, tamaño de la unidad de datos es 512 bytes)</entry>
     <entry lang="es" key="IDT_TEST_KEY">Clave (hexadecimal)</entry>
     <entry lang="es" key="IDT_TEST_PLAINTEXT">Texto Plano (hexadecimal)</entry>
-    <entry lang="es" key="IDT_TOKEN_KEYFILE_NAME">Nombre del Archivo-llave:</entry>
+    <entry lang="es" key="IDT_TOKEN_KEYFILE_NAME">Nombre del Archivo-clave:</entry>
     <entry lang="es" key="IDT_XTS_MODE">Modo XTS</entry>
     <entry lang="es" key="MENU_SYSTEM_ENCRYPTION">&amp;Sistema</entry>
     <entry lang="es" key="MENU_VOLUMES">&amp;Volúmenes</entry>
@@ -397,7 +397,7 @@
     <entry lang="es" key="ERR_NOT_ENOUGH_RANDOM_DATA">PRECAUCIÓN: No hay suficientes datos en el Generador de Números Aleatorios para proporcionar la cantidad requerida de datos aleatorios.\n\nNo debería continuar. Seleccione 'Informar de un error' en el Menú Ayuda, y reporte este error.</entry>
     <entry lang="es" key="ERR_HARDWARE_ERROR">La unidad está dañada (hay algún defecto físico en ella) o un cable está dañado, o la memoria está funcionando incorrectamente.\n\nTenga en cuenta que el problema está en su hardware, no en VeraCrypt. Por tanto, por favor NO reporte esto como un error/problema de VeraCrypt y NO pida ayuda sobre esto en los foros de VeraCrypt. Contacte con el equipo de soporte técnico del fabricante de su ordenador para obtener asistencia. Gracias.\n\nNota: Si el error ocurre repetidamente en el mismo sitio, es muy probable que esté causado por un bloque defectuoso, lo que podría corregirse usando software de terceros (tenga en cuenta que, en muchos casos, el comando 'chkdsk /r' no puede corregirlo porque trabaja sólo a nivel del sistema de archivos; en algunos casos, la herramienta 'chkdsk' no puede ni detectarlo).</entry>
     <entry lang="es" key="DEVICE_NOT_READY_ERROR">Si está accediendo a una unidad de medios extraíbles, asegúrese de que haya un medio introducido en la unidad. La unidad/medio también podría estar dañada (podría haber un defecto físico en ella) o un cable podría estar dañado/desconectado.</entry>
-    <entry lang="es" key="WHOLE_DRIVE_ENCRYPTION_PREVENTED_BY_DRIVERS">Su sistema parece estar usando controladores de chipset personalizados defectuosos que impiden el cifrado de la unidad del sistema completa.\n\nIntente actualizar o desinstalar cualquier controlador de chipset personalizado (que no sea de Microsoft) antes de continuar. Si esto no funciona, intente cifrar sólo la partición del sistema.</entry>
+    <entry lang="es" key="WHOLE_DRIVE_ENCRYPTION_PREVENTED_BY_DRIVERS">Su sistema parece estar usando controladores de chipset personalizados, y un defecto en ellos impide el cifrado completo de la unidad del sistema.\n\nIntente actualizar o desinstalar cualquier controlador de chipset personalizado (que no sea de Microsoft) antes de continuar. Si esto no funciona, intente cifrar sólo la partición del sistema.</entry>
     <entry lang="es" key="BAD_DRIVE_LETTER">Letra de unidad incorrecta.</entry>
     <entry lang="es" key="INVALID_PATH">Ruta incorrecta.</entry>
     <entry lang="es" key="CANCEL">Cancelar</entry>
@@ -406,7 +406,7 @@
     <entry lang="es" key="VOLUME_TYPE_TITLE">Tipo de Volumen</entry>
     <entry lang="es" key="HIDDEN_VOLUME_TYPE_HELP">Podría suceder que alguien le obligara a revelar la contraseña de un volumen cifrado. Hay muchas situaciones en las que no podría negarse a revelar la contraseña (por ejemplo, debido a la extorsión). Usar el llamado "volumen oculto" le permite resolver estas situaciones sin revelar la contraseña de su volumen.</entry>
     <entry lang="es" key="NORMAL_VOLUME_TYPE_HELP">Seleccione esta opción si quiere crear un volumen VeraCrypt normal.</entry>
-    <entry lang="es" key="HIDDEN_OS_PRECLUDES_SINGLE_KEY_WDE">Tenga en cuenta que si desea que un sistema operativo sea instalado en un volumen alojado en una partición oculta, entonces la unidad del sistema entera no puede ser cifrada usando una única clave.</entry>
+    <entry lang="es" key="HIDDEN_OS_PRECLUDES_SINGLE_KEY_WDE">Por favor tenga en cuenta que si desea que un sistema operativo sea instalado en un volumen alojado en una partición oculta, entonces la unidad del sistema entera no puede ser cifrada usando una única clave.</entry>
     <entry lang="es" key="CIPHER_HIDVOL_HOST_TITLE">Opciones de cifrado del volumen externo</entry>
     <entry lang="es" key="CIPHER_HIDVOL_TITLE">Opciones de cifrado del volumen oculto</entry>
     <entry lang="es" key="CIPHER_TITLE">Opciones de cifrado</entry>
@@ -423,7 +423,7 @@
     <entry lang="es" key="DEVICE_IN_USE_INPLACE_ENC">AVISO: La partición está siendo usada por el sistema operativo o una aplicación. Debería cerrar cualquier aplicación que pueda estar usando la partición (incluyendo antivirus).\n\n¿Continuar?</entry>
     <entry lang="es" key="FORMAT_CANT_DISMOUNT_FILESYS">Error: El dispositivo/partición contiene un sistema de archivos que no puede ser desmontado. El sistema de archivos puede estar en uso por el sistema operativo. Formatear el dispositivo/partición muy probablemente causará corrupción de datos e inestabilidad del sistema.\n\nPara solucionarlo, recomendamos que primero borre la partición y luego la vuelva a crear sin formatearla. Para hacerlo siga estos pasos:\n1) Clic derecho en 'Mi PC' o 'Equipo' en el 'Menú inicio' y seleccione 'Administrar'. Aparecerá la ventana 'Administración de equipos'.\n2) En dicha ventana, seleccione 'Almacenamiento' &gt; 'Administración de discos'.\n3) Clic derecho en la partición que desea cifrar y seleccione 'Borrar la partición', 'Borrar Volumen' o 'Borrar unidad lógica'.\n4) Clic en 'Aceptar'. Si Windows pregunta si quiere reiniciar el ordenador, hágalo. Entonces repita los pasos 1 y 2 y continúe desde el paso 5. 5)\nClic derecho en el área no asignada/espacio libre y seleccione 'Partición nueva', 'Volumen simple nuevo' o 'Unidad lógica nueva'.\n6) El 'Asistente de partición nueva' o 'Asistente de volumen simple nuevo' deberá aparecer; siga las instrucciones. Cuando en el asistente indique 'Formatear Partición', seleccione 'No formatear esta partición' o 'No formatear este volumen'. En el mismo asistente, clic en 'Siguiente' y despues en 'Finalizar'.\n7) La ruta del dispositivo seleccionado en VeraCrypt podría ser incorrecta ahora. Por tanto, salga del Asistente de Creación de Volúmenes VeraCrypt (si aún está en ejecución) y ábralo de nuevo.\n8) Intente cifrar nuevamente el dispositivo/partición.\n\nSi VeraCrypt falla repetidamente al cifrar el dispositivo/partición, considere crear un contenedor de archivos en su lugar.</entry>
     <entry lang="es" key="INPLACE_ENC_CANT_LOCK_OR_DISMOUNT_FILESYS">Error: El sistema de archivos no pudo ser bloqueado y/o desmontado. Podría estar siendo usado por el sistema operativo o alguna aplicación (como un antivirus). Cifrar la partición podría causar corrupción de datos e inestabilidad del sistema.\n\nPor favor cierre cualquier aplicación que pueda estar usando el sistema de archivos (incluyendo antivirus) y reinténtelo. Si esto no funciona, siga los pasos que hay más abajo.</entry>
-    <entry lang="es" key="DEVICE_IN_USE_INFO">AVISO: ¡Algunos de los dispositivos/particiones montados están en uso!\n\nIgnorar esto puede causar resultados no deseados incluyendo inestabilidad del sistema.\n\nSe recomienda encarecidamente que cierre cualquier aplicación que esté usando el dispositivo/partición.</entry>
+    <entry lang="es" key="DEVICE_IN_USE_INFO">AVISO: ¡Algunos de los dispositivos/particiones montados ya estaban en uso!\n\nIgnorar esto puede causar resultados no deseados incluyendo inestabilidad del sistema.\n\nSe recomienda encarecidamente que cierre cualquier aplicación que esté usando el dispositivo/partición.</entry>
     <entry lang="es" key="DEVICE_PARTITIONS_ERR">El dispositivo seleccionado contiene particiones.\n\nFormatear el dispositivo puede causar inestabilidad del sistema y/o corrupción de datos. Seleccione una partición en el dispositivo o elimine todas las particiones del dispositivo para permitir que VeraCrypt lo formatee con seguridad.</entry>
     <entry lang="es" key="DEVICE_PARTITIONS_ERR_W_INPLACE_ENC_NOTE">El dispositivo secundario seleccionado contiene particiones.\n\nLos volúmenes VeraCrypt cifrados alojados en dispositivos pueden ser creados en dispositivos que no contienen particiones (incluyendo discos duros y unidades de estado sólido). Un dispositivo que contiene particiones puede ser cifrado por completo sin modificarlas (usando una única clave maestra) sólo si es la unidad donde Windows está instalado y desde la que arranca.\n\nSi desea cifrar el dispositivo secundario seleccionado usando una única clave maestra, necesitará eliminar antes todas las particiones del dispositivo para permitir que VeraCrypt lo formatee con seguridad (formatear un dispositivo que contiene particiones podría causar inestabilidad del sistema y/o corrupción de datos). Como alternativa, puede cifrar cada partición del dispositivo individualmente (cada partición será cifrada usando una clave maestra diferente).\n\nNota: Si desea eliminar todas las particiones de un disco GPT, podría necesitar convertirlo primero en un disco MBR (usando p.e. el Administrador de Equipos) para eliminar particiones ocultas.</entry>
     <entry lang="es" key="WHOLE_NONSYS_DEVICE_ENC_CONFIRM">AVISO: si cifra el dispositivo entero (en lugar de cifrar sólo una de sus particiones), los sistemas operativos considerarán el dispositivo como nuevo, vacío y no formateado (ya que no contendrá tabla de particiones) y podrían iniciar espontáneamente el dispositivo (o preguntarle si desea hacerlo), lo que podría dañar el volumen. Además, no será posible montar consistentemente el volumen como favorito (p.e. cuando cambie el número de unidad) o asignarle una letra de volumen favorita.\n\nPara evitar esto, considere crear una partición en el dispositivo y cifrar la partición.\n\n¿Seguro que desea cifrar el dispositivo entero?</entry>
@@ -455,11 +455,11 @@
     <entry lang="es" key="SYSTEM_CRASHED_ASK_REPORT">VeraCrypt ha detectado que el sistema operativo ha fallado recientemente. Hay varias razones potenciales por las que el sistema puede haber fallado (por ejemplo, un componente hardware defectuoso, un error (bug) en un controlador de dispositivo, etc.)\n\n¿Desea que VeraCrypt compruebe si ha sido un error de VeraCrypt lo que ha causado el fallo del sistema?</entry>
     <entry lang="es" key="ASK_KEEP_DETECTING_SYSTEM_CRASH">¿Desea que VeraCrypt continúe detectando fallos del sistema?</entry>
     <entry lang="es" key="NO_MINIDUMP_FOUND">VeraCrypt no ha encontrado el archivo de volcado del fallo del sistema.</entry>
-    <entry lang="es" key="ASK_DELETE_KERNEL_CRASH_DUMP">¿Desea borrar el archivo de volcado del fallo de Windows para liberar espacio en disco?</entry>
+    <entry lang="es" key="ASK_DELETE_KERNEL_CRASH_DUMP">¿Desea borrar el archivo de volcado de fallos de Windows para liberar espacio en disco?</entry>
     <entry lang="es" key="ASK_DEBUGGER_INSTALL">Para analizar el fallo del sistema, VeraCrypt necesita instalar las Herramientas de Depuración para Windows primero.\n\nDespués de hacer clic en Aceptar, el instalador de Windows descargará el paquete de instalación de las Herramientas de Depuración de Microsoft (16 MB) de un servidor de Microsoft y las instalará (el instalador de Windows será enviado a la URL del servidor de Microsoft desde el servidor veracrypt.org, lo que asegura que esta característica funcione incluso si Microsoft cambiara la localización del paquete de instalación).</entry>
     <entry lang="es" key="SYSTEM_CRASH_ANALYSIS_INFO">Después de pulsar Aceptar, VeraCrypt analizará el fallo del sistema. Esto podría durar varios minutos.</entry>
     <entry lang="es" key="DEBUGGER_NOT_FOUND">Asegúrese de que la variable de entorno 'PATH' incluye la ruta a 'kd.exe' (Depurador del Núcleo).</entry>
-    <entry lang="es" key="SYSTEM_CRASH_NO_VERACRYPT">Parece que lo más probable es que VeraCrypt no causara el fallo del sistema. Hay muchas razones potenciales por las que el sistema podría haber fallado (por ejemplo, un componente hardware defectuoso, un error en un controlador de dispositivo, etc.)</entry>
+    <entry lang="es" key="SYSTEM_CRASH_NO_VERACRYPT">Parece que VeraCrypt, muy probablemente, no causara el fallo del sistema. Hay muchas razones potenciales por las que el sistema podría haber fallado (por ejemplo, un componente de hardware defectuoso, un error en un controlador de dispositivo, etc.).</entry>
     <entry lang="es" key="SYSTEM_CRASH_UPDATE_DRIVER">Los resultados del análisis indican que actualizar el siguiente controlador podría resolver este problema: </entry>
     <entry lang="es" key="SYSTEM_CRASH_REPORT">Para ayudarnos a determinar si hay un error (bug) en VeraCrypt o no, puede enviarnos un informe de errores generado automáticamente conteniendo los siguientes datos:\n\n- Versión del programa\n- Versión del sistema operativo\n- Tipo de CPU\n- Categoría del error\n- Nombre y versión del controlador\n- Pila de llamadas del sistema\n\nSi selecciona 'Sí', la siguiente URL (que contiene el informe completo del error) se abrirá en su explorador de Internet predeterminado.</entry>
     <entry lang="es" key="ASK_SEND_ERROR_REPORT">¿Desea enviarnos dicho informe de errores?</entry>
@@ -481,11 +481,11 @@
     <entry lang="es" key="FILESYS_PAGE_TITLE">Archivos grandes</entry>
     <entry lang="es" key="FILESYS_PAGE_HELP_QUESTION">¿Tiene intención de almacenar archivos de más de 4 GB en este volumen VeraCrypt?</entry>
     <entry lang="es" key="FILESYS_PAGE_HELP_EXPLANATION">Dependiendo de su elección, VeraCrypt elegirá un sistema de archivos adecuado para el volumen VeraCrypt (pero lo podrá cambiar en el siguiente paso).</entry>
-    <entry lang="es" key="FILESYS_PAGE_HELP_EXPLANATION_HIDVOL">Como ud. está creando un volumen externo, debería considerar elegir 'No'. Si elige 'Sí', el sistema de archivos por defecto será NTFS, que no es tan adecuado como FAT para volúmenes externos (p.e., el máximo tamaño posible para el volumen oculto será mayor si el volumen externo es FAT). Normalmente, FAT es predeterminado para ambos volúmenes (por eso los volúmenes FAT no son sospechosos). Sin embargo, si el usuario planea almacenar archivos mayores de 4 GB (no permitidos en ese sistema de archivos), entonces FAT no será predeterminado.</entry>
+    <entry lang="es" key="FILESYS_PAGE_HELP_EXPLANATION_HIDVOL">Como ud. está creando un volumen externo, debería considerar elegir 'No'. Si elige 'Sí', el sistema de archivos por defecto será NTFS, que no es tan adecuado como FAT/exFAT para volúmenes externos (p.e., el máximo tamaño posible para el volumen oculto será mayor si el volumen externo es FAT/exFAT). Normalmente, FAT es el predeterminado para ambos volúmenes (por eso los volúmenes FAT no son sospechosos). Sin embargo, si el usuario planea almacenar archivos mayores de 4 GB (no permitidos en ese sistema de archivos), entonces FAT no será predeterminado.</entry>
     <entry lang="es" key="FILESYS_PAGE_HELP_EXPLANATION_HIDVOL_CONFIRM">¿Seguro que desea elegir 'Sí'?</entry>
     <entry lang="es" key="DEVICE_TRANSFORM_MODE_PAGE_TITLE">Modo de Creación de Volumen</entry>
     <entry lang="es" key="DEVICE_TRANSFORM_MODE_PAGE_FORMAT_HELP">Esta es la forma más rápida de crear un volumen VeraCrypt alojado en partición o dispositivo (cifrar conservando datos, que es la otra opción, es más lenta ya que el contenido de cada sector debe ser leído primero, cifrado y después escrito). Cualquier dato almacenado en la partición/dispositivo seleccionado se perderá (los datos NO serán cifrados; serán sobrescritos con datos aleatorios). Si desea cifrar los datos existentes en una partición, elija la otra opción.</entry>
-    <entry lang="es" key="DEVICE_TRANSFORM_MODE_PAGE_INPLACE_HELP">La partición seleccionada entera y todos los datos que almacena serán cifrados conservando datos. Si la partición está vacía, debería elegir la otra opción (el volumen será creado mucho más rápido).</entry>
+    <entry lang="es" key="DEVICE_TRANSFORM_MODE_PAGE_INPLACE_HELP">La partición seleccionada y todos los datos que almacena serán cifrados conservando datos. Si la partición está vacía, debería elegir la otra opción (el volumen será creado mucho más rápido).</entry>
     <entry lang="es" key="NOTE_BEGINNING">Nota: </entry>
     <entry lang="es" key="RESUME">&amp;Reanudar</entry>
     <entry lang="es" key="DEFER">&amp;Aplazar</entry>
@@ -505,7 +505,7 @@
     <entry lang="es" key="SYSENC_HIDDEN_VOL_FORMAT_FINISHED_HELP">\n\nEl volumen oculto VeraCrypt ha sido creado con éxito (el sistema operativo oculto residirá dentro de este volumen oculto).\n\nHaga clic en Siguiente para continuar.</entry>
     <entry lang="es" key="NONSYS_INPLACE_ENC_FINISHED_TITLE">Volumen Completamente Cifrado</entry>
     <entry lang="es" key="NONSYS_INPLACE_DEC_FINISHED_TITLE">Volumen Completamente Descifrado</entry>
-    <entry lang="es" key="NONSYS_INPLACE_ENC_FINISHED_INFO">IMPORTANTE: PARA MONTAR EL VOLUMEN VERACRYPT RECIÉN CREADO Y ACCEDER A SUS DATOS, HAGA CLIC EN 'Montar Autom.' EN LA VENTANA PRINCIPAL DE VERACRYPT. Después de introducir la contraseña (y/o los archivos-llave), el volumen será montado en la letra de unidad seleccionada de la lista de la ventana principal (y podrá acceder a los datos cifrados a través de dicha letra).\n\nRECUERDE O APUNTE ESTAS INSTRUCCIONES. DEBERÁ SEGUIRLAS CADA VEZ QUE QUIERA MONTAR EL VOLUMEN Y ACCEDER A LOS DATOS ALMACENADOS EN ÉL. Alternativamente, en la ventana principal, haga clic en 'Seleccionar Dispositivo', seleccione esta partición/volumen, y haga clic en 'Montar'.\n\nLa partición/volumen ha sido cifrado correctamente (ahora contiene un volumen VeraCrypt completamente cifrado) y está listo para su uso.</entry>
+    <entry lang="es" key="NONSYS_INPLACE_ENC_FINISHED_INFO">IMPORTANTE: PARA MONTAR EL VOLUMEN VERACRYPT RECIÉN CREADO Y ACCEDER A SUS DATOS, HAGA CLIC EN 'Montar Autom.' EN LA VENTANA PRINCIPAL DE VERACRYPT. Después de introducir la contraseña (y/o los archivos-clave), el volumen será montado en la letra de unidad seleccionada de la lista de la ventana principal (y podrá acceder a los datos cifrados a través de dicha letra).\n\nRECUERDE O APUNTE ESTAS INSTRUCCIONES. DEBERÁ SEGUIRLAS CADA VEZ QUE QUIERA MONTAR EL VOLUMEN Y ACCEDER A LOS DATOS ALMACENADOS EN ÉL. Alternativamente, en la ventana principal, haga clic en 'Seleccionar Dispositivo', seleccione esta partición/volumen, y haga clic en 'Montar'.\n\nLa partición/volumen ha sido cifrada(o) correctamente (ahora contiene un volumen VeraCrypt completamente cifrado) y está listo para su uso.</entry>
     <entry lang="es" key="NONSYS_INPLACE_DEC_FINISHED_INFO">El volumen de VeraCrypt ha sido descifrado con éxito.</entry>
     <entry lang="es" key="NONSYS_INPLACE_DEC_FINISHED_DRIVE_LETTER_SEL_INFO">El volumen de VeraCrypt ha sido descifrado con éxito.\n\nPor favor, seleccione la letra de la unidad a la que desea asignar el volumen descifrado y haga clic en Terminar.\n\nIMPORTANTE: Hasta que no se asigne una letra de unidad al volumen descifrado, no se podrá acceder a los datos de dicho volumen.</entry>
     <entry lang="es" key="NONSYS_INPLACE_DEC_FINISHED_NO_DRIVE_LETTER_AVAILABLE">AVISO: Para poder acceder a los datos descifrados, se requiere que asigne una letra de unidad al volumen descifrado. Sin embargo, no hay letras de unidad disponibles.\n\nPor favor, libere una letra de unidad (por ejemplo, desconectando la memoria USB o unidades externas de almacenamiento, etc.) y haga clic en Aceptar.</entry>
@@ -522,7 +522,7 @@
     <entry lang="es" key="HIDDEN_VOL_WIZARD_MODE_TITLE">Modo de Creación de Volumen</entry>
     <entry lang="es" key="HIDVOL_FORMAT_FINISHED_TITLE">Volumen oculto creado</entry>
     <entry lang="es" key="HIDVOL_FORMAT_FINISHED_HELP">El volumen oculto VeraCrypt ha sido creado con éxito y está listo para ser usado. Si todas las instrucciones han sido seguidas y las precauciones y requisitos listados en la sección "Precauciones y Requisitos de Seguridad Concernientes a los Volúmenes Ocultos" de la Guía del Usuario de VeraCrypt han sido seguidos, debería ser imposible demostrar que el volumen oculto existe, incluso si el volumen externo está montado.\n\nAVISO: SI NO PROTEGE EL VOLUMEN OCULTO (PARA INFORMARSE SOBRE CÓMO HACERLO, VAYA A LA SECCIÓN "PROTECCIÓN DE VOLÚMENES OCULTOS CONTRA DAÑOS" EN LA GUÍA DEL USUARIO DE VERACRYPT), NO MODIFIQUE EL VOLUMEN EXTERNO. DE LO CONTRARIO, ¡PODRÍA SOBRESCRIBIR Y DAÑAR EL VOLUMEN OCULTO!</entry>
-    <entry lang="es" key="FIRST_HIDDEN_OS_BOOT_INFO">Ha iniciado el sistema operativo oculto. Como habrá observado, el sistema operativo oculto parece estar instalado en la misma partición que el sistema operativo original. Sin embargo, en realidad, está instalado dentro de la partición trasera (en el volumen oculto). Todas las operaciones de lectura y escritura están siendo redirigidas transparentemente desde la partición del sistema original al volumen oculto.\n\nNi el sistema operativo ni las aplicaciones sabrán que los datos escritos y leídos desde la partición del sistema son en realidad escritos y leídos desde la partición trasera (desde un volumen oculto). Dichos datos son cifrados y descifrados al vuelo como siempre (con una clave de cifrado diferente de la que será utilizada para el sistema operativo señuelo).\n\n\nHaga clic en Siguiente para continuar.</entry>
+    <entry lang="es" key="FIRST_HIDDEN_OS_BOOT_INFO">Ha iniciado el sistema operativo oculto. Como habrá observado, el sistema operativo oculto parece estar instalado en la misma partición que el sistema operativo original. Sin embargo, en realidad, está instalado dentro de la partición trasera (en el volumen oculto). Todas las operaciones de lectura y escritura están siendo redirigidas transparentemente desde la partición del sistema original al volumen oculto.\n\nNi el sistema operativo ni las aplicaciones sabrán que los datos escritos y leídos desde la partición del sistema son en realidad escritos y leídos desde la partición trasera (desde/hacia un volumen oculto). Dichos datos son cifrados y descifrados al vuelo como siempre (con una clave de cifrado diferente de la que será utilizada para el sistema operativo señuelo).\n\n\nPor favor haga clic en Siguiente para continuar.</entry>
     <entry lang="es" key="HIDVOL_HOST_FILLING_HELP_SYSENC">El volumen externo ha sido creado y montado como la unidad %hc:. Ahora debería ud. copiar a este volumen externo algunos archivos susceptibles de ser buscados pero que realmente NO sean los que quiere ocultar. Estarán ahí por si alguien le obligara a revelar la contraseña para la primera partición tras la partición del sistema, donde los volúmenes externo y oculto (conteniendo el sistema operativo oculto) residirán. Ud. podrá revelar la contraseña para este volumen externo, y la existencia del volumen oculto (y del sistema operativo oculto) permanecerá en secreto.\n\nIMPORTANTE: Los archivos que copie al volumen externo no deben ocupar más de %s. De lo contrario, podría no haber suficiente espacio libre en el volumen externo para el volumen interno (y no se podrá continuar). Cuando termine de copiar, haga clic en Siguiente (no desmonte el volumen).</entry>
     <entry lang="es" key="HIDVOL_HOST_FILLING_HELP">El volumen externo ha sido creado con éxito y montado como la unidad %hc:. Ahora debería ud. copiar a este volumen algunos archivos susceptibles de ser buscados pero que realmente NO sean los que quiere ocultar. Los archivos estarán ahí por si alguien le obligara a revelar su contraseña. Ud. revelará sólo la contraseña para este volumen externo, no la del volumen oculto. Los archivos que realmente le importan serán almacenados en el volumen oculto, que será creado más adelante. Cuando termine de copiar, haga clic en Siguiente. No desmonte el volumen.\n\nNota: Después de pulsar Siguiente, el mapa de bits del cluster del volumen externo será escaneado para determinar el tamaño del área ininterrumpida de espacio libre al final del volumen. Este área alojará el volumen oculto, así que limitará su máximo tamaño posible. Escanear el mapa de bits del cluster asegura que ningún dato del volumen externo sea sobrescrito por el volumen oculto.</entry>
     <entry lang="es" key="HIDVOL_HOST_FILLING_TITLE">Contenido del volumen externo</entry>
@@ -535,9 +535,9 @@
     <entry lang="es" key="HIDVOL_PRE_CIPHER_TITLE">Volumen oculto</entry>
     <entry lang="es" key="HIDVOL_PROT_WARN_AFTER_MOUNT">Ahora el volumen oculto está protegido contra daños hasta que el volumen externo sea desmontado.\n\nAVISO: Si se intenta guardar cualquier dato en el área del volumen oculto, VeraCrypt comenzará a proteger contra escritura el volumen entero (tanto la parte oculta como la externa) hasta que sea desmontado. Esto podría crear corrupción del sistema de archivos en el volumen externo, lo cual (si se repite) podría afectar negativamente la negación plausible del volumen oculto. Por tanto, debería esforzarse todo lo posible por evitar escribir en el área del volumen oculto. Cualquier dato que vaya a guardarse en el área del volumen oculto no se guardará y se perderá. Windows informará de ello como un error de escritura ("Error de escritura demorada" o "El parámetro es incorrecto").</entry>
     <entry lang="es" key="HIDVOL_PROT_WARN_AFTER_MOUNT_PLURAL">Ahora cada uno de los volúmenes ocultos dentro de los volúmenes recién montados están protegidos contra daños hasta que sean desmontados.\n\nAVISO: Si se intenta guardar cualquier dato en el área del volumen oculto protegido de cualquiera de estos volúmenes, VeraCrypt comenzará a proteger contra escritura el volumen entero (tanto la parte oculta como la externa) hasta que sea desmontado. Esto podría crear corrupción del sistema de archivos en el volumen externo, lo cual (si se repite) podría afectar negativamente la negación plausible del volumen oculto. Por tanto, debería esforzarse todo lo posible por evitar escribir en el área del volumen oculto. Cualquier dato que vaya a guardarse en las áreas de volumen oculto protegido no se guardará y se perderá. Windows informará de ello como un error de escritura ("Error de escritura demorada" o "El parámetro es incorrecto").</entry>
-    <entry lang="es" key="DAMAGE_TO_HIDDEN_VOLUME_PREVENTED">AVISO: ¡Se intentó guardar información en el área del volumen oculto dentro del volumen montado como %c:! VeraCrypt impidió que se guardaran esos datos para proteger el volumen oculto. Esto podría haber causado corrupción en el sistema de archivos del volumen externo y Windows podría haber informado de un error de escritura ("Error de escritura demorada" o "El parámetro es incorrecto"). El volumen entero (tanto la parte externa como la oculta) será protegido contra escritura hasta que sea desmontado. Si no es la primera vez que VeraCrypt ha impedido que se guarden datos en el área del volumen oculto de este volumen, la negación plausible de este volumen oculto podría estar afectada negativamente (debido a posibles inconsistencias correlacionadas inusuales dentro del sistema de archivos del volumen externo). Por tanto, debería considerar crear un nuevo volumen VeraCrypt (con Formato Rápido desactivado) y mover los archivos de este volumen al nuevo volumen; este volumen debería ser borrado con seguridad (tanto la parte externa como la oculta). Es muy recomendable reiniciar el sistema operativo ahora.</entry>
+    <entry lang="es" key="DAMAGE_TO_HIDDEN_VOLUME_PREVENTED">AVISO: ¡Se intentó guardar información en el área del volumen oculto dentro del volumen montado como %c:! VeraCrypt impidió que se guardaran esos datos para proteger el volumen oculto. Esto podría haber causado corrupción en el sistema de archivos del volumen externo y Windows podría haber informado de un error de escritura ("Error de escritura demorada" o "El parámetro es incorrecto"). El volumen entero (tanto la parte externa como la oculta) será protegido contra escritura hasta que sea desmontado. Si no es la primera vez que VeraCrypt ha impedido que se guarden datos en el área del volumen oculto de este volumen, la negación plausible de este volumen oculto podría estar afectada negativamente (debido a posibles, pero inusuales, inconsistencias correlacionadas desde dentro el sistema de archivos del volumen externo). Por tanto, debería considerar crear un nuevo volumen VeraCrypt (con Formato Rápido desactivado) y mover los archivos de este volumen al nuevo volumen; este volumen debería ser borrado con seguridad (tanto la parte externa como la oculta). Es muy recomendable reiniciar el sistema operativo ahora.</entry>
     <entry lang="es" key="CANNOT_SATISFY_OVER_4G_FILE_SIZE_REQ">Has indicado tu intención de almacenar archivos mayores de 4 GB en este volumen. Esto requiere que el volumen sea formateado como NTFS, lo cual, sin embargo, no será posible.</entry>
-    <entry lang="es" key="CANNOT_CREATE_NON_HIDDEN_NTFS_VOLUMES_UNDER_HIDDEN_OS">Tenga en cuenta que cuando un sistema operativo oculto está ejecutándose, los volúmenes VeraCrypt no ocultos no pueden ser formateados como NTFS. La razón es que el volumen podría necesitar ser montado temporalmente sin protección contra escritura, para permitir al sistema operativo formatearlo como NTFS (mientras que formatear como FAT lo puede hacer VeraCrypt directamente y sin montar el volumen). Para más detalles técnicos, ver más abajo. Puede crear un volumen NTFS no oculto desde dentro del sistema operativo señuelo.</entry>
+    <entry lang="es" key="CANNOT_CREATE_NON_HIDDEN_NTFS_VOLUMES_UNDER_HIDDEN_OS">Por favor tenga en cuenta que cuando un sistema operativo oculto está ejecutándose, los volúmenes VeraCrypt no ocultos no pueden ser formateados como NTFS/exFAT/ReFS. La razón es que el volumen podría necesitar ser montado temporalmente sin protección contra escritura, para permitir al sistema operativo formatearlo como NTFS (mientras que formatear como FAT lo puede hacer VeraCrypt directamente y sin montar el volumen). Para más detalles técnicos, ver más abajo. Puede crear un volumen NTFS/exFAT/ReFS no oculto desde dentro del sistema operativo señuelo.</entry>
     <entry lang="es" key="HIDDEN_VOL_CREATION_UNDER_HIDDEN_OS_HOWTO">Por razones de seguridad, cuando un sistema operativo oculto está ejecutándose, los volúmenes ocultos se pueden crear sólo en modo 'directo' (porque los volúmenes externos deben ser montados siempre en modo de sólo lectura). Para crear un volumen oculto con seguridad, siga estos pasos:\n\n1) Arranque el sistema señuelo.\n\n2) Cree un volumen VeraCrypt normal y, a este volumen, copie algunos archivos susceptibles de ser buscados pero que realmente NO sean los que quiere ocultar (el volumen se convertirá en el volumen externo).\n\n3) Arranque el sistema oculto e inicie el Asistente de Creación de Volúmenes VeraCrypt. Si el volumen está alojado en un archivo, muévalo a la partición del sistema o a otro volumen oculto (de otro modo, el volumen oculto recién creado podría ser montado como sólo lectura y no podría formatearse). Siga las instrucciones del asistente hasta seleccionar el modo 'directo' de creación de volúmenes ocultos.\n\n4) En el asistente, seleccione el volumen que creó en el paso 2 y siga las instrucciones para crear un volumen oculto dentro del mismo.</entry>
     <entry lang="es" key="HIDDEN_OS_WRITE_PROTECTION_BRIEF_INFO">Por razones de seguridad, cuando un sistema operativo oculto se está ejecutando, los sistemas de archivos locales no cifrados y los volúmenes VeraCrypt no ocultos son montados como sólo lectura (no se puede guardar ningún dato en esos sistemas de archivos y volúmenes VeraCrypt).\n\nSe pueden escribir datos a cualquier sistema de archivos que resida dentro de un volumen VeraCrypt oculto (siempre que dicho volumen oculto no esté ubicado en un contenedor almacenado en un sistema de archivos no cifrado o en cualquier otro sistema de archivos de sólo lectura).</entry>
     <entry lang="es" key="HIDDEN_OS_WRITE_PROTECTION_EXPLANATION">Hay tres razones principales por las que se deberían implementar contramedidas:\n\n- Habilita la creación de una plataforma segura para montar volúmenes VeraCrypt ocultos. Recomendamos oficialmente que los volúmenes ocultos sean montados sólo cuando un sistema operativo oculto se esté ejecutando. (Para más información, vea la sección 'Precauciones y Requisitos de Seguridad Concernientes a los Volúmenes Ocultos' en la documentación.)\n\n- En algunos casos, es posible determinar que, en un momento concreto, un sistema de archivos particular no se montó bajo (o un archivo particular del sistema de archivos no se guardó o leyó desde) una instancia particular de un sistema operativo (p.e. analizando y comparando registros de diario del sistema de archivos, fechas/horas de los archivos, logs de aplicaciones, logs de errores, etc). Esto podría indicar que un sistema operativo oculto está instalado en el ordenador. Las contramedidas previenen este problema.\n\n- Previene la corrupción de datos y permite la hibernación segura. Cuando Windows se reanuda tras una hibernación, asume que todos los sistemas de archivos montados están en el mismo estado que cuando el sistema hibernó. VeraCrypt lo asegura protegiendo contra escritura cualquier sistema de archivos accesible tanto desde el sistema señuelo como desde el oculto. Sin esta protección, el sistema de archivos podría corromperse al ser montado por un sistema mientras el otro sistema está hibernado.</entry>
@@ -548,13 +548,13 @@
     <entry lang="es" key="ERR_SIZE_MISSING">El volumen no se ha especificado por línea de comando. No se puede crear el volumen.</entry>
     <entry lang="es" key="ERR_NTFS_INVALID_VOLUME_SIZE">El tamaño del volumen especificado por línea de comando es incompatible con el sistema de ficheros NTFS seleccionado.</entry>
     <entry lang="es" key="ERR_FAT_INVALID_VOLUME_SIZE">El tamaño del volumen especificado por línea de comando es incompatible con el sistema de ficheros FAT32 seleccionado.</entry>
-    <entry lang="es" key="ERR_DYNAMIC_NOT_SUPPORTED">El sistema de ficheros de la unidad destino no soporta la creación de ficheros dispersos los cuales se necesitan para volúmenes dinámicos</entry>
+    <entry lang="es" key="ERR_DYNAMIC_NOT_SUPPORTED">El sistema de archivos de la unidad destino no soporta la creación de archivos dispersos, los cuales se necesitan para volúmenes dinámicos.</entry>
     <entry lang="es" key="ERR_DEVICE_CLI_CREATE_NOT_SUPPORTED">Sólo se puede crear ficheros contenedores mediante línea de comando.</entry>
     <entry lang="es" key="ERR_CONTAINER_SIZE_TOO_BIG">El tamaño del fichero contenedor especificado por línea de comando es superior al espacio disponible en el disco. No se puede crear el volumen.</entry>
     <entry lang="es" key="ERR_VOLUME_SIZE_TOO_SMALL">El tamaño del volumen especificado por línea de comando es demasiado pequeño. No se puede crear el volumen.</entry>
     <entry lang="es" key="ERR_VOLUME_SIZE_TOO_BIG">El tamaño del volumen especificado por línea de comando es demasiado grande. No se puede crear el volumen.</entry>
     <entry lang="es" key="INIT_SYS_ENC">No se pueden inicializar componentes de la aplicación para el cifrado del sistema.</entry>
-    <entry lang="es" key="INIT_RAND">¡Fallo al inicializar el generador de números aleatorios!</entry>
+    <entry lang="es" key="INIT_RAND">¡Fallo al inicializar el generador de números aleatorios!\n\n\n(Si reporta un error en conexión con esto, por favor incluya la siguiente información técnica en el informe de error:\n%hs, Último Error = 0x%.8X)</entry>
     <entry lang="es" key="CAPI_RAND">¡Fallo en Windows Crypto API!\n\n\n(Si reporta un error (bug) en relación con esto, por favor incluya la siguiente información técnica en el reporte del error:\n%hs, Last Error = 0x%.8X)</entry>
     <entry lang="es" key="INIT_REGISTER">No se pudo iniciar la aplicación. Fallo al registrar la clase Dialog.</entry>
     <entry lang="es" key="INIT_RICHEDIT">Error: Fallo al cargar la librería de sistema Rich Edit.</entry>
@@ -564,7 +564,7 @@
     <entry lang="es" key="MAX_HIDVOL_SIZE_MB">El tamaño máximo posible de volumen oculto para este volumen es %.2f MB.</entry>
     <entry lang="es" key="MAX_HIDVOL_SIZE_GB">El tamaño máximo posible de volumen oculto para este volumen es %.2f GB.</entry>
     <entry lang="es" key="MAX_HIDVOL_SIZE_TB">El tamaño máximo posible de volumen oculto para este volumen es %.2f TB.</entry>
-    <entry lang="es" key="MOUNTED_NOPWCHANGE">La contraseña/archivo-llave del volumen no puede cambiarse mientras el volumen está montado. Desmonte el volumen primero.</entry>
+    <entry lang="es" key="MOUNTED_NOPWCHANGE">La contraseña/archivo-clave del volumen no puede cambiarse mientras el volumen está montado. Por favor desmonte el volumen primero.</entry>
     <entry lang="es" key="MOUNTED_NO_PKCS5_PRF_CHANGE">El algoritmo de derivación de clave de cabecera no puede ser cambiado mientras el volumen está montado. Desmonte el volumen primero.</entry>
     <entry lang="es" key="MOUNT_BUTTON">&amp;Montar</entry>
     <entry lang="es" key="NEW_VERSION_REQUIRED">Se requiere una versión más reciente de VeraCrypt para montar este volumen.</entry>
@@ -577,7 +577,7 @@
     <entry lang="es" key="NODRIVER">No es posible conectar con el controlador de dispositivo VeraCrypt. VeraCrypt no puede funcionar si el controlador de dispositivo no está funcionando.\n\nTenga en cuenta que, debido a un problema de Windows, puede ser necesario terminar la sesión o reiniciar el sistema antes antes de que el controlador de dispositivo se pueda cargar.</entry>
     <entry lang="es" key="NOFONT">Ocurrió un error al cargar/preparar las fuentes.</entry>
     <entry lang="es" key="NOT_FOUND">No se ha encontrado la letra de unidad, o no se ha especificado ninguna.</entry>
-    <entry lang="es" key="ERR_CANNOT_ASSIGN_DRIVE_LETTER_NONSYS_DEC">Error: No se puede asignar una letra de unidad.\n\nNo se podrá acceder a los datos almacenados de dicho volumen hasta que se asigne una letra de unidad al volumen descifrado.\n\n¿Reintentar?</entry>
+    <entry lang="es" key="ERR_CANNOT_ASSIGN_DRIVE_LETTER_NONSYS_DEC">Error: No se puede asignar una letra de unidad.\n\nNo se podrá acceder a los datos almacenados en dicho volumen hasta que se asigne una letra de unidad al volumen descifrado.\n\n¿Reintentar?</entry>
     <entry lang="es" key="DRIVE_LETTER_UNAVAILABLE">Letra de unidad no disponible.</entry>
     <entry lang="es" key="NO_FILE_SELECTED">¡No seleccionó ningún archivo!</entry>
     <entry lang="es" key="NO_FREE_DRIVES">No hay letras de unidad disponibles.</entry>
@@ -607,42 +607,42 @@
     <entry lang="es" key="IDD_PCDM_CHANGE_PKCS5_PRF">Establecer Algoritmo de Derivación de Clave de Cabecera</entry>
     <entry lang="es" key="IDD_PCDM_ADD_REMOVE_VOL_KEYFILES">Añadir/Eliminar Archivos-llave a/de un Volumen</entry>
     <entry lang="es" key="IDD_PCDM_REMOVE_ALL_KEYFILES_FROM_VOL">Eliminar Todos los Archivos-llave de un Volumen</entry>
-    <entry lang="es" key="PASSWORD_CHANGED">Contraseña, PIM y/o archivo-llave cambiados con éxito.\n\nIMPORTANTE: Asegúrese de que ha leído la sección 'Cambiando contraseñas y archivos-llave' en el capítulo 'Precauciones y Requisitos de Seguridad' en la Guía de Usuario de VeraCrypt.</entry>
+    <entry lang="es" key="PASSWORD_CHANGED">Contraseña, PIM y/o archivo(s)-clave cambiados con éxito.\n\nIMPORTANTE: Por favor asegúrese que haya leído la sección 'Cambiando contraseñas y archivos-clave' en el capítulo 'Precauciones y Requisitos de Seguridad' en la Guía de Usuario de VeraCrypt.</entry>
     <entry lang="es" key="FAVORITE_PIM_CHANGED">Este volumen está registrado como un Favorito de Sistema y su PIM asociado ha sido cambiado.\n¿Quiere que VeraCrypt automáticamente actualice la configuración de Favoritos de Sistema (se require permisos de administración)?\n\nPor favor, sea consciente de que si responde que no, deberá actualizar el Sistema de Favoritos manualmente.</entry>
     <entry lang="es" key="SYS_PASSWORD_CHANGED_ASK_RESCUE_DISK">IMPORTANTE: Si no destruyó su Disco de Rescate VeraCrypt, su partición/unidad del sistema aún puede ser descifrada usando la contraseña antigua (arrancando el Disco de Rescate VeraCrypt e introduciendo la contraseña antigua). Debería ud. crear un nuevo Disco de Rescate VeraCrypt y destruir el antiguo.\n\n¿Desea crear un nuevo Disco de Rescate VeraCrypt?</entry>
     <entry lang="es" key="SYS_HKD_ALGO_CHANGED_ASK_RESCUE_DISK">Recuerde que el Disco de Rescate VeraCrypt aún usa el algoritmo anterior. Si considera el algoritmo anterior inseguro, debería crear un nuevo Disco de Rescate VeraCrypt y destruir el antiguo.\n\n¿Desea crear un nuevo Disco de Rescate VeraCrypt?</entry>
-    <entry lang="es" key="KEYFILES_NOTE">Cualquier tipo de archivo (.mp3, .jpg, .zip, .avi...) puede usarse como archivo-llave. VeraCrypt nunca modifica el contenido del archivo. Puede seleccionar más de un archivo-llave (el orden no importa). Si añade una carpeta, todos los archivos no ocultos que contenga serán usados como archivos-llave. Haga clic en 'Archivos Token' para seleccionar archivos-llave almacenados en token de seguridad o tarjetas inteligentes (o para importar archivos-llave a tokens o tarjetas).</entry>
-    <entry lang="es" key="KEYFILE_CHANGED">Archivos-llave agregados/eliminados con éxito.</entry>
+    <entry lang="es" key="KEYFILES_NOTE">Cualquier tipo de archivo (.mp3, .jpg, .zip, .avi) puede usarse como archivo-clave. VeraCrypt nunca modifica el contenido del archivo. Puede seleccionar más de un archivo-clave (el orden no importa). Si añade una carpeta, todos los archivos no ocultos que contenga serán usados como archivos-clave. Haga clic en 'Añadir Archivos Token' para seleccionar archivos-clave almacenados en tokens de seguridad o tarjetas inteligentes (o para importar archivos-clave a tokens o tarjetas).</entry>
+    <entry lang="es" key="KEYFILE_CHANGED">Archivo(s)-clave agregado(s)/eliminado(s) con éxito.</entry>
     <entry lang="es" key="KEYFILE_EXPORTED">Archivo-llave exportado.</entry>
     <entry lang="es" key="PKCS5_PRF_CHANGED">Algoritmo de derivación de clave de cabecera establecido con éxito.</entry>
     <entry lang="es" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Introduzca la contraseña y/o archivos-llave para el volumen secundario donde desea continuar el proceso de cifrado sin pérdida de datos.\n\nObservación: Después de pulsar Siguiente, VeraCrypt intentará encontrar todos los volúmenes secundarios donde el proceso de cifrado haya sido interrumpido y la cabecera del volumen pueda ser descifrada usando la contraseña y/o archivos-llave suministrados. Si se encuentra más de un volumen, necesitará seleccionar uno en el siguiente paso.</entry>
-    <entry lang="es" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Seleccione uno de los volúmenes listados. La lista contiene todos los volúmenes secundarios accesibles donde el proceso de cifrado haya sido interrumpido y cuya cabecera pudo ser descifrada usando la contraseña y/o archivos-llave suministrados.</entry>
+    <entry lang="es" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Por favor seleccione uno de los volúmenes listados. La lista contiene todos los volúmenes secundarios accesibles donde el proceso de cifrado/descifrado haya sido interrumpido y cuya cabecera pudo ser descifrada usando la contraseña y/o archivo(s)-clave suministrados.</entry>
     <entry lang="es" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Por favor introduzca la contraseña y/o fichero(s)-llave para el volumen de VeraCrypt no de sistema que quiere descifrar.</entry>
-    <entry lang="es" key="PASSWORD_HELP">Es muy importante que elija una buena contraseña. Debería evitar elegir una que contenga sólo una palabra que se pueda encontrar en un diccionario (o una combinación de 2, 3, o 4 de estas palabras). No debería contener nombres ni fechas de nacimiento. No debería ser fácil de adivinar. Una buena contraseña es una combinación aleatoria de letras mayúsculas y minúsculas, números, y caracteres especiales como @ ^ = $ * + etc. Recomendamos la elección de una contraseña que consista en más de 20 caracteres (cuanto más larga, mejor). La máxima longitud posible es 64 caracteres.</entry>
+    <entry lang="es" key="PASSWORD_HELP">Es muy importante que elija una buena contraseña. Debería evitar elegir una que contenga sólo una palabra que se pueda encontrar en un diccionario (o una combinación de 2, 3, o 4 de estas palabras). No debería contener nombres ni fechas de nacimiento. No debería ser fácil de adivinar. Una buena contraseña es una combinación aleatoria de letras mayúsculas y minúsculas, números, y caracteres especiales como @ ^ = $ * + etc. Recomendamos la elección de una contraseña que consista en más de 20 caracteres (cuanto más larga, mejor). La máxima longitud posible es 128 caracteres.</entry>
     <entry lang="es" key="PASSWORD_HIDDENVOL_HELP">Elija una contraseña para el volumen oculto. </entry>
     <entry lang="es" key="PASSWORD_HIDDEN_OS_HELP">Elija una contraseña para el sistema operativo oculto (es decir, para el volumen oculto). </entry>
     <entry lang="es" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANTE: La contraseña que elija para el sistema operativo oculto en este paso debe ser sustancialmente diferente de las otras dos contraseñas (es decir, de la contraseña para el volumen externo y de la del sistema operativo señuelo).</entry>
-    <entry lang="es" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Introduzca la contraseña para el volumen en el que desea crear un volumen oculto.\n\nTras pulsar Siguiente, VeraCrypt intentará montar el volumen. Tan pronto como el volumen sea montado, el mapa de bits del cluster será examinado para determinar el tamaño del área ininterrumpida de espacio libre (si la hay) cuyo final coincide con el final del volumen. Este área alojará el volumen oculto y por tanto limitará su máximo tamaño posible. La exploración del mapa de cluster es necesario para asegurar que ningún dato del volumen externo sea sobrescrito por el volumen oculto.</entry>
-    <entry lang="es" key="PASSWORD_HIDDENVOL_HOST_HELP">\nElija una contraseña para el volumen externo. Esta será la contraseña que ud. podrá revelar a un enemigo si es obligado a hacerlo.\n\nIMPORTANTE: La contraseña debe ser sustancialmente diferente de la que elegirá para el volumen oculto.\n\nNota: La longitud máxima posible de la contraseña es 64 caracteres.</entry>
-    <entry lang="es" key="PASSWORD_SYSENC_OUTERVOL_HELP">Elija una contraseña para el volumen externo. Esta será la contraseña que ud. podrá revelar a cualquiera que le obligue a descubrir la contraseña para la primera partición tras la partición del sistema, donde los volúmenes externo y oculto (que contiene el sistema operativo oculto) residirán. La existencia del volumen oculto (y la del sistema operativo oculto) permanecerá en secreto. Tenga en cuenta que esta contraseña no es para el sistema operativo señuelo.\n\nIMPORTANTE: La contraseña debe ser sustancialmente diferente de la que elegirá para el volumen oculto (es decir, para el sistema operativo oculto)</entry>
+    <entry lang="es" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Por favor introduzca la contraseña para el volumen en el que desea crear un volumen oculto.\n\nTras pulsar Siguiente, VeraCrypt intentará montar el volumen. Tan pronto como el volumen sea montado, el mapa de bits del cluster será examinado para determinar el tamaño del área ininterrumpida de espacio libre (si la hay) cuyo final coincide con el final del volumen. Este área alojará el volumen oculto y por tanto limitará su máximo tamaño posible. La exploración del mapa de cluster es necesaria para asegurar que ningún dato del volumen externo sea sobrescrito por el volumen oculto.</entry>
+    <entry lang="es" key="PASSWORD_HIDDENVOL_HOST_HELP">\nElija una contraseña para el volumen externo. Esta será la contraseña que ud. podrá revelar a un adversario si es obligado a hacerlo.\n\nIMPORTANTE: La contraseña debe ser sustancialmente diferente de la que elegirá para el volumen oculto.\n\nNota: La longitud máxima posible de la contraseña es 128 caracteres.</entry>
+    <entry lang="es" key="PASSWORD_SYSENC_OUTERVOL_HELP">Por favor elija una contraseña para el volumen externo. Esta será la contraseña que ud. podrá revelar a cualquiera que le obligue a descubrir la contraseña para la primera partición tras la partición del sistema, donde los volúmenes externo y oculto (que contiene el sistema operativo oculto) residirán. La existencia del volumen oculto (y la del sistema operativo oculto) permanecerá en secreto. Tenga en cuenta que esta contraseña no es para el sistema operativo señuelo.\n\nIMPORTANTE: La contraseña debe ser sustancialmente diferente de la que elegirá para el volumen oculto (es decir, para el sistema operativo oculto)</entry>
     <entry lang="es" key="PASSWORD_HIDVOL_HOST_TITLE">Contraseña del Volumen Externo</entry>
     <entry lang="es" key="PASSWORD_HIDVOL_TITLE">Contraseña del Volumen Oculto</entry>
     <entry lang="es" key="PASSWORD_HIDDEN_OS_TITLE">Contraseña del Sistema Operativo Oculto</entry>
     <entry lang="es" key="PASSWORD_LENGTH_WARNING">AVISO: ¡Las contraseñas cortas son fáciles de romper usando técnicas de fuerza bruta!\n\nRecomendamos la elección de una contraseña de más de 20 caracteres.\n\n¿Seguro que desea utilizar una contraseña corta?</entry>
     <entry lang="es" key="PASSWORD_TITLE">Contraseña del Volumen</entry>
-    <entry lang="es" key="PASSWORD_WRONG">Contraseña incorrecta o no es un volumen VeraCrypt</entry>
-    <entry lang="es" key="PASSWORD_OR_KEYFILE_WRONG">Contraseña y/o archivo-llave incorrectos o no es un volumen VeraCrypt</entry>
+    <entry lang="es" key="PASSWORD_WRONG">La operación falló debido a uno o más de los siguientes motivos:\n - Contraseña incorrecta.\n - Número PIM del volumen incorrecto.\n - PRF (hash) incorrecto.\n - No es un volumen válido.</entry>
+    <entry lang="es" key="PASSWORD_OR_KEYFILE_WRONG">La operación falló debido a uno o más de los siguientes motivos:\n - Contraseña y/o archivo(s)-clave incorrectos.\n - Número PIM del volumen incorrecto.\n - PRF (hash) incorrecto.\n - No es un volumen válido.</entry>
     <entry lang="es" key="PASSWORD_OR_MODE_WRONG">Mal montaje, contraseña incorrecta, o no es un volumen VeraCrypt.</entry>
-    <entry lang="es" key="PASSWORD_OR_KEYFILE_OR_MODE_WRONG">Mal montaje, contraseña y/o archivo-llave incorrectos, o no es un volumen VeraCrypt.</entry>
+    <entry lang="es" key="PASSWORD_OR_KEYFILE_OR_MODE_WRONG">La operación falló debido a uno o más de los siguientes motivos:\n - Modo de montaje inválido.\n - Contraseña y/o archivo(s)-clave incorrecto(s).\n - Número PIM del volumen incorrecto.\n - PRF (hash) incorrecto.\n - No es un volumen válido.</entry>
     <entry lang="es" key="PASSWORD_WRONG_AUTOMOUNT">Contraseña incorrecta o no se encontró el volumen VeraCrypt.</entry>
-    <entry lang="es" key="PASSWORD_OR_KEYFILE_WRONG_AUTOMOUNT">Contraseña y/o archivo-llave incorrectos o no se encontró el volumen VeraCrypt.</entry>
+    <entry lang="es" key="PASSWORD_OR_KEYFILE_WRONG_AUTOMOUNT">El montaje automático falló debido a uno o más de los siguientes motivos:\n - Contraseña y/o archivo(s)-clave incorrectos.\n - Número PIM del volumen incorrecto.\n - PRF (hash) incorrecto.\n - No se encontró un volumen válido.</entry>
     <entry lang="es" key="PASSWORD_WRONG_CAPSLOCK_ON">\n\nAviso: El bloqueo de mayúsculas está activo. Esto puede causar que introduzca su contraseña incorrectamente.</entry>
     <entry lang="es" key="PIM_CHANGE_WARNING">Recordar Número para Montar Volumen</entry>
     <entry lang="es" key="PIM_HIDVOL_HOST_TITLE">PIM Exterior del Volumen</entry>
     <entry lang="es" key="PIM_HIDVOL_TITLE">PIM Oculto del Volumen</entry>
     <entry lang="es" key="PIM_HIDDEN_OS_TITLE">PIM para el Sistema Operativo Oculto</entry>
     <entry lang="es" key="PIM_HELP">PIM (Personal Iterations Multiplier) es un valor que controla el número de iteraciones usado por la derivación de la llave de cabecera de la siguiente forma:\n      Iteraciones = 15000 + (PIM x 1000).\n\nCuando se deja en blanco o se pone a 0, VeraCrypt usará el valor predeterminado (485) que proporciona una elevada seguridad.\n\nCuando la contraseña es de menos de 20 caracteres, PIM puede ser menor de 485 con el fin de mantener un nivel de seguridad mínimo.\nCuando la contraseña es de 20 ó más caracteres, se puede usar cualquier valor de PIM.\n\nUn valor de PIM superior a 485 conllevará un proceso de montaje más lento. Un valor de PIM (menor de 485) conllevará un proceso de montaje más rápido, pero podría reducir la seguridad si la contraseña no es suficientemente fuerte.</entry>
-    <entry lang="es" key="PIM_SYSENC_HELP">PIM (Personal Iterations Multiplier) es un valor que controla el número de iteraciones usado por la derivación de la llave de cabecera de la siguiente forma:\n      Iteraciones = PIM x 2048.\n\nCuando se deja en blanco o se pone a 0, VeraCrypt usuará un valor por defecto que proporciona una elevada seguridad.\n\nCuando la contraseña es inferior a los 20 caracteres, PIM no puede ser inferior a 98 a fin de mantener un nivel de seguridad mínimo.\nCuando la contraseña supera los 20 caracteres o más, se puede usar cualquier valor de PIM.\n\nUn PIM superior a 98 conllevará un proceso de arranque más lento. Un valor pequeño de PIM (menor de 98) llevará consigo un proceso de arranque más rápido, pero podría reducir la seguridad si la contraseña no es suficientemente fuerte.</entry>
+    <entry lang="es" key="PIM_SYSENC_HELP">PIM (Personal Iterations Multiplier) es un valor que controla el número de iteraciones usado por la derivación de la clave de cabecera de la siguiente forma:\n Iteraciones = PIM x 2048.\n\nCuando se deja en blanco o se pone a 0, VeraCrypt usuará un valor por defecto que proporciona una elevada seguridad.\n\nCuando la contraseña es inferior a los 20 caracteres, PIM no puede ser inferior a 98 a fin de mantener un nivel de seguridad mínimo.\nCuando la contraseña supera los 20 caracteres o más, se puede usar cualquier valor de PIM.\n\nUn PIM superior a 98 conllevará un proceso de arranque más lento. Un valor pequeño de PIM (menor de 98) llevará consigo un proceso de arranque más rápido, pero podría reducir la seguridad si la contraseña no es suficientemente fuerte.</entry>
     <entry lang="es" key="PIM_SYSENC_CHANGE_WARNING">Recordar Número para Sistema de Arranque</entry>
     <entry lang="es" key="PIM_LARGE_WARNING">Puede elegir un valor de PIM superior al valor por defecto de VeraCrypt.\nPor favor, sea consciente que ello conllevará un arranque/montaje mucho más lento.</entry>
     <entry lang="es" key="PIM_SMALL_WARNING">Ha elegido un Multiplicador de Iteraciones Personal (Personal Iterations Multiplier - PIM) que es mucho menor que el que proporciona VeraCrypt por defecto. Por favor, sea consciente que si su contraseña no es lo suficientemente fuerte, podría ver reducido el nivel de seguridad.\n\n¿Está seguro que usa una contraseña fuerte?</entry>
@@ -658,21 +658,21 @@
     <entry lang="es" key="CANT_DECRYPT_PARTITION_ON_ENTIRELY_ENCRYPTED_SYS_DRIVE">VeraCrypt no puede descifrar una partición individual en una unidad de sistema completamente cifrada (sólo es posible descifrar la unidad de sistema completa).</entry>
     <entry lang="es" key="CANT_DECRYPT_PARTITION_ON_ENTIRELY_ENCRYPTED_SYS_DRIVE_UNSURE">AVISO: Dado que la unidad contiene el Cargador de Arranque de VeraCrypt, podría ser una unidad de sistema completamente cifrada. De ser así, por favor, sea consciente que VeraCrypt no puede descifrar una partición individual en una unidad de sistema completamente cifrada (sólo es posible descifrar la unidad de sistema completa). Si este es el caso, podrá continuar pero recibirá posteriormente un mensaje de error que dice 'Contraseña incorrecta'.</entry>
     <entry lang="es" key="PREV">&lt; &amp;Atrás</entry>
-    <entry lang="es" key="RAWDEVICES">¡No se pueden listar los dispositivos raw de su sistema!</entry>
+    <entry lang="es" key="RAWDEVICES">¡No se pueden listar los dispositivos de acceso directo de su sistema!</entry>
     <entry lang="es" key="READONLYPROMPT">El volumen '%s' existe y es de sólo lectura. ¿Desea reemplazarlo?</entry>
     <entry lang="es" key="SELECT_DEST_DIR">Seleccione el directorio de destino</entry>
     <entry lang="es" key="SELECT_KEYFILE">Seleccione Archivo-llave</entry>
     <entry lang="es" key="SELECT_KEYFILE_PATH">Seleccione ruta de búsqueda de archivos-llave. AVISO: ¡Sólo se recordará la ruta, no el nombre de los archivos!</entry>
-    <entry lang="es" key="SELECT_KEYFILE_GENERATION_DIRECTORY">Seleccione el directorio donde almacenar los ficheros llave.</entry>
+    <entry lang="es" key="SELECT_KEYFILE_GENERATION_DIRECTORY">Seleccione el directorio donde almacenar los archivosos-clave.</entry>
     <entry lang="es" key="SELECTED_KEYFILE_IS_CONTAINER_FILE">El fichero contenedor actual fue seleccionado como fichero llave. Será ignorado.</entry>
     <entry lang="es" key="SERPENT_HELP">Diseñado por Ross Anderson, Eli Biham, y Lars Knudsen. Publicado en 1998. Clave de 256-bit, bloque de 128-bit. Modo de operación XTS. Serpent fue uno de los finalistas AES.</entry>
-    <entry lang="es" key="SIZE_HELP">Especifique el tamaño del contenedor que desea crear.\n\nSi crea un contenedor dinámico (archivo disperso), este parámetro especificará su máximo tamaño posible.\n\nTenga en cuenta que el mínimo tamaño posible de un volumen FAT es 292 KB. De un volumen NTFS, el mínimo es 3792 KB.</entry>
+    <entry lang="es" key="SIZE_HELP">Por favor especifique el tamaño del contenedor que desea crear.\n\nSi crea un contenedor dinámico (archivo disperso), este parámetro especificará su máximo tamaño posible.\n\nTenga en cuenta que el mínimo tamaño posible de un volumen FAT es 292 KB. De un volumen exFAT es 424 KB. De un volumen NTFS, el mínimo es 3792 KB. De un volumen ReFS es 642 MB.</entry>
     <entry lang="es" key="SIZE_HELP_HIDDEN_HOST_VOL">Especifique el tamaño del volumen externo (primero creará un volumen externo y luego un volumen oculto en su interior). El mínimo tamaño posible para un volumen en el que se pretenda crear un volumen oculto es 340 KB.</entry>
     <entry lang="es" key="SIZE_HELP_HIDDEN_VOL">Especifique el tamaño del volumen oculto. El mínimo tamaño posible de un volumen oculto es 40 KB (o 3664 KB si se formatea como NTFS). El máximo tamaño posible que puede especificar para el volumen oculto se muestra más arriba.</entry>
     <entry lang="es" key="SIZE_HIDVOL_HOST_TITLE">Tamaño del volumen externo</entry>
     <entry lang="es" key="SIZE_HIDVOL_TITLE">Tamaño del volumen oculto</entry>
     <entry lang="es" key="SIZE_PARTITION_HELP">Verifique que el tamaño del dispositivo/partición seleccionado que se muestra es correcto y haga clic en Siguiente.</entry>
-    <entry lang="es" key="SIZE_PARTITION_HIDDEN_SYSENC_HELP">El volumen externo y el oculto (que contiene el sistema operativo oculto) residirán dentro de esta partición. Debe ser la primera partición tras la partición del sistema.\n\nVerifique que el tamaño de la partición y su número mostrado más arriba son correctos, y si lo son, pulse Siguiente.</entry>
+    <entry lang="es" key="SIZE_PARTITION_HIDDEN_SYSENC_HELP">El volumen externo y el oculto (que contiene el sistema operativo oculto) residirán dentro de esta partición. Debe ser la primera partición tras la partición del sistema.\n\nPor favor verifique que el tamaño de la partición y su número, mostrados más arriba, son correctos, y si lo son, pulse Siguiente.</entry>
     <entry lang="es" key="SIZE_PARTITION_HIDDEN_VOL_HELP">\n\nRecuerde que el mínimo tamaño posible de un volumen en el que se pretende crear un volumen oculto es 340 KB.</entry>
     <entry lang="es" key="SIZE_TITLE">Tamaño del volumen</entry>
     <entry lang="es" key="SPARSE_FILE">Dinámico</entry>
@@ -709,7 +709,7 @@
     <entry lang="es" key="WRONG_VOL_TYPE">VeraCrypt no puede cambiar la contraseña de un volumen exterior.</entry>
     <entry lang="es" key="SELECT_FREE_DRIVE">Seleccione una letra de unidad libre de la lista.</entry>
     <entry lang="es" key="SELECT_A_MOUNTED_VOLUME">Seleccione un volumen montado en la lista de letras de unidad.</entry>
-    <entry lang="es" key="AMBIGUOUS_VOL_SELECTION">Hay seleccionados dos volúmenes montados diferentes (uno en la lista de letras de unidad y el otro en el campo de texto bajo la lista).\n\nElija el volumen que quiso seleccionar:</entry>
+    <entry lang="es" key="AMBIGUOUS_VOL_SELECTION">Aviso: Hay seleccionados dos volúmenes/dispositivos diferentes (uno en la lista de letras de unidad y el otro en el campo de texto bajo la lista).\n\nElija el volumen que quiso seleccionar:</entry>
     <entry lang="es" key="CANT_CREATE_AUTORUN">Error: No se puede crear autorun.inf</entry>
     <entry lang="es" key="ERR_PROCESS_KEYFILE">¡Error al procesar el archivo-llave!</entry>
     <entry lang="es" key="ERR_PROCESS_KEYFILE_PATH">¡Error al procesar la ruta del archivo-llave!</entry>
@@ -725,10 +725,10 @@
     <entry lang="es" key="ALL_FILES">Todos los Archivos</entry>
     <entry lang="es" key="TC_VOLUMES">Volúmenes VeraCrypt</entry>
     <entry lang="es" key="DLL_FILES">Módulos de Librería</entry>
-    <entry lang="es" key="FORMAT_NTFS_STOP">El formateo NTFS no puede continuar.</entry>
+    <entry lang="es" key="FORMAT_NTFS_STOP">El formateo NTFS/exFAT/ReFS no puede continuar.</entry>
     <entry lang="es" key="CANT_MOUNT_VOLUME">No se puede montar el volumen.</entry>
     <entry lang="es" key="CANT_DISMOUNT_VOLUME">No se puede desmontar el volumen.</entry>
-    <entry lang="es" key="FORMAT_NTFS_FAILED">Windows falló al formatear el volumen como NTFS.\n\nSeleccione un tipo diferente de sistema de archivos (si es posible) y reinténtelo. Alternativamente, puede dejar el volumen sin formato (seleccione 'Ninguno' como sistema de archivos), salir del asistente, montar el volumen, y usar una herramienta del sistema o de terceros para formatear el volumen montado (el volumen permanecerá cifrado).</entry>
+    <entry lang="es" key="FORMAT_NTFS_FAILED">Windows falló al formatear el volumen como NTFS/exFAT/ReFS.\n\nPor favor seleccione un tipo diferente de sistema de archivos (si es posible) y reinténtelo. Alternativamente, puede dejar el volumen sin formato (seleccione 'Ninguno' como sistema de archivos), salir del asistente, montar el volumen, y usar una herramienta del sistema o de terceros para formatear el volumen montado (el volumen permanecerá cifrado).</entry>
     <entry lang="es" key="FORMAT_NTFS_FAILED_ASK_FAT">Windows fallo al formatear el volumen como NTFS.\n\n¿Desea formatear el volumen como FAT en su lugar?</entry>
     <entry lang="es" key="DEFAULT">Por defecto</entry>
     <entry lang="es" key="PARTITION_LOWER_CASE">partición</entry>
@@ -742,11 +742,11 @@
     <entry lang="es" key="LABEL">Etiqueta</entry>
     <entry lang="es" key="CLUSTER_TOO_SMALL">El tamaño de cluster seleccionado es muy pequeño para el tamaño del volumen. En su lugar se usará un cluster mas grande.</entry>
     <entry lang="es" key="CANT_GET_VOLSIZE">Error: ¡No se puede obtener el tamaño del volumen!\n\nAsegúrese de que el volumen seleccionado no está siendo usado por el sistema o una aplicación.</entry>
-    <entry lang="es" key="HIDDEN_VOL_HOST_SPARSE">Los volúmenes ocultos no se deben crear dentro de contenedores dinámicos (archivos dispersos). Para garantizar la negación plausible, el volumen oculto necesita ser creado en un contenedor no dinámico.</entry>
-    <entry lang="es" key="HIDDEN_VOL_HOST_UNSUPPORTED_FILESYS">El Asistente de Creación de Volúmenes VeraCrypt puede crear un volumen oculto sólo dentro de un volumen FAT o NTFS.</entry>
+    <entry lang="es" key="HIDDEN_VOL_HOST_SPARSE">Los volúmenes ocultos no se deben crear dentro de contenedores dinámicos (archivos dispersos). Para garantizar la negación plausible, el volumen oculto necesita ser creado dentro de un contenedor no dinámico.</entry>
+    <entry lang="es" key="HIDDEN_VOL_HOST_UNSUPPORTED_FILESYS">El Asistente de Creación de Volúmenes VeraCrypt puede crear un volumen oculto sólo dentro de un volumen FAT/exFAT o NTFS.</entry>
     <entry lang="es" key="HIDDEN_VOL_HOST_UNSUPPORTED_FILESYS_WIN2000">En Windows 2000, el Asistente de Creación de Volúmenes VeraCrypt puede crear un volumen oculto sólo en un volumen FAT.</entry>
-    <entry lang="es" key="HIDDEN_VOL_HOST_NTFS">Nota: El sistema de archivos FAT es más adecuado para volúmenes externos que el NTFS (por ejemplo, el máximo tamaño posible del volumen oculto probablemente habría sido significativamente mayor si el volumen externo se hubiera formateado como FAT).</entry>
-    <entry lang="es" key="HIDDEN_VOL_HOST_NTFS_ASK">Tenga en cuenta que el sistema de archivos FAT es más adecuado para volúmenes externos que el NTFS. Por ejemplo, el máximo tamaño posible del volumen oculto probablemente será significativamente mayor si el volumen externo es formateado como FAT (la razón es que el sistema de archivos NTFS siempre almacena datos internos en la mitad del volumen y, por tanto, el volumen oculto sólo puede residir en la segunda mitad del volumen externo).\n\n¿Seguro que desea formatear el volumen externo como NTFS?</entry>
+    <entry lang="es" key="HIDDEN_VOL_HOST_NTFS">Nota: El sistema de archivos FAT/exFAT es más adecuado para volúmenes externos que el NTFS (por ejemplo, el máximo tamaño posible del volumen oculto probablemente hubiera sido significativamente mayor si el volumen externo se hubiera formateado como FAT/exFAT).</entry>
+    <entry lang="es" key="HIDDEN_VOL_HOST_NTFS_ASK">Tenga en cuenta que el sistema de archivos FAT/exFAT es más adecuado para volúmenes externos que el NTFS. Por ejemplo, el máximo tamaño posible del volumen oculto probablemente será significativamente mayor si el volumen externo es formateado como FAT/exFAT (la razón es que el sistema de archivos NTFS siempre almacena datos internos en la mitad del volumen y, por tanto, el volumen oculto sólo puede residir en la segunda mitad del volumen externo).\n\n¿Seguro que desea formatear el volumen externo como NTFS?</entry>
     <entry lang="es" key="OFFER_FAT_FORMAT_ALTERNATIVE">¿Desea formatear el volumen como FAT en su lugar?</entry>
     <entry lang="es" key="FAT_NOT_AVAILABLE_FOR_SO_LARGE_VOLUME">Nota: Este volumen no puede ser formateado como FAT, porque excede el tamaño máximo de volumen soportado por el sistema de archivos FAT32 para el tamaño de sector aplicable (2 TB para sectores de 512-byte y 16 TB para sectores de 4096-byte).</entry>
     <entry lang="es" key="PARTITION_TOO_SMALL_FOR_HIDDEN_OS">Error: La partición para el sistema operativo oculto (o sea, la primera partición tras la partición del sistema) debe ser al menos un 5% mayor que la partición del sistema (que es en la que está instalado el sistema operativo en ejecución).</entry>
@@ -763,11 +763,11 @@
     <entry lang="es" key="VOL_CONTAINS_NO_HIDDEN_VOL">El volumen no contiene ningún volumen oculto. Proceder.</entry>
     <entry lang="es" key="VOL_CONTAINS_A_HIDDEN_VOL">El volumen contiene un volumen oculto. Cancelar.</entry>
     <entry lang="es" key="CANT_ACCESS_VOL">Error: ¡No se puede acceder al volumen!\n\nAsegúrese de que el volumen seleccionado existe, que no está montado ni siendo usado por otra aplicación, que tiene permisos de lectura/escritura sobre el volumen, y que no está protegido contra escritura.</entry>
-    <entry lang="es" key="CANT_GET_VOL_INFO">Error: No se ha podido obtener la propiedades de volumen.</entry>
+    <entry lang="es" key="CANT_GET_VOL_INFO">Error: No se han podido obtener la propiedades de volumen.</entry>
     <entry lang="es" key="INPLACE_ENC_CANT_ACCESS_OR_GET_INFO_ON_VOL">Error: No se puede acceder al volumen y/o obtener información sobre el volumen.\n\nAsegúrese de que el volumen seleccionado existe, que no está siendo usado por el sistema o alguna aplicación, que tiene permisos de lectura/escritura sobre el volumen, y que no está protegido contra escritura.</entry>
     <entry lang="es" key="INPLACE_ENC_CANT_ACCESS_OR_GET_INFO_ON_VOL_ALT">Error: No se puede acceder al volumen y/o obtener información sobre el mismo. Asegúrese de que el volumen seleccionado existe, de que no está siendo usado por el sistema o alguna aplicación, que tiene permisos de lectura/escritura sobre el volumen, y que no está protegido contra escritura.\n\nSi el problema continúa, podría ayudar seguir los pasos siguientes.</entry>
-    <entry lang="es" key="INPLACE_ENC_GENERIC_ERR_ALT_STEPS">Un error evitó que VeraCrypt cifrara la partición. Intente arreglar cualquier problema reportado previamente y reinténtelo. Si el problema continúa, podría ayudar seguir los siguientes pasos.</entry>
-    <entry lang="es" key="INPLACE_ENC_GENERIC_ERR_RESUME">Un error evitó que VeraCrypt continuara el proceso de cifrado de la partición.\n\nIntente arreglar cualquier problema reportado previamente y trate de continuar el proceso de nuevo. Recuerde que el volumen no puede montarse hasta que haya sido cifrado por completo.</entry>
+    <entry lang="es" key="INPLACE_ENC_GENERIC_ERR_ALT_STEPS">Un error evitó que VeraCrypt cifrara la partición. Por favor intente arreglar cualquier problema reportado previamente y reinténtelo. Si el problema continúa, podría ayudar el seguir los siguientes pasos.</entry>
+    <entry lang="es" key="INPLACE_ENC_GENERIC_ERR_RESUME">Un error evitó que VeraCrypt continuara el proceso de cifrado/descifrado de la partición/volumen.\n\nPor favor intente arreglar cualquier problema reportado previamente y trate de continuar el proceso de nuevo. Recuerde que el volumen no puede montarse hasta que haya sido cifrado o descifrado por completo.</entry>
     <entry lang="es" key="INPLACE_DEC_GENERIC_ERR">Ha ocurrido un error durante el proceso descifrado del volumen. Por favor, trate de solucionar los problemas antes indicados y reintente nuevamente.</entry>
     <entry lang="es" key="CANT_DISMOUNT_OUTER_VOL">Error: ¡No se puede desmontar el volumen externo!\n\nEl volumen no puede ser desmontado si contiene carpetas o archivos que estén siendo usados por el sistema o una aplicación.\n\nCierre los programas que puedan estar usando las carpetas o archivos del volumen y pulse Reintentar.</entry>
     <entry lang="es" key="CANT_GET_OUTER_VOL_INFO">Error: ¡No se puede obtener información acerca del volumen externo! La creación del volumen no puede continuar.</entry>
@@ -889,14 +889,14 @@
     <entry lang="es" key="INSTALLING_DRIVER">Instalando el controlador de dispositivo VeraCrypt</entry>
     <entry lang="es" key="STOPPING_DRIVER">Deteniendo el controlador de dispositivo VeraCrypt</entry>
     <entry lang="es" key="REMOVING_DRIVER">Desinstalando el controlador de dispositivo VeraCrypt</entry>
-    <entry lang="es" key="COM_REG_FAILED">Falló el registro de la librería de soporte del Control de Cuentas de Usuario.</entry>
-    <entry lang="es" key="COM_DEREG_FAILED">Falló el des-registro de la librería de soporte del Control de Cuentas de Usuario.</entry>
+    <entry lang="es" key="COM_REG_FAILED">Falló inclusión en el registro de la biblioteca de soporte del Control de Cuentas de Usuario.</entry>
+    <entry lang="es" key="COM_DEREG_FAILED">Falló la exclusión del registro de la biblioteca de soporte del Control de Cuentas de Usuario.</entry>
     <entry lang="es" key="TRAVELER_LIMITATIONS_NOTE">Nota sobre el modo portable:\n\nRecuerde que el sistema operativo requiere que los controladores sean registrados con él antes de que puedan ser iniciados. Por tanto, el controlador VeraCrypt no es (ni puede ser) totalmente portable (mientras que las aplicaciones VeraCrypt sí lo son, no tienen que ser instaladas o registradas con el sistema operativo). Recuerde también que VeraCrypt necesita un controlador que proporcione cifrado/descifrado transparente al vuelo.</entry>
-    <entry lang="es" key="TRAVELER_UAC_NOTE">Recuerde que si decide ejecutar VeraCrypt en modo portable (en lugar de ejecutar una copia instalada de VeraCrypt), el sistema le pedirá permiso para ejecutar VeraCrypt (ventana del Control de Cuentas de Usuario) cada vez que intente abrirlo.\n\nLa razón es que cuando ejecuta VeraCrypt en modo portable, VeraCrypt necesita cargar e iniciar el controlador de dispositivo VeraCrypt, el cual es necesario para proporcionar cifrado/descifrado claro al vuelo, y los usuarios sin privilegios de administrador no pueden iniciar controladores de dispositivo en Windows. Por tanto, el sistema le pedirá permiso para ejecutar VeraCrypt con privilegios de administrador.\n\nTenga en cuenta que si instala VeraCrypt en el sistema (en lugar de ejecutarlo en modo portable) el sistema NO le pedirá permiso para ejecutar VeraCrypt cada vez que intente abrirlo.\n\n¿Seguro que desea extraer los archivos?</entry>
+    <entry lang="es" key="TRAVELER_UAC_NOTE">Recuerde que si decide ejecutar VeraCrypt en modo portable (en lugar de ejecutar una copia instalada de VeraCrypt), el sistema le pedirá permiso para ejecutar VeraCrypt (ventana del Control de Cuentas de Usuario) cada vez que intente abrirlo.\n\nLa razón es que cuando ejecuta VeraCrypt en modo portable, VeraCrypt necesita cargar e iniciar el controlador de dispositivo VeraCrypt, el cual es necesario para proporcionar cifrado/descifrado transparente al vuelo, y los usuarios sin privilegios de administrador no pueden iniciar controladores de dispositivo en Windows. Por lo tanto, el sistema le pedirá permiso para ejecutar VeraCrypt con privilegios de administrador (ventana CCU).\n\nTenga en cuenta que si instala VeraCrypt en el sistema (en lugar de ejecutarlo en modo portable), el sistema NO le pedirá permiso para ejecutar VeraCrypt cada vez que intente abrirlo.\n\n¿Seguro que desea extraer los archivos?</entry>
     <entry lang="es" key="CONTAINER_ADMIN_WARNING">AVISO: este Asistente de Creación de Volúmenes tiene privilegios de administrador.\n\nSu nuevo volumen será creado con permisos que no le permitirán escribir en el volumen cuando esté montado. Si quiere evitarlo, cierre este Asistente de Creación de Volúmenes y abra uno nuevo sin privilegios de administrador.\n\n¿Desea cerrar este Asistente de Creación de Volúmenes?</entry>
     <entry lang="es" key="CANNOT_DISPLAY_LICENSE">Error: No se puede mostrar la licencia.</entry>
     <entry lang="es" key="OUTER_VOL_WRITE_PREVENTED">Externo(!)</entry>
-    <entry lang="es" key="DAYS">dias</entry>
+    <entry lang="es" key="DAYS">días</entry>
     <entry lang="es" key="HOURS">horas</entry>
     <entry lang="es" key="MINUTES">minutos</entry>
     <entry lang="es" key="SECONDS">s</entry>
@@ -937,8 +937,8 @@
     <entry lang="es" key="ENTER_HIDDEN_VOL_PASSWORD">Introduzca contraseña para el volumen oculto</entry>
     <entry lang="es" key="ENTER_HEADER_BACKUP_PASSWORD">Introduzca contraseña para la cabecera almacenada en archivo de respaldo</entry>
     <entry lang="es" key="KEYFILE_CREATED">Se ha creado con éxito el archivo-llave.</entry>
-    <entry lang="es" key="KEYFILE_INCORRECT_NUMBER">El número de ficheros-llave que proporcionó es inválido.</entry>
-    <entry lang="es" key="KEYFILE_INCORRECT_SIZE">El tamaño del fichero-llave de estar comprendido entre 64 y 1048576 bytes.</entry>
+    <entry lang="es" key="KEYFILE_INCORRECT_NUMBER">El número de archivos-clave que proporcionó es inválido.</entry>
+    <entry lang="es" key="KEYFILE_INCORRECT_SIZE">El tamaño del archivo-clave debe estar comprendido entre 64 y 1048576 bytes.</entry>
     <entry lang="es" key="KEYFILE_EMPTY_BASE_NAME">Por favor, introduzca un nombre para que se genere el fichero-llave</entry>
     <entry lang="es" key="KEYFILE_INVALID_BASE_NAME">El nombre base del/de los fichero(s)-llave es inválido</entry>
     <entry lang="es" key="KEYFILE_ALREADY_EXISTS">El fichero-llave '%s' ya existe.\n¿Quiere sobrescribirlo? Se detendrá el proceso si responde No.</entry>
@@ -955,7 +955,7 @@
     <entry lang="es" key="HEADER_RESTORE_INTERNAL">Restaurar la cabecera de volumen desde la copia de seguridad insertada en el volumen</entry>
     <entry lang="es" key="HEADER_RESTORE_EXTERNAL">Restaurar la cabecera de volumen desde un archivo de copia de seguridad externo</entry>
     <entry lang="es" key="HEADER_BACKUP_SIZE_INCORRECT">El tamaño del archivo de copia de seguridad de la cabecera del volumen es incorrecto.</entry>
-    <entry lang="es" key="VOLUME_HAS_NO_BACKUP_HEADER">No hay ninguna copia de seguridad insertada en este volumen (recuerde que sólo los volúmenes creados por VeraCrypt 6.0 o posterior contienen copias de seguridad de cabecera insertadas).</entry>
+    <entry lang="es" key="VOLUME_HAS_NO_BACKUP_HEADER">No hay ninguna copia de seguridad de cabecera insertada en este volumen (recuerde que sólo los volúmenes creados por VeraCrypt 6.0 o posterior contienen copias de seguridad de cabecera insertadas).</entry>
     <entry lang="es" key="BACKUP_HEADER_NOT_FOR_SYS_DEVICE">Está intentando realizar copias de seguridad de la cabecera de la partición/unidad del sistema. Esto no está permitido. Las operaciones de copia de seguridad o restauración relacionadas con la partición/unidad del sistema sólo se pueden realizar usando el Disco de Rescate VeraCrypt.\n\n¿Desea crear un Disco de Rescate VeraCrypt?</entry>
     <entry lang="es" key="RESTORE_HEADER_NOT_FOR_SYS_DEVICE">Está intentando restaurar la cabecera de un volumen virtual VeraCrypt pero ha seleccionado la partición/unidad del sistema. Esto no está permitido. Las operaciones de copia de seguridad o restauración relacionadas con la partición/unidad del sistema sólo se pueden realizar usando el Disco de Rescate VeraCrypt.\n\n¿Desea crear un Disco de Rescate VeraCrypt?</entry>
     <entry lang="es" key="RESCUE_DISK_NON_WIZARD_CREATION_SELECT_PATH">Después de pulsar Aceptar, seleccionará un nombre de archivo para la nueva imagen del Disco de Rescate VeraCrypt y la ubicación donde desea colocarla.</entry>
@@ -963,9 +963,9 @@
     <entry lang="es" key="RESCUE_DISK_NON_WIZARD_CREATION_WIN_ISOBURN">La imagen del Disco de Rescate ha sido creada y almacenada en este archivo:\n%s\n\nAhora hay que grabar dicha imagen en un CD o DVD.\n\n¿Desea ejecutar el Grabador de Imágenes de Disco de Windows?\n\nNota: tras grabar el Disco de Rescate, seleccione 'Sistema' &gt; 'Verificar Disco de Rescate' para verificar que ha sido grabado correctamente.</entry>
     <entry lang="es" key="RESCUE_DISK_NON_WIZARD_CHECK_INSERT">Por favor inserte su Disco de Rescate VeraCrypt y presione Aceptar para verificarlo.</entry>
     <entry lang="es" key="RESCUE_DISK_NON_WIZARD_CHECK_PASSED">El Disco de Rescate VeraCrypt ha sido verificado con éxito.</entry>
-    <entry lang="es" key="RESCUE_DISK_NON_WIZARD_CHECK_FAILED">No se puede verificar el Disco de Rescate ha sido grabado correctamente.\n\nSi ha grabado el Disco de Rescate, expulse e inserte de nuevo el CD/DVD; después verifique otra vez. Si no funciona, pruebe con otro software de grabación y/o otro CD/DVD.\n\nSi está intentando verificar un Disco de Rescate VeraCrypt creado para otra clave maestra, contraseña, etc., por favor recuerde que ese Disco de Rescate fallará siempre esta verificación. Para crear un nuevo Disco de Rescate completamente compatible con su configuración actual, seleccione 'Sistema' &gt; 'Crear Disco de Rescate'.</entry>
+    <entry lang="es" key="RESCUE_DISK_NON_WIZARD_CHECK_FAILED">No se puede verificar que el Disco de Rescate haya sido grabado correctamente.\n\nSi ha grabado el Disco de Rescate, por favor expulse e inserte de nuevo el CD/DVD; después verifique otra vez. Si no funciona, por favor pruebe con otro software de grabación y/u otro CD/DVD.\n\nSi está intentando verificar un Disco de Rescate VeraCrypt creado para otra clave maestra, contraseña, etc., por favor recuerde que ese Disco de Rescate fallará siempre esta verificación. Para crear un nuevo Disco de Rescate completamente compatible con su configuración actual, seleccione 'Sistema' &gt; 'Crear Disco de Rescate'.</entry>
     <entry lang="es" key="RESCUE_DISK_ISO_IMAGE_CHECK_PASSED">La imagen del Disco de Rescate de VeraCrypt ha sido verificado con éxito.</entry>
-    <entry lang="es" key="RESCUE_DISK_ISO_IMAGE_CHECK_FAILED">La verificación de la imagen del Disco de Rescate ha fallado.\n\nSi trataba de verificar una imagen del Disco de Rescate de VeraCrypt creada para una llave maestra, contraseña, salt, etc. diferentes, por favor, sea consciente que dicha imagen de Disco de Rescate de VeraCrypt siempre fallará esta verificación. Para crear un nuevo Disco de Rescate de VeraCrypt totalmente compatible con la configuración actual, seleccione 'Sistema' > 'Crear Disco de Rescate'.</entry>
+    <entry lang="es" key="RESCUE_DISK_ISO_IMAGE_CHECK_FAILED">La verificación de la imagen del Disco de Rescate ha fallado.\n\nSi trataba de verificar una imagen del Disco de Rescate de VeraCrypt creada para una llave maestra, contraseña, sal, etc. diferentes, por favor, sea consciente que dicha imagen de Disco de Rescate de VeraCrypt siempre fallará esta verificación. Para crear un nuevo Disco de Rescate de VeraCrypt totalmente compatible con la configuración actual, seleccione 'Sistema' &gt; 'Crear Disco de Rescate'.</entry>
     <entry lang="es" key="ERROR_CREATING_RESCUE_DISK">Error creando Disco de Rescate VeraCrypt.</entry>
     <entry lang="es" key="CANNOT_CREATE_RESCUE_DISK_ON_HIDDEN_OS">No se puede crear un Disco de Rescate VeraCrypt cuando un sistema operativo oculto se está ejecutando.\n\nPara crear un Disco de Rescate VeraCrypt, arranque el sistema operativo señuelo y seleccione 'Sistema' &gt; 'Crear Disco de Rescate'.</entry>
     <entry lang="es" key="RESCUE_DISK_CHECK_FAILED">No se puede verificar que el Disco de Rescate ha sido grabado correctamente.\n\nSi ha grabado el Disco de Rescate, expulse e inserte de nuevo el CD/DVD; después haga clic en Siguiente para reintentarlo. Si no funciona, pruebe otro medio%s.\n\nSi no ha grabado aún el Disco de Rescate, hágalo y pulse Siguiente.\n\nSi está intentando verificar un Disco de Rescate VeraCrypt creado antes de iniciar este asistente, tenga en cuenta que dicho Disco de Rescate no se puede usar, porque fue creado para una clave maestra diferente. Necesita grabar el Disco de Rescate generado recientemente.</entry>
@@ -973,7 +973,7 @@
     <entry lang="es" key="SYSTEM_FAVORITES_DLG_TITLE">VeraCrypt - Volúmenes Favoritos del Sistema</entry>
     <entry lang="es" key="SYS_FAVORITES_HELP_LINK">¿Qué son los volúmenes favoritos del sistema?</entry>
     <entry lang="es" key="SYS_FAVORITES_REQUIRE_PBA">La partición/unidad del sistema no parece estar cifrada.\n\nLos volúmenes favoritos del sistema sólo pueden ser montados usando una contraseña de autenticación de pre-arranque. Por tanto, para habilitar el uso de los volúmenes favoritos del sistema, es necesario cifrar la partición/unidad del sistema primero.</entry>
-    <entry lang="es" key="DISMOUNT_FIRST">Desmonte el volumen antes de continuar.</entry>
+    <entry lang="es" key="DISMOUNT_FIRST">Por favor desmonte el volumen antes de continuar.</entry>
     <entry lang="es" key="CANNOT_SET_TIMER">Error: No se puede establecer el temporizador.</entry>
     <entry lang="es" key="IDPM_CHECK_FILESYS">Comprobar Sistema de Archivos</entry>
     <entry lang="es" key="IDPM_REPAIR_FILESYS">Reparar Sistema de Archivos</entry>
@@ -981,7 +981,7 @@
     <entry lang="es" key="IDPM_ADD_TO_SYSTEM_FAVORITES">Añadir a Favoritos del Sistema</entry>
     <entry lang="es" key="IDPM_PROPERTIES">P&amp;ropiedades</entry>
     <entry lang="es" key="HIDDEN_VOL_PROTECTION">Volumen Oculto Protegido</entry>
-    <entry lang="es" key="NOT_APPLICABLE_OR_NOT_AVAILABLE">N/A</entry>
+    <entry lang="es" key="NOT_APPLICABLE_OR_NOT_AVAILABLE">N/D</entry>
     <entry lang="es" key="UISTR_YES">Sí</entry>
     <entry lang="es" key="UISTR_NO">No</entry>
     <entry lang="es" key="UISTR_DISABLED">Deshabilitado</entry>
@@ -995,7 +995,7 @@
     <entry lang="es" key="UNSUPPORTED_CHARS_IN_PWD">Error: La contraseña debe contener solamente caracteres ASCII.\n\nIntroducir otros caracteres en la contraseña puede hacer que sea imposible montar el volumen si la configuración de su sistema cambia.\n\nLos  siguientes caracteres están permitidos:\n\n  ! " # $ % &amp; ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; &lt; = &gt; ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \\ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~</entry>
     <entry lang="es" key="UNSUPPORTED_CHARS_IN_PWD_RECOM">AVISO: La contraseña contiene caracteres ajenos a ASCII. Esto puede causar que sea imposible montar el volumen si la configuración de su sistema cambia.\n\nDebe sustituir todos los caracteres no-ASCII en la contraseña por caracteres ASCII. Haga clic  en 'Volúmenes' -&gt;  'Cambiar Contraseña del Volumen'.\n\nLos siguientes  caracteres son ASCII:\n\n  ! " # $ % &amp; ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; &lt; = &gt; ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \\ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~</entry>
     <entry lang="es" key="EXE_FILE_EXTENSION_CONFIRM">AVISO: Recomendamos que evite extensiones de archivo que son usadas para archivos ejecutables (como .exe, .sys o .dll) y otras extensiones problemáticas similares. Usar estas extensiones hace que Windows y el software antivirus interfiera con el contenedor, lo que afecta negativamente el rendimiento del volumen y puede causar problemas serios.\n\nEs muy recomendable que elimine la extensión del archivo o la cambie (por ejemplo, a '.hc').\n\n¿Seguro que desea usar la extensión problemática?</entry>
-    <entry lang="es" key="EXE_FILE_EXTENSION_MOUNT_WARNING">AVISO: Este contenedor tiene una extensión que es usada por archivos ejecutables (como .exe, .sys o .dll) o alguna otra extensión que es igualmente problemática. Esto probablemente hará que Windows y el software antivirus interfiera con el contenedor, lo que afectará negativamente el rendimiento del volumen y puede causar otros problemas serios.\n\nEs muy recomendable que elimine la extensión del archivo del contenedor o la cambie (por ejemplo, a '.hc' después de desmontar el volumen.</entry>
+    <entry lang="es" key="EXE_FILE_EXTENSION_MOUNT_WARNING">AVISO: Este contenedor tiene una extensión que es usada por archivos ejecutables (como .exe, .sys o .dll) o alguna otra extensión que es igualmente problemática. Esto probablemente hará que Windows y el software antivirus interfiera con el contenedor, lo que afectará negativamente el rendimiento del volumen y puede causar otros problemas serios.\n\nEs muy recomendable que elimine la extensión del archivo del contenedor o la cambie (por ejemplo, a '.hc') después de desmontar el volumen.</entry>
     <entry lang="es" key="HOMEPAGE">Página Inicial</entry>
     <entry lang="es" key="LARGE_IDE_WARNING_XP">AVISO: Parece que no ha aplicado ningún Service Pack a su instalación Windows. ¡No debería escribir en discos IDE mayores de 128 GB bajo un Windows XP sin Service Pack 1 o posterior! Si lo hace, los datos del disco (no importa si se trata de un volumen VeraCrypt o no) podrían resultar corruptos. Tenga en cuenta que esto es una limitación de Windows, no un error de VeraCrypt.</entry>
     <entry lang="es" key="LARGE_IDE_WARNING_2K">AVISO: Parece que no ha aplicado Service Pack 3 o posterior a su instalación Windows. ¡No debería escribir en discos IDE mayores de 128 GB bajo un Windows 2000 sin Service Pack 3 o posterior! Si lo hace, los datos del disco (no importa si se trata de un volumen VeraCrypt o no) podrían resultar corruptos. Tenga en cuenta que esto es una limitación de Windows, no un error de VeraCrypt.\n\nNota: Podría necesitar habilitar el soporte LBA 48-bit en el registro: para más información, vea http://support.microsoft.com/kb/305098/EN-US</entry>
@@ -1005,7 +1005,7 @@
     <entry lang="es" key="FREE_SPACE_FOR_WRITING_TO_OUTER_VOLUME">AVISO: Si desea poder añadir más información al volumen externo en un futuro, debería considerar la elección de un tamaño menor para el volumen oculto.\n\n¿Desea continuar con el tamaño especificado?</entry>
     <entry lang="es" key="NO_VOLUME_SELECTED">No hay ningún volumen seleccionado.\n\nPulse 'Seleccionar dispositivo' o 'Seleccionar archivo' para elegir un volumen VeraCrypt.</entry>
     <entry lang="es" key="NO_SYSENC_PARTITION_SELECTED">No hay ninguna partición seleccionada.\n\nPulse 'Seleccionar Dispositivo' para seleccionar una partición desmontada que normalmente requiere autenticación de pre-arranque (por ejemplo, una partición ubicada en la unidad del sistema cifrada de otro sistema operativo, que no se esté ejecutando, o la partición del sistema cifrada de otro sistema operativo).\n\nNota: La partición seleccionada será montada como un volumen VeraCrypt normal sin autenticación de pre-arranque. Esto es útil p.e. para operaciones de reparación o copia de seguridad.</entry>
-    <entry lang="es" key="CONFIRM_SAVE_DEFAULT_KEYFILES">AVISO: Si se activa 'Archivos-llave por defecto', los volúmenes que no usen estos archivos-llave no se podrán montar. Por tanto, tras activar los archivos-llave por defecto, recuerde desactivar la casilla 'Usar archivos-llave' (bajo el cuadro de texto de la contraseña) al montar dichos volúmenes.\n\n¿Seguro que desea guardar los archivos-llave y ubicaciones seleccionados como predeterminados?</entry>
+    <entry lang="es" key="CONFIRM_SAVE_DEFAULT_KEYFILES">AVISO: Si se activa 'Archivos-clave por defecto', los volúmenes que no usen estos archivos-clave no se podrán montar. Por tanto, tras activar los archivos-clave por defecto, recuerde desactivar la casilla 'Usar archivos-clave' (bajo el cuadro de texto de la contraseña) al montar dichos volúmenes.\n\n¿Seguro que desea guardar los archivos-clave y ubicaciones seleccionadas como predeterminados?</entry>
     <entry lang="es" key="HK_AUTOMOUNT_DEVICES">Montar dispositivos autom.</entry>
     <entry lang="es" key="HK_DISMOUNT_ALL">Desmontar Todo</entry>
     <entry lang="es" key="HK_WIPE_CACHE">Borrar Caché</entry>
@@ -1033,7 +1033,7 @@
     <entry lang="es" key="WARN_PREF_AUTO_DISMOUNT_ON_POWER">AVISO: Cuando la batería esté baja, Windows puede no enviar los mensajes apropiados a las aplicaciones en ejecución cuando el ordenador esté entrando en modo de ahorro de energía. Por tanto, VeraCrypt podría no desmontar autom. los volúmenes correctamente.</entry>
     <entry lang="es" key="NONSYS_INPLACE_ENC_RESUME_PROMPT">Ha programado el proceso de cifrado de una partición/volumen. El proceso aún no ha sido completado.\n\n¿Desea continuar el proceso ahora?</entry>
     <entry lang="es" key="SYSTEM_ENCRYPTION_RESUME_PROMPT">Ha programado el proceso de cifrado o descifrado de la partición/unidad del sistema. El proceso aún no ha sido completado.\n\n¿Desea iniciar (continuar) el proceso ahora?</entry>
-    <entry lang="es" key="ASK_NONSYS_INPLACE_ENC_NOTIFICATION_REMOVAL">¿Desea que se le pregunte si quiere o no continuar los procesos actualmente programados de cifrado de particiones/volúmenes secundarios?</entry>
+    <entry lang="es" key="ASK_NONSYS_INPLACE_ENC_NOTIFICATION_REMOVAL">¿Desea que se le pregunte si quiere o no continuar los procesos actualmente programados de cifrado/descifrado de particiones/volúmenes secundarios?</entry>
     <entry lang="es" key="KEEP_PROMPTING_ME">Sí, continuar preguntándome</entry>
     <entry lang="es" key="DO_NOT_PROMPT_ME">No, no preguntarme</entry>
     <entry lang="es" key="NONSYS_INPLACE_ENC_NOTIFICATION_REMOVAL_NOTE">IMPORTANTE: Tenga en cuenta que puede continuar el proceso de cifrado de cualquier partición/volumen secundario seleccionando 'Volúmenes' &gt; 'Continuar Proceso Interrumpido' en el menú de la ventana principal de VeraCrypt.</entry>
@@ -1043,14 +1043,14 @@
     <entry lang="es" key="CHOOSE_ENCRYPT_OR_DECRYPT">VeraCrypt no tiene suficiente información para determinar si cifrar o descifrar.</entry>
     <entry lang="es" key="CHOOSE_ENCRYPT_OR_DECRYPT_FINALIZE_DECRYPT_NOTE">VeraCrypt no tiene suficiente información para determinar si cifrar o descifrar.\n\nNota: Si descifró la partición/unidad del sistema en el entorno de pre-arranque, puede ser necesario finalizar el proceso pulsando 'Descifrar'.</entry>
     <entry lang="es" key="NONSYS_INPLACE_ENC_REVERSE_INFO">Nota: Cuando está cifrando una partición/volumen no de sistema en línea y un error persistentemente evita que finalice el proceso, no será posible montar dicho volumen (y acceder a los datos almacenados en él) hasta que DESCIFRE el volumen completamente (es decir, el proceso inverso).\n\nSi necesita hacerlo, siga estos pasos:\n1) Salga de este asistente.\n2) En la ventana principal de VeraCrypt, seleccione 'Volúmenes' &gt; 'Continuar Proceso Interrumpido'.\n3) Elija 'Descifrar'.</entry>
-    <entry lang="es" key="NONSYS_INPLACE_ENC_DEFER_CONFIRM">¿Desea interrumpir y posponer el proceso de cifrado de la partición/volumen?\n\nNota: tenga en cuenta que el volumen no puede ser montado hasta que haya sido cifrado por completo. Podrá continuar el proceso de cifrado desde el punto en que éste se detuvo. Puede hacerlo, por ejemplo, seleccionando 'Volúmenes' &gt; 'Continuar Proceso Interrumpido' desde el menú de la ventana principal de VeraCrypt.</entry>
+    <entry lang="es" key="NONSYS_INPLACE_ENC_DEFER_CONFIRM">¿Desea interrumpir y posponer el proceso de cifrado/descifrado de la partición/volumen?\n\nNota: tenga en cuenta que el volumen no puede ser montado hasta que haya sido cifrado o descifrado por completo. Podrá continuar el proceso de cifrado/descifrado desde el punto en que éste se detuvo. Puede hacerlo, por ejemplo, seleccionando 'Volúmenes' &gt; 'Continuar Proceso Interrumpido' desde el menú de la ventana principal de VeraCrypt.</entry>
     <entry lang="es" key="SYSTEM_ENCRYPTION_DEFER_CONFIRM">¿Desea interrumpir y posponer el proceso de cifrado de la partición/unidad del sistema?\n\nNota: podrá continuar el proceso desde el punto en que éste se detuvo. Puede hacerlo, por ejemplo, seleccionando 'Sistema' &gt; 'Continuar Proceso Interrumpido' desde el menú de la ventana principal de VeraCrypt. Si desea revertir o terminar permanentemente el proceso de cifrado, seleccione 'Sistema' &gt; 'Descifrar Permanentemente Partición/Unidad del Sistema'.</entry>
     <entry lang="es" key="SYSTEM_DECRYPTION_DEFER_CONFIRM">¿Desea interrumpir y posponer el proceso de descifrado de la partición/unidad del sistema?\n\nNota: podrá continuar el proceso desde el punto en que éste se detuvo. Puede hacerlo, por ejemplo, seleccionando 'Sistema' &gt; 'Continuar Proceso Interrumpido' desde el menú de la ventana principal de VeraCrypt. Si desea revertir el proceso de descifrado (y empezar a cifrar) seleccione 'Sistema' &gt; 'Cifrar Partición/Unidad del Sistema'.</entry>
     <entry lang="es" key="FAILED_TO_INTERRUPT_SYSTEM_ENCRYPTION">Error: Ha fallado la interrupción del proceso de cifrado/descifrado de la partición/unidad del sistema.</entry>
     <entry lang="es" key="FAILED_TO_INTERRUPT_WIPING">Error: Ha fallado la interrupción del proceso de borrado.</entry>
     <entry lang="es" key="FAILED_TO_RESUME_SYSTEM_ENCRYPTION">Error: Ha fallado la continuación del proceso de cifrado/descifrado de la partición/unidad del sistema.</entry>
     <entry lang="es" key="FAILED_TO_START_WIPING">Error: Ha fallado el inicio del proceso de borrado.</entry>
-    <entry lang="es" key="INCONSISTENCY_RESOLVED">Inconsistencia resuelta.\n\n\n(Si reporta un error relacionado con esto, incluya en el reporte la siguiente información técnica:\n%hs)</entry>
+    <entry lang="es" key="INCONSISTENCY_RESOLVED">Inconsistencia resuelta.\n\n\n(Si reporta un error en conexión a esto, por favor incluya en el informe de error la siguiente información técnica:\n%hs)</entry>
     <entry lang="es" key="UNEXPECTED_STATE">Error: Estado inesperado.\n\n\n(Si reporta un error relacionado con esto, incluya en el reporte la siguiente información técnica:\n%hs)</entry>
     <entry lang="es" key="NO_SYS_ENC_PROCESS_TO_RESUME">No hay ningún proceso interrumpido de cifrado/descifrado de la partición/unidad que reanudar.\n\nNota: Si quiere reanudar un proceso interrumpido de cifrado/descifrado de una partición/volumen no de sistema, seleccione 'Volúmenes' &gt; 'Continuar Proceso Interrumpido'.</entry>
     <entry lang="es" key="HIDVOL_PROT_BKG_TASK_WARNING">AVISO: VeraCrypt en Segundo Plano está deshabilitado. Tras cerrar VeraCrypt, no será notificado si se impiden daños en el volumen oculto.\n\nNota: Puede cerrar el Segundo Plano en cualquier momento haciendo clic derecho en el icono de VeraCrypt en el área de notificación y seleccionando 'Salir'.\n\n¿Habilitar VeraCrypt en Segundo Plano?</entry>
@@ -1075,12 +1075,12 @@
     <entry lang="es" key="WINDOWS_NOT_ON_BOOT_DRIVE_ERROR">AVISO: Windows no parece estar instalado en la unidad desde la que él mismo arranca. Esto no está soportado.\n\nDebería continuar sólo si está seguro de que Windows está instalado en la unidad desde la que arranca.\n\n¿Desea continuar?</entry>
     <entry lang="es" key="TC_BOOT_LOADER_ALREADY_INSTALLED">PRECAUCIÓN: ¡El Cargador de Arranque VeraCrypt ya está instalado en su unidad del sistema!\n\nEs posible que otro sistema en su ordenador esté ya cifrado.\n\nAVISO: CONTINUAR CON EL CIFRADO DEL SISTEMA ACTUAL PUEDE HACE QUE OTROS SISTEMAS NO PUEDAN INICIARSE Y SUS DATOS SEAN INACCESIBLES.\n\n¿Seguro que desea continuar?</entry>
     <entry lang="es" key="SYS_LOADER_RESTORE_FAILED">Fallo al restaurar el cargador original del sistema.\n\nUse su Disco de Rescate VeraCrypt ('Opciones de Reparación' &gt; 'Restaurar cargador original del sistema') o un medio de instalación de Windows para reemplazar el Cargador de Arranque de VeraCrypt con el cargador del sistema de Windows.</entry>
-    <entry lang="es" key="SYS_LOADER_UNAVAILABLE_FOR_RESCUE_DISK">El cargador original del sistema no será guardado en el Disco de Rescate (causa probable: archivo de copia de seguridad perdido).</entry>
+    <entry lang="es" key="SYS_LOADER_UNAVAILABLE_FOR_RESCUE_DISK">El cargador del sistema original no será guardado en el Disco de Rescate (causa probable: archivo de copia de seguridad perdido).</entry>
     <entry lang="es" key="ERROR_MBR_PROTECTED">Fallo al escribir el sector MBR.\n\nSu BIOS puede estar configurada para proteger el sector MBR. Revise la configuración de su BIOS (pulsando F2, Delete, o Esc, despues de encender su ordenador) buscando la protección MBR/Antivirus.</entry>
-    <entry lang="es" key="BOOT_LOADER_FINGERPRINT_CHECK_FAILED">AVISO: ¡La verificación de la huella del cargador de arranque de VeraCrypt ha fallado!\nSu disco podría haber sido manipilado por un atacante (ataque "Evil Maid").\n\nEste aviso también se produce si ha restaurado el cargador de arranque de VeraCrypt usando un Disco de Rescate de VeraCrypt generado con una versión diferente de VeraCrypt.\n\nSe le recomienda que cambie su contraseña inmediatamente lo cual también restaurará el cargador de arranque de VeraCrypt. Se recomienda que reinstale VeraCrypt y tome medidas para evitar acceso a esta máquina desde entidades que no son de su confianza.</entry>
+    <entry lang="es" key="BOOT_LOADER_FINGERPRINT_CHECK_FAILED">AVISO: ¡La verificación de la huella dactilar del cargador de arranque de VeraCrypt ha fallado!\nSu disco podría haber sido manipulado por un atacante (ataque "Evil Maid").\n\nEste aviso también se produce si ha restaurado el cargador de arranque de VeraCrypt usando un Disco de Rescate de VeraCrypt generado con una versión diferente de VeraCrypt.\n\nSe le recomienda que cambie su contraseña inmediatamente lo cual también restaurará el cargador de arranque de VeraCrypt. Se recomienda que reinstale VeraCrypt y tome medidas para evitar el acceso a esta máquina de entidades no confiables.</entry>
     <entry lang="es" key="BOOT_LOADER_VERSION_INCORRECT_PREFERENCES">La versión requerida del Cargador de Arranque VeraCrypt no está instalada actualmente. Esto puede impedir que algunos ajustes se guarden.</entry>
     <entry lang="es" key="CUSTOM_BOOT_LOADER_MESSAGE_HELP">Nota: En algunas situaciones, quizá le interese evitar que alguien (un adversario) que esté viéndole iniciar el ordenador pueda saber que usa VeraCrypt. Las siguientes opciones lo permiten personalizando la pantalla del cargador de arranque de VeraCrypt. Si activa la primera opción, no se mostrará ningún texto al arrancar (ni siquiera al introducir una contraseña errónea). El ordenador parecerá estar "congelado" mientras puede escribir su contraseña. Además, puede mostrarse un mensaje personalizado para confundir al adversario. Por ejemplo, falsos mensajes de error como "No se ha encontrado sistema operativo" (mensaje que muestra el cargador de arranque de Windows si no encuentra partición de arranque de Windows). No obstante, recuerde que si el adversario puede analizar el contenido del disco duro, puede darse cuenta de que contiene el cargador de arranque de VeraCrypt.</entry>
-    <entry lang="es" key="CUSTOM_BOOT_LOADER_MESSAGE_PROMPT">AVISO: Tenga en cuenta que si activa esta opción, el cargador de arranque de VeraCrypt no mostrará ningún texto (ni siquiera si introduce una contraseña errónea). El ordenador parecerá "congelado" (sin responder) mientras ud. escribe su contraseña (el cursor NO se moverá ni aparecerá ningún asterisco al pulsar alguna tecla).\n\n¿Seguro que desea activar esta opción?</entry>
+    <entry lang="es" key="CUSTOM_BOOT_LOADER_MESSAGE_PROMPT">AVISO: Por favor tenga en cuenta que si activa esta opción, el cargador de arranque de VeraCrypt no mostrará ningún texto (ni siquiera si introduce una contraseña errónea). El ordenador parecerá "congelado" (sin responder) mientras ud. escribe su contraseña (el cursor NO se moverá ni aparecerá ningún asterisco al pulsar alguna tecla).\n\n¿Seguro que desea activar esta opción?</entry>
     <entry lang="es" key="SYS_PARTITION_OR_DRIVE_APPEARS_FULLY_ENCRYPTED">Su partición/unidad del sistema parece estar completamente cifrada.</entry>
     <entry lang="es" key="SYSENC_UNSUPPORTED_FOR_DYNAMIC_DISK">VeraCrypt no soporta cifrar una unidad del sistema que ha sido convertida en un disco dinámico.</entry>
     <entry lang="es" key="WDE_UNSUPPORTED_FOR_EXTENDED_PARTITIONS">La unidad del sistema contiene particiones extendidas (lógicas).\n\nPuede cifrar una unidad del sistema entera que contenga particiones extendidas sólo en Windows Vista y versiones posteriores de Windows. En Windows XP, puede cifrar la unidad del sistema entera si contiene únicamente particiones primarias.\n\nNota: se puede cifrar la partición del sistema en lugar de la unidad del sistema entera (y, además, puede crear volúmenes VeraCrypt alojados en cualquier partición secundaria en la unidad).</entry>
@@ -1097,7 +1097,7 @@
     <entry lang="es" key="DECOY_OS_REQUIREMENTS">Por razones de seguridad, si el sistema operativo actual requiere activación debe ser activado antes de continuar. Recuerde que el sistema operativo oculto será creado copiando el contenido de la partición del sistema a un volumen oculto (así que si este sistema operativo no está activado, el sistema operativo oculto tampoco lo estará). Para más información, vea la sección "Precauciones y Requisitos de Seguridad Concernientes a los Volúmenes Ocultos" en la Guía del Usuario de VeraCrypt.\n\nImportante: antes de continuar, asegúrese de haber leído dicha sección.\n\n\n¿Cumple el sistema operativo en ejecución con esta condición?</entry>
     <entry lang="es" key="CONFIRM_HIDDEN_OS_EXTRA_BOOT_PARTITION">Su sistema usa una partición de arranque adicional. VeraCrypt no soporta la hibernación en sistemas operativos ocultos que usen una partición de arranque adicional (los sistemas señuelo se pueden hibernar sin problemas).\n\nTenga en cuenta que la partición de arranque podría estar compartida por ambos sistemas, el señuelo y el oculto. Por tanto, para evitar filtraciones de datos y problemas al reanudar tras la hibernación, VeraCrypt debe impedir que el sistema operativo oculto escriba en la partición de arranque compartida y que hiberne.\n\n\n¿Desea continuar? Si selecciona 'No', se mostrarán instrucciones para eliminar la partición de arranque adicional.</entry>
     <entry lang="es" key="EXTRA_BOOT_PARTITION_REMOVAL_INSTRUCTIONS">\nLa partición de arranque adicional puede ser eliminada antes de instalar Windows. Para hacerlo, siga estos pasos:\n\n1) Arranque su disco de instalación de Windows.\n\n2) En la pantalla del instalador de Windows, haga clic en 'Instalar ahora' &gt; 'Personalizar (avanzada)'.\n\n3) Clic en 'Opciones de Dispositivo'.\n\n4) Seleccione la partición del sistema principal y bórrela pulsando 'Eliminar' y 'Aceptar'.\n\n5) Seleccione la partición 'Reservada del Sistema', pulse 'Extender' y aumente su tamaño hasta que se pueda instalar en ella el sistema operativo.\n\n6) Clic en 'Aplicar' y 'Aceptar'.\n\n7) Instale Windows en la partición 'Reservada del Sistema'.\n\n\nUn atacante podría preguntarle por qué eliminó la partición de arranque adicional, ud. puede responder que quería evitar cualquier posible filtración de datos en la partición de arranque no cifrada.\n\nNota: puede imprimir este texto pulsando el botón 'Imprimir'. Si guarda una copia de este texto o lo imprime (muy recomendable, salvo que su impresora almacene en su controlador interno copias de los documentos que imprime), debería destruir cualquier copia de este texto tras eliminar la partición de arranque adicional (de lo contrario, si una de estas copias fuera encontrada, indicaría que existe un sistema operativo oculto en este ordenador).</entry>
-    <entry lang="es" key="GAP_BETWEEN_SYS_AND_HIDDEN_OS_PARTITION">AVISO: Hay espacio no asignado entre la partición del sistema y la primera partición tras ella. Después de crear el sistema operativo oculto, no debe crear ninguna partición nueva en ese espacio sin asignar. De lo contrario, podría ser iposible arrancar el sistema operativo oculto (hasta que elimine esas particiones nuevas).</entry>
+    <entry lang="es" key="GAP_BETWEEN_SYS_AND_HIDDEN_OS_PARTITION">AVISO: Hay espacio no asignado entre la partición del sistema y la primera partición tras ella. Después de crear el sistema operativo oculto, no debe crear ninguna partición nueva en ese espacio sin asignar. De lo contrario, podría ser imposible arrancar el sistema operativo oculto (hasta que elimine esas particiones nuevas).</entry>
     <entry lang="es" key="ALGO_NOT_SUPPORTED_FOR_SYS_ENCRYPTION">Este algoritmo no está soportado actualmente para el cifrado del sistema.</entry>
     <entry lang="es" key="ALGO_NOT_SUPPORTED_FOR_TRUECRYPT_MODE">Este algoritmo no está soportado para modo TrueCrypt</entry>
     <entry lang="es" key="PIM_NOT_SUPPORTED_FOR_TRUECRYPT_MODE">Multiplicador de Iteraciones Personal (Personal Iterations Multiplier - PIM) no soportado para modo TrueCrypt.</entry>
@@ -1109,7 +1109,7 @@
     <entry lang="es" key="ALT_KEY_CHARS_NOT_FOR_SYS_ENCRYPTION">Como VeraCrypt cambió temporalmente la disposición de teclado al estándar de EEUU, no es posible escribir caracteres pulsando teclas mientras Alt derecho está pulsado. Sin embargo, puede escribir la mayoría de esos caracteres pulsando las teclas apropiadas mientras Mayúsculas está pulsada.</entry>
     <entry lang="es" key="KEYB_LAYOUT_CHANGE_PREVENTED">VeraCrypt impidió que se cambiara la disposición de teclado.</entry>
     <entry lang="es" key="KEYB_LAYOUT_SYS_ENC_EXPLANATION">Nota: La contraseña tendrá que escribirse en el entorno de pre-arranque (antes de que Windows se inicie) donde no están disponibles disposiciones de teclado distintas a la de EEUU. Por tanto, la contraseña debe ser escrita siempre usando la disposición de teclado EEUU estándar. Sin embargo, es importante recordar que NO es necesario un teclado de EEUU real. VeraCrypt automáticamente se asegura de que ud. pueda escribir la contraseña con seguridad (ahora y en el entorno de pre-arranque) incluso si NO tiene un teclado de EEUU.</entry>
-    <entry lang="es" key="RESCUE_DISK_INFO">Antes de cifrar la partición/unidad, debe crear un Disco de Rescate VeraCrypt (DRT) que sirve para los siguientes propósitos:\n\n- Restaurar el Cargador de Arranque VeraCrypt, clave maestra u otros datos críticos si resultan dañados (pero tenga en cuenta que tendrá que seguir introduciendo la contraseña correcta).\n\n- Si Windows resulta dañado y no arranca, el DRT permite descifrar permanentemente la partición/unidad antes de que Windows inicie.\n\n- El DRT contendrá una copia de seguridad del contenido actual de la primera pista de la unidad (normalmente, un cargador del sistema o un administrador de arranque) y le permitirá restaurarlo si es necesario.\n\nLa imagen ISO del DRT será creada en esta ubicación:</entry>
+    <entry lang="es" key="RESCUE_DISK_INFO">Antes de cifrar la partición/unidad, debe crear un Disco de Rescate VeraCrypt (DRV) que sirve para los siguientes propósitos:\n\n- Restaurar el Cargador de Arranque VeraCrypt, clave maestra u otros datos críticos si resultan dañados (pero tenga en cuenta que tendrá que seguir introduciendo la contraseña correcta).\n\n- Si Windows resulta dañado y no arranca, el DRV permite descifrar permanentemente la partición/unidad antes de que Windows inicie.\n\n- El DRV contendrá una copia de seguridad del contenido actual de la primera pista de la unidad (normalmente, un cargador del sistema o un administrador de arranque) y le permitirá restaurarlo si es necesario.\n\nLa imagen ISO del DRV será creada en esta ubicación:</entry>
     <entry lang="es" key="RESCUE_DISK_WIN_ISOBURN_PRELAUNCH_NOTE">Tras pulsar Aceptar, se lanzará el Grabador de Imágenes de Disco de Windows. Úselo para grabar la imagen ISO del Disco de Rescate VeraCrypt en un CD o DVD.\n\nDespués de hacerlo, vuelva al Asistente de Creación de Volumen VeraCrypt y siga sus instrucciones.</entry>
     <entry lang="es" key="RESCUE_DISK_BURN_INFO">La imagen del Disco de Rescate ha sido creada y almacenada en este archivo:\n%s\n\nAhora debe grabarla en un CD o DVD.\n\n%lsDespués de grabar el Disco de Rescate, pulse Siguiente para verificar que ha sido grabado correctamente.</entry>
     <entry lang="es" key="RESCUE_DISK_BURN_INFO_NO_CHECK">La imagen del Disco de Rescate ha sigo creada y almacenada en este archivo:\n%s\n\nAhora debería grabar la imagen a un CD/DVD o moverla a una ubicación segura para un uso posterior.\n\n%lsPulse Siguiente para continuar.</entry>
@@ -1152,7 +1152,7 @@
     <entry lang="es" key="SYSENC_MULTI_BOOT_OUTCOME_TITLE">Multi-Arranque</entry>
     <entry lang="es" key="CUSTOM_BOOT_MANAGERS_IN_MBR_UNSUPPORTED">VeraCrypt actualmente no soporta configuraciones multi-arranque cuando un cargador de arranque no-Windows está instalado en el MBR.\n\nSoluciones posibles:\n\n- Si usa un administrador de arranque para arrancar Windows y Linux, mueva el administrador (normalmente GRUB) desde el MBR a una partición. Luego inicie este asistente otra vez y cifre la partición/unidad del sistema. Recuerde que el Cargador de Arranque VeraCrypt se convertirá en su administrador de arranque primario y le permitirá lanzar el administrador original (p.e. GRUB) como su administrador de arranque secundario (pulsando Esc en la pantalla del Cargador de Arranque VeraCrypt) y así podrá arrancar Linux.</entry>
     <entry lang="es" key="WINDOWS_BOOT_LOADER_HINTS">Si el sistema operativo en ejecución está instalado en la partición de arranque, después de cifrarlo necesitará introducir la contraseña correcta incluso para iniciar cualquier otro sistema Windows no cifrado (ya que ambos compartirán un único cargador/administrador de arranque cifrado).\n\nPor el contrario, si el sistema operativo en ejecución no está instalado en la partición de arranque (o si el cargador/administrador de arranque de Windows no es usado por ningún otro sistema), después de cifrarlo no necesitará introducir la contraseña correcta para arrancar otros sistemas no cifrados -- sólo tendrá que pulsar Esc para iniciar el sistema no cifrado (si hay más de uno, tendrá que elegir cuál desea iniciar desde el menú del Administrador de Arranque VeraCrypt).\n\nNota: Normalmente, el primer sistema Windows instalado es el que está instalado en la partición de arranque.</entry>
-    <entry lang="es" key="SYSENC_PRE_DRIVE_ANALYSIS_TITLE">Cifrado del Área Protegida del Anfitrión</entry>
+    <entry lang="es" key="SYSENC_PRE_DRIVE_ANALYSIS_TITLE">Cifrado del Área Protegida del Alojamiento</entry>
     <entry lang="es" key="SYSENC_PRE_DRIVE_ANALYSIS_HELP">Al final de muchos dispositivos existe un área que normalmente está oculta al sistema operativo (estas áreas son llamadas Áreas Protegidas del Anfitrión, o Host Protected Areas). Sin embargo, algunos programas pueden leer y escribir datos de/a estas áreas.\n\nAVISO: Algunos fabricantes de ordenadores pueden usar estas áreas para almacenar herramientas y datos para RAID, recuperación del sistema, instalación del sistema, diagnóstico u otros propósitos. Si estas herramientas o datos deben ser accesibles antes de arrancar, el área oculta NO debería ser cifrada (elija 'No' a continuación).\n\n¿Desea que VeraCrypt detecte y cifre ese área oculta (si existe) al final de la unidad del sistema?</entry>
     <entry lang="es" key="SYSENC_TYPE_PAGE_TITLE">Tipo de Cifrado del Sistema</entry>
     <entry lang="es" key="SYSENC_NORMAL_TYPE_HELP">Seleccione esta opción si solamente quiere cifrar la partición del sistema o la unidad del sistema entera.</entry>
@@ -1161,7 +1161,7 @@
     <entry lang="es" key="SYSENC_HIDDEN_OS_REQ_CHECK_PAGE_TITLE">Sistema Operativo Oculto</entry>
     <entry lang="es" key="SYSENC_HIDDEN_OS_REQ_CHECK_PAGE_HELP">En los siguientes pasos, creará dos volúmenes VeraCrypt (externo y oculto) en la primera partición tras la partición del sistema. El oculto contendrá el sistema operativo (SO) oculto. VeraCrypt creará el SO oculto copiando el contenido de la partición del sistema (donde el SO en ejecución está instalado) al volumen oculto. Al volumen externo, ud. copiará algunos archivos sensibles pero que NO sean los que quiere ocultar. Estarán ahí por si alguien le obliga a revelar la contraseña para la partición del SO oculto. Puede revelar la contraseña para el volumen externo que la contiene (la existencia del SO oculto permanecerá en secreto).\n\nFinalmente, en la partición del SO en ejecución instalará un nuevo SO, llamado SO señuelo, y lo cifrará. No debe contener datos sensibles y estará ahí por si alguien le obliga a revelar su contraseña de autenticación de pre-arranque. En total habrá tres contraseñas. Dos de ellas pueden ser reveladas (para el SO señuelo y para el volumen externo). Si usa la tercera, se iniciará el SO oculto.</entry>
     <entry lang="es" key="SYSENC_DRIVE_ANALYSIS_TITLE">Detectando Sectores Ocultos</entry>
-    <entry lang="es" key="SYSENC_DRIVE_ANALYSIS_INFO">Espere mientras VeraCrypt está detectando posibles sectores ocultos al final de la unidad del sistema. Esto puede durar bastante tiempo.\n\nNota: En casos muy raros, en algunos ordenadores, el sistema puede dejar de responder durante este proceso de detección. Si esto ocurre, reinicie el ordenador, inicie VeraCrypt, repita los pasos anteriores pero sáltese el proceso de detección. Recuerde que este problema no está causado por un error en VeraCrypt.</entry>
+    <entry lang="es" key="SYSENC_DRIVE_ANALYSIS_INFO">Por favor espere mientras VeraCrypt está detectando posibles sectores ocultos al final de la unidad del sistema. Esto puede durar bastante tiempo.\n\nNota: En casos muy raros, en algunos ordenadores, el sistema puede dejar de responder durante este proceso de detección. Si esto ocurre, reinicie el ordenador, inicie VeraCrypt, repita los pasos anteriores pero sáltese el proceso de detección. Recuerde que este problema no está causado por un error en VeraCrypt.</entry>
     <entry lang="es" key="SYS_ENCRYPTION_SPAN_TITLE">Área a Cifrar</entry>
     <entry lang="es" key="SYS_ENCRYPTION_SPAN_WHOLE_SYS_DRIVE_HELP">Seleccione esta opción si desea cifrar la unidad en la que el sistema Windows en ejecución está instalado. La unidad entera, con todas sus particiones, será cifrada excepto la primera pista en la que residirá el Cargador de Arranque VeraCrypt. Cualquiera que desee acceder a un sistema o archivo almacenado en la unidad, deberá introducir la contraseña correcta cada vez que se inice el sistema. Esta opción no puede ser usada para cifrar una unidad secundaria o externa si Windows no está instalado ni se arranca desde ella.</entry>
     <entry lang="es" key="COLLECTING_RANDOM_DATA_TITLE">Recopilando Datos Aleatorios</entry>
@@ -1184,10 +1184,10 @@
     <entry lang="es" key="SYS_ENCRYPTION_PRETEST_INFO2_PORTION_3">- Si los pasos anteriores no funcionan o si la pantalla del Cargador de Arranque VeraCrypt no aparece (antes de que se inicie Windows), introduzca el Disco de Rescate VeraCrypt en su unidad CD/DVD y reinicie su ordenador. Si la pantalla del Disco de Rescate VeraCrypt no aparece (o si no ve 'Opciones de Reparación' en la sección 'Controles de Teclado' de la pantalla del Disco de Rescate), es posible que su BIOS esté configurada para arrancar desde discos duros antes que desde unidades CD/DVD. Si ése es el caso, reinicie su ordenador, pulse F2 o Supr (en cuanto vea la pantalla de inicio de la BIOS), y espere hasta que aparezca una pantalla de configuración BIOS. Si dicha pantalla de configuración no aparece, reinicie el ordenador otra vez y comience a pulsar F2 o Supr reiteradamente en cuanto se reinicie el ordenador. Cuando aparezca una pantalla de configuración de la BIOS, configure su BIOS para que arranque desde la unidad de CD/DVD primero (para obtener información sobre cómo hacerlo, vaya a la documentación de su BIOS/placa base o contacte con el equipo de soporte técnico del fabricante para obtener asistencia). Luego reinicie su ordenador. La pantalla del Disco de Rescate VeraCrypt debería aparecer ahora. En dicha pantalla, seleccione 'Opciones de Reparación' pulsando F8 en su teclado. Desde el menú 'Opciones de Reparación', seleccione 'Restaurar cargador original del sistema'. Luego extraiga el Disco de Rescate de su unidad CD/DVD y reinicie su ordenador. Windows debería iniciar con normalidad (siempre que no esté cifrado).\n\n</entry>
     <entry lang="es" key="SYS_ENCRYPTION_PRETEST_INFO2_PORTION_4">Tenga en cuenta que los pasos anteriores NO funcionarán si la partición/unidad del sistema está cifrada (nadie puede iniciar Windows o acceder a datos cifrados en la unidad sin la contraseña correcta incluso si se siguen los pasos anteriores).\n\n\nRecuerde que incluso si pierde su Disco de Rescate VeraCrypt y un atacante lo encuentra, éste NO será capaz de descifrar la partición o unidad del sistema sin la contraseña correcta.</entry>
     <entry lang="es" key="SYS_ENCRYPTION_PRETEST_RESULT_TITLE">Prueba Completada</entry>
-    <entry lang="es" key="SYS_ENCRYPTION_PRETEST_RESULT_INFO">La prueba ha sido completada con éxito.\n\nAVISO: Tenga en cuenta que si el suministro de energía es interrumpido repentinamente mientras se cifran los datos existentes sin pérdida de información, o si el sistema operativo falla debido a un error de software o hardware mientras VeraCrypt cifra los datos, podrían corromperse o perderse porciones de los datos. Por tanto, antes de empezar a cifrar, asegúrese de que posee copias de seguridad de los archivos que desea cifrar. Si no las tiene, copie los archivos ahora (puede hacer clic en Aplazar, hacer la copia, ejecutar de nuevo VeraCrypt y seleccionar 'Sistema' &gt; 'Continuar proceso interrumpido' para iniciar el cifrado).\n\nCuando esté listo, pulse Cifrar para empezar.</entry>
+    <entry lang="es" key="SYS_ENCRYPTION_PRETEST_RESULT_INFO">La prueba ha sido completada con éxito.\n\nAVISO: Tenga en cuenta que si el suministro de energía es interrumpido repentinamente mientras se cifran los datos existentes, o si el sistema operativo falla debido a un error de software o hardware mientras VeraCrypt cifra los datos, podrían corromperse o perderse porciones de los datos. Por tanto, antes de empezar a cifrar, asegúrese de que posee copias de seguridad de los archivos que desea cifrar. Si no las tiene, copie los archivos ahora (puede hacer clic en Aplazar, hacer la copia, ejecutar de nuevo VeraCrypt y seleccionar 'Sistema' &gt; 'Continuar proceso interrumpido' para iniciar el cifrado).\n\nCuando esté listo, pulse Cifrar para empezar.</entry>
     <entry lang="es" key="SYSENC_ENCRYPTION_PAGE_INFO">Puede hace clic en Pausa o en Aplazar en cualquier momento para interrumpir el proceso de cifrado o descifrado, salir de este asistente, reiniciar o apagar su ordenador, y luego continuar el proceso desde el punto en que se detuvo. Para evitar ralentizaciones cuando el sistema o alguna aplicación lea o escriba en la unidad del sistema, VeraCrypt automáticamente espera hasta que los datos sean leídos o escritos (ver Estado a continuación) y luego continúa cifrando o descifrando.</entry>
     <entry lang="es" key="NONSYS_INPLACE_ENC_ENCRYPTION_PAGE_INFO">\n\nPuede hacer clic en Pausa o en Aplazar en cualquier momento para interrumpir el proceso de cifrado, salir de este asistente, reiniciar o apagar su ordenador, y luego continuar el proceso desde el punto en que se detuvo. Recuerde que el volumen no puede montarse hasta que esté cifrado por completo.</entry>
-    <entry lang="es" key="NONSYS_INPLACE_DEC_DECRYPTION_PAGE_INFO">\n\nPuede hacer clic en Pausar o Diferir en cualquier momento para interrumpir el proceso de descifrado, salir de este asistente, reiniciar o apagar el equipo y posteriormente continuar el proceso, que proseguirá en el punto en el que fue detenido. Sea consciente de que el volumen no se podrá montar hasta que el volumen haya sido completamente descifrado.</entry>
+    <entry lang="es" key="NONSYS_INPLACE_DEC_DECRYPTION_PAGE_INFO">\n\nPuede hacer clic en Pausar o Diferir en cualquier momento para interrumpir el proceso de descifrado, salir de este asistente, reiniciar o apagar el equipo y posteriormente continuar el proceso, que proseguirá desde el punto en el que fue detenido. Sea consciente que el volumen no se podrá montar hasta que el mismo haya sido completamente descifrado.</entry>
     <entry lang="es" key="SYSENC_HIDDEN_OS_INITIAL_INFO_TITLE">Sistema Oculto Iniciado</entry>
     <entry lang="es" key="SYSENC_HIDDEN_OS_WIPE_INFO_TITLE">Sistema Original</entry>
     <entry lang="es" key="SYSENC_HIDDEN_OS_WIPE_INFO">Windows crea (normalmente sin su conocimiento ni su consentimiento) varios archivos temporales, logs, etc. en la partición del sistema. También guarda el contenido de la RAM en archivos de hibernación y paginación ubicados en la partición del sistema. Por tanto, si un adversario analiza archivos almacenados en la partición donde reside el sistema original (del que es una copia el sistema oculto), podría hallar, por ejemplo, que ud. usó el asistente de VeraCrypt en modo de creación de sistema oculto (lo que podría indicar la existencia de un sistema operativo oculto en su ordenador).\n\nPara evitar estos problemas, VeraCrypt borrará el contenido entero de la partición donde reside el sistema original. Acto seguido, para lograr la negación plausible, tendrá que instalar un nuevo sistema en la partición y cifrarla. Con esto creará el sistema señuelo y el proceso de creación del sistema operativo oculto estará completo.</entry>
@@ -1227,14 +1227,14 @@
     <entry lang="es" key="HIDDEN_OS_CREATION_PREINFO_HELP">En los siguientes pasos, VeraCrypt creará el sistema operativo oculto copiando el contenido de la partición del sistema al volumen oculto (los datos que se copien serán cifrados al vuelo con una clave de cifrado diferente de la que se usará para el sistema operativo señuelo).\n\nTenga en cuenta que el proceso se realizará en el entorno de pre-arranque (antes del inicio de Windows) y puede tardar mucho en completarse; varias horas o incluso días (dependiendo del tamaño de la partición del sistema y del rendimiento de su ordenador).\n\nPodrá interrumpir el proceso, apagar su ordenador, iniciar el sistema operativo y luego continuar el proceso. No obstante, si lo interrumpe, el proceso de copiado tendrá que comenzar desde el principio (porque el contenido de la partición del sistema no debe cambiar durante la clonación).</entry>
     <entry lang="es" key="CONFIRM_CANCEL_HIDDEN_OS_CREATION">¿Desea cancelar el proceso entero de creación del sistema operativo oculto?\n\nNota: NO podrá continuar el proceso más tarde si lo cancela ahora.</entry>
     <entry lang="es" key="CONFIRM_CANCEL_SYS_ENC_PRETEST">¿Desea cancelar la prueba del cifrado del sistema?</entry>
-    <entry lang="es" key="BOOT_PRETEST_FAILED_RETRY">Ha fallado la prueba del cifrado del sistema VeraCrypt. ¿Desea intentarlo de nuevo?\n\nSi selecciona 'No', el componente de autenticación de pre-arranque será desinstalado.\n\nNotas:\n\n- Si el Cargador de Arranque VeraCrypt no le pidió que introdujera la contraseña antes de que Windows se iniciara, es posible que su sistema operativo no arranque desde la unidad en la que está instalado. Esto no está soportado.\n\n- Si usó un algoritmo de cifrado distinto a AES y la prueba falló (e introdujo la contraseña), la causa puede ser un controlador diseñado inapropiadamente. Seleccione 'No', y trate de cifrar la partición/unidad del sistema otra vez, pero use el algoritmo de cifrado AES (que tiene los requisitos de memoria más bajos).\n\n- Para más posibles causas y soluciones, vea https://www.veracrypt.fr/en/Troubleshooting.html</entry>
+    <entry lang="es" key="BOOT_PRETEST_FAILED_RETRY">Ha fallado la prueba del cifrado del sistema VeraCrypt. ¿Desea intentarlo de nuevo?\n\nSi selecciona 'No', el componente de autenticación de pre-arranque será desinstalado.\n\nNotas:\n\n- Si el Cargador de Arranque VeraCrypt no le pidió que introdujera la contraseña antes de que Windows se iniciara, es posible que su sistema operativo no arranque desde la unidad en la que está instalado. Esto no está soportado.\n\n- Si usó un algoritmo de cifrado distinto a AES y la prueba falló (e introdujo la contraseña), la causa puede ser un controlador diseñado inapropiadamente. Seleccione 'No', y trate de cifrar la partición/unidad del sistema otra vez, pero use el algoritmo de cifrado AES (que tiene los requisitos de memoria más bajos).\n\n- Para más causas y soluciones posibles, vea https://www.veracrypt.fr/en/Troubleshooting.html</entry>
     <entry lang="es" key="SYS_DRIVE_NOT_ENCRYPTED">La partición/unidad del sistema no parece estar cifrada (ni parcial ni completamente).</entry>
     <entry lang="es" key="SETUP_FAILED_BOOT_DRIVE_ENCRYPTED">Su partición/unidad del sistema está cifrada (parcial o completamente).\n\nDescifre por completo su partición/unidad del sistema antes de continuar. Para ello, seleccione 'Sistema' &gt; 'Descifrar Permanentemente la Partición/Unidad del Sistema' desde el menú de la ventana principal de VeraCrypt.</entry>
     <entry lang="es" key="SETUP_FAILED_BOOT_DRIVE_ENCRYPTED_DOWNGRADE">Si la partición/unidad del sistema está cifrada (parcial o completamente), no puede usar una versión anterior de VeraCrypt (pero puede actualizarlo o reinstalar la misma versión).</entry>
     <entry lang="es" key="SYS_ENCRYPTION_OR_DECRYPTION_IN_PROGRESS">Su partición/unidad del sistema está siendo actualmente cifrada, descifrada, o modificada de otra manera. Interrumpa el proceso de cifrado/descifrado/modificación (o espere a que termine) antes de continuar.</entry>
     <entry lang="es" key="SYSTEM_ENCRYPTION_IN_PROGRESS_ELSEWHERE">El Asistente de Creación de Volúmenes VeraCrypt ya está ejecutándose y está preparando o llevando a cabo el cifrado/descifrado de la partición/unidad del sistema. Antes de continuar, espere a que termine o ciérrelo. Si no puede cerrarlo, reinicie su ordenador antes de proceder.</entry>
     <entry lang="es" key="SYSTEM_ENCRYPTION_NOT_COMPLETED">El proceso de cifrado o descifrado de la partición/unidad del sistema no ha sido completado. Espere a que se complete antes de continuar.</entry>
-    <entry lang="es" key="ERR_ENCRYPTION_NOT_COMPLETED">Error: El proceso de cifrado de la partición/unidad del sistema no ha sido completado. Debe completarse primero.</entry>
+    <entry lang="es" key="ERR_ENCRYPTION_NOT_COMPLETED">Error: El proceso de cifrado de la partición/unidad no ha sido completado. Debe completarse primero.</entry>
     <entry lang="es" key="ERR_NONSYS_INPLACE_ENC_INCOMPLETE">Error: El proceso de cifrado de la partición/volumen no ha sido completado. Debe completarse primero.\n\nNota: para continuar el proceso, seleccione 'Volúmenes' &gt; 'Continuar Proceso Interrumpido' desde el menú de la ventana principal de VeraCrypt.</entry>
     <entry lang="es" key="ERR_SYS_HIDVOL_HEAD_REENC_MODE_WRONG">La contraseña es correcta, VeraCrypt ha descifrado con éxito la cabecera del volumen y detectado que éste es un volumen de sistema oculto. No obstante, no puede modificar la cabecera de un volumen de sistema oculto de esta forma.\n\nPara cambiar la contraseña de un volumen de sistema oculto, arranque el sistema operativo residente en dicho volumen, y luego seleccione 'Sistema' &gt; 'Cambiar Contraseña' desde el menú de la ventana principal de VeraCrypt.\n\nPara establecer el algoritmo de derivación de la clave de cabecera, arranque el sistema operativo oculto y seleccione 'Sistema' &gt; 'Establecer Algoritmo de Derivación de Clave de Cabecera'.</entry>
     <entry lang="es" key="CANNOT_DECRYPT_HIDDEN_OS">VeraCrypt no soporta el descifrado sin pérdida de datos de una partición de sistema oculto.\n\nNota: Si desea descifrar la partición del sistema señuelo, arranque el sistema señuelo y seleccione 'Sistema' &gt; 'Descifrar Permanentemente Partición/Unidad del Sistema' desde el menú de la ventana principal de VeraCrypt.</entry>
@@ -1269,23 +1269,23 @@
     <entry lang="es" key="PKCS11_MODULE_INIT_FAILED">Falló la inicialización de la librería de token de seguridad PKCS #11.\n\nAsegúrese de que la ruta y archivo especificados dirigen a una librería PKCS #11 válida. Para especificar una ruta y nombre de archivo para la librería PKCS #11, seleccione 'Configuración' &gt; 'Tokens de Seguridad'.</entry>
     <entry lang="es" key="PKCS11_MODULE_AUTO_DETECTION_FAILED">No se han encontrado librerías PKCS #11 en el directorio de sistema de Windows.\n\nAsegúrese de que haya instalada una librería PKCS #11 para su token de seguridad o tarjeta inteligente (esta librería puede ser suministrada con el token/tarjeta o puede descargarse desde la web del vendedor o de terceros). Si está instalado en otro directorio distinto al del sistema de Windows, pulse 'Seleccionar Librería' para localizar la librería (p.e. en la carpeta donde está instalado el software del token/tarjeta).</entry>
     <entry lang="es" key="NO_TOKENS_FOUND">No se ha encontrado ningún token de seguridad.\n\nAsegúrese de que su token está conectado y el controlador de dispositivo correcto está instalado.</entry>
-    <entry lang="es" key="TOKEN_KEYFILE_NOT_FOUND">No se ha encontrado archivo-llave del token de seguridad.</entry>
-    <entry lang="es" key="TOKEN_KEYFILE_ALREADY_EXISTS">Ya existe un archivo-llave de token de seguridad con el mismo nombre.</entry>
+    <entry lang="es" key="TOKEN_KEYFILE_NOT_FOUND">No se ha encontrado archivo-clave del token de seguridad.</entry>
+    <entry lang="es" key="TOKEN_KEYFILE_ALREADY_EXISTS">Ya existe un archivo-clave de token de seguridad con el mismo nombre.</entry>
     <entry lang="es" key="CONFIRM_SEL_FILES_DELETE">¿Desea borrar los archivos seleccionados?</entry>
-    <entry lang="es" key="INVALID_TOKEN_KEYFILE_PATH">Ruta no válida de archivo-llave de token de seguridad.</entry>
+    <entry lang="es" key="INVALID_TOKEN_KEYFILE_PATH">Ruta inválida de archivo-clave de token de seguridad.</entry>
     <entry lang="es" key="SECURITY_TOKEN_ERROR">Error de token de seguridad</entry>
     <entry lang="es" key="CKR_PIN_INCORRECT">Contraseña incorrecta para el token de seguridad.</entry>
     <entry lang="es" key="CKR_DEVICE_MEMORY">El token de seguridad no tiene suficiente memoria/espacio para la operación solicitada.\n\nSi está intentando importar un archivo-llave, debería seleccionar un archivo más pequeño o usar uno generado por VeraCrypt (seleccione 'Herramientas' &gt; 'Generador de Archivo-llave').</entry>
     <entry lang="es" key="ALL_TOKEN_SESSIONS_CLOSED">Todas las sesiones de token de seguridad abiertas han sido cerradas.</entry>
     <entry lang="es" key="SELECT_TOKEN_KEYFILES">Seleccione Archivos-llave de Token de Seguridad</entry>
-    <entry lang="es" key="TOKEN_SLOT_ID">Slot</entry>
+    <entry lang="es" key="TOKEN_SLOT_ID">Ranura</entry>
     <entry lang="es" key="TOKEN_NAME">Nombre del token</entry>
     <entry lang="es" key="TOKEN_DATA_OBJECT_LABEL">Nombre del archivo</entry>
     <entry lang="es" key="BOOT_PASSWORD_CACHE_KEYBOARD_WARNING">IMPORTANTE: Las contraseñas de autenticación de pre-arranque siempre son escritas con la disposición de teclado estándar de EEUU. Por tanto, podría ser imposible montar con contraseña de pre-arranque un volumen que use una contraseña escrita con cualquier otra disposición de teclado (esto no es un error de VeraCrypt). Para permitir que volúmenes así sean montados con contraseña de pre-arranque, siga estos pasos:\n\n1) Clic en 'Seleccionar Archivo' o 'Seleccionar Dispositivo' y seleccione el volumen.\n2) Seleccione 'Volúmenes' &gt; 'Cambiar Contraseña del Volumen'.\n3) Introduzca la contraseña actual para el volumen.\n4) Cambie la disposición de teclado a Inglés (EEUU) haciendo clic en la barra de Idioma en la barra de tareas de Windows y seleccionando 'EN Inglés (EEUU)'.\n5) En VeraCrypt, en el campo de la nueva contraseña, escriba la contraseña de pre-arranque.\n6) Confirme la contraseña escribiéndola en el campo de confirmación y pulse 'Aceptar'.\nAVISO: Tenga en mente que si sigue estos pasos, la contraseña del volumen tendrá que ser escrita siempre usando la disposición de teclado EEUU (que se aplica automáticamente sólo en el entorno de pre-arranque).</entry>
     <entry lang="es" key="SYS_FAVORITES_KEYBOARD_WARNING">Los volúmenes favoritos del sistema serán montados usando la contraseña de autenticación de pre-arranque. Si algún favorito del sistema usa una contraseña diferente, no será montado.</entry>
     <entry lang="es" key="SYS_FAVORITES_ADMIN_ONLY_INFO">Recuerde que si necesita impedir que las acciones con volúmenes VeraCrypt normales (como 'Desmontar Todo') afecten a los volúmenes favoritos del sistema, debería activar la opción 'Permitir sólo a administradores ver y desmontar volúmenes favoritos del sistema en VeraCrypt'. Además, cuando VeraCrypt se ejecuta sin privilegios de administrador (por defecto en Windows Vista y posterior), los volúmenes favoritos del sistema no se mostrarán en la lista de letras de unidad de la ventana principal de VeraCrypt.</entry>
     <entry lang="es" key="SYS_FAVORITES_ADMIN_ONLY_WARNING">IMPORTANTE: Tenga en cuenta que si esta opción se habilita y VeraCrypt no tiene privilegios de administrador, los volúmenes favoritos del sistema montados NO se mostrarán en la ventana principal de VeraCrypt y no se podrán desmontar. Si necesita desmontar un favorito del sistema haga clic en el icono de VeraCrypt (en el menú Inicio) y seleccione 'Ejecutar como administrador' primero. La misma limitación se aplica a las funciones 'Desmontar Todo', 'Desmontar automáticamente', teclas de acceso rápido relacionadas, etc.</entry>
-    <entry lang="es" key="SETTING_REQUIRES_REBOOT">Recuerde que esta configuración hace efecto sólo tras reiniciar el sistema operativo.</entry>
+    <entry lang="es" key="SETTING_REQUIRES_REBOOT">Recuerde que esta configuración entra en efecto sólo tras reiniciar el sistema operativo.</entry>
     <entry lang="es" key="COMMAND_LINE_ERROR">Error analizando línea de comandos.</entry>
     <entry lang="es" key="RESCUE_DISK">Disco de Rescate</entry>
     <entry lang="es" key="SELECT_FILE_AND_MOUNT">Seleccionar &amp;Archivo y Montar</entry>
@@ -1308,7 +1308,7 @@
     <entry lang="es" key="HOST_DEVICE_REMOVAL_DISMOUNT_WARN">Antes de eliminar o desactivar un dispositivo que contenga un volumen montado, debería desmontar el volumen en VeraCrypt primero.\n\nLos desmontajes espontáneos inesperados a menudo son causados por cables que fallan intermitentemente, carcasas defectuosas, etc.</entry>
     <entry lang="es" key="UNSUPPORTED_TRUECRYPT_FORMAT">Este volumen se creó con TrueCrypt %x.%x pero VeraCrypt sólo soporta volúmenes de TrueCrypt creados con TrueCrypt 6.x/7.x</entry>
     <entry lang="es" key="TEST">Probar</entry>
-    <entry lang="es" key="KEYFILE">Archivo-llave</entry>
+    <entry lang="es" key="KEYFILE">Archivo-clave</entry>
     <entry lang="es" key="VKEY_08">Retroceso</entry>
     <entry lang="es" key="VKEY_09">Tabulador</entry>
     <entry lang="es" key="VKEY_0C">Limpiar</entry>
@@ -1326,12 +1326,12 @@
     <entry lang="es" key="VKEY_28">Flecha Abajo</entry>
     <entry lang="es" key="VKEY_29">Seleccionar</entry>
     <entry lang="es" key="VKEY_2A">Imprimir</entry>
-    <entry lang="es" key="VKEY_2B">Ejecutar</entry>
+    <entry lang="es" key="VKEY_2B">Ejecutar Clave</entry>
     <entry lang="es" key="VKEY_2C">Imprimir Pant.</entry>
     <entry lang="es" key="VKEY_2D">Insertar</entry>
     <entry lang="es" key="VKEY_2E">Borrar</entry>
     <entry lang="es" key="VKEY_5D">Aplicaciones</entry>
-    <entry lang="es" key="VKEY_5F">Detener/Sleep</entry>
+    <entry lang="es" key="VKEY_5F">Suspender</entry>
     <entry lang="es" key="VKEY_90">Bloq. Numérico</entry>
     <entry lang="es" key="VKEY_91">Bloq. Scroll</entry>
     <entry lang="es" key="VKEY_A6">Explorador atrás</entry>
@@ -1346,9 +1346,9 @@
     <entry lang="es" key="VKEY_AF">Subir Volumen</entry>
     <entry lang="es" key="VKEY_B0">Pista Siguiente</entry>
     <entry lang="es" key="VKEY_B1">Pista Anterior</entry>
-    <entry lang="es" key="VKEY_B2">Stop</entry>
+    <entry lang="es" key="VKEY_B2">Detener medio...</entry>
     <entry lang="es" key="VKEY_B3">Reproducir/Pausa</entry>
-    <entry lang="es" key="VKEY_B4">Inicio Correo</entry>
+    <entry lang="es" key="VKEY_B4">Iniciar Clave de Correo</entry>
     <entry lang="es" key="VKEY_B5">Seleccionar Medio</entry>
     <entry lang="es" key="VKEY_B6">Aplicación 1</entry>
     <entry lang="es" key="VKEY_B7">Aplicación 2</entry>
@@ -1378,10 +1378,10 @@
     <entry lang="es" key="IDC_BOOT_LOADER_CACHE_PIM">Incluir &amp;PIM cuando se cachee la contraseña de autenticación</entry>
     <entry lang="es" key="IDC_PREF_CACHE_PIM">Incluir PIM cuando se cachee una contraseña</entry>
     <entry lang="es" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Hacer que las unidades de red desconectadas estén disponibles para montaje</entry>
-    <entry lang="es" key="PASSWORD_UTF8_TOO_LONG">La contraseña introducida es demasiado larga: su representación en UTF-8 excede de 64 bytes.</entry>
+    <entry lang="es" key="PASSWORD_UTF8_TOO_LONG">La contraseña introducida es demasiado larga: su representación en UTF-8 excede de 128 bytes.</entry>
     <entry lang="es" key="PASSWORD_UTF8_INVALID">La contraseña introducida contiene caracteres Unicode que no se pueden convertir a representación UTF-8.</entry>
     <entry lang="es" key="INIT_DLL">Error: Fallo al cargar una librería de sistema.</entry>
-    <entry lang="es" key="ERR_EXFAT_INVALID_VOLUME_SIZE">El tamaño del fichero del volumen especificado por línea de comando es incompatible con el sistema de ficheros exFAT seleccionado.</entry>
+    <entry lang="es" key="ERR_EXFAT_INVALID_VOLUME_SIZE">El tamaño de archivo del volumen especificado por línea de comando es incompatible con el sistema de archivos exFAT seleccionado.</entry>
     <entry lang="es" key="IDT_ENTROPY_BAR">Aletoriedad Obtenida De Movimientos de Ratón</entry>
     <entry lang="es" key="IDT_VOLUME_ID">ID del volumen:</entry>
     <entry lang="es" key="VOLUME_ID">ID del volumen</entry>
@@ -1395,7 +1395,7 @@
     <entry lang="es" key="IDC_SKIP_RESCUE_VERIFICATION">Saltar la verificación del Disco de Rescate</entry>
     <entry lang="es" key="IDC_HIDE_WAITING_DIALOG">No mostrar mensaje de espera mientras se realizan operaciones</entry>
     <entry lang="es" key="IDC_DISABLE_BOOT_LOADER_HASH_PROMPT">No solicitar algoritmo Hash en la pantalla de autenticación de pre-arranque</entry>
-    <entry lang="es" key="KUZNYECHIK_HELP">Kuznyechik es una unidad de cifrado por bloques publicada en 2015 y definida por la National Standard de la Federación Rusa GOST R 34.12-2015 y también RFC 7801. Clave 256-bit, bloque 128-bit. El modo de operación es XTS.</entry>
+    <entry lang="es" key="KUZNYECHIK_HELP">Kuznyechik es un cifrador por bloques publicado en 2015 y definido por la Estándar Nacional de la Federación Rusa GOST R 34.12-2015 y también RFC 7801. Clave 256-bit, bloque 128-bit. El modo de operación es XTS.</entry>
     <entry lang="es" key="CAMELLIA_HELP">Conjuntamente desarrollado por Mitsubishi Electric y NTT de Japón. Publicado en el año 2000. Clave 256-bit, bloque 128-bit. Modo de operación es XTS. Ha sido aprobado para su uso por la ISO/IEC, el proyecto NESSIE de la Unión Europea y el proyecto CRYPTREC de Japón.</entry>
     <entry lang="es" key="TIME">Tiempo</entry>
     <entry lang="es" key="ITERATIONS">Iteraciones</entry>
@@ -1405,28 +1405,39 @@
     <entry lang="es" key="RESCUE_DISK_EFI_EXTRACT_INFO_NO_CHECK">La imagen ZIP del Disco de Rescate ha sido creada y almacenada en este fichero:\n%s\n\nAhora debería extraerlo en una memoria USB que haya sido formateada con el sistema de ficheros FAT/FAT32 o moverlo a una ubicación segura para posterior uso.\n\n%lsHaga clic en Siguiente para continar.</entry>
     <entry lang="es" key="RESCUE_DISK_EFI_EXTRACT_INFO_NOTE">IMPORTANTE: Tenga en cuenta que el fichero zip debe extraerse directamente en el directorio raíz de la memoria USB. Por ejemplo, si la letra de unidad de la memoria USB es E:, la extracción del fichero zip debe crear una carpeta E:\\EFI en la memoria USB.\n\n</entry>
     <entry lang="es" key="RESCUE_DISK_EFI_CHECK_FAILED">No se puede verificar que el Disco Rescate ha sido correctamente extraído.\n\nSi ha extraído el Disco de Rescate, por favor retire y vuelva a insertar la memoria USB; a continuación haga clic en Siguiente otra vez. Si esto no soluciona el problema, por favor pruebe con otra memoria USB y/o software ZIP.\n\nSi no ha extraído el Disco de Rescate aún, por favor proceda a ello y haga clic en Siguiente.\n\nSi intentó verificar un Disco de Rescate de VeraCrypt creado antes de iniciar este asistente, por favor tenga en cuenta que dicho Disco de Rescate no se puede usar debido a que se creó con una llave maestra diferente. Necesitará extraer una imagen ZIP de Disco de Rescate generada recientemente.</entry>
-    <entry lang="es" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">No se puede verificar que el Disco de Rescate se haya extraído correctamente.\n\nSi ha extraído la imagen del Disco de Rescate a una memoria USB, por favor, retire y vuelva a insertar la memoria USB; intente nuevamente. Si esto no soluciona el problema, por favor pruebe con otro software ZIP y/o memoria USB.\n\nSi intentó verificar un Disco de Rescate de VeraCrypt creado para una llave maestra, contraseña, salt, etc. diferentes, por favor, tenga en cuenta que esta verificación siempre fallará para dicho Disco de Rescate. Para crear un nuevo Disco de Rescate totalmente compatible con su configuración actual, seleccione 'Sistema' > 'Crear Disco de Rescate'.</entry>
-    <entry lang="es" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">La imagen ZIP del Disco de Rescate ha sido creada y almacenada en este fichero:\n%s\n\nAhora necesita extraerlo en una memoria USB que haya sido formateada con el sistema de ficheros FAT/FAT32.\n\nIMPORTANTE: Tenga en cuenta que el fichero zip debe extraerse directamente en el directorio raíz de la memoria USB. Por ejemplo, si la letra de unidad de la memoria USB es E:, la extracción del fichero zip debe crear una carpeta E:\\EFI en la memoria USB.\n\nUna vez creado el Disco de Rescate, seleccione 'Sistema' > 'Verificar Disco de Rescate' para verificar se que ha creado correctamente.</entry>
+    <entry lang="es" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">No se puede verificar que el Disco de Rescate se haya extraído correctamente.\n\nSi ha extraído la imagen del Disco de Rescate a una memoria USB, por favor, retire y vuelva a insertar la memoria USB; intente nuevamente. Si esto no soluciona el problema, por favor pruebe con otro software ZIP y/o memoria USB.\n\nSi intentó verificar un Disco de Rescate de VeraCrypt creado para una llave maestra, contraseña, salt, etc. diferentes, por favor, tenga en cuenta que esta verificación siempre fallará para dicho Disco de Rescate. Para crear un nuevo Disco de Rescate totalmente compatible con su configuración actual, seleccione 'Sistema' &gt; 'Crear Disco de Rescate'.</entry>
+    <entry lang="es" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">La imagen ZIP del Disco de Rescate ha sido creada y almacenada en este fichero:\n%s\n\nAhora necesita extraerlo en una memoria USB que haya sido formateada con el sistema de ficheros FAT/FAT32.\n\nIMPORTANTE: Tenga en cuenta que el fichero zip debe extraerse directamente en el directorio raíz de la memoria USB. Por ejemplo, si la letra de unidad de la memoria USB es E:, la extracción del fichero zip debe crear una carpeta E:\\EFI en la memoria USB.\n\nUna vez creado el Disco de Rescate, seleccione 'Sistema' &gt; 'Verificar Disco de Rescate' para verificar se que ha creado correctamente.</entry>
     <entry lang="es" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Usar Escritorio Seguro para introducir la contraseña</entry>
     <entry lang="es" key="ERR_REFS_INVALID_VOLUME_SIZE">El tamaño del fichero del volumen especificado por línea de comando es incompatible con el sistema de ficheros ReFS seleccionado.</entry>
     <entry lang="es" key="IDC_EDIT_DCSPROP">Editar Configuración del Cargador de Arranque</entry>
     <entry lang="es" key="IDC_SHOW_PLATFORMINFO">Mostrar Información de Plataforma EFI</entry>
-    <entry lang="es" key="BOOT_LOADER_CONFIGURATION_FILE">Fichero de Configuración del Cargador de Arranque</entry>
+    <entry lang="es" key="BOOT_LOADER_CONFIGURATION_FILE">Archivo de Configuración del Cargador de Arranque</entry>
     <entry lang="es" key="EFI_PLATFORM_INFORMATION">Información de Plataforma EFI</entry>
     <entry lang="es" key="EDIT_DCSPROP_FOR_ADVANCED_ONLY">AVISO: Los usuarios inexpertos jamás deberían editar manualmente la configuación del cargador de arranque.\n\n¿Continuar?</entry>
     <entry lang="es" key="DCSPROP_XML_VALIDATION_FAILED">AVISO: Error al validar el formato XML de la configuración del Cargador de Arranque. Por favor, revise los cambios efectuados.</entry>
     <entry lang="es" key="IDT_ADVANCED_OPTIONS">Opciones Avanzadas</entry>
-    <entry lang="es" key="AFTER_UPGRADE_RESCUE_DISK">Se recomienda encarecidamente que cree un nuevo Disco de Rescate de VeraCrypt (el cual tendrá la nueva versión de Cargador de Arranque de VeraCrypt) seleccionando 'Sistema' > 'Crear Disco de Rescate'.\n¿Quiere proceder a ello ahora?</entry>
-    <entry lang="es" key="IDC_ALLOW_TRIM_NONSYS_SSD">Permitir órdenes TRIM para particiones/unidades que no son del sistema</entry>
-    <entry lang="es" key="IDC_BLOCK_SYSENC_TRIM">Bloquear órdenes TRIM en particiones/unidades del sistema</entry>
-    <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
-    <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="es" key="IDC_SELECT_LANGUAGE_LABEL">Seleccione el idioma a utilizar durante la instalación:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
-    <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
-    <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="es" key="AFTER_UPGRADE_RESCUE_DISK">Se recomienda encarecidamente que cree un nuevo Disco de Rescate de VeraCrypt (el cual tendrá la nueva versión de Cargador de Arranque de VeraCrypt) seleccionando 'Sistema' &gt; 'Crear Disco de Rescate'.\n¿Quiere proceder a ello ahora?</entry>
+    <entry lang="es" key="IDC_ALLOW_TRIM_NONSYS_SSD">Permitir orden TRIM en disco de estado sólido en partición/unidad no de sistema</entry>
+    <entry lang="es" key="IDC_BLOCK_SYSENC_TRIM">Bloquear orden TRIM en partición/unidad de sistema</entry>
+    <entry lang="es" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: El cargador de sistema EFI de Windows no pudo ser localizado en el disco. La operación será abortada.</entry>
+    <entry lang="es" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">No es posible al momento cifrar un sistema si SecureBoot está habilitado y si las llaves personales VeraCrypt no están cargadas en el firmware del computador. SecureBoot necesita estar deshabilitado en la configuración del BIOS de manera de permitir que el cifrado del sistema pueda proceder.</entry>
+    <entry lang="es" key="PASSWORD_PASTED_TRUNCATED">El texto insertado fue truncado porque la máxima longitud de la contraseña es 128 caracteres.</entry>
+    <entry lang="es" key="PASSWORD_MAXLENGTH_REACHED">La contraseña ya alcanzó su máxima longitud de 128 caracteres.\nNo se permiten caracteres adicionales.</entry>
+    <entry lang="es" key="IDC_SELECT_LANGUAGE_LABEL">Seleccionar el lenguaje a usar durante la instalación:</entry>
+    <entry lang="es" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: El tamaño del contenedor de archivo es más grande que el espacio en disco disponible.</entry>
+    <entry lang="es" key="IDC_ALLOW_WINDOWS_DEFRAG">Permitir al Defragmentador de Discos de Windows defragmentar una partición/disco no de sistema</entry>
+    <entry lang="es" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">ADVERTENCIA: Defragmentar particiones/discos no de sistema puede filtrar metadatos acerca de su contenido o causar dificultades con los volúmenes ocultos que puedan contener.\n\n¿Continuar?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="es" key="STARTING">Iniciando</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="es" key="IDT_BENCHMARK">Comparación:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="es" key="LEGACY_PASSWORD_UTF8_TOO_LONG">La contraseña introducida es demasiado larga: su representación en UTF-8 excede de 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.et.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="et" name="Eesti" en-name="Estonian" version="0.1.0" translators="Maiko Mõtsar" />
     <font lang="et" class="normal" size="11" face="vaikimisi" />
     <font lang="et" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system volume where you want to resume the process of in-place encryption.\n\n\nRemark: After you click Next, VeraCrypt will attempt to find all non-system volumes where the process of encryption has been interrupted and where the VeraCrypt volume header can be decrypted using the supplied password and/or keyfile(s). If more than one such volume is found, you will need to select one of them in the next step.</entry>
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Please select one of the listed volumes. The list contains every accessible non-system volume where the process of encryption has been interrupted and whose header could be decrypted using the supplied password and/or keyfile(s).</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 128 characters.</entry>
     <entry lang="et" key="PASSWORD_HIDDENVOL_HELP">Palun vali peidetud konteinerile salasõna. </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_HELP">Please choose a password for the hidden operating system (i.e. for the hidden volume). </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANT: The password that you choose for the hidden operating system in this step must be substantially different from the other two passwords (i.e. from the password for the outer volume and from the password for the decoy operating system).</entry>
     <entry lang="et" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Palun sisesta konteineri salasõna, millesse soovid peidetud konteinerit luua.\n\n Peale Edasi klikkimist, VeraCrypt üritab konteinerit külge haakida. Kohe, kui konteiner on haagitud, selle klastrikaart skanneeritakse leidmaks puutumatu vaba ruumi(kui on sellist) maht, mille lõpp märgitakse konteineri lõpuks. See ala majutab peidetud konteinerit ja seega limiteerib selle maksimaalse võimaliku suuruse. Klastrikaardi skanneerimine on oluline tagamaks, et välise konteineri andmeid ei kirjutata üle peidetud konteineri poolt.</entry>
-    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 128 characters.</entry>
     <entry lang="en" key="PASSWORD_SYSENC_OUTERVOL_HELP">Please choose a password for the outer volume. This will be the password you will be able to reveal to anyone forcing you to disclose the password for the first partition behind the system partition, where both the outer volume and the hidden volume (containing the hidden operating system) will reside. The existence of the hidden volume (and of the hidden operating system) will remain secret. Note that this password is not for the decoy operating system.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume (i.e. for the hidden operating system).</entry>
     <entry lang="et" key="PASSWORD_HIDVOL_HOST_TITLE">Välise konteineri salasõna</entry>
     <entry lang="et" key="PASSWORD_HIDVOL_TITLE">Peidetud konteineri salasõna</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1407,7 +1407,7 @@
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="et" key="IDT_BENCHMARK">Jõudlustest:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">
@@ -1470,4 +1481,4 @@
       </xs:complexType>
     </xs:element>
   </xs:schema>
-</VeraCrypt>
+</VeraCrypt>

Translations/Language.eu.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="eu" name="Euskara" en-name="Basque" version="1.0.0" translators="Ander Genua" />
     <font lang="eu" class="normal" size="11" face="default" />
     <font lang="eu" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="eu" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Mesedez, bertan zifratzeko prozesua berrabiatu nahi duzun sistemakoa ez den bolumenaren pasahitz edo/eta gakofitxategiak sartu itzazu.\n\n\nOharra: 'Hurrengoa' sakatu eta gero, VeraCrypt-ek  sistemakoak ez diren bolumenak, non zifraketa prozesua eten den eta VeraCrypt-en bolumenaren goiburua emandako pasahitz edo/eta gako fitxategiekin argitu deitekeen, bilatuko ditu. Horrelako bolumen bat baino gehiago badago, hurrengo pausoan haietako bat aukeratu beharko duzu.</entry>
     <entry lang="eu" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Mesedez, zerrendako bolumen bat aukeratu ezazu. Zerrenda erabili daitezkeen sistemakoak ez diren boluemenak, non zifraketa eten egin den eta goiburua emandako pasahitz eta/edo gako fitxategiarekin argitu daitezkenak, daude.</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="eu" key="PASSWORD_HELP">Oso garratzitsua da pasahitz ona aukeratzea. Hiztegi batean agertu daitekeen hitz bakar bat (edo horrelako 2,3 edo 4 hitzen konbinazioa) ez zenuke aukeratu behar. Ez luke izenik edo jaiotze datik ezan behar. Ez litzateke asmatzeko erraza izan behar. Pasahitz on bat letra larri eta xehe, zenbaki eta karaktere berezien (@ ^ = $ * + e.a.) ausazko konbinaketa da. 20 karaktere baino gehiagokoa (hainbat eta luzeago, hobeto) izatea gomendatzen dugu. Gehienezko luzeera 64 karaktere dira.</entry>
+    <entry lang="eu" key="PASSWORD_HELP">Oso garratzitsua da pasahitz ona aukeratzea. Hiztegi batean agertu daitekeen hitz bakar bat (edo horrelako 2,3 edo 4 hitzen konbinazioa) ez zenuke aukeratu behar. Ez luke izenik edo jaiotze datik ezan behar. Ez litzateke asmatzeko erraza izan behar. Pasahitz on bat letra larri eta xehe, zenbaki eta karaktere berezien (@ ^ = $ * + e.a.) ausazko konbinaketa da. 20 karaktere baino gehiagokoa (hainbat eta luzeago, hobeto) izatea gomendatzen dugu. Gehienezko luzeera 128 karaktere dira.</entry>
     <entry lang="eu" key="PASSWORD_HIDDENVOL_HELP">Mesedez, ezkutuko bolumenarentzat pasahitza aukeratu </entry>
     <entry lang="eu" key="PASSWORD_HIDDEN_OS_HELP">Mesedez, ezkutuko sistema eragilearentzat pasahitza aukeratu (hau da, ezkutuko bolumenarentzat). </entry>
     <entry lang="eu" key="PASSWORD_HIDDEN_OS_NOTE">GARRANTZITSUA: Pauso honetan ezkutuko sistema eragilearentzako aukeratzen duzun pasahitza beste bi pasahitzekin ezberdintasun handia izan behar du (hau da, kanpoko bolumenaren pasahitzarekin eta sistema eragile amuaren pasahitzarekin).</entry>
     <entry lang="eu" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Mesedez bolumenaren pasahitza, non ezkutuko bolumena ostatu nahi duzun, sartu ezazu.\n\n'Hurrengoa' klikatu eta gero TrueCryp-ek bolumena muntatzen saiatuko da. Muntatzen den bezain laister, bere klusterraren bitmapa arakatuko da bolumenaren amaierarekin bat egiten duen etenik gabeko toki librerik handienaren tamiana lortzeko(tokia baldin badago). Toki honek ezkutuko bolumena ostatuko du eta bere gehienezko tamaina murrizuko du. Klusterraren bitmaparen arakatzea beharrezkoa da kanpoko bolumenaren datuak ezkutuko bolumenarekin ezabatuko ez direla ziurtzatzeko.</entry>
-    <entry lang="eu" key="PASSWORD_HIDDENVOL_HOST_HELP">\nMesedez, kanpoko bolumenarentzat pasahitz bat aukeratu. Pasahitz hau eman ahal izango duzu arerio batek pasahitz bat ematera behartzen bazaitu.\n\nGARRANTZITSUA: Pasahitz hau ezkutuko boluenaren pasahitzarekin ezberdintasun handiak izan behar ditu.\n\nOharra: Pasahitzaren gehienezko luzeera 64 karaktere dira.</entry>
+    <entry lang="eu" key="PASSWORD_HIDDENVOL_HOST_HELP">\nMesedez, kanpoko bolumenarentzat pasahitz bat aukeratu. Pasahitz hau eman ahal izango duzu arerio batek pasahitz bat ematera behartzen bazaitu.\n\nGARRANTZITSUA: Pasahitz hau ezkutuko boluenaren pasahitzarekin ezberdintasun handiak izan behar ditu.\n\nOharra: Pasahitzaren gehienezko luzeera 128 karaktere dira.</entry>
     <entry lang="eu" key="PASSWORD_SYSENC_OUTERVOL_HELP">Mesedez, kanpoko bolumenarentzat pasahitz bat aukeratu. Norbaitek sistemaren atzean dagoen ondorengo partizioaren, non kanpoko eta ezkutuko (ezkutuko sistema eragilea daukana) bolumenak egongo diren, pasahitza ematera behartzen bazaitu, pasahitz hau emain ahal izango duzu. Ezkutuko bolumenaren (eta ezkutuko sistema eragilearen) esistentzia sekretupean jarraituko du. Ohartu zaitez hau ez dela sistema eragile amuaren pasahitza.\n\nGARRANTZITSUA: Pasahitz hau eta ezkutuko bolumenak (hau da, ezkutuko sistema eragilearena) daukana zeharo ezberdinak izan behar dira.</entry>
     <entry lang="eu" key="PASSWORD_HIDVOL_HOST_TITLE">Kanpoko Bolumenaren Pasahitza</entry>
     <entry lang="eu" key="PASSWORD_HIDVOL_TITLE">Ezkutuko Bolumenaren Pasahitza</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1407,7 +1407,7 @@
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="eu" key="IDT_BENCHMARK">Proba-Bankua:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.fa.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="fa" name="فارسي" en-name="Persian" version="0.1.0" translators="Ali Bitazar, Rodabeh Sarmadi" />
     <font lang="fa" class="normal" size="11" face="default" />
     <font lang="fa" class="bold" size="13" face="Arial" />
@@ -45,7 +45,7 @@
     <entry lang="en" key="IDC_KEYFILES_TRY_EMPTY_PASSWORD">Try first to mount with an empty password</entry>
     <entry lang="en" key="IDC_KEYFILES_RANDOM_SIZE">Random size ( 64 &lt;-&gt; 1048576 )</entry>
     <entry lang="fa" key="IDC_KEY_FILES">كليد فايلها ...</entry>
-    <entry lang="en" key="IDC_LINK_HASH_INFO">Information on hash algorithms</entry>
+    <entry lang="fa" key="IDC_LINK_HASH_INFO">اطلاعات درباره الگوریتم های هش</entry>
     <entry lang="fa" key="IDC_LINK_MORE_INFO_ABOUT_CIPHER">اطلاعات بیشتر</entry>
     <entry lang="en" key="IDC_LINK_PIM_INFO">Information on PIM</entry>
     <entry lang="fa" key="IDC_MB">&amp;MB</entry>
@@ -172,7 +172,7 @@
     <entry lang="en" key="IDC_PREF_WIPE_CACHE_ON_AUTODISMOUNT">Wipe cached passwords on auto-dismount</entry>
     <entry lang="en" key="IDC_PREF_WIPE_CACHE_ON_EXIT">Wipe cached passwords on exit</entry>
     <entry lang="en" key="IDC_PRESERVE_TIMESTAMPS">Preserve modification timestamp of file containers</entry>
-    <entry lang="en" key="IDC_RESET_HOTKEYS">Reset</entry>
+    <entry lang="fa" key="IDC_RESET_HOTKEYS">تنظیم مجدد</entry>
     <entry lang="fa" key="IDC_SELECT_DEVICE">دوايس را انتخاب كند</entry>
     <entry lang="fa" key="IDC_SELECT_FILE">...فايل را انتخاب كند</entry>
     <entry lang="en" key="IDC_SELECT_PKCS11_MODULE">Select &amp;Library...</entry>
@@ -197,7 +197,7 @@
     <entry lang="en" key="IDD_TOKEN_PREFERENCES">VeraCrypt - Security Token Preferences</entry>
     <entry lang="en" key="IDD_TRAVELER_DLG">VeraCrypt Traveler Disk Setup</entry>
     <entry lang="en" key="IDD_VOLUME_PROPERTIES">VeraCrypt Volume Properties</entry>
-    <entry lang="en" key="IDM_ABOUT">About</entry>
+    <entry lang="fa" key="IDM_ABOUT">درباره‌ی سایفون</entry>
     <entry lang="en" key="IDM_ADD_REMOVE_VOL_KEYFILES">Add/Remove Keyfiles to/from Volume...</entry>
     <entry lang="en" key="IDM_ADD_VOLUME_TO_FAVORITES">Add Mounted Volume to Favorites...</entry>
     <entry lang="en" key="IDM_ADD_VOLUME_TO_SYSTEM_FAVORITES">Add Mounted Volume to System Favorites...</entry>
@@ -210,7 +210,7 @@
     <entry lang="en" key="IDM_CHANGE_SYS_PASSWORD">Change Password...</entry>
     <entry lang="en" key="IDM_CLEAR_HISTORY">Clear Volume History</entry>
     <entry lang="en" key="IDM_CLOSE_ALL_TOKEN_SESSIONS">Close All Security Token Sessions</entry>
-    <entry lang="en" key="IDM_CONTACT">Contact</entry>
+    <entry lang="fa" key="IDM_CONTACT">تماس</entry>
     <entry lang="en" key="IDM_CREATE_HIDDEN_OS">Create Hidden Operating System...</entry>
     <entry lang="en" key="IDM_CREATE_RESCUE_DISK">Create Rescue Disk...</entry>
     <entry lang="en" key="IDM_CREATE_VOLUME">Create New Volume...</entry>
@@ -219,7 +219,7 @@
     <entry lang="en" key="IDM_DEFAULT_MOUNT_PARAMETERS">Default Mount Parameters...</entry>
     <entry lang="en" key="IDM_DONATE">Donate now...</entry>
     <entry lang="en" key="IDM_ENCRYPT_SYSTEM_DEVICE">Encrypt System Partition/Drive...</entry>
-    <entry lang="en" key="IDM_FAQ">Frequently Asked Questions</entry>
+    <entry lang="fa" key="IDM_FAQ">سوالات متناوبا پرسیده شده</entry>
     <entry lang="en" key="IDM_HELP">User's Guide</entry>
     <entry lang="en" key="IDM_HOMEPAGE">&amp;Homepage </entry>
     <entry lang="en" key="IDM_HOTKEY_SETTINGS">Hot Keys...</entry>
@@ -239,7 +239,7 @@
     <entry lang="en" key="IDM_ORGANIZE_SYSTEM_FAVORITES">Organize System Favorite Volumes...</entry>
     <entry lang="en" key="IDM_PERFORMANCE_SETTINGS">Performance/Driver Configuration</entry>
     <entry lang="en" key="IDM_PERMANENTLY_DECRYPT_SYS">Permanently Decrypt System Partition/Drive</entry>
-    <entry lang="en" key="IDM_PREFERENCES">Preferences...</entry>
+    <entry lang="fa" key="IDM_PREFERENCES">تنظيمات...</entry>
     <entry lang="en" key="IDM_REFRESH_DRIVE_LETTERS">Refresh Drive Letters</entry>
     <entry lang="en" key="IDM_REMOVE_ALL_KEYFILES_FROM_VOL">Remove All Keyfiles from Volume...</entry>
     <entry lang="en" key="IDM_RESTORE_VOL_HEADER">Restore Volume Header...</entry>
@@ -251,7 +251,7 @@
     <entry lang="en" key="IDM_SYSTEM_ENCRYPTION_STATUS">Properties...</entry>
     <entry lang="fa" key="IDM_SYS_ENC_SETTINGS">تنظیمات...</entry>
     <entry lang="en" key="IDM_SYS_FAVORITES_SETTINGS">System Favorite Volumes...</entry>
-    <entry lang="en" key="IDM_TC_DOWNLOADS">Downloads</entry>
+    <entry lang="fa" key="IDM_TC_DOWNLOADS">دانلودها</entry>
     <entry lang="en" key="IDM_TEST_VECTORS">Test Vectors...</entry>
     <entry lang="en" key="IDM_TOKEN_PREFERENCES">Security Tokens...</entry>
     <entry lang="en" key="IDM_TRAVELER">Traveler Disk Setup...</entry>
@@ -284,11 +284,11 @@
     <entry lang="en" key="IDT_HOTKEY_KEY">Key to assign:</entry>
     <entry lang="en" key="IDT_HW_AES_SUPPORTED_BY_CPU">Processor (CPU) in this computer supports hardware acceleration for AES:</entry>
     <entry lang="en" key="IDT_LOGON">Actions to perform upon logon to Windows</entry>
-    <entry lang="en" key="IDT_MINUTES">minutes</entry>
+    <entry lang="fa" key="IDT_MINUTES">دقیقه</entry>
     <entry lang="en" key="IDT_MOUNT_LETTER">Mount volume as drive letter:</entry>
     <entry lang="en" key="IDT_MOUNT_SETTINGS">Mount Settings</entry>
     <entry lang="fa" key="IDT_NEW">جدید</entry>
-    <entry lang="fa" key="IDT_NEW_PASSWORD">كلمه عبور</entry>
+    <entry lang="fa" key="IDT_NEW_PASSWORD">رمز عبور:</entry>
     <entry lang="en" key="IDT_PARALLELIZATION_OPTIONS">Thread-Based Parallelization</entry>
     <entry lang="en" key="IDT_PKCS11_LIB_PATH">PKCS #11 Library Path</entry>
     <entry lang="en" key="IDT_PKCS5_PRF">PKCS-5 PRF:</entry>
@@ -305,7 +305,7 @@
     <entry lang="en" key="IDC_AUTO">&amp;Auto-Test All</entry>
     <entry lang="en" key="IDC_CONTINUE">&amp;Continue</entry>
     <entry lang="en" key="IDC_DECRYPT">&amp;Decrypt</entry>
-    <entry lang="en" key="IDC_DELETE">&amp;Delete</entry>
+    <entry lang="fa" key="IDC_DELETE">&amp;حذف كردن</entry>
     <entry lang="en" key="IDC_ENCRYPT">&amp;Encrypt</entry>
     <entry lang="en" key="IDC_EXPORT">&amp;Export...</entry>
     <entry lang="en" key="IDC_GENERATE_AND_SAVE_KEYFILE">Generate and Save Keyfile...</entry>
@@ -341,7 +341,7 @@
     <entry lang="en" key="IDD_MOUNT_OPTIONS">VeraCrypt - Mount Options</entry>
     <entry lang="en" key="IDD_NEW_TOKEN_KEYFILE">New Security Token Keyfile Properties</entry>
     <entry lang="en" key="IDD_RANDOM_POOL_ENRICHMENT">VeraCrypt - Random Pool Enrichment</entry>
-    <entry lang="en" key="IDD_RAWDEVICES_DLG">Select a Partition or Device</entry>
+    <entry lang="fa" key="IDD_RAWDEVICES_DLG">یک پارتیشن یا دستگاه را انتخاب کنید</entry>
     <entry lang="en" key="IDD_STATIC_MODELESS_WAIT_DLG">VeraCrypt</entry>
     <entry lang="en" key="IDD_TOKEN_KEYFILES">Security Token Keyfiles</entry>
     <entry lang="en" key="IDD_TOKEN_PASSWORD">Security token password/PIN required</entry>
@@ -364,7 +364,7 @@
     <entry lang="en" key="IDT_POOL_CONTENTS">Current Pool Content</entry>
     <entry lang="en" key="IDT_PRF">Mixing PRF:</entry>
     <entry lang="en" key="IDT_RANDOM_POOL_ENRICHMENT_NOTE">IMPORTANT: Move your mouse as randomly as possible within this window. The longer you move it, the better. This significantly increases security. When done, click 'Continue'.</entry>
-    <entry lang="en" key="IDT_SECONDARY_KEY">Secondary key (hexadecimal)</entry>
+    <entry lang="fa" key="IDT_SECONDARY_KEY">کلید ثانویه (هگزادسیمال)</entry>
     <entry lang="en" key="IDT_SECURITY_TOKEN">Security token:</entry>
     <entry lang="en" key="IDT_SORT_METHOD">Sort Method:</entry>
     <entry lang="fa" key="IDT_STATIC_MODELESS_WAIT_DLG_INFO">لطفا صبر کنید. این پروسه ممکن است زمان زیادی ببرد...</entry>
@@ -372,7 +372,7 @@
     <entry lang="en" key="IDT_TEST_BLOCK_NUMBER">Block number:</entry>
     <entry lang="en" key="IDT_TEST_CIPHERTEXT">Ciphertext (hexadecimal)</entry>
     <entry lang="en" key="IDT_TEST_DATA_UNIT_NUMBER">Data unit number (64-bit hexadecimal, data unit size is 512 bytes)</entry>
-    <entry lang="en" key="IDT_TEST_KEY">Key (hexadecimal)</entry>
+    <entry lang="fa" key="IDT_TEST_KEY">کلید (هگزادسیمال)</entry>
     <entry lang="en" key="IDT_TEST_PLAINTEXT">Plaintext (hexadecimal)</entry>
     <entry lang="en" key="IDT_TOKEN_KEYFILE_NAME">Keyfile name:</entry>
     <entry lang="en" key="IDT_XTS_MODE">XTS mode</entry>
@@ -445,13 +445,13 @@
     <entry lang="en" key="DISK_FREE_PB">Free space on drive %s is %.2f PB</entry>
     <entry lang="en" key="DRIVELETTERS">Could not get available drive letters.</entry>
     <entry lang="en" key="DRIVER_NOT_FOUND">Error: VeraCrypt driver not found.\n\nPlease copy the files 'veracrypt.sys' and 'veracrypt-x64.sys' to the directory where the main VeraCrypt application (VeraCrypt.exe) is located.</entry>
-    <entry lang="en" key="DRIVER_VERSION">Error: An incompatible version of the VeraCrypt driver is currently running.\n\nIf you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already installed, you must uninstall it first (or upgrade it using the VeraCrypt installer). To uninstall it, follow these steps: On Windows Vista or later, select 'Start Menu' > Computer > 'Uninstall or change a program' > VeraCrypt > Uninstall; on Windows XP, select 'Start Menu' > Settings > 'Control Panel' > 'Add Or Remove Programs' > VeraCrypt > Remove.\n\nSimilarly, if you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already running in portable mode, you must restart the system first and then run only this new version.</entry>
+    <entry lang="en" key="DRIVER_VERSION">Error: An incompatible version of the VeraCrypt driver is currently running.\n\nIf you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already installed, you must uninstall it first (or upgrade it using the VeraCrypt installer). To uninstall it, follow these steps: On Windows Vista or later, select 'Start Menu' &gt; Computer &gt; 'Uninstall or change a program' &gt; VeraCrypt &gt; Uninstall; on Windows XP, select 'Start Menu' &gt; Settings &gt; 'Control Panel' &gt; 'Add Or Remove Programs' &gt; VeraCrypt &gt; Remove.\n\nSimilarly, if you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already running in portable mode, you must restart the system first and then run only this new version.</entry>
     <entry lang="en" key="ERR_CIPHER_INIT_FAILURE">Error: Cipher initialization failure.</entry>
     <entry lang="en" key="ERR_CIPHER_INIT_WEAK_KEY">Error: A weak or a potentially weak key has been detected. The key will be discarded. Please try again.</entry>
     <entry lang="en" key="EXCEPTION_REPORT">A critical error has occurred and VeraCrypt must be terminated. If this is caused by a bug in VeraCrypt, we would like to fix it. To help us, you can send us an automatically generated error report containing the following items:\n\n- Program version\n- Operating system version\n- Type of CPU\n- VeraCrypt component name\n- Checksum of VeraCrypt executable\n- Symbolic name of dialog window\n- Error category\n- Error address\n- VeraCrypt call stack\n\nIf you select 'Yes', the following URL (which contains the entire error report) will be opened in your default Internet browser.\n\n%hs\n\nDo you want to send us the above error report?</entry>
     <entry lang="en" key="EXCEPTION_REPORT_EXT">A critical error has occurred in your system, which requires VeraCrypt to be terminated.\n\nNote that this error has not been caused by VeraCrypt (so the VeraCrypt developers cannot fix it). Please, check your system for possible problems (e.g., system configuration, network connection, failing hardware components).</entry>
     <entry lang="en" key="EXCEPTION_REPORT_EXT_FILESEL">A critical error has occurred in your system, which requires VeraCrypt to be terminated.\n\nIf this problem persists, you may want to try disabling or uninstalling applications that could potentially be causing this issue, such as antivirus or Internet security software, system "enhancers", "optimizers" or "tweakers", etc. If it does not help, you may want to try reinstalling your operating system (this problem may also be caused by malware).</entry>
-    <entry lang="en" key="EXCEPTION_REPORT_TITLE">VeraCrypt Critical Error</entry>
+    <entry lang="fa" key="EXCEPTION_REPORT_TITLE">خطا مهم VeraCrypt</entry>
     <entry lang="en" key="SYSTEM_CRASHED_ASK_REPORT">VeraCrypt detected that the operating system recently crashed. There are many potential reasons why the system could have crashed (for example, a failing hardware component, a bug in a device driver, etc.)\n\nDo you want VeraCrypt to check whether a bug in VeraCrypt could have caused the system crash?</entry>
     <entry lang="en" key="ASK_KEEP_DETECTING_SYSTEM_CRASH">Do you want VeraCrypt to continue detecting system crashes?</entry>
     <entry lang="en" key="NO_MINIDUMP_FOUND">VeraCrypt found no system crash minidump file.</entry>
@@ -466,7 +466,7 @@
     <entry lang="en" key="ENCRYPT">&amp;Encrypt</entry>
     <entry lang="en" key="DECRYPT">&amp;Decrypt</entry>
     <entry lang="en" key="PERMANENTLY_DECRYPT">&amp;Permanently Decrypt</entry>
-    <entry lang="en" key="EXIT">Exit</entry>
+    <entry lang="fa" key="EXIT">خروج</entry>
     <entry lang="en" key="EXT_PARTITION">Please create a logical drive for this extended partition, and then try again.</entry>
     <entry lang="en" key="FILE_HELP">A VeraCrypt volume can reside in a file (called VeraCrypt container), which can reside on a hard disk, on a USB flash drive, etc. A VeraCrypt container is just like any normal file (it can be, for example, moved or deleted as any normal file). Click 'Select File' to choose a filename for the container and to select the location where you wish the container to be created.\n\nWARNING: If you select an existing file, VeraCrypt will NOT encrypt it; the file will be deleted and replaced with the newly created VeraCrypt container. You will be able to encrypt existing files (later on) by moving them to the VeraCrypt container that you are about to create now.</entry>
     <entry lang="en" key="FILE_HELP_HIDDEN_HOST_VOL">Select the location of the outer volume to be created (within this volume the hidden volume will be created later on).\n\nA VeraCrypt volume can reside in a file (called VeraCrypt container), which can reside on a hard disk, on a USB flash drive, etc. A VeraCrypt container can be moved or deleted as any normal file. Click 'Select File' to choose a filename for the container and to select the location where you wish the container to be created. If you select an existing file, VeraCrypt will NOT encrypt it; it will be deleted and replaced with the newly created container. You will be able to encrypt existing files (later on) by moving them to the VeraCrypt container you are about to create now.</entry>
@@ -476,7 +476,7 @@
     <entry lang="en" key="FILE_HELP_HIDDEN_HOST_VOL_DIRECT">\nSelect the location of the VeraCrypt volume within which you wish to create a hidden volume.</entry>
     <entry lang="en" key="FILE_IN_USE">WARNING: The host file/device is already in use!\n\nIgnoring this can cause undesired results including system instability. All applications that might be using the host file/device (for example, antivirus or backup applications) should be closed before mounting the volume.\n\nContinue mounting?</entry>
     <entry lang="en" key="FILE_IN_USE_FAILED">Error: Cannot mount volume. The host file/device is already in use. Attempt to mount without exclusive access failed as well.</entry>
-    <entry lang="en" key="FILE_OPEN_FAILED">The file could not be opened.</entry>
+    <entry lang="fa" key="FILE_OPEN_FAILED">فایل نمی تواند باز شود.</entry>
     <entry lang="en" key="FILE_TITLE">Volume Location</entry>
     <entry lang="en" key="FILESYS_PAGE_TITLE">Large Files</entry>
     <entry lang="en" key="FILESYS_PAGE_HELP_QUESTION">Do you intend to store files larger than 4 GB in this VeraCrypt volume?</entry>
@@ -499,7 +499,7 @@
     <entry lang="en" key="WIPE_FINISHED">The content of the partition/device has been successfully erased.</entry>
     <entry lang="en" key="WIPE_FINISHED_DECOY_SYSTEM_PARTITION">The content of the partition where the original system (of which the hidden system is a clone) resided has been successfully erased.</entry>
     <entry lang="en" key="DECOY_OS_VERSION_WARNING">Please make sure the version of Windows you are going to install (on the wiped partition) is the same as the version of Windows you are currently running. This is required due to the fact that both systems will share a common boot partition.</entry>
-    <entry lang="en" key="SYSTEM_ENCRYPTION_FINISHED">The system partition/drive has been successfully encrypted.\n\nNote: If there are non-system VeraCrypt volumes that you need to have mounted automatically every time Windows starts, you can set it up by mounting each of them and selecting 'Favorites' > 'Add Mounted Volume to System Favorites').</entry>
+    <entry lang="en" key="SYSTEM_ENCRYPTION_FINISHED">The system partition/drive has been successfully encrypted.\n\nNote: If there are non-system VeraCrypt volumes that you need to have mounted automatically every time Windows starts, you can set it up by mounting each of them and selecting 'Favorites' &gt; 'Add Mounted Volume to System Favorites').</entry>
     <entry lang="en" key="SYSTEM_DECRYPTION_FINISHED">The system partition/drive has been successfully decrypted.</entry>
     <entry lang="en" key="FORMAT_FINISHED_HELP">\n\nThe VeraCrypt volume has been created and is ready for use. If you wish to create another VeraCrypt volume, click Next. Otherwise, click Exit.</entry>
     <entry lang="en" key="SYSENC_HIDDEN_VOL_FORMAT_FINISHED_HELP">\n\nThe hidden VeraCrypt volume has been successfully created (the hidden operating system will reside within this hidden volume).\n\nClick Next to continue.</entry>
@@ -602,7 +602,7 @@
     <entry lang="en" key="OVERWRITEPROMPT_DEVICE_HIDDEN_OS_PARTITION">CAUTION: ANY FILES CURRENTLY STORED ON THE PARTITION '%s'%s (I.E. ON THE FIRST PARTITION BEHIND THE SYSTEM PARTITION) WILL BE ERASED AND LOST (THEY WILL NOT BE ENCRYPTED)!\n\nAre you sure you want to proceed with format?</entry>
     <entry lang="en" key="OVERWRITEPROMPT_DEVICE_SECOND_WARNING_LOTS_OF_DATA">WARNING: THE SELECTED PARTITION CONTAINS A LARGE AMOUNT OF DATA! Any files stored on the partition will be erased and lost (they will NOT be encrypted)!</entry>
     <entry lang="en" key="ERASE_FILES_BY_CREATING_VOLUME">Erase any files stored on the partition by creating a VeraCrypt volume within it</entry>
-    <entry lang="en" key="PASSWORD">Password</entry>
+    <entry lang="fa" key="PASSWORD">رمز عبور</entry>
     <entry lang="en" key="PIM">PIM</entry>
     <entry lang="en" key="IDD_PCDM_CHANGE_PKCS5_PRF">Set Header Key Derivation Algorithm</entry>
     <entry lang="en" key="IDD_PCDM_ADD_REMOVE_VOL_KEYFILES">Add/Remove Keyfiles to/from Volume</entry>
@@ -618,12 +618,12 @@
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system volume where you want to resume the process of in-place encryption/decryption.\n\nRemark: After you click Next, VeraCrypt will attempt to find all non-system volumes where the process of encryption/decryption has been interrupted and where the VeraCrypt volume header can be deciphered using the supplied password and/or keyfile(s). If more than one such volume is found, you will need to select one of them in the next step.</entry>
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Please select one of the listed volumes. The list contains each accessible non-system volume where the process of encryption/decryption has been interrupted and where the volume header was successfully deciphered using the supplied password and/or keyfile(s).</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 128 characters.</entry>
     <entry lang="en" key="PASSWORD_HIDDENVOL_HELP">Please choose a password for the hidden volume. </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_HELP">Please choose a password for the hidden operating system (i.e. for the hidden volume). </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANT: The password that you choose for the hidden operating system in this step must be substantially different from the other two passwords (i.e. from the password for the outer volume and from the password for the decoy operating system).</entry>
     <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Please enter the password for the volume within which you wish to create a hidden volume.\n\nAfter you click Next, VeraCrypt will attempt to mount the volume. As soon as the volume is mounted, its cluster bitmap will be scanned to determine the size of the uninterrupted area of free space (if there is any) whose end is aligned with the end of the volume. This area will accommodate the hidden volume and therefore will limit its maximum possible size. Cluster map scanning is necessary to ensure that no data on the outer volume will be overwritten by the hidden volume.</entry>
-    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 128 characters.</entry>
     <entry lang="en" key="PASSWORD_SYSENC_OUTERVOL_HELP">Please choose a password for the outer volume. This will be the password you will be able to reveal to anyone forcing you to disclose the password for the first partition behind the system partition, where both the outer volume and the hidden volume (containing the hidden operating system) will reside. The existence of the hidden volume (and of the hidden operating system) will remain secret. Note that this password is not for the decoy operating system.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume (i.e. for the hidden operating system).</entry>
     <entry lang="en" key="PASSWORD_HIDVOL_HOST_TITLE">Outer Volume Password</entry>
     <entry lang="en" key="PASSWORD_HIDVOL_TITLE">Hidden Volume Password</entry>
@@ -648,7 +648,7 @@
     <entry lang="en" key="PIM_SMALL_WARNING">You have chosen a Personal Iterations Multiplier (PIM) that is smaller than the default VeraCrypt value. Please note that if your password is not strong enough, this could lead to a weaker security.\n\nDo you confirm that you are using a strong password?</entry>
     <entry lang="en" key="PIM_SYSENC_TOO_BIG">Personal Iterations Multiplier (PIM) maximum value for system encryption is 65535.</entry>
     <entry lang="en" key="PIM_TITLE">Volume PIM</entry>
-    <entry lang="en" key="HIDDEN_FILES_PRESENT_IN_KEYFILE_PATH">\n\nWARNING: Hidden file(s) have been found in a keyfile search path. Such hidden files cannot be used as keyfiles. If you need to use them as keyfiles, remove their 'Hidden' attribute (right-click each of them, select 'Properties', uncheck 'Hidden' and click OK). Note: Hidden files are visible only if the corresponding option is enabled (Computer > Organize > 'Folder and search options' > View).</entry>
+    <entry lang="en" key="HIDDEN_FILES_PRESENT_IN_KEYFILE_PATH">\n\nWARNING: Hidden file(s) have been found in a keyfile search path. Such hidden files cannot be used as keyfiles. If you need to use them as keyfiles, remove their 'Hidden' attribute (right-click each of them, select 'Properties', uncheck 'Hidden' and click OK). Note: Hidden files are visible only if the corresponding option is enabled (Computer &gt; Organize &gt; 'Folder and search options' &gt; View).</entry>
     <entry lang="en" key="HIDDEN_VOL_PROT_PASSWORD_US_KEYB_LAYOUT">If you are attempting to protect a hidden volume containing a hidden system, please make sure you are using the standard US keyboard layout when typing the password for the hidden volume. This is required due to the fact that the password needs to be typed in the pre-boot environment (before Windows starts) where non-US Windows keyboard layouts are not available.</entry>
     <entry lang="en" key="FOUND_NO_PARTITION_W_DEFERRED_INPLACE_ENC">VeraCrypt has not found any volume where the process of encryption/decryption of a non-system volume has been interrupted and where the volume header can be deciphered using the supplied password and/or keyfile(s).\n\nPlease make sure the password and/or keyfile(s) are correct and that the partition/volume is not being used by the system or applications (including antivirus software).</entry>
     <entry lang="en" key="SELECTED_PARTITION_ALREADY_INPLACE_ENC">The selected partition/device is already fully encrypted.\nHeader Flags = 0x%.8X</entry>
@@ -730,7 +730,7 @@
     <entry lang="en" key="CANT_DISMOUNT_VOLUME">Cannot dismount volume.</entry>
     <entry lang="en" key="FORMAT_NTFS_FAILED">Windows failed to format the volume as NTFS/exFAT/ReFS.\n\nPlease select a different type of file system (if possible) and try again. Alternatively, you could leave the volume unformatted (select 'None' as the filesystem), exit this wizard, mount the volume, and then use either a system or a third-party tool to format the mounted volume (the volume will remain encrypted).</entry>
     <entry lang="en" key="FORMAT_NTFS_FAILED_ASK_FAT">Windows failed to format the volume as NTFS/exFAT/ReFS.\n\nDo you want to format the volume as FAT instead?</entry>
-    <entry lang="en" key="DEFAULT">Default</entry>
+    <entry lang="fa" key="DEFAULT">پیش فرض</entry>
     <entry lang="fa" key="PARTITION_LOWER_CASE">پارتیشن</entry>
     <entry lang="en" key="PARTITION_UPPER_CASE">PARTITION</entry>
     <entry lang="fa" key="DEVICE">دستگاه</entry>
@@ -739,7 +739,7 @@
     <entry lang="en" key="VOLUME">Volume</entry>
     <entry lang="en" key="VOLUME_LOWER_CASE">volume</entry>
     <entry lang="en" key="VOLUME_UPPER_CASE">VOLUME</entry>
-    <entry lang="en" key="LABEL">Label</entry>
+    <entry lang="fa" key="LABEL">برچسب</entry>
     <entry lang="en" key="CLUSTER_TOO_SMALL">The selected cluster size is too small for this volume size. A greater cluster size will be used instead.</entry>
     <entry lang="en" key="CANT_GET_VOLSIZE">Error: Cannot get volume size!\n\nMake sure the selected volume is not being used by the system or an application.</entry>
     <entry lang="en" key="HIDDEN_VOL_HOST_SPARSE">Hidden volumes must not be created within dynamic (sparse file) containers. To achieve plausible deniability, the hidden volume needs to be created within a non-dynamic container.</entry>
@@ -781,14 +781,14 @@
     <entry lang="en" key="DECRYPTION">Decryption</entry>
     <entry lang="en" key="MEAN">Mean</entry>
     <entry lang="en" key="DRIVE">Drive</entry>
-    <entry lang="en" key="SIZE">Size</entry>
+    <entry lang="fa" key="SIZE">اندازه</entry>
     <entry lang="fa" key="ENCRYPTION_ALGORITHM">الگوريتم رمزنگاري</entry>
     <entry lang="fa" key="ENCRYPTION_ALGORITHM_LV">الگوريتم رمزنگاري</entry>
-    <entry lang="en" key="TYPE">Type</entry>
+    <entry lang="fa" key="TYPE">نوغ</entry>
     <entry lang="en" key="VALUE">Value</entry>
     <entry lang="en" key="PROPERTY">Property</entry>
-    <entry lang="en" key="LOCATION">Location</entry>
-    <entry lang="en" key="BYTES">bytes</entry>
+    <entry lang="fa" key="LOCATION">موقعيت</entry>
+    <entry lang="fa" key="BYTES">بایت‌ها</entry>
     <entry lang="en" key="HIDDEN">Hidden</entry>
     <entry lang="en" key="OUTER">Outer</entry>
     <entry lang="fa" key="NORMAL">عادی</entry>
@@ -800,7 +800,7 @@
     <entry lang="en" key="SYSTEM_DRIVE_DECRYPTING">System drive (decrypting - %.2f%% done)</entry>
     <entry lang="en" key="SYSTEM_DRIVE_PARTIALLY_ENCRYPTED">System drive (%.2f%% encrypted)</entry>
     <entry lang="fa" key="SYSTEM_PARTITION">پارتیشن سیستم</entry>
-    <entry lang="en" key="HIDDEN_SYSTEM_PARTITION">Hidden system partition</entry>
+    <entry lang="fa" key="HIDDEN_SYSTEM_PARTITION">پارتیشن مخفی سیستم</entry>
     <entry lang="en" key="SYSTEM_PARTITION_ENCRYPTING">System partition (encrypting - %.2f%% done)</entry>
     <entry lang="en" key="SYSTEM_PARTITION_DECRYPTING">System partition (decrypting - %.2f%% done)</entry>
     <entry lang="en" key="SYSTEM_PARTITION_PARTIALLY_ENCRYPTED">System partition (%.2f%% encrypted)</entry>
@@ -846,7 +846,7 @@
     <entry lang="en" key="AFTER_UPGRADE_RELEASE_NOTES">Do you want to view release notes for the current (latest stable) version of VeraCrypt?</entry>
     <entry lang="en" key="AFTER_INSTALL_TUTORIAL">If you have never used VeraCrypt before, we recommend that you read the chapter Beginner's Tutorial in the VeraCrypt User Guide. Do you want to view the tutorial?</entry>
     <entry lang="en" key="SELECT_AN_ACTION">Please select an action to perform from the following:</entry>
-    <entry lang="en" key="REPAIR_REINSTALL">Repair/Reinstall</entry>
+    <entry lang="fa" key="REPAIR_REINSTALL">اصلاح/نصب دوباره</entry>
     <entry lang="fa" key="UPGRADE">به روز رسانی</entry>
     <entry lang="en" key="UNINSTALL">Uninstall</entry>
     <entry lang="en" key="SETUP_ADMIN">To successfully install/uninstall VeraCrypt, you must have administrator privileges. Do you want to continue?</entry>
@@ -863,7 +863,7 @@
     <entry lang="en" key="INSTALL_OK">VeraCrypt has been successfully installed.</entry>
     <entry lang="en" key="SETUP_UPDATE_OK">VeraCrypt has been successfully updated.</entry>
     <entry lang="en" key="UPGRADE_OK_REBOOT_REQUIRED">VeraCrypt has been successfully upgraded. However, before you can start using it, the computer must be restarted.\n\nDo you want to restart it now?</entry>
-    <entry lang="en" key="SYS_ENC_UPGRADE_FAILED">Failed to upgrade VeraCrypt!\n\nIMPORTANT: Before you shut down or restart the system, we strongly recommend that you use System Restore (Windows Start menu > All programs > Accessories > System Tools > System Restore) to restore your system to the restore point named 'VeraCrypt installation'. If System Restore is not available, you should try installing the original or the new version of VeraCrypt again before you shut down or restart the system.</entry>
+    <entry lang="en" key="SYS_ENC_UPGRADE_FAILED">Failed to upgrade VeraCrypt!\n\nIMPORTANT: Before you shut down or restart the system, we strongly recommend that you use System Restore (Windows Start menu &gt; All programs &gt; Accessories &gt; System Tools &gt; System Restore) to restore your system to the restore point named 'VeraCrypt installation'. If System Restore is not available, you should try installing the original or the new version of VeraCrypt again before you shut down or restart the system.</entry>
     <entry lang="en" key="UNINSTALL_OK">VeraCrypt has been successfully uninstalled.\n\nClick 'Finish' to remove the VeraCrypt installer and the folder %s. Note that the folder will not be removed if it contains any files that were not installed by the VeraCrypt installer or created by VeraCrypt.</entry>
     <entry lang="en" key="REMOVING_REG">Removing VeraCrypt registry entries</entry>
     <entry lang="en" key="ADDING_REG">Adding registry entry</entry>
@@ -894,11 +894,11 @@
     <entry lang="en" key="TRAVELER_LIMITATIONS_NOTE">Note about portable mode:\n\nPlease note that the operating system requires drivers to be registered with it before they can be started. Hence, the VeraCrypt driver is not (and cannot be) fully portable (whereas the VeraCrypt applications are fully portable, i.e. they do not have to be installed or registered with the operating system). Also note that VeraCrypt needs a driver to provide transparent on-the-fly encryption/decryption.</entry>
     <entry lang="en" key="TRAVELER_UAC_NOTE">Note that if you decide to run VeraCrypt in portable mode (as opposed to running an installed copy of VeraCrypt), the system will ask you for permission to run VeraCrypt (UAC prompt) every time you attempt to run it.\n\nThe reason is that when you run VeraCrypt in portable mode, VeraCrypt needs to load and start the VeraCrypt device driver. VeraCrypt needs a device driver to provide transparent on-the-fly encryption/decryption, and users without administrator privileges cannot start device drivers in Windows. Therefore, the system will ask you for permission to run VeraCrypt with administrator privileges (UAC prompt).\n\nNote that if you install VeraCrypt on the system (as opposed to running VeraCrypt in portable mode), the system will NOT ask you for permission to run VeraCrypt (UAC prompt) every time you attempt to run it.\n\nAre you sure you want to extract the files?</entry>
     <entry lang="en" key="CONTAINER_ADMIN_WARNING">Warning: This instance of the Volume Creation Wizard has administrator privileges.\n\nYour new volume may be created with permissions that will not allow you to write to the volume when it is mounted. If you want to avoid that, close this instance of the Volume Creation Wizard and launch a new one without administrator privileges.\n\nDo you want to close this instance of the Volume Creation Wizard?</entry>
-    <entry lang="en" key="CANNOT_DISPLAY_LICENSE">Error: Cannot display license.</entry>
+    <entry lang="fa" key="CANNOT_DISPLAY_LICENSE">خطا: ناتوانی در نمایش لایسنس</entry>
     <entry lang="en" key="OUTER_VOL_WRITE_PREVENTED">Outer(!)</entry>
     <entry lang="en" key="DAYS">days</entry>
     <entry lang="en" key="HOURS">hours</entry>
-    <entry lang="en" key="MINUTES">minutes</entry>
+    <entry lang="fa" key="MINUTES">دقیقه</entry>
     <entry lang="en" key="SECONDS">s</entry>
     <entry lang="fa" key="OPEN">باز کردن</entry>
     <entry lang="en" key="DISMOUNT">Dismount</entry>
@@ -916,15 +916,15 @@
     <entry lang="en" key="PROGRESS_STATUS_RESIZING">Resizing</entry>
     <entry lang="en" key="PROGRESS_STATUS_ENCRYPTING">Encrypting</entry>
     <entry lang="fa" key="PROGRESS_STATUS_DECRYPTING">رمزگشایی</entry>
-    <entry lang="en" key="PROGRESS_STATUS_FINALIZING">Finalizing</entry>
+    <entry lang="fa" key="PROGRESS_STATUS_FINALIZING">نهایی سازی</entry>
     <entry lang="en" key="PROGRESS_STATUS_PAUSED">Paused</entry>
-    <entry lang="en" key="PROGRESS_STATUS_FINISHED">Finished</entry>
+    <entry lang="fa" key="PROGRESS_STATUS_FINISHED">به پایان رسیده</entry>
     <entry lang="fa" key="PROGRESS_STATUS_ERROR">خطا</entry>
     <entry lang="en" key="FAVORITE_DISCONNECTED_DEV">Device disconnected</entry>
     <entry lang="en" key="SYS_FAVORITE_VOLUMES_SAVED">System favorite volumes saved.\n\nTo enable mounting of system favorite volumes when the system starts, please select 'Settings' &gt; 'System Favorite Volumes' &gt; 'Mount system favorite volumes when Windows starts'.</entry>
     <entry lang="en" key="FAVORITE_ADD_DRIVE_DEV_WARNING">The volume you are adding to favorites is neither a partition nor a dynamic volume. Therefore, VeraCrypt will be unable to mount this favorite volume if the device number changes.</entry>
     <entry lang="en" key="FAVORITE_ADD_PARTITION_TYPE_WARNING">The volume you are adding to favorites is a partition not recognized by Windows.\n\nVeraCrypt will be unable to mount this favorite volume if the device number changes. Please set the type of the partition to a type recognized by Windows (use the SETID command of the Windows 'diskpart' tool). Then add the partition to favorites again.</entry>
-    <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_BACKGROUND_TASK_ERR">VeraCrypt Background Task is disabled or it is configured to exit when there are no mounted volumes (or VeraCrypt is running in portable mode). This may prevent your favorite volumes from being automatically mounted when devices hosting them get connected.\n\nNote: To enable the VeraCrypt Background Task, select Settings > Preferences and check the 'Enabled' checkbox in the section 'VeraCrypt Background Task'.</entry>
+    <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_BACKGROUND_TASK_ERR">VeraCrypt Background Task is disabled or it is configured to exit when there are no mounted volumes (or VeraCrypt is running in portable mode). This may prevent your favorite volumes from being automatically mounted when devices hosting them get connected.\n\nNote: To enable the VeraCrypt Background Task, select Settings &gt; Preferences and check the 'Enabled' checkbox in the section 'VeraCrypt Background Task'.</entry>
     <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_NETWORK_PATH_ERR">A container stored in a remote filesystem shared over a network cannot be automatically mounted when its host device gets connected.</entry>
     <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_DEVICE_PATH_ERR">The device displayed below is neither a partition nor a dynamic volume. Therefore, the volume hosted on the device cannot be automatically mounted when the device gets connected.</entry>
     <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_PARTITION_TYPE_ERR">Please set the type of the partition displayed below to a type recognized by Windows (use the SETID command of the Windows 'diskpart' tool). Then remove the partition from favorites and add it again. This will enable the volume hosted on the device to be automatically mounted when the device gets connected.</entry>
@@ -965,7 +965,7 @@
     <entry lang="en" key="RESCUE_DISK_NON_WIZARD_CHECK_PASSED">The VeraCrypt Rescue Disk has been successfully verified.</entry>
     <entry lang="en" key="RESCUE_DISK_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly burned.\n\nIf you have burned the Rescue Disk, please eject and reinsert the CD/DVD; then try again. If this does not help, please try other CD/DVD recording software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' &gt; 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_ISO_IMAGE_CHECK_PASSED">The VeraCrypt Rescue Disk image has been successfully verified.</entry>
-    <entry lang="en" key="RESCUE_DISK_ISO_IMAGE_CHECK_FAILED">The Rescue Disk image verification failed.\n\nIf you attempted to verify a VeraCrypt Rescue Disk image created for a different master key, password, salt, etc., please note that such Rescue Disk image will always fail this verification. To create a new Rescue Disk image fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
+    <entry lang="en" key="RESCUE_DISK_ISO_IMAGE_CHECK_FAILED">The Rescue Disk image verification failed.\n\nIf you attempted to verify a VeraCrypt Rescue Disk image created for a different master key, password, salt, etc., please note that such Rescue Disk image will always fail this verification. To create a new Rescue Disk image fully compatible with your current configuration, select 'System' &gt; 'Create Rescue Disk'.</entry>
     <entry lang="en" key="ERROR_CREATING_RESCUE_DISK">Error creating VeraCrypt Rescue Disk.</entry>
     <entry lang="en" key="CANNOT_CREATE_RESCUE_DISK_ON_HIDDEN_OS">VeraCrypt Rescue Disk cannot be created when a hidden operating system is running.\n\nTo create a VeraCrypt Rescue Disk, boot the decoy operating system and then select 'System' &gt; 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly burned.\n\nIf you have burned the Rescue Disk, please eject and reinsert the CD/DVD; then click Next to try again. If this does not help, please try another medium%s.\n\nIf you have not burned the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to burn the newly generated Rescue Disk.</entry>
@@ -982,9 +982,9 @@
     <entry lang="en" key="IDPM_PROPERTIES">P&amp;roperties...</entry>
     <entry lang="en" key="HIDDEN_VOL_PROTECTION">Hidden Volume Protected</entry>
     <entry lang="en" key="NOT_APPLICABLE_OR_NOT_AVAILABLE">N/A</entry>
-    <entry lang="en" key="UISTR_YES">Yes</entry>
-    <entry lang="en" key="UISTR_NO">No</entry>
-    <entry lang="en" key="UISTR_DISABLED">Disabled</entry>
+    <entry lang="fa" key="UISTR_YES">بله</entry>
+    <entry lang="fa" key="UISTR_NO">خیر</entry>
+    <entry lang="fa" key="UISTR_DISABLED">غیر فعال شد</entry>
     <entry lang="en" key="DIGIT_ONE">1</entry>
     <entry lang="en" key="TWO_OR_MORE">2 or more</entry>
     <entry lang="en" key="MODE_OF_OPERATION">Mode of Operation</entry>
@@ -996,7 +996,7 @@
     <entry lang="en" key="UNSUPPORTED_CHARS_IN_PWD_RECOM">Warning: Password contains non-ASCII characters. This may cause the volume to be impossible to mount when your system configuration changes.\n\nYou should replace all non-ASCII characters in the password with ASCII characters. To do so, click 'Volumes' -&gt; 'Change Volume Password'.\n\nThe following are ASCII characters:\n\n  ! " # $ % &amp; ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; &lt; = &gt; ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \\ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~</entry>
     <entry lang="en" key="EXE_FILE_EXTENSION_CONFIRM">WARNING: We strongly recommend that you avoid file extensions that are used for executable files (such as .exe, .sys, or .dll) and other similarly problematic file extensions. Using such file extensions causes Windows and antivirus software to interfere with the container, which adversely affects the performance of the volume and may also cause other serious problems.\n\nWe strongly recommend that you remove the file extension or change it (e.g., to '.hc').\n\nAre you sure you want to use the problematic file extension?</entry>
     <entry lang="en" key="EXE_FILE_EXTENSION_MOUNT_WARNING">WARNING: This container has a file extension that is used for executable files (such as .exe, .sys, or .dll) or some other file extension that is similarly problematic. It will very likely cause Windows and antivirus software to interfere with the container, which will adversely affect the performance of the volume and may also cause other serious problems.\n\nWe strongly recommend that you remove the file extension of the container or change it (e.g., to '.hc') after you dismount the volume.</entry>
-    <entry lang="en" key="HOMEPAGE">Homepage</entry>
+    <entry lang="fa" key="HOMEPAGE">صفحه اصلی</entry>
     <entry lang="en" key="LARGE_IDE_WARNING_XP">WARNING: It appears that you have not applied any Service Pack to your Windows installation. You should not write to IDE disks larger than 128 GB under Windows XP to which you did not apply Service Pack 1 or later! If you do, data on the disk (no matter if it is a VeraCrypt volume or not) may get corrupted. Note that this is a limitation of Windows, not a bug in VeraCrypt.</entry>
     <entry lang="en" key="LARGE_IDE_WARNING_2K">WARNING: It appears that you have not applied Service Pack 3 or later to your Windows installation. You should not write to IDE disks larger than 128 GB under Windows 2000 to which you did not apply Service Pack 3 or later! If you do, data on the disk (no matter if it is a VeraCrypt volume or not) may get corrupted. Note that this is a limitation of Windows, not a bug in VeraCrypt.\n\nNote: You may also need to enable the 48-bit LBA support in the registry; for more information, see http://support.microsoft.com/kb/305098/EN-US</entry>
     <entry lang="en" key="LARGE_IDE_WARNING_2K_REGISTRY">WARNING: 48-bit LBA ATAPI support is disabled on your system. Therefore, you should not write to IDE disks larger than 128 GB! If you do, data on the disk (no matter if it is a VeraCrypt volume or not) may get corrupted. Note that this is a limitation of Windows, not a limitation of VeraCrypt.\n\nTo enable the 48-bit LBA support, add the 'EnableBigLba' registry value in the registry key HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\atapi\\Parameters and set it to 1.\n\nFor more information, see http://support.microsoft.com/kb/305098</entry>
@@ -1049,7 +1049,7 @@
     <entry lang="en" key="FAILED_TO_INTERRUPT_SYSTEM_ENCRYPTION">Error: Failed to interrupt the process of encryption/decryption of the system partition/drive.</entry>
     <entry lang="en" key="FAILED_TO_INTERRUPT_WIPING">Error: Failed to interrupt the process of wiping.</entry>
     <entry lang="en" key="FAILED_TO_RESUME_SYSTEM_ENCRYPTION">Error: Failed to resume the process of encryption/decryption of the system partition/drive.</entry>
-    <entry lang="en" key="FAILED_TO_START_WIPING">Error: Failed to start the process of wiping.</entry>
+    <entry lang="fa" key="FAILED_TO_START_WIPING">خطا: مشکل در شروع روند پاکسازی</entry>
     <entry lang="en" key="INCONSISTENCY_RESOLVED">Inconsistency resolved.\n\n\n(If you report a bug in connection with this, please include the following technical information in the bug report:\n%hs)</entry>
     <entry lang="en" key="UNEXPECTED_STATE">Error: Unexpected state.\n\n\n(If you report a bug in connection with this, please include the following technical information in the bug report:\n%hs)</entry>
     <entry lang="en" key="NO_SYS_ENC_PROCESS_TO_RESUME">There is no interrupted process of encryption/decryption of the system partition/drive to resume.\n\nNote: If you want to resume an interrupted process of encryption/decryption of a non-system partition/volume, select 'Volumes' &gt; 'Resume Interrupted Process'.</entry>
@@ -1096,7 +1096,7 @@
     <entry lang="en" key="DECOY_OS_REINSTALL_WARNING">WARNING: During the process of creation of the hidden operating system, you will be required to fully reinstall the currently running system (in order to create a decoy system securely).\n\nNote: The currently running operating system and the entire content of the system partition will be copied to the hidden volume (in order to create the hidden system).\n\n\nAre you sure you will be able to install Windows using a Windows Setup medium (or using a service partition)?</entry>
     <entry lang="en" key="DECOY_OS_REQUIREMENTS">For security reasons, if the currently running operating system requires activation, it must be activated before proceeding. Note that the hidden operating system will be created by copying the content of the system partition to a hidden volume (so if this operating system is not activated, the hidden operating system will not be activated either). For more information, see the section "Security Requirements and Precautions Pertaining to Hidden Volumes" in the VeraCrypt User's Guide.\n\nImportant: Before proceeding, please make sure you have read the section "Security Requirements and Precautions Pertaining to Hidden Volumes" in the VeraCrypt User's Guide.\n\n\nDoes the currently running operating system meet the above condition?</entry>
     <entry lang="en" key="CONFIRM_HIDDEN_OS_EXTRA_BOOT_PARTITION">Your system uses an extra boot partition. VeraCrypt does not support hibernation on hidden operating systems that use an extra boot partition (decoy systems can be hibernated without any problems).\n\nPlease note that the boot partition would be shared by both the decoy and the hidden system. Therefore, in order to prevent data leaks and problems while resuming from hibernation, VeraCrypt has to prevent the hidden system from writing to the shared boot partition and from hibernating.\n\n\nDo you want to continue? If you select 'No', instructions for removing the extra boot partition will be displayed.</entry>
-    <entry lang="en" key="EXTRA_BOOT_PARTITION_REMOVAL_INSTRUCTIONS">\nThe extra boot partition can be removed before installing Windows. To do so, follow these steps:\n\n1) Boot your Windows installation disc.\n\n2) In the Windows installer screen, click 'Install now' > 'Custom (advanced)'.\n\n3) Click 'Drive Options'.\n\n4) Select the main system partition and delete it by clicking 'Delete' and 'OK'.\n\n5) Select the 'System Reserved' partition, click 'Extend', and increase its size so that the operating system can be installed to it.\n\n6) Click 'Apply' and 'OK'.\n\n7) Install Windows on the 'System Reserved' partition.\n\n\nShould an attacker ask why you removed the extra boot partition, you can answer that you wanted to prevent any possible data leaks to the unencrypted boot partition.\n\nNote: You can print this text by clicking the 'Print' button below. If you save a copy of this text or print it (strongly recommended, unless your printer stores copies of documents it prints on its internal drive), you should destroy any copies of it after removing the extra boot partition (otherwise, if such a copy was found, it might indicate that there is a hidden operating system on this computer).</entry>
+    <entry lang="en" key="EXTRA_BOOT_PARTITION_REMOVAL_INSTRUCTIONS">\nThe extra boot partition can be removed before installing Windows. To do so, follow these steps:\n\n1) Boot your Windows installation disc.\n\n2) In the Windows installer screen, click 'Install now' &gt; 'Custom (advanced)'.\n\n3) Click 'Drive Options'.\n\n4) Select the main system partition and delete it by clicking 'Delete' and 'OK'.\n\n5) Select the 'System Reserved' partition, click 'Extend', and increase its size so that the operating system can be installed to it.\n\n6) Click 'Apply' and 'OK'.\n\n7) Install Windows on the 'System Reserved' partition.\n\n\nShould an attacker ask why you removed the extra boot partition, you can answer that you wanted to prevent any possible data leaks to the unencrypted boot partition.\n\nNote: You can print this text by clicking the 'Print' button below. If you save a copy of this text or print it (strongly recommended, unless your printer stores copies of documents it prints on its internal drive), you should destroy any copies of it after removing the extra boot partition (otherwise, if such a copy was found, it might indicate that there is a hidden operating system on this computer).</entry>
     <entry lang="en" key="GAP_BETWEEN_SYS_AND_HIDDEN_OS_PARTITION">Warning: There is unallocated space between the system partition and the first partition behind it. After you create the hidden operating system, you must not create any new partitions in that unallocated space. Otherwise, the hidden operating system will be impossible to boot (until you delete such newly created partitions).</entry>
     <entry lang="en" key="ALGO_NOT_SUPPORTED_FOR_SYS_ENCRYPTION">This algorithm is currently not supported for system encryption.</entry>
     <entry lang="en" key="ALGO_NOT_SUPPORTED_FOR_TRUECRYPT_MODE">This algorithm is not supported for TrueCrypt mode.</entry>
@@ -1250,7 +1250,7 @@
     <entry lang="en" key="NOTE_CASCADE_FOR_SYS_ENCRYPTION">If you encounter any of the previously described problems, decrypt the partition/drive (if it is encrypted) and then try encrypting it again using a non-cascade encryption algorithm (e.g. AES).</entry>
     <entry lang="en" key="UPDATE_TC_IN_DECOY_OS_FIRST">WARNING: For safety and security reasons, you should update VeraCrypt on the decoy operating system before you update it on the hidden operating system.\n\nTo do so, boot the decoy system and run the VeraCrypt installer from within it. Then boot the hidden system and run the installer from within it as well.\n\nNote: The decoy system and the hidden system share a single boot loader. If you upgraded VeraCrypt only on the hidden system (but not on the decoy system), the decoy system would contain a VeraCrypt driver and VeraCrypt applications whose version numbers are different from the version number of the VeraCrypt Boot Loader. Such a discrepancy might indicate that there is a hidden operating system on this computer.\n\n\nDo you want to continue?</entry>
     <entry lang="en" key="UPDATE_TC_IN_HIDDEN_OS_TOO">The version number of the VeraCrypt Boot Loader that booted this operating system is different from the version number of the VeraCrypt driver (and of the VeraCrypt applications) installed on this system.\n\nYou should run the VeraCrypt installer (whose version number is the same as the one of the VeraCrypt Boot Loader) to update VeraCrypt on this operating system.</entry>
-    <entry lang="en" key="BOOT_LOADER_VERSION_DIFFERENT_FROM_DRIVER_VERSION">The version number of the VeraCrypt Boot Loader that booted this operating system is different from the version number of the VeraCrypt driver (and of the VeraCrypt applications) installed on this system. Note that older versions may contain bugs fixed in later versions.\n\nIf you did not boot from the VeraCrypt Rescue Disk, you should reinstall VeraCrypt or upgrade it to the latest stable version (the boot loader will be updated too).\n\nIf you booted from the VeraCrypt Rescue Disk, you should update it ('System' > 'Create Rescue Disk').</entry>
+    <entry lang="en" key="BOOT_LOADER_VERSION_DIFFERENT_FROM_DRIVER_VERSION">The version number of the VeraCrypt Boot Loader that booted this operating system is different from the version number of the VeraCrypt driver (and of the VeraCrypt applications) installed on this system. Note that older versions may contain bugs fixed in later versions.\n\nIf you did not boot from the VeraCrypt Rescue Disk, you should reinstall VeraCrypt or upgrade it to the latest stable version (the boot loader will be updated too).\n\nIf you booted from the VeraCrypt Rescue Disk, you should update it ('System' &gt; 'Create Rescue Disk').</entry>
     <entry lang="en" key="BOOT_LOADER_UPGRADE_OK">The VeraCrypt Boot Loader has been upgraded.\n\nIt is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' &gt; 'Create Rescue Disk' after you restart your computer.</entry>
     <entry lang="en" key="BOOT_LOADER_UPGRADE_OK_HIDDEN_OS">The VeraCrypt Boot Loader has been upgraded.\n\nIt is strongly recommended that you boot the decoy operating system and then create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' &gt; 'Create Rescue Disk'.</entry>
     <entry lang="en" key="BOOT_LOADER_UPGRADE_FAILED">Failed to upgrade the VeraCrypt Boot Loader.</entry>
@@ -1275,7 +1275,7 @@
     <entry lang="en" key="INVALID_TOKEN_KEYFILE_PATH">Security token keyfile path is invalid.</entry>
     <entry lang="en" key="SECURITY_TOKEN_ERROR">Security token error</entry>
     <entry lang="en" key="CKR_PIN_INCORRECT">Password for security token is incorrect.</entry>
-    <entry lang="en" key="CKR_DEVICE_MEMORY">The security token does not have enough memory/space to perform the requested operation.\n\nIf you are attempting to import a keyfile, you should select a smaller file or use a keyfile generated by VeraCrypt (select 'Tools' > 'Keyfile Generator').</entry>
+    <entry lang="en" key="CKR_DEVICE_MEMORY">The security token does not have enough memory/space to perform the requested operation.\n\nIf you are attempting to import a keyfile, you should select a smaller file or use a keyfile generated by VeraCrypt (select 'Tools' &gt; 'Keyfile Generator').</entry>
     <entry lang="en" key="ALL_TOKEN_SESSIONS_CLOSED">All open security token sessions have been closed.</entry>
     <entry lang="en" key="SELECT_TOKEN_KEYFILES">Select Security Token Keyfiles</entry>
     <entry lang="fa" key="TOKEN_SLOT_ID">اسلات</entry>
@@ -1300,18 +1300,18 @@
     <entry lang="en" key="MOUNTED_DEVICE_FORCED_READ_ONLY_WRITE_PROTECTION">Volume '%s' has been mounted as read-only because the operating system reported the host device to be write-protected.\n\nPlease note that some custom chipset drivers have been reported to cause writable media to falsely appear write-protected. This problem is not caused by VeraCrypt. It may be solved by updating or uninstalling any custom (non-Microsoft) chipset drivers that are currently installed on this system.</entry>
     <entry lang="en" key="LIMIT_ENC_THREAD_POOL_NOTE">Note that the Hyper-Threading technology provides multiple logical cores per a single physical core. When Hyper Threading is enabled, the number selected above represents the number of logical processors/cores.</entry>
     <entry lang="en" key="NUMBER_OF_THREADS">%d threads</entry>
-    <entry lang="en" key="DISABLED_HW_AES_AFFECTS_PERFORMANCE">Note that hardware-accelerated AES is disabled, which will affect benchmark results (worse performance).\n\nTo enable hardware acceleration, select 'Settings' > 'Performance' and enable the corresponding option.</entry>
-    <entry lang="en" key="LIMITED_THREAD_COUNT_AFFECTS_PERFORMANCE">Note that the number of threads is currently limited, which will affect benchmark results (worse performance).\n\nTo utilize the full potential of the processor(s), select 'Settings' > 'Performance' and disable the corresponding option.</entry>
+    <entry lang="en" key="DISABLED_HW_AES_AFFECTS_PERFORMANCE">Note that hardware-accelerated AES is disabled, which will affect benchmark results (worse performance).\n\nTo enable hardware acceleration, select 'Settings' &gt; 'Performance' and enable the corresponding option.</entry>
+    <entry lang="en" key="LIMITED_THREAD_COUNT_AFFECTS_PERFORMANCE">Note that the number of threads is currently limited, which will affect benchmark results (worse performance).\n\nTo utilize the full potential of the processor(s), select 'Settings' &gt; 'Performance' and disable the corresponding option.</entry>
     <entry lang="en" key="ASK_REMOVE_DEVICE_WRITE_PROTECTION">Do you want VeraCrypt to attempt to disable write protection of the partition/drive?</entry>
     <entry lang="en" key="CONFIRM_SETTING_DEGRADES_PERFORMANCE">WARNING: This setting may degrade performance.\n\nAre you sure you want to use this setting?</entry>
     <entry lang="en" key="HOST_DEVICE_REMOVAL_DISMOUNT_WARN_TITLE">Warning: VeraCrypt volume auto-dismounted</entry>
     <entry lang="en" key="HOST_DEVICE_REMOVAL_DISMOUNT_WARN">Before you physically remove or turn off a device containing a mounted volume, you should always dismount the volume in VeraCrypt first.\n\nUnexpected spontaneous dismount is usually caused by an intermittently failing cable, drive (enclosure), etc.</entry>
     <entry lang="en" key="UNSUPPORTED_TRUECRYPT_FORMAT">This volume was created with TrueCrypt %x.%x but VeraCrypt supports only TrueCrypt volumes created with TrueCrypt 6.x/7.x series</entry>
-    <entry lang="en" key="TEST">Test</entry>
+    <entry lang="fa" key="TEST">آزمایش</entry>
     <entry lang="en" key="KEYFILE">Keyfile</entry>
     <entry lang="en" key="VKEY_08">Backspace</entry>
     <entry lang="en" key="VKEY_09">Tab</entry>
-    <entry lang="en" key="VKEY_0C">Clear</entry>
+    <entry lang="fa" key="VKEY_0C">پاک</entry>
     <entry lang="en" key="VKEY_0D">Enter</entry>
     <entry lang="fa" key="VKEY_13">توقف</entry>
     <entry lang="en" key="VKEY_14">Caps Lock</entry>
@@ -1326,7 +1326,7 @@
     <entry lang="en" key="VKEY_28">Down Arrow</entry>
     <entry lang="en" key="VKEY_29">Select Key</entry>
     <entry lang="en" key="VKEY_2A">Print Key</entry>
-    <entry lang="en" key="VKEY_2B">Execute Key</entry>
+    <entry lang="fa" key="VKEY_2B">اجراء کلید</entry>
     <entry lang="en" key="VKEY_2C">Print Screen</entry>
     <entry lang="en" key="VKEY_2D">Insert</entry>
     <entry lang="fa" key="VKEY_2E">حذف</entry>
@@ -1338,7 +1338,7 @@
     <entry lang="en" key="VKEY_A7">Browser Forward</entry>
     <entry lang="en" key="VKEY_A8">Browser Refresh</entry>
     <entry lang="en" key="VKEY_A9">Browser Stop</entry>
-    <entry lang="en" key="VKEY_AA">Browser Search</entry>
+    <entry lang="fa" key="VKEY_AA">جستجو مرورگر</entry>
     <entry lang="en" key="VKEY_AB">Browser Favorites</entry>
     <entry lang="en" key="VKEY_AC">Browser Home</entry>
     <entry lang="en" key="VKEY_AD">Mute</entry>
@@ -1351,11 +1351,11 @@
     <entry lang="en" key="VKEY_B4">Start Mail Key</entry>
     <entry lang="en" key="VKEY_B5">Select Media Key</entry>
     <entry lang="en" key="VKEY_B6">Application 1</entry>
-    <entry lang="en" key="VKEY_B7">Application 2</entry>
+    <entry lang="fa" key="VKEY_B7">برنامه 2</entry>
     <entry lang="en" key="VKEY_F6">Attn</entry>
     <entry lang="en" key="VKEY_F7">CrSel</entry>
     <entry lang="en" key="VKEY_F8">ExSel</entry>
-    <entry lang="en" key="VKEY_FA">Play</entry>
+    <entry lang="fa" key="VKEY_FA">نمایش روی صفحه</entry>
     <entry lang="fa" key="VKEY_FB">زوم</entry>
     <entry lang="en" key="VK_NUMPAD">NumPad</entry>
     <entry lang="fa" key="VK_SHIFT">كليد شيفت</entry>
@@ -1363,22 +1363,22 @@
     <entry lang="fa" key="VK_ALT">Alt كليد</entry>
     <entry lang="fa" key="VK_WIN">كليد ويندوز</entry>
     <entry lang="en" key="BYTE">B</entry>
-    <entry lang="en" key="KB">KB</entry>
-    <entry lang="en" key="MB">MB</entry>
-    <entry lang="en" key="GB">GB</entry>
-    <entry lang="en" key="TB">TB</entry>
+    <entry lang="fa" key="KB">کیلو بایت</entry>
+    <entry lang="fa" key="MB">مگابایت</entry>
+    <entry lang="fa" key="GB">گیگابایت</entry>
+    <entry lang="fa" key="TB">ترابایت</entry>
     <entry lang="en" key="PB">PB</entry>
     <entry lang="en" key="B_PER_SEC">B/s</entry>
-    <entry lang="en" key="KB_PER_SEC">KB/s</entry>
-    <entry lang="en" key="MB_PER_SEC">MB/s</entry>
+    <entry lang="fa" key="KB_PER_SEC">کیلوبایت بر ثانیه</entry>
+    <entry lang="fa" key="MB_PER_SEC">مگابایت/ثانیه</entry>
     <entry lang="en" key="GB_PER_SEC">GB/s</entry>
-    <entry lang="en" key="TB_PER_SEC">TB/s</entry>
+    <entry lang="fa" key="TB_PER_SEC">ترابایت/ثانیه</entry>
     <entry lang="en" key="PB_PER_SEC">PB/s</entry>
     <entry lang="en" key="TRIPLE_DOT_GLYPH_ELLIPSIS">…</entry>
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1405,9 +1405,9 @@
     <entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NO_CHECK">The Rescue Disk ZIP image has been created and stored in this file:\n%s\n\nNow you should either extract the image to a USB stick that is formatted as FAT/FAT32 or move it to a safe location for later use.\n\n%lsClick Next to continue.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NOTE">IMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\n</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
-    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
-    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' &gt; 'Create Rescue Disk'.</entry>
+    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' &gt; 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1416,17 +1416,28 @@
     <entry lang="en" key="EDIT_DCSPROP_FOR_ADVANCED_ONLY">WARNING: Inexperienced users should never attempt to manually edit boot loader configurations.\n\nContinue?</entry>
     <entry lang="en" key="DCSPROP_XML_VALIDATION_FAILED">WARNING: Failed to validate the XML format of the Boot Loader configuration. Please check your modifications.</entry>
     <entry lang="fa" key="IDT_ADVANCED_OPTIONS">گزینه‌های پیشرفته</entry>
-    <entry lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' > 'Create Rescue Disk'.\nDo you want to do it now?</entry>
+    <entry lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' &gt; 'Create Rescue Disk'.\nDo you want to do it now?</entry>
     <entry lang="en" key="IDC_ALLOW_TRIM_NONSYS_SSD">Allow TRIM command for non-system SSD partition/drive</entry>
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="en" key="IDT_BENCHMARK">Benchmark:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">
@@ -1470,4 +1481,4 @@
       </xs:complexType>
     </xs:element>
   </xs:schema>
-</VeraCrypt>
+</VeraCrypt>

Translations/Language.hu.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="hu" name="Magyar" en-name="Hungarian" version="2018.03.06" translators="Nyul Balazs > Szaki" />
     <font lang="hu" class="normal" size="11" face="default" />
     <font lang="hu" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system volume where you want to resume the process of in-place encryption.\n\n\nRemark: After you click Next, VeraCrypt will attempt to find all non-system volumes where the process of encryption has been interrupted and where the VeraCrypt volume header can be decrypted using the supplied password and/or keyfile(s). If more than one such volume is found, you will need to select one of them in the next step.</entry>
     <entry lang="hu" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Kérem válasszon egyet a felsorolt kötetekből. A lista minden olyan elérhető nem-rendszerkötetet tartalmaz, amelynél a titkosítási eljárás meg lett szakítva és amelyeknél a fejléc Kikódolható a megfelelő jelszóval és/vagy kulcsfájl(okk)al.</entry>
     <entry lang="hu" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Kérem adja meg a jelszót vagy és/vagy kulcsfájlt a nem-rendszer VeraCrypt kötethez, melyet Ki szeretne kódoltatni.</entry>
-    <entry lang="hu" key="PASSWORD_HELP">Nagyon fontos, hogy jó jelszót válasszon. Hanyagolja az egyszavas, szótárban megtalálhatóakat (vagy 2, 3, 4 ilyen szó kombinációját). Ne tartalmazzon neveket vagy születési időt. Ne lehessen könnyen kitalálni. Egy jó jelszó kis és nagybetűk véletlen sorozata kibővítve számokkal és jelekkel, úgy mint: [/()%!+-_$*ˇ~^] stb.\nJavasoljuk hogy válasszon LEGALÁBB 22 betű hosszút. (Minél hosszabb, annál jobb)\nMaximum hossz = 64 karakter.</entry>
+    <entry lang="hu" key="PASSWORD_HELP">Nagyon fontos, hogy jó jelszót válasszon. Hanyagolja az egyszavas, szótárban megtalálhatóakat (vagy 2, 3, 4 ilyen szó kombinációját). Ne tartalmazzon neveket vagy születési időt. Ne lehessen könnyen kitalálni. Egy jó jelszó kis és nagybetűk véletlen sorozata kibővítve számokkal és jelekkel, úgy mint: [/()%!+-_$*ˇ~^] stb.\nJavasoljuk hogy válasszon LEGALÁBB 22 betű hosszút. (Minél hosszabb, annál jobb)\nMaximum hossz = 128 karakter.</entry>
     <entry lang="hu" key="PASSWORD_HIDDENVOL_HELP">Kérem válasszon jelszót a rejtett kötethez.</entry>
     <entry lang="hu" key="PASSWORD_HIDDEN_OS_HELP">Kérem válasszon jelszót a rejtett operációs rendszerhez.</entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANT: The password that you choose for the hidden operating system in this step must be substantially different from the other two passwords (i.e. from the password for the outer volume and from the password for the decoy operating system).</entry>
     <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Please enter the password for the volume within which you wish to create a hidden volume.\n\nAfter you click Next, VeraCrypt will attempt to mount the volume. As soon as the volume is mounted, its cluster bitmap will be scanned to determine the size of the uninterrupted area of free space (if there is any) whose end is aligned with the end of the volume. This area will accommodate the hidden volume and therefore will limit its maximum possible size. Cluster map scanning is necessary to ensure that no data on the outer volume will be overwritten by the hidden volume.</entry>
-    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 128 characters.</entry>
     <entry lang="en" key="PASSWORD_SYSENC_OUTERVOL_HELP">Please choose a password for the outer volume. This will be the password you will be able to reveal to anyone forcing you to disclose the password for the first partition behind the system partition, where both the outer volume and the hidden volume (containing the hidden operating system) will reside. The existence of the hidden volume (and of the hidden operating system) will remain secret. Note that this password is not for the decoy operating system.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume (i.e. for the hidden operating system).</entry>
     <entry lang="hu" key="PASSWORD_HIDVOL_HOST_TITLE">Külső Kötet Jelszava</entry>
     <entry lang="hu" key="PASSWORD_HIDVOL_TITLE">Rejtett Kötet Jelszó</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="hu" key="PASSWORD_UTF8_TOO_LONG">A beütött jelszó túl hosszú. Az UTF-8 kódolása meghaladja a 64 bájtot.</entry>
+    <entry lang="hu" key="PASSWORD_UTF8_TOO_LONG">A beütött jelszó túl hosszú. Az UTF-8 kódolása meghaladja a 128 bájtot.</entry>
     <entry lang="hu" key="PASSWORD_UTF8_INVALID">A beütött jelszó olyan Unicode karaktereket tartalmaz, melyeket lehetett átkonvertálni UTF-8 kódolásra.</entry>
     <entry lang="hu" key="INIT_DLL">Hiba: Nem sikerült betölteni a rendszer könyvtárat (DLL fájlt).</entry>
     <entry lang="hu" key="ERR_EXFAT_INVALID_VOLUME_SIZE">A megadott fájlméret nem kompatibilis a választott exFAT fájlrendszerrel.</entry>
@@ -1407,7 +1407,7 @@
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="hu" key="IDC_EDIT_DCSPROP">Betöltő (Boot Loader) Konfig. Szerkesztése</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="hu" key="IDC_SELECT_LANGUAGE_LABEL">Válassza ki a telepítés során használandó nyelvet:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="hu" key="IDC_SELECT_LANGUAGE_LABEL">Válassza ki a telepítés során használandó nyelvet:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="hu" key="IDT_BENCHMARK">Sebességteszt:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="hu" key="LEGACY_PASSWORD_UTF8_TOO_LONG">A beütött jelszó túl hosszú. Az UTF-8 kódolása meghaladja a 64 bájtot.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">
@@ -1470,4 +1481,4 @@
       </xs:complexType>
     </xs:element>
   </xs:schema>
-</VeraCrypt>
+</VeraCrypt>

Translations/Language.id.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="id" name="Bahasa Indonesia" en-name="Indonesian" version="0.1.0" translators="Tajuddin N. F." />
     <font lang="id" class="normal" size="11" face="default" />
     <font lang="id" class="bold" size="13" face="Arial" />
@@ -35,9 +35,9 @@
     <entry lang="en" key="IDC_FILE_CONTAINER">Create an encrypted file container</entry>
     <entry lang="en" key="IDC_GB">&amp;GB</entry>
     <entry lang="en" key="IDC_TB">&amp;TB</entry>
-    <entry lang="en" key="IDC_HIDDEN_SYSENC_INFO_LINK">More information</entry>
+    <entry lang="id" key="IDC_HIDDEN_SYSENC_INFO_LINK">Informasi lebih lanjut</entry>
     <entry lang="en" key="IDC_HIDDEN_VOL">Hi&amp;dden VeraCrypt volume </entry>
-    <entry lang="en" key="IDC_HIDDEN_VOL_HELP">More information about hidden volumes</entry>
+    <entry lang="id" key="IDC_HIDDEN_VOL_HELP">Informasi lebih lanjut about hidden volumes</entry>
     <entry lang="en" key="IDC_HIDVOL_WIZ_MODE_DIRECT">Direct mode</entry>
     <entry lang="en" key="IDC_HIDVOL_WIZ_MODE_FULL">Normal mode</entry>
     <entry lang="id" key="IDC_KB">&amp;KB</entry>
@@ -46,13 +46,13 @@
     <entry lang="en" key="IDC_KEYFILES_RANDOM_SIZE">Random size ( 64 &lt;-&gt; 1048576 )</entry>
     <entry lang="id" key="IDC_KEY_FILES">&amp;File kunci..</entry>
     <entry lang="en" key="IDC_LINK_HASH_INFO">Information on hash algorithms</entry>
-    <entry lang="en" key="IDC_LINK_MORE_INFO_ABOUT_CIPHER">More information</entry>
+    <entry lang="id" key="IDC_LINK_MORE_INFO_ABOUT_CIPHER">Informasi lebih lanjut</entry>
     <entry lang="en" key="IDC_LINK_PIM_INFO">Information on PIM</entry>
     <entry lang="id" key="IDC_MB">&amp;MB</entry>
-    <entry lang="en" key="IDC_MORE_INFO_ON_CONTAINERS">More information</entry>
+    <entry lang="id" key="IDC_MORE_INFO_ON_CONTAINERS">Informasi lebih lanjut</entry>
     <entry lang="en" key="IDC_MORE_INFO_ON_SYS_ENCRYPTION">More information about system encryption</entry>
-    <entry lang="en" key="IDC_MORE_INFO_SYS_ENCRYPTION">More information</entry>
-    <entry lang="en" key="IDC_MULTI_BOOT">Multi-boot</entry>
+    <entry lang="id" key="IDC_MORE_INFO_SYS_ENCRYPTION">Informasi lebih lanjut</entry>
+    <entry lang="en" key="IDC_MULTI_BOOT">Multi-Boot</entry>
     <entry lang="en" key="IDC_NONSYS_DEVICE">Encrypt a non-system partition/drive</entry>
     <entry lang="id" key="IDC_NO_HISTORY">&amp;Jangan simpan history</entry>
     <entry lang="id" key="IDC_OPEN_OUTER_VOLUME">Buka volume luar</entry>
@@ -101,7 +101,7 @@
     <entry lang="en" key="IDT_SYS_PARTITION">Select this option to encrypt the partition where the currently running Windows operating system is installed.</entry>
     <entry lang="en" key="IDT_VOLUME_LABEL">Volume Label in Windows:</entry>
     <entry lang="en" key="IDT_WIPE_MODE">Wipe mode:</entry>
-    <entry lang="en" key="IDCLOSE">Close</entry>
+    <entry lang="id" key="IDCLOSE">Tutup</entry>
     <entry lang="en" key="IDC_ALLOW_ESC_PBA_BYPASS">Allow pre-boot &amp;authentication to be bypassed by pressing the Esc key (enables boot manager)</entry>
     <entry lang="id" key="IDC_AUTORUN_DISABLE">Jangan buat apapun</entry>
     <entry lang="id" key="IDC_AUTORUN_MOUNT">S&amp;ambung otomatis volume VeraCrypt (yang tertera dibawah ini)</entry>
@@ -145,8 +145,8 @@
     <entry lang="id" key="IDC_HOTKEY_REMOVE">Hapus</entry>
     <entry lang="id" key="IDC_KEYFILES">File kunci...</entry>
     <entry lang="en" key="IDC_LIMIT_ENC_THREAD_POOL">Do not use the following number of processors for encryption/decryption:</entry>
-    <entry lang="en" key="IDC_MORE_INFO_ON_HW_ACCELERATION">More information</entry>
-    <entry lang="en" key="IDC_MORE_INFO_ON_THREAD_BASED_PARALLELIZATION">More information</entry>
+    <entry lang="id" key="IDC_MORE_INFO_ON_HW_ACCELERATION">Informasi lebih lanjut</entry>
+    <entry lang="id" key="IDC_MORE_INFO_ON_THREAD_BASED_PARALLELIZATION">Informasi lebih lanjut</entry>
     <entry lang="en" key="IDC_MORE_SETTINGS">More Settings...</entry>
     <entry lang="id" key="IDC_MOUNTALL">S&amp;ambung otomatis</entry>
     <entry lang="id" key="IDC_MOUNT_OPTIONS">Pilih&amp;an...</entry>
@@ -206,7 +206,7 @@
     <entry lang="id" key="IDM_BENCHMARK">Penguji...</entry>
     <entry lang="id" key="IDM_CHANGE_HEADER_KEY_DERIV_ALGO">Set Header Kunci Asal Algoritma...</entry>
     <entry lang="id" key="IDM_CHANGE_PASSWORD">Ganti Password Volume...</entry>
-    <entry lang="en" key="IDM_CHANGE_SYS_HEADER_KEY_DERIV_ALGO">Set Header Key Derivation Algorithm...</entry>
+    <entry lang="id" key="IDM_CHANGE_SYS_HEADER_KEY_DERIV_ALGO">Set Header Kunci Asal Algoritma...</entry>
     <entry lang="en" key="IDM_CHANGE_SYS_PASSWORD">Change Password...</entry>
     <entry lang="id" key="IDM_CLEAR_HISTORY">Hapus History Volume</entry>
     <entry lang="en" key="IDM_CLOSE_ALL_TOKEN_SESSIONS">Close All Security Token Sessions</entry>
@@ -305,7 +305,7 @@
     <entry lang="en" key="IDC_AUTO">&amp;Auto-Test All</entry>
     <entry lang="en" key="IDC_CONTINUE">&amp;Continue</entry>
     <entry lang="en" key="IDC_DECRYPT">&amp;Decrypt</entry>
-    <entry lang="en" key="IDC_DELETE">&amp;Delete</entry>
+    <entry lang="id" key="IDC_DELETE">&amp;Hapus</entry>
     <entry lang="en" key="IDC_ENCRYPT">&amp;Encrypt</entry>
     <entry lang="en" key="IDC_EXPORT">&amp;Export...</entry>
     <entry lang="en" key="IDC_GENERATE_AND_SAVE_KEYFILE">Generate and Save Keyfile...</entry>
@@ -332,7 +332,7 @@
     <entry lang="en" key="IDC_USE_EMBEDDED_HEADER_BAK">Use backup header embedded in &amp;volume if available</entry>
     <entry lang="en" key="IDC_XTS_MODE_ENABLED">XTS mode</entry>
     <entry lang="id" key="IDD_ABOUT_DLG">Tentang VeraCrypt</entry>
-    <entry lang="en" key="IDD_BENCHMARK_DLG">VeraCrypt - Encryption Algorithm Benchmark</entry>
+    <entry lang="en" key="IDD_BENCHMARK_DLG">VeraCrypt - Algorithms Benchmark</entry>
     <entry lang="en" key="IDD_CIPHER_TEST_DLG">VeraCrypt - Test Vectors</entry>
     <entry lang="en" key="IDD_COMMANDHELP_DLG">Command Line Help</entry>
     <entry lang="en" key="IDD_KEYFILES">VeraCrypt - Keyfiles</entry>
@@ -390,7 +390,7 @@
     <entry lang="en" key="ADMIN_PRIVILEGES_DRIVER">In order to load the VeraCrypt driver, you need to be logged into an account with administrator privileges.</entry>
     <entry lang="en" key="ADMIN_PRIVILEGES_WARN_DEVICES">Please note that in order to encrypt, decrypt or format a partition/device you need to be logged into an account with administrator privileges.\n\nThis does not apply to file-hosted volumes.</entry>
     <entry lang="en" key="ADMIN_PRIVILEGES_WARN_HIDVOL">In order to create a hidden volume you need to be logged into an account with administrator privileges.\n\nContinue?</entry>
-    <entry lang="en" key="ADMIN_PRIVILEGES_WARN_NTFS">Please note that in order to format the volume as NTFS you need to be logged into an account with administrator privileges.\n\nWithout administrator privileges, you can format the volume as FAT.</entry>
+    <entry lang="en" key="ADMIN_PRIVILEGES_WARN_NTFS">Please note that in order to format the volume as NTFS/exFAT/ReFS you need to be logged into an account with administrator privileges.\n\nWithout administrator privileges, you can format the volume as FAT.</entry>
     <entry lang="en" key="AES_HELP">FIPS-approved cipher (Rijndael, published in 1998) that may be used by U.S. government departments and agencies to protect classified information up to the Top Secret level. 256-bit key, 128-bit block, 14 rounds (AES-256). Mode of operation is XTS.</entry>
     <entry lang="id" key="ALREADY_MOUNTED">Volume sudah tersambung</entry>
     <entry lang="en" key="ERR_SELF_TESTS_FAILED">CAUTION: At least one encryption or hash algorithm failed the built-in automatic self-tests!\n\nVeraCrypt installation may be corrupted.</entry>
@@ -445,7 +445,7 @@
     <entry lang="en" key="DISK_FREE_PB">Free space on drive %s is %.2f PB</entry>
     <entry lang="en" key="DRIVELETTERS">Could not get available drive letters.</entry>
     <entry lang="en" key="DRIVER_NOT_FOUND">Error: VeraCrypt driver not found.\n\nPlease copy the files 'veracrypt.sys' and 'veracrypt-x64.sys' to the directory where the main VeraCrypt application (VeraCrypt.exe) is located.</entry>
-    <entry lang="en" key="DRIVER_VERSION">Error: An incompatible version of the VeraCrypt driver is currently running.\n\nIf you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already installed, you must uninstall it first (or upgrade it using the VeraCrypt installer). To uninstall it, follow these steps: On Windows Vista or later, select 'Start Menu' > Computer > 'Uninstall or change a program' > VeraCrypt > Uninstall; on Windows XP, select 'Start Menu' > Settings > 'Control Panel' > 'Add Or Remove Programs' > VeraCrypt > Remove.\n\nSimilarly, if you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already running in portable mode, you must restart the system first and then run only this new version.</entry>
+    <entry lang="en" key="DRIVER_VERSION">Error: An incompatible version of the VeraCrypt driver is currently running.\n\nIf you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already installed, you must uninstall it first (or upgrade it using the VeraCrypt installer). To uninstall it, follow these steps: On Windows Vista or later, select 'Start Menu' &gt; Computer &gt; 'Uninstall or change a program' &gt; VeraCrypt &gt; Uninstall; on Windows XP, select 'Start Menu' &gt; Settings &gt; 'Control Panel' &gt; 'Add Or Remove Programs' &gt; VeraCrypt &gt; Remove.\n\nSimilarly, if you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already running in portable mode, you must restart the system first and then run only this new version.</entry>
     <entry lang="en" key="ERR_CIPHER_INIT_FAILURE">Error: Cipher initialization failure.</entry>
     <entry lang="en" key="ERR_CIPHER_INIT_WEAK_KEY">Error: A weak or a potentially weak key has been detected. The key will be discarded. Please try again.</entry>
     <entry lang="en" key="EXCEPTION_REPORT">A critical error has occurred and VeraCrypt must be terminated. If this is caused by a bug in VeraCrypt, we would like to fix it. To help us, you can send us an automatically generated error report containing the following items:\n\n- Program version\n- Operating system version\n- Type of CPU\n- VeraCrypt component name\n- Checksum of VeraCrypt executable\n- Symbolic name of dialog window\n- Error category\n- Error address\n- VeraCrypt call stack\n\nIf you select 'Yes', the following URL (which contains the entire error report) will be opened in your default Internet browser.\n\n%hs\n\nDo you want to send us the above error report?</entry>
@@ -466,7 +466,7 @@
     <entry lang="en" key="ENCRYPT">&amp;Encrypt</entry>
     <entry lang="en" key="DECRYPT">&amp;Decrypt</entry>
     <entry lang="en" key="PERMANENTLY_DECRYPT">&amp;Permanently Decrypt</entry>
-    <entry lang="en" key="EXIT">Exit</entry>
+    <entry lang="id" key="EXIT">Keluar</entry>
     <entry lang="en" key="EXT_PARTITION">Please create a logical drive for this extended partition, and then try again.</entry>
     <entry lang="en" key="FILE_HELP">A VeraCrypt volume can reside in a file (called VeraCrypt container), which can reside on a hard disk, on a USB flash drive, etc. A VeraCrypt container is just like any normal file (it can be, for example, moved or deleted as any normal file). Click 'Select File' to choose a filename for the container and to select the location where you wish the container to be created.\n\nWARNING: If you select an existing file, VeraCrypt will NOT encrypt it; the file will be deleted and replaced with the newly created VeraCrypt container. You will be able to encrypt existing files (later on) by moving them to the VeraCrypt container that you are about to create now.</entry>
     <entry lang="en" key="FILE_HELP_HIDDEN_HOST_VOL">Select the location of the outer volume to be created (within this volume the hidden volume will be created later on).\n\nA VeraCrypt volume can reside in a file (called VeraCrypt container), which can reside on a hard disk, on a USB flash drive, etc. A VeraCrypt container can be moved or deleted as any normal file. Click 'Select File' to choose a filename for the container and to select the location where you wish the container to be created. If you select an existing file, VeraCrypt will NOT encrypt it; it will be deleted and replaced with the newly created container. You will be able to encrypt existing files (later on) by moving them to the VeraCrypt container you are about to create now.</entry>
@@ -481,7 +481,7 @@
     <entry lang="en" key="FILESYS_PAGE_TITLE">Large Files</entry>
     <entry lang="en" key="FILESYS_PAGE_HELP_QUESTION">Do you intend to store files larger than 4 GB in this VeraCrypt volume?</entry>
     <entry lang="en" key="FILESYS_PAGE_HELP_EXPLANATION">Depending on your choice above, VeraCrypt will choose a suitable default file system for the VeraCrypt volume (you will be able to select a file system in the next step).</entry>
-    <entry lang="en" key="FILESYS_PAGE_HELP_EXPLANATION_HIDVOL">As you are creating an outer volume, you should consider choosing 'No'. If you choose 'Yes', the default filesystem will be NTFS, which is not as suitable for outer volumes as FAT (for example, the maximum possible size of the hidden volume will be significantly greater if the outer volume is formatted as FAT). Normally, FAT is the default for both hidden and normal volumes (so FAT volumes are not suspicious). However, if the user indicates intent to store files larger than 4 GB (which the FAT file system does not allow), then FAT is not the default.</entry>
+    <entry lang="en" key="FILESYS_PAGE_HELP_EXPLANATION_HIDVOL">As you are creating an outer volume, you should consider choosing 'No'. If you choose 'Yes', the default filesystem will be NTFS, which is not as suitable for outer volumes as FAT/exFAT (for example, the maximum possible size of the hidden volume will be significantly greater if the outer volume is formatted as FAT/exFAT). Normally, FAT is the default for both hidden and normal volumes (so FAT volumes are not suspicious). However, if the user indicates intent to store files larger than 4 GB (which the FAT file system does not allow), then FAT is not the default.</entry>
     <entry lang="en" key="FILESYS_PAGE_HELP_EXPLANATION_HIDVOL_CONFIRM">Are you sure you want to choose 'Yes'?</entry>
     <entry lang="en" key="DEVICE_TRANSFORM_MODE_PAGE_TITLE">Volume Creation Mode</entry>
     <entry lang="en" key="DEVICE_TRANSFORM_MODE_PAGE_FORMAT_HELP">This is the fastest way to create a partition-hosted or device-hosted VeraCrypt volume (in-place encryption, which is the other option, is slower because content of each sector has to be first read, encrypted, and then written). Any data currently stored on the selected partition/device will be lost (the data will NOT be encrypted; it will be overwritten with random data). If you want to encrypt existing data on a partition, choose the other option.</entry>
@@ -499,7 +499,7 @@
     <entry lang="en" key="WIPE_FINISHED">The content of the partition/device has been successfully erased.</entry>
     <entry lang="en" key="WIPE_FINISHED_DECOY_SYSTEM_PARTITION">The content of the partition where the original system (of which the hidden system is a clone) resided has been successfully erased.</entry>
     <entry lang="en" key="DECOY_OS_VERSION_WARNING">Please make sure the version of Windows you are going to install (on the wiped partition) is the same as the version of Windows you are currently running. This is required due to the fact that both systems will share a common boot partition.</entry>
-    <entry lang="en" key="SYSTEM_ENCRYPTION_FINISHED">The system partition/drive has been successfully encrypted.\n\nNote: If there are non-system VeraCrypt volumes that you need to have mounted automatically every time Windows starts, you can set it up by mounting each of them and selecting 'Favorites' > 'Add Mounted Volume to System Favorites').</entry>
+    <entry lang="en" key="SYSTEM_ENCRYPTION_FINISHED">The system partition/drive has been successfully encrypted.\n\nNote: If there are non-system VeraCrypt volumes that you need to have mounted automatically every time Windows starts, you can set it up by mounting each of them and selecting 'Favorites' &gt; 'Add Mounted Volume to System Favorites').</entry>
     <entry lang="en" key="SYSTEM_DECRYPTION_FINISHED">The system partition/drive has been successfully decrypted.</entry>
     <entry lang="en" key="FORMAT_FINISHED_HELP">\n\nThe VeraCrypt volume has been created and is ready for use. If you wish to create another VeraCrypt volume, click Next. Otherwise, click Exit.</entry>
     <entry lang="en" key="SYSENC_HIDDEN_VOL_FORMAT_FINISHED_HELP">\n\nThe hidden VeraCrypt volume has been successfully created (the hidden operating system will reside within this hidden volume).\n\nClick Next to continue.</entry>
@@ -536,8 +536,8 @@
     <entry lang="en" key="HIDVOL_PROT_WARN_AFTER_MOUNT">The hidden volume is now protected against damage until the outer volume is dismounted.\n\nWARNING: If any data is attempted to be saved to the hidden volume area, VeraCrypt will start write-protecting the entire volume (both the outer and the hidden part) until it is dismounted. This may cause filesystem corruption on the outer volume, which (if repeated) might adversely affect plausible deniability of the hidden volume. Therefore, you should make every effort to avoid writing to the hidden volume area. Any data being saved to the hidden volume area will not be saved and will be lost. Windows may report this as a write error ("Delayed Write Failed" or "The parameter is incorrect").</entry>
     <entry lang="en" key="HIDVOL_PROT_WARN_AFTER_MOUNT_PLURAL">Each of the hidden volumes within the newly mounted volumes is now protected against damage until dismounted.\n\nWARNING: If any data is attempted to be saved to protected hidden volume area of any of these volumes, VeraCrypt will start write-protecting the entire volume (both the outer and the hidden part) until it is dismounted. This may cause filesystem corruption on the outer volume, which (if repeated) might adversely affect plausible deniability of the hidden volume. Therefore, you should make every effort to avoid writing to the hidden volume area. Any data being saved to protected hidden volume areas will not be saved and will be lost. Windows may report this as a write error ("Delayed Write Failed" or "The parameter is incorrect").</entry>
     <entry lang="en" key="DAMAGE_TO_HIDDEN_VOLUME_PREVENTED">WARNING: Data were attempted to be saved to the hidden volume area of the volume mounted as %c:! VeraCrypt prevented these data from being saved in order to protect the hidden volume. This may have caused filesystem corruption on the outer volume and Windows may have reported a write error ("Delayed Write Failed" or "The parameter is incorrect"). The entire volume (both the outer and the hidden part) will be write-protected until it is dismounted. If this is not the first time VeraCrypt has prevented data from being saved to the hidden volume area of this volume, plausible deniability of this hidden volume might be adversely affected (due to possible unusual correlated inconsistencies within the outer volume file system). Therefore, you should consider creating a new VeraCrypt volume (with Quick Format disabled) and moving files from this volume to the new volume; this volume should be securely erased (both the outer and the hidden part). We strongly recommend that you restart the operating system now.</entry>
-    <entry lang="en" key="CANNOT_SATISFY_OVER_4G_FILE_SIZE_REQ">You have indicated intent to store files larger than 4 GB on the volume. This requires the volume to be formatted as NTFS, which, however, will not be possible.</entry>
-    <entry lang="en" key="CANNOT_CREATE_NON_HIDDEN_NTFS_VOLUMES_UNDER_HIDDEN_OS">Please note that when a hidden operating system is running, non-hidden VeraCrypt volumes cannot be formatted as NTFS. The reason is that the volume would need to be temporarily mounted without write protection in order to allow the operating system to format it as NTFS (whereas formatting as FAT is performed by VeraCrypt, not by the operating system, and without mounting the volume). For further technical details, see below. You can create a non-hidden NTFS volume from within the decoy operating system.</entry>
+    <entry lang="en" key="CANNOT_SATISFY_OVER_4G_FILE_SIZE_REQ">You have indicated intent to store files larger than 4 GB on the volume. This requires the volume to be formatted as NTFS/exFAT/ReFS, which, however, will not be possible.</entry>
+    <entry lang="en" key="CANNOT_CREATE_NON_HIDDEN_NTFS_VOLUMES_UNDER_HIDDEN_OS">Please note that when a hidden operating system is running, non-hidden VeraCrypt volumes cannot be formatted as NTFS/exFAT/ReFS. The reason is that the volume would need to be temporarily mounted without write protection in order to allow the operating system to format it as NTFS (whereas formatting as FAT is performed by VeraCrypt, not by the operating system, and without mounting the volume). For further technical details, see below. You can create a non-hidden NTFS/exFAT/ReFS volume from within the decoy operating system.</entry>
     <entry lang="en" key="HIDDEN_VOL_CREATION_UNDER_HIDDEN_OS_HOWTO">For security reasons, when a hidden operating system is running, hidden volumes can be created only in the 'direct' mode (because outer volumes must always be mounted as read-only). To create a hidden volume securely, follow these steps:\n\n1) Boot the decoy system.\n\n2) Create a normal VeraCrypt volume and, to this volume, copy some sensitive-looking files that you actually do NOT want to hide (the volume will become the outer volume).\n\n3) Boot the hidden system and start the VeraCrypt Volume Creation Wizard. If the volume is file-hosted, move it to the system partition or to another hidden volume (otherwise, the newly created hidden volume would be mounted as read-only and could not be formatted). Follow the instructions in the wizard so as to select the 'direct' hidden volume creation mode.\n\n4) In the wizard, select the volume you created in step 2 and then follow the instructions to create a hidden volume within it.</entry>
     <entry lang="en" key="HIDDEN_OS_WRITE_PROTECTION_BRIEF_INFO">For security reasons, when a hidden operating system is running, local unencrypted filesystems and non-hidden VeraCrypt volumes are mounted as read-only (no data can be written to such filesystems or VeraCrypt volumes).\n\nData is allowed to be written to any filesystem that resides within a hidden VeraCrypt volume (provided that the hidden volume is not located in a container stored on an unencrypted filesystem or on any other read-only filesystem).</entry>
     <entry lang="en" key="HIDDEN_OS_WRITE_PROTECTION_EXPLANATION">There are three main reasons why such countermeasures have been implemented:\n\n- It enables the creation of a secure platform for mounting of hidden VeraCrypt volumes. Note that we officially recommend that hidden volumes are mounted only when a hidden operating system is running. (For more information, see the subsection 'Security Requirements and Precautions Pertaining to Hidden Volumes' in the documentation.)\n\n- In some cases, it is possible to determine that, at a certain time, a particular filesystem was not mounted under (or that a particular file on the filesystem was not saved or accessed from within) a particular instance of an operating system (e.g. by analyzing and comparing filesystem journals, file timestamps, application logs, error logs, etc). This might indicate that a hidden operating system is installed on the computer. The countermeasures prevent these issues.\n\n- It prevents data corruption and allows safe hibernation. When Windows resumes from hibernation, it assumes that all mounted filesystems are in the same state as when the system entered hibernation. VeraCrypt ensures this by write-protecting any filesystem accessible both from within the decoy and hidden systems. Without such protection, the filesystem could become corrupted when mounted by one system while the other system is hibernated.</entry>
@@ -554,7 +554,7 @@
     <entry lang="en" key="ERR_VOLUME_SIZE_TOO_SMALL">The volume size specified in the command line is too small. The volume can't be created.</entry>
     <entry lang="en" key="ERR_VOLUME_SIZE_TOO_BIG">The volume size specified in the command line is too big. The volume can't be created.</entry>
     <entry lang="en" key="INIT_SYS_ENC">Cannot initialize application components for system encryption.</entry>
-    <entry lang="en" key="INIT_RAND">Failed to initialize the random number generator!</entry>
+    <entry lang="en" key="INIT_RAND">Failed to initialize the random number generator!\n\n\n(If you report a bug in connection with this, please include the following technical information in the bug report:\n%hs, Last Error = 0x%.8X)</entry>
     <entry lang="en" key="CAPI_RAND">Windows Crypto API failed!\n\n\n(If you report a bug in connection with this, please include the following technical information in the bug report:\n%hs, Last Error = 0x%.8X)</entry>
     <entry lang="en" key="INIT_REGISTER">Unable to initialize the application. Failed to register the Dialog class.</entry>
     <entry lang="en" key="INIT_RICHEDIT">Error: Failed to load the Rich Edit system library.</entry>
@@ -615,15 +615,15 @@
     <entry lang="en" key="KEYFILE_CHANGED">Keyfile(s) successfully added/removed.</entry>
     <entry lang="en" key="KEYFILE_EXPORTED">Keyfile exported.</entry>
     <entry lang="en" key="PKCS5_PRF_CHANGED">Header key derivation algorithm successfully set.</entry>
-    <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system volume where you want to resume the process of in-place encryption.\n\n\nRemark: After you click Next, VeraCrypt will attempt to find all non-system volumes where the process of encryption has been interrupted and where the VeraCrypt volume header can be decrypted using the supplied password and/or keyfile(s). If more than one such volume is found, you will need to select one of them in the next step.</entry>
-    <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Please select one of the listed volumes. The list contains every accessible non-system volume where the process of encryption has been interrupted and whose header could be decrypted using the supplied password and/or keyfile(s).</entry>
+    <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system volume where you want to resume the process of in-place encryption/decryption.\n\nRemark: After you click Next, VeraCrypt will attempt to find all non-system volumes where the process of encryption/decryption has been interrupted and where the VeraCrypt volume header can be deciphered using the supplied password and/or keyfile(s). If more than one such volume is found, you will need to select one of them in the next step.</entry>
+    <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Please select one of the listed volumes. The list contains each accessible non-system volume where the process of encryption/decryption has been interrupted and where the volume header was successfully deciphered using the supplied password and/or keyfile(s).</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 128 characters.</entry>
     <entry lang="en" key="PASSWORD_HIDDENVOL_HELP">Please choose a password for the hidden volume. </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_HELP">Please choose a password for the hidden operating system (i.e. for the hidden volume). </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANT: The password that you choose for the hidden operating system in this step must be substantially different from the other two passwords (i.e. from the password for the outer volume and from the password for the decoy operating system).</entry>
     <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Please enter the password for the volume within which you wish to create a hidden volume.\n\nAfter you click Next, VeraCrypt will attempt to mount the volume. As soon as the volume is mounted, its cluster bitmap will be scanned to determine the size of the uninterrupted area of free space (if there is any) whose end is aligned with the end of the volume. This area will accommodate the hidden volume and therefore will limit its maximum possible size. Cluster map scanning is necessary to ensure that no data on the outer volume will be overwritten by the hidden volume.</entry>
-    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 128 characters.</entry>
     <entry lang="en" key="PASSWORD_SYSENC_OUTERVOL_HELP">Please choose a password for the outer volume. This will be the password you will be able to reveal to anyone forcing you to disclose the password for the first partition behind the system partition, where both the outer volume and the hidden volume (containing the hidden operating system) will reside. The existence of the hidden volume (and of the hidden operating system) will remain secret. Note that this password is not for the decoy operating system.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume (i.e. for the hidden operating system).</entry>
     <entry lang="en" key="PASSWORD_HIDVOL_HOST_TITLE">Outer Volume Password</entry>
     <entry lang="en" key="PASSWORD_HIDVOL_TITLE">Hidden Volume Password</entry>
@@ -648,9 +648,9 @@
     <entry lang="en" key="PIM_SMALL_WARNING">You have chosen a Personal Iterations Multiplier (PIM) that is smaller than the default VeraCrypt value. Please note that if your password is not strong enough, this could lead to a weaker security.\n\nDo you confirm that you are using a strong password?</entry>
     <entry lang="en" key="PIM_SYSENC_TOO_BIG">Personal Iterations Multiplier (PIM) maximum value for system encryption is 65535.</entry>
     <entry lang="en" key="PIM_TITLE">Volume PIM</entry>
-    <entry lang="en" key="HIDDEN_FILES_PRESENT_IN_KEYFILE_PATH">\n\nWARNING: Hidden file(s) have been found in a keyfile search path. Such hidden files cannot be used as keyfiles. If you need to use them as keyfiles, remove their 'Hidden' attribute (right-click each of them, select 'Properties', uncheck 'Hidden' and click OK). Note: Hidden files are visible only if the corresponding option is enabled (Computer > Organize > 'Folder and search options' > View).</entry>
+    <entry lang="en" key="HIDDEN_FILES_PRESENT_IN_KEYFILE_PATH">\n\nWARNING: Hidden file(s) have been found in a keyfile search path. Such hidden files cannot be used as keyfiles. If you need to use them as keyfiles, remove their 'Hidden' attribute (right-click each of them, select 'Properties', uncheck 'Hidden' and click OK). Note: Hidden files are visible only if the corresponding option is enabled (Computer &gt; Organize &gt; 'Folder and search options' &gt; View).</entry>
     <entry lang="en" key="HIDDEN_VOL_PROT_PASSWORD_US_KEYB_LAYOUT">If you are attempting to protect a hidden volume containing a hidden system, please make sure you are using the standard US keyboard layout when typing the password for the hidden volume. This is required due to the fact that the password needs to be typed in the pre-boot environment (before Windows starts) where non-US Windows keyboard layouts are not available.</entry>
-    <entry lang="en" key="FOUND_NO_PARTITION_W_DEFERRED_INPLACE_ENC">VeraCrypt has not found any volume where non-system encryption has been interrupted and where the volume header can be decrypted using the supplied password and/or keyfile(s).\n\nPlease make sure the password and/or keyfile(s) are correct and that the partition/volume is not being used by the system or applications (including antivirus software).</entry>
+    <entry lang="en" key="FOUND_NO_PARTITION_W_DEFERRED_INPLACE_ENC">VeraCrypt has not found any volume where the process of encryption/decryption of a non-system volume has been interrupted and where the volume header can be deciphered using the supplied password and/or keyfile(s).\n\nPlease make sure the password and/or keyfile(s) are correct and that the partition/volume is not being used by the system or applications (including antivirus software).</entry>
     <entry lang="en" key="SELECTED_PARTITION_ALREADY_INPLACE_ENC">The selected partition/device is already fully encrypted.\nHeader Flags = 0x%.8X</entry>
     <entry lang="en" key="SELECTED_PARTITION_NOT_INPLACE_ENC">The selected partition/device is not using in-place encryption.\nHeader Flags = 0x%.8X</entry>
     <entry lang="en" key="SYSENC_MOUNT_WITHOUT_PBA_NOTE">\n\nNote: If you are attempting to mount a partition located on an encrypted system drive without pre-boot authentication or to mount the encrypted system partition of an operating system that is not running, you can do so by selecting 'System' &gt; 'Mount Without Pre-Boot Authentication'.</entry>
@@ -666,7 +666,7 @@
     <entry lang="en" key="SELECT_KEYFILE_GENERATION_DIRECTORY">Select a directory where to store the keyfiles.</entry>
     <entry lang="en" key="SELECTED_KEYFILE_IS_CONTAINER_FILE">The current container file was selected as a keyfile. It will be skipped.</entry>
     <entry lang="en" key="SERPENT_HELP">Designed by Ross Anderson, Eli Biham, and Lars Knudsen. Published in 1998. 256-bit key, 128-bit block. Mode of operation is XTS. Serpent was one of the AES finalists.</entry>
-    <entry lang="en" key="SIZE_HELP">Please specify the size of the container you want to create.\n\nIf you create a dynamic (sparse-file) container, this parameter will specify its maximum possible size.\n\nNote that the minimum possible size of a FAT volume is 292 KB. The minimum possible size of an NTFS volume is 3792 KB.</entry>
+    <entry lang="en" key="SIZE_HELP">Please specify the size of the container you want to create.\n\nIf you create a dynamic (sparse-file) container, this parameter will specify its maximum possible size.\n\nNote that the minimum possible size of a FAT volume is 292 KB. The minimum possible size of an exFAT volume is 424 KB. The minimum possible size of an NTFS volume is 3792 KB. The minimum possible size of an ReFS volume is 642 MB.</entry>
     <entry lang="en" key="SIZE_HELP_HIDDEN_HOST_VOL">Please specify the size of the outer volume to be created (you will first create the outer volume and then a hidden volume within it). The minimum possible size of a volume within which a hidden volume is intended to be created is 340 KB.</entry>
     <entry lang="en" key="SIZE_HELP_HIDDEN_VOL">Please specify the size of the hidden volume to create. The minimum possible size of a hidden volume is 40 KB (or 3664 KB if it is formatted as NTFS). The maximum possible size you can specify for the hidden volume is displayed above.</entry>
     <entry lang="en" key="SIZE_HIDVOL_HOST_TITLE">Outer Volume Size</entry>
@@ -690,7 +690,7 @@
     <entry lang="en" key="TC_TRAVELER_DISK">VeraCrypt Traveler Disk</entry>
     <entry lang="en" key="TWOFISH_HELP">Designed by Bruce Schneier, John Kelsey, Doug Whiting, David Wagner, Chris Hall, and Niels Ferguson. Published in 1998. 256-bit key, 128-bit block. Mode of operation is XTS. Twofish was one of the AES finalists.</entry>
     <entry lang="en" key="MORE_INFO_ABOUT">More information on %s</entry>
-    <entry lang="en" key="UNKNOWN">Unknown</entry>
+    <entry lang="id" key="UNKNOWN">Tidak diketahui</entry>
     <entry lang="en" key="ERR_UNKNOWN">An unspecified or unknown error occurred (%d).</entry>
     <entry lang="en" key="UNMOUNTALL_LOCK_FAILED">Some volumes contain files or folders being used by applications or system.\n\nForce dismount?</entry>
     <entry lang="id" key="UNMOUNT_BUTTON">&amp;Putuskan</entry>
@@ -781,13 +781,13 @@
     <entry lang="en" key="DECRYPTION">Decryption</entry>
     <entry lang="en" key="MEAN">Mean</entry>
     <entry lang="en" key="DRIVE">Drive</entry>
-    <entry lang="en" key="SIZE">Size</entry>
+    <entry lang="id" key="SIZE">Ukuran</entry>
     <entry lang="id" key="ENCRYPTION_ALGORITHM">Algoritma pengacak</entry>
     <entry lang="id" key="ENCRYPTION_ALGORITHM_LV">Algoritma pengacak</entry>
-    <entry lang="en" key="TYPE">Type</entry>
+    <entry lang="id" key="TYPE">Jenis</entry>
     <entry lang="en" key="VALUE">Value</entry>
     <entry lang="en" key="PROPERTY">Property</entry>
-    <entry lang="en" key="LOCATION">Location</entry>
+    <entry lang="id" key="LOCATION">Lokasi</entry>
     <entry lang="en" key="BYTES">bytes</entry>
     <entry lang="en" key="HIDDEN">Hidden</entry>
     <entry lang="en" key="OUTER">Outer</entry>
@@ -847,7 +847,7 @@
     <entry lang="en" key="AFTER_INSTALL_TUTORIAL">If you have never used VeraCrypt before, we recommend that you read the chapter Beginner's Tutorial in the VeraCrypt User Guide. Do you want to view the tutorial?</entry>
     <entry lang="en" key="SELECT_AN_ACTION">Please select an action to perform from the following:</entry>
     <entry lang="en" key="REPAIR_REINSTALL">Repair/Reinstall</entry>
-    <entry lang="en" key="UPGRADE">Upgrade</entry>
+    <entry lang="id" key="UPGRADE">Pemutakhiran</entry>
     <entry lang="en" key="UNINSTALL">Uninstall</entry>
     <entry lang="en" key="SETUP_ADMIN">To successfully install/uninstall VeraCrypt, you must have administrator privileges. Do you want to continue?</entry>
     <entry lang="en" key="TC_INSTALLER_IS_RUNNING">VeraCrypt Installer is currently running on this system and performing or preparing installation or update of VeraCrypt. Before you proceed, please wait for it to finish or close it. If you cannot close it, please restart your computer before proceeding.</entry>
@@ -863,7 +863,7 @@
     <entry lang="en" key="INSTALL_OK">VeraCrypt has been successfully installed.</entry>
     <entry lang="en" key="SETUP_UPDATE_OK">VeraCrypt has been successfully updated.</entry>
     <entry lang="en" key="UPGRADE_OK_REBOOT_REQUIRED">VeraCrypt has been successfully upgraded. However, before you can start using it, the computer must be restarted.\n\nDo you want to restart it now?</entry>
-    <entry lang="en" key="SYS_ENC_UPGRADE_FAILED">Failed to upgrade VeraCrypt!\n\nIMPORTANT: Before you shut down or restart the system, we strongly recommend that you use System Restore (Windows Start menu > All programs > Accessories > System Tools > System Restore) to restore your system to the restore point named 'VeraCrypt installation'. If System Restore is not available, you should try installing the original or the new version of VeraCrypt again before you shut down or restart the system.</entry>
+    <entry lang="en" key="SYS_ENC_UPGRADE_FAILED">Failed to upgrade VeraCrypt!\n\nIMPORTANT: Before you shut down or restart the system, we strongly recommend that you use System Restore (Windows Start menu &gt; All programs &gt; Accessories &gt; System Tools &gt; System Restore) to restore your system to the restore point named 'VeraCrypt installation'. If System Restore is not available, you should try installing the original or the new version of VeraCrypt again before you shut down or restart the system.</entry>
     <entry lang="en" key="UNINSTALL_OK">VeraCrypt has been successfully uninstalled.\n\nClick 'Finish' to remove the VeraCrypt installer and the folder %s. Note that the folder will not be removed if it contains any files that were not installed by the VeraCrypt installer or created by VeraCrypt.</entry>
     <entry lang="en" key="REMOVING_REG">Removing VeraCrypt registry entries</entry>
     <entry lang="en" key="ADDING_REG">Adding registry entry</entry>
@@ -918,13 +918,13 @@
     <entry lang="en" key="PROGRESS_STATUS_DECRYPTING">Decrypting</entry>
     <entry lang="en" key="PROGRESS_STATUS_FINALIZING">Finalizing</entry>
     <entry lang="en" key="PROGRESS_STATUS_PAUSED">Paused</entry>
-    <entry lang="en" key="PROGRESS_STATUS_FINISHED">Finished</entry>
-    <entry lang="en" key="PROGRESS_STATUS_ERROR">Error</entry>
+    <entry lang="id" key="PROGRESS_STATUS_FINISHED">Selesai</entry>
+    <entry lang="id" key="PROGRESS_STATUS_ERROR">Kesalahan</entry>
     <entry lang="en" key="FAVORITE_DISCONNECTED_DEV">Device disconnected</entry>
     <entry lang="en" key="SYS_FAVORITE_VOLUMES_SAVED">System favorite volumes saved.\n\nTo enable mounting of system favorite volumes when the system starts, please select 'Settings' &gt; 'System Favorite Volumes' &gt; 'Mount system favorite volumes when Windows starts'.</entry>
     <entry lang="en" key="FAVORITE_ADD_DRIVE_DEV_WARNING">The volume you are adding to favorites is neither a partition nor a dynamic volume. Therefore, VeraCrypt will be unable to mount this favorite volume if the device number changes.</entry>
     <entry lang="en" key="FAVORITE_ADD_PARTITION_TYPE_WARNING">The volume you are adding to favorites is a partition not recognized by Windows.\n\nVeraCrypt will be unable to mount this favorite volume if the device number changes. Please set the type of the partition to a type recognized by Windows (use the SETID command of the Windows 'diskpart' tool). Then add the partition to favorites again.</entry>
-    <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_BACKGROUND_TASK_ERR">VeraCrypt Background Task is disabled or it is configured to exit when there are no mounted volumes (or VeraCrypt is running in portable mode). This may prevent your favorite volumes from being automatically mounted when devices hosting them get connected.\n\nNote: To enable the VeraCrypt Background Task, select Settings > Preferences and check the 'Enabled' checkbox in the section 'VeraCrypt Background Task'.</entry>
+    <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_BACKGROUND_TASK_ERR">VeraCrypt Background Task is disabled or it is configured to exit when there are no mounted volumes (or VeraCrypt is running in portable mode). This may prevent your favorite volumes from being automatically mounted when devices hosting them get connected.\n\nNote: To enable the VeraCrypt Background Task, select Settings &gt; Preferences and check the 'Enabled' checkbox in the section 'VeraCrypt Background Task'.</entry>
     <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_NETWORK_PATH_ERR">A container stored in a remote filesystem shared over a network cannot be automatically mounted when its host device gets connected.</entry>
     <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_DEVICE_PATH_ERR">The device displayed below is neither a partition nor a dynamic volume. Therefore, the volume hosted on the device cannot be automatically mounted when the device gets connected.</entry>
     <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_PARTITION_TYPE_ERR">Please set the type of the partition displayed below to a type recognized by Windows (use the SETID command of the Windows 'diskpart' tool). Then remove the partition from favorites and add it again. This will enable the volume hosted on the device to be automatically mounted when the device gets connected.</entry>
@@ -965,7 +965,7 @@
     <entry lang="en" key="RESCUE_DISK_NON_WIZARD_CHECK_PASSED">The VeraCrypt Rescue Disk has been successfully verified.</entry>
     <entry lang="en" key="RESCUE_DISK_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly burned.\n\nIf you have burned the Rescue Disk, please eject and reinsert the CD/DVD; then try again. If this does not help, please try other CD/DVD recording software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' &gt; 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_ISO_IMAGE_CHECK_PASSED">The VeraCrypt Rescue Disk image has been successfully verified.</entry>
-    <entry lang="en" key="RESCUE_DISK_ISO_IMAGE_CHECK_FAILED">The Rescue Disk image verification failed.\n\nIf you attempted to verify a VeraCrypt Rescue Disk image created for a different master key, password, salt, etc., please note that such Rescue Disk image will always fail this verification. To create a new Rescue Disk image fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
+    <entry lang="en" key="RESCUE_DISK_ISO_IMAGE_CHECK_FAILED">The Rescue Disk image verification failed.\n\nIf you attempted to verify a VeraCrypt Rescue Disk image created for a different master key, password, salt, etc., please note that such Rescue Disk image will always fail this verification. To create a new Rescue Disk image fully compatible with your current configuration, select 'System' &gt; 'Create Rescue Disk'.</entry>
     <entry lang="en" key="ERROR_CREATING_RESCUE_DISK">Error creating VeraCrypt Rescue Disk.</entry>
     <entry lang="en" key="CANNOT_CREATE_RESCUE_DISK_ON_HIDDEN_OS">VeraCrypt Rescue Disk cannot be created when a hidden operating system is running.\n\nTo create a VeraCrypt Rescue Disk, boot the decoy operating system and then select 'System' &gt; 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly burned.\n\nIf you have burned the Rescue Disk, please eject and reinsert the CD/DVD; then click Next to try again. If this does not help, please try another medium%s.\n\nIf you have not burned the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to burn the newly generated Rescue Disk.</entry>
@@ -982,8 +982,8 @@
     <entry lang="en" key="IDPM_PROPERTIES">P&amp;roperties...</entry>
     <entry lang="en" key="HIDDEN_VOL_PROTECTION">Hidden Volume Protected</entry>
     <entry lang="en" key="NOT_APPLICABLE_OR_NOT_AVAILABLE">N/A</entry>
-    <entry lang="en" key="UISTR_YES">Yes</entry>
-    <entry lang="en" key="UISTR_NO">No</entry>
+    <entry lang="id" key="UISTR_YES">Ya</entry>
+    <entry lang="id" key="UISTR_NO">Tidak</entry>
     <entry lang="id" key="UISTR_DISABLED">menonaktifkan</entry>
     <entry lang="en" key="DIGIT_ONE">1</entry>
     <entry lang="en" key="TWO_OR_MORE">2 or more</entry>
@@ -1031,19 +1031,19 @@
     <entry lang="en" key="CONFIRM_NO_FORCED_AUTODISMOUNT">WARNING: If this option is disabled, volumes containing open files/directories will not be possible to auto-dismount.\n\nAre you sure you want to disable this option?</entry>
     <entry lang="en" key="WARN_PREF_AUTO_DISMOUNT">WARNING: Volumes containing open files/directories will NOT be auto-dismounted.\n\nTo prevent this, enable the following option in this dialog window: 'Force auto-dismount even if volume contains open files or directories'</entry>
     <entry lang="en" key="WARN_PREF_AUTO_DISMOUNT_ON_POWER">WARNING: When the notebook battery power is low, Windows may omit sending the appropriate messages to running applications when the computer is entering power saving mode. Therefore, VeraCrypt may fail to auto-dismount volumes in such cases.</entry>
-    <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PROMPT">You have scheduled the process of encryption of a partition/volume. The process has not been completed yet.\n\nDo you want to resume the process now?</entry>
+    <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PROMPT">You have scheduled the process of encryption/decryption of a partition/volume. The process has not been completed yet.\n\nDo you want to resume the process now?</entry>
     <entry lang="en" key="SYSTEM_ENCRYPTION_RESUME_PROMPT">You have scheduled the process of encryption or decryption of the system partition/drive. The process has not been completed yet.\n\nDo you want to start (resume) the process now?</entry>
-    <entry lang="en" key="ASK_NONSYS_INPLACE_ENC_NOTIFICATION_REMOVAL">Do you want to be prompted about whether you want to resume the currently scheduled processes of encryption of non-system partitions/volumes?</entry>
+    <entry lang="en" key="ASK_NONSYS_INPLACE_ENC_NOTIFICATION_REMOVAL">Do you want to be prompted about whether you want to resume the currently scheduled processes of encryption/decryption of non-system partitions/volumes?</entry>
     <entry lang="en" key="KEEP_PROMPTING_ME">Yes, keep prompting me</entry>
     <entry lang="en" key="DO_NOT_PROMPT_ME">No, do not prompt me</entry>
-    <entry lang="en" key="NONSYS_INPLACE_ENC_NOTIFICATION_REMOVAL_NOTE">IMPORTANT: Keep in mind that you can resume the process of encryption of any non-system partition/volume by selecting 'Volumes' &gt; 'Resume Interrupted Process' from the menu bar of the main VeraCrypt window.</entry>
+    <entry lang="en" key="NONSYS_INPLACE_ENC_NOTIFICATION_REMOVAL_NOTE">IMPORTANT: Keep in mind that you can resume the process of encryption/decryption of any non-system partition/volume by selecting 'Volumes' &gt; 'Resume Interrupted Process' from the menu bar of the main VeraCrypt window.</entry>
     <entry lang="en" key="SYSTEM_ENCRYPTION_SCHEDULED_BUT_PBA_FAILED">You have scheduled the process of encryption or decryption of the system partition/drive. However, pre-boot authentication failed (or was bypassed).\n\nNote: If you decrypted the system partition/drive in the pre-boot environment, you may need to finalize the process by selecting 'System' &gt; 'Permanently Decrypt System Partition/Drive' from the menu bar of the main VeraCrypt window.</entry>
     <entry lang="en" key="CONFIRM_EXIT">WARNING: If VeraCrypt exits now, the following functions will be disabled:\n\n1) Hot keys\n2) Auto-dismount (e.g., upon logoff, inadvertent host device removal, time-out, etc.)\n3) Auto-mount of favorite volumes\n4) Notifications (e.g., when damage to hidden volume is prevented)\n\nNote: If you do not wish VeraCrypt to run in the background, disable the VeraCrypt Background Task in the Preferences (and, if necessary, disable the automatic start of VeraCrypt in the Preferences).\n\nAre you sure you want VeraCrypt to exit?</entry>
     <entry lang="en" key="CONFIRM_EXIT_UNIVERSAL">Exit?</entry>
     <entry lang="en" key="CHOOSE_ENCRYPT_OR_DECRYPT">VeraCrypt does not have sufficient information to determine whether to encrypt or decrypt.</entry>
     <entry lang="en" key="CHOOSE_ENCRYPT_OR_DECRYPT_FINALIZE_DECRYPT_NOTE">VeraCrypt does not have sufficient information to determine whether to encrypt or decrypt.\n\nNote: If you decrypted the system partition/drive in the pre-boot environment, you may need to finalize the process by clicking Decrypt.</entry>
     <entry lang="en" key="NONSYS_INPLACE_ENC_REVERSE_INFO">Note: When you are encrypting a non-system partition/volume in place and an error persistently prevents you from finishing the process, you will not be able to mount the volume (and access data stored on it) until you entirely DECRYPT the volume (i.e. reverse the process).\n\nIf you need to do so, follow these steps:\n1) Exit this wizard.\n2) In the main VeraCrypt window, select 'Volumes' &gt; 'Resume Interrupted Process'.\n3) Select 'Decrypt'.</entry>
-    <entry lang="en" key="NONSYS_INPLACE_ENC_DEFER_CONFIRM">Do you want to interrupt and postpone the process of encryption of the partition/volume?\n\nNote: Keep in mind that the volume cannot be mounted until it has been fully encrypted. You will be able to resume the process of encryption and it will continue from the point it was stopped. You can do so, for example, by selecting 'Volumes' &gt; 'Resume Interrupted Process' from the menu bar of the main VeraCrypt window.</entry>
+    <entry lang="en" key="NONSYS_INPLACE_ENC_DEFER_CONFIRM">Do you want to interrupt and postpone the process of encryption/decryption of the partition/volume?\n\nNote: Keep in mind that the volume cannot be mounted until it has been fully encrypted or decrypted. You will be able to resume the process of encryption/decryption and it will continue from the point where it was stopped. You can do so, for example, by selecting 'Volumes' &gt; 'Resume Interrupted Process' from the menu bar of the main VeraCrypt window.</entry>
     <entry lang="en" key="SYSTEM_ENCRYPTION_DEFER_CONFIRM">Do you want to interrupt and postpone the process of encryption of the system partition/drive?\n\nNote: You will be able to resume the process and it will continue from the point it was stopped. You can do so, for example, by selecting 'System' &gt; 'Resume Interrupted Process' from the menu bar of the main VeraCrypt window. If you want to permanently terminate or reverse the encryption process, select 'System' &gt; 'Permanently Decrypt System Partition/Drive'.</entry>
     <entry lang="en" key="SYSTEM_DECRYPTION_DEFER_CONFIRM">Do you want to interrupt and postpone the process of decryption of the system partition/drive?\n\nNote: You will be able to resume the process and it will continue from the point it was stopped. You can do so, for example, by selecting 'System' &gt; 'Resume Interrupted Process' from the menu bar of the main VeraCrypt window. If you want to reverse the decryption process (and start encrypting), select 'System' &gt; 'Encrypt System Partition/Drive'.</entry>
     <entry lang="en" key="FAILED_TO_INTERRUPT_SYSTEM_ENCRYPTION">Error: Failed to interrupt the process of encryption/decryption of the system partition/drive.</entry>
@@ -1096,7 +1096,7 @@
     <entry lang="en" key="DECOY_OS_REINSTALL_WARNING">WARNING: During the process of creation of the hidden operating system, you will be required to fully reinstall the currently running system (in order to create a decoy system securely).\n\nNote: The currently running operating system and the entire content of the system partition will be copied to the hidden volume (in order to create the hidden system).\n\n\nAre you sure you will be able to install Windows using a Windows Setup medium (or using a service partition)?</entry>
     <entry lang="en" key="DECOY_OS_REQUIREMENTS">For security reasons, if the currently running operating system requires activation, it must be activated before proceeding. Note that the hidden operating system will be created by copying the content of the system partition to a hidden volume (so if this operating system is not activated, the hidden operating system will not be activated either). For more information, see the section "Security Requirements and Precautions Pertaining to Hidden Volumes" in the VeraCrypt User's Guide.\n\nImportant: Before proceeding, please make sure you have read the section "Security Requirements and Precautions Pertaining to Hidden Volumes" in the VeraCrypt User's Guide.\n\n\nDoes the currently running operating system meet the above condition?</entry>
     <entry lang="en" key="CONFIRM_HIDDEN_OS_EXTRA_BOOT_PARTITION">Your system uses an extra boot partition. VeraCrypt does not support hibernation on hidden operating systems that use an extra boot partition (decoy systems can be hibernated without any problems).\n\nPlease note that the boot partition would be shared by both the decoy and the hidden system. Therefore, in order to prevent data leaks and problems while resuming from hibernation, VeraCrypt has to prevent the hidden system from writing to the shared boot partition and from hibernating.\n\n\nDo you want to continue? If you select 'No', instructions for removing the extra boot partition will be displayed.</entry>
-    <entry lang="en" key="EXTRA_BOOT_PARTITION_REMOVAL_INSTRUCTIONS">\nThe extra boot partition can be removed before installing Windows. To do so, follow these steps:\n\n1) Boot your Windows installation disc.\n\n2) In the Windows installer screen, click 'Install now' > 'Custom (advanced)'.\n\n3) Click 'Drive Options'.\n\n4) Select the main system partition and delete it by clicking 'Delete' and 'OK'.\n\n5) Select the 'System Reserved' partition, click 'Extend', and increase its size so that the operating system can be installed to it.\n\n6) Click 'Apply' and 'OK'.\n\n7) Install Windows on the 'System Reserved' partition.\n\n\nShould an attacker ask why you removed the extra boot partition, you can answer that you wanted to prevent any possible data leaks to the unencrypted boot partition.\n\nNote: You can print this text by clicking the 'Print' button below. If you save a copy of this text or print it (strongly recommended, unless your printer stores copies of documents it prints on its internal drive), you should destroy any copies of it after removing the extra boot partition (otherwise, if such a copy was found, it might indicate that there is a hidden operating system on this computer).</entry>
+    <entry lang="en" key="EXTRA_BOOT_PARTITION_REMOVAL_INSTRUCTIONS">\nThe extra boot partition can be removed before installing Windows. To do so, follow these steps:\n\n1) Boot your Windows installation disc.\n\n2) In the Windows installer screen, click 'Install now' &gt; 'Custom (advanced)'.\n\n3) Click 'Drive Options'.\n\n4) Select the main system partition and delete it by clicking 'Delete' and 'OK'.\n\n5) Select the 'System Reserved' partition, click 'Extend', and increase its size so that the operating system can be installed to it.\n\n6) Click 'Apply' and 'OK'.\n\n7) Install Windows on the 'System Reserved' partition.\n\n\nShould an attacker ask why you removed the extra boot partition, you can answer that you wanted to prevent any possible data leaks to the unencrypted boot partition.\n\nNote: You can print this text by clicking the 'Print' button below. If you save a copy of this text or print it (strongly recommended, unless your printer stores copies of documents it prints on its internal drive), you should destroy any copies of it after removing the extra boot partition (otherwise, if such a copy was found, it might indicate that there is a hidden operating system on this computer).</entry>
     <entry lang="en" key="GAP_BETWEEN_SYS_AND_HIDDEN_OS_PARTITION">Warning: There is unallocated space between the system partition and the first partition behind it. After you create the hidden operating system, you must not create any new partitions in that unallocated space. Otherwise, the hidden operating system will be impossible to boot (until you delete such newly created partitions).</entry>
     <entry lang="en" key="ALGO_NOT_SUPPORTED_FOR_SYS_ENCRYPTION">This algorithm is currently not supported for system encryption.</entry>
     <entry lang="en" key="ALGO_NOT_SUPPORTED_FOR_TRUECRYPT_MODE">This algorithm is not supported for TrueCrypt mode.</entry>
@@ -1120,8 +1120,8 @@
     <entry lang="en" key="CANNOT_INITIATE_SYS_ENCRYPTION_PRETEST">Cannot initiate the system encryption pretest.</entry>
     <entry lang="en" key="CANNOT_INITIATE_HIDDEN_OS_CREATION">Cannot initiate the process of creation of the hidden operating system.</entry>
     <entry lang="en" key="WIPE_MODE_TITLE">Wipe Mode</entry>
-    <entry lang="en" key="INPLACE_ENC_WIPE_MODE_INFO">On some types of storage media, when data is overwritten with other data, it may be possible to recover the overwritten data using techniques such as magnetic force microscopy. This also applies to data that are overwritten with their encrypted form (which happens when VeraCrypt initially encrypts an unencrypted partition or drive). According to some studies and governmental publications, recovery of overwritten data can be prevented (or made very difficult) by overwritting the data with pseudorandom and certain non-random data a certain number of times. Therefore, if you believe that an adversary might be able to use such techniques to recover the data you intend encrypt, you may want to select one of the wipe modes (existing data will NOT be lost). Note that wiping will NOT be performed after the partition/drive is encrypted. When the partition/drive is fully encrypted, no unencrypted data is written to it. Any data being written to it is first encrypted on the fly in memory and only then is the (encrypted) data written to the disk.</entry>
-    <entry lang="en" key="WIPE_MODE_INFO">On some types of storage media, when data is overwritten with other data (e.g. when the data is erased), it may be possible to recover the overwritten data using techniques such as magnetic force microscopy. According to some studies and governmental publications, recovery of overwritten data can be prevented (or made very difficult) by overwritting the data with pseudorandom and certain non-random data a certain number of times. Therefore, if you believe that an adversary might be able to use such techniques to recover the data that is to be erased, you may want to select one of the multi-pass wipe modes.\n\nNote: The more wipe passes you use, the longer it takes to erase the data.</entry>
+    <entry lang="en" key="INPLACE_ENC_WIPE_MODE_INFO">On some types of storage media, when data is overwritten with other data, it may be possible to recover the overwritten data using techniques such as magnetic force microscopy. This also applies to data that are overwritten with their encrypted form (which happens when VeraCrypt initially encrypts an unencrypted partition or drive). According to some studies and governmental publications, recovery of overwritten data can be prevented (or made very difficult) by overwriting the data with pseudorandom and certain non-random data a certain number of times. Therefore, if you believe that an adversary might be able to use such techniques to recover the data you intend to encrypt, you may want to select one of the wipe modes (existing data will NOT be lost). Note that wiping will NOT be performed after the partition/drive is encrypted. When the partition/drive is fully encrypted, no unencrypted data is written to it. Any data being written to it is first encrypted on the fly in memory and only then is the (encrypted) data written to the disk.</entry>
+    <entry lang="en" key="WIPE_MODE_INFO">On some types of storage media, when data is overwritten with other data (e.g. when the data is erased), it may be possible to recover the overwritten data using techniques such as magnetic force microscopy. According to some studies and governmental publications, recovery of overwritten data can be prevented (or made very difficult) by overwriting the data with pseudorandom and certain non-random data a certain number of times. Therefore, if you believe that an adversary might be able to use such techniques to recover the data that is to be erased, you may want to select one of the multi-pass wipe modes.\n\nNote: The more wipe passes you use, the longer it takes to erase the data.</entry>
     <entry lang="en" key="DEVICE_WIPE_PAGE_TITLE">Wiping</entry>
     <entry lang="en" key="DEVICE_WIPE_PAGE_INFO_HIDDEN_OS">\nNote: You can interrupt the process of wiping, shut down your computer, start the hidden system again and then resume the process (this wizard will be launched automatically). However, if you interrupt it, the entire process of wiping will have to start from the beginning.</entry>
     <entry lang="en" key="DEVICE_WIPE_PAGE_INFO">\n\nNote: If you interrupt the process of wiping and then attempt to resume it, the entire process will have to start from the beginning.</entry>
@@ -1235,7 +1235,7 @@
     <entry lang="en" key="SYSTEM_ENCRYPTION_IN_PROGRESS_ELSEWHERE">An instance of the VeraCrypt Volume Creation Wizard is currently running on this system and performing or preparing encryption/decryption of the system partition/drive. Before you proceed, please wait for it to finish or close it. If you cannot close it, please restart your computer before proceeding.</entry>
     <entry lang="en" key="SYSTEM_ENCRYPTION_NOT_COMPLETED">The process of encryption or decryption of the system partition/drive has not been completed. Please wait until it is complete before proceeding.</entry>
     <entry lang="en" key="ERR_ENCRYPTION_NOT_COMPLETED">Error: The process of encryption of the partition/drive has not been completed. It must be completed first.</entry>
-    <entry lang="en" key="ERR_NONSYS_INPLACE_ENC_INCOMPLETE">Error: The process of encryption of the partition/volume has not been completed. It must be completed first.\n\nNote: To resume the process, select 'Volumes' &gt; 'Resume Interrupted Process' from the menu bar of the main VeraCrypt window.</entry>
+    <entry lang="en" key="ERR_NONSYS_INPLACE_ENC_INCOMPLETE">Error: The process of encryption or decryption of the partition/volume has not been completed. It must be completed first.\n\nNote: To resume the process, select 'Volumes' &gt; 'Resume Interrupted Process' from the menu bar of the main VeraCrypt window.</entry>
     <entry lang="en" key="ERR_SYS_HIDVOL_HEAD_REENC_MODE_WRONG">The password is correct, VeraCrypt has successfully decrypted the volume header and detected that this volume is a hidden system volume. However, you cannot modify the header of a hidden system volume this way.\n\nTo change the password for a hidden system volume, boot the operating system residing in the hidden volume, and then select 'System' &gt; 'Change Password' from the menu bar of the main VeraCrypt window.\n\nTo set the header key derivation algorithm, boot the hidden operating system and then select 'System' &gt; 'Set Header Key Derivation Algorithm'.</entry>
     <entry lang="en" key="CANNOT_DECRYPT_HIDDEN_OS">VeraCrypt does not support in-place decryption of a hidden system partition.\n\nNote: If you want to decrypt the decoy system partition, boot the decoy system, and then select 'System' &gt; 'Permanently Decrypt System Partition/Drive' from the menu bar of the main VeraCrypt window.</entry>
     <entry lang="en" key="ERR_PARAMETER_INCORRECT">Error: Incorrect/invalid parameter.</entry>
@@ -1250,7 +1250,7 @@
     <entry lang="en" key="NOTE_CASCADE_FOR_SYS_ENCRYPTION">If you encounter any of the previously described problems, decrypt the partition/drive (if it is encrypted) and then try encrypting it again using a non-cascade encryption algorithm (e.g. AES).</entry>
     <entry lang="en" key="UPDATE_TC_IN_DECOY_OS_FIRST">WARNING: For safety and security reasons, you should update VeraCrypt on the decoy operating system before you update it on the hidden operating system.\n\nTo do so, boot the decoy system and run the VeraCrypt installer from within it. Then boot the hidden system and run the installer from within it as well.\n\nNote: The decoy system and the hidden system share a single boot loader. If you upgraded VeraCrypt only on the hidden system (but not on the decoy system), the decoy system would contain a VeraCrypt driver and VeraCrypt applications whose version numbers are different from the version number of the VeraCrypt Boot Loader. Such a discrepancy might indicate that there is a hidden operating system on this computer.\n\n\nDo you want to continue?</entry>
     <entry lang="en" key="UPDATE_TC_IN_HIDDEN_OS_TOO">The version number of the VeraCrypt Boot Loader that booted this operating system is different from the version number of the VeraCrypt driver (and of the VeraCrypt applications) installed on this system.\n\nYou should run the VeraCrypt installer (whose version number is the same as the one of the VeraCrypt Boot Loader) to update VeraCrypt on this operating system.</entry>
-    <entry lang="en" key="BOOT_LOADER_VERSION_DIFFERENT_FROM_DRIVER_VERSION">The version number of the VeraCrypt Boot Loader that booted this operating system is different from the version number of the VeraCrypt driver (and of the VeraCrypt applications) installed on this system. Note that older versions may contain bugs fixed in later versions.\n\nIf you did not boot from the VeraCrypt Rescue Disk, you should reinstall VeraCrypt or upgrade it to the latest stable version (the boot loader will be updated too).\n\nIf you booted from the VeraCrypt Rescue Disk, you should update it ('System' > 'Create Rescue Disk').</entry>
+    <entry lang="en" key="BOOT_LOADER_VERSION_DIFFERENT_FROM_DRIVER_VERSION">The version number of the VeraCrypt Boot Loader that booted this operating system is different from the version number of the VeraCrypt driver (and of the VeraCrypt applications) installed on this system. Note that older versions may contain bugs fixed in later versions.\n\nIf you did not boot from the VeraCrypt Rescue Disk, you should reinstall VeraCrypt or upgrade it to the latest stable version (the boot loader will be updated too).\n\nIf you booted from the VeraCrypt Rescue Disk, you should update it ('System' &gt; 'Create Rescue Disk').</entry>
     <entry lang="en" key="BOOT_LOADER_UPGRADE_OK">The VeraCrypt Boot Loader has been upgraded.\n\nIt is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' &gt; 'Create Rescue Disk' after you restart your computer.</entry>
     <entry lang="en" key="BOOT_LOADER_UPGRADE_OK_HIDDEN_OS">The VeraCrypt Boot Loader has been upgraded.\n\nIt is strongly recommended that you boot the decoy operating system and then create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' &gt; 'Create Rescue Disk'.</entry>
     <entry lang="en" key="BOOT_LOADER_UPGRADE_FAILED">Failed to upgrade the VeraCrypt Boot Loader.</entry>
@@ -1275,7 +1275,7 @@
     <entry lang="en" key="INVALID_TOKEN_KEYFILE_PATH">Security token keyfile path is invalid.</entry>
     <entry lang="en" key="SECURITY_TOKEN_ERROR">Security token error</entry>
     <entry lang="en" key="CKR_PIN_INCORRECT">Password for security token is incorrect.</entry>
-    <entry lang="en" key="CKR_DEVICE_MEMORY">The security token does not have enough memory/space to perform the requested operation.\n\nIf you are attempting to import a keyfile, you should select a smaller file or use a keyfile generated by VeraCrypt (select 'Tools' > 'Keyfile Generator').</entry>
+    <entry lang="en" key="CKR_DEVICE_MEMORY">The security token does not have enough memory/space to perform the requested operation.\n\nIf you are attempting to import a keyfile, you should select a smaller file or use a keyfile generated by VeraCrypt (select 'Tools' &gt; 'Keyfile Generator').</entry>
     <entry lang="en" key="ALL_TOKEN_SESSIONS_CLOSED">All open security token sessions have been closed.</entry>
     <entry lang="en" key="SELECT_TOKEN_KEYFILES">Select Security Token Keyfiles</entry>
     <entry lang="en" key="TOKEN_SLOT_ID">Slot</entry>
@@ -1300,14 +1300,14 @@
     <entry lang="en" key="MOUNTED_DEVICE_FORCED_READ_ONLY_WRITE_PROTECTION">Volume '%s' has been mounted as read-only because the operating system reported the host device to be write-protected.\n\nPlease note that some custom chipset drivers have been reported to cause writable media to falsely appear write-protected. This problem is not caused by VeraCrypt. It may be solved by updating or uninstalling any custom (non-Microsoft) chipset drivers that are currently installed on this system.</entry>
     <entry lang="en" key="LIMIT_ENC_THREAD_POOL_NOTE">Note that the Hyper-Threading technology provides multiple logical cores per a single physical core. When Hyper Threading is enabled, the number selected above represents the number of logical processors/cores.</entry>
     <entry lang="en" key="NUMBER_OF_THREADS">%d threads</entry>
-    <entry lang="en" key="DISABLED_HW_AES_AFFECTS_PERFORMANCE">Note that hardware-accelerated AES is disabled, which will affect benchmark results (worse performance).\n\nTo enable hardware acceleration, select 'Settings' > 'Performance' and enable the corresponding option.</entry>
-    <entry lang="en" key="LIMITED_THREAD_COUNT_AFFECTS_PERFORMANCE">Note that the number of threads is currently limited, which will affect benchmark results (worse performance).\n\nTo utilize the full potential of the processor(s), select 'Settings' > 'Performance' and disable the corresponding option.</entry>
+    <entry lang="en" key="DISABLED_HW_AES_AFFECTS_PERFORMANCE">Note that hardware-accelerated AES is disabled, which will affect benchmark results (worse performance).\n\nTo enable hardware acceleration, select 'Settings' &gt; 'Performance' and enable the corresponding option.</entry>
+    <entry lang="en" key="LIMITED_THREAD_COUNT_AFFECTS_PERFORMANCE">Note that the number of threads is currently limited, which will affect benchmark results (worse performance).\n\nTo utilize the full potential of the processor(s), select 'Settings' &gt; 'Performance' and disable the corresponding option.</entry>
     <entry lang="en" key="ASK_REMOVE_DEVICE_WRITE_PROTECTION">Do you want VeraCrypt to attempt to disable write protection of the partition/drive?</entry>
     <entry lang="en" key="CONFIRM_SETTING_DEGRADES_PERFORMANCE">WARNING: This setting may degrade performance.\n\nAre you sure you want to use this setting?</entry>
     <entry lang="en" key="HOST_DEVICE_REMOVAL_DISMOUNT_WARN_TITLE">Warning: VeraCrypt volume auto-dismounted</entry>
     <entry lang="en" key="HOST_DEVICE_REMOVAL_DISMOUNT_WARN">Before you physically remove or turn off a device containing a mounted volume, you should always dismount the volume in VeraCrypt first.\n\nUnexpected spontaneous dismount is usually caused by an intermittently failing cable, drive (enclosure), etc.</entry>
     <entry lang="en" key="UNSUPPORTED_TRUECRYPT_FORMAT">This volume was created with TrueCrypt %x.%x but VeraCrypt supports only TrueCrypt volumes created with TrueCrypt 6.x/7.x series</entry>
-    <entry lang="en" key="TEST">Test</entry>
+    <entry lang="id" key="TEST">Tes</entry>
     <entry lang="en" key="KEYFILE">Keyfile</entry>
     <entry lang="en" key="VKEY_08">Backspace</entry>
     <entry lang="en" key="VKEY_09">Tab</entry>
@@ -1329,7 +1329,7 @@
     <entry lang="en" key="VKEY_2B">Execute Key</entry>
     <entry lang="en" key="VKEY_2C">Print Screen</entry>
     <entry lang="en" key="VKEY_2D">Insert</entry>
-    <entry lang="en" key="VKEY_2E">Delete</entry>
+    <entry lang="id" key="VKEY_2E">Hapus</entry>
     <entry lang="en" key="VKEY_5D">Applications Key</entry>
     <entry lang="en" key="VKEY_5F">Sleep</entry>
     <entry lang="en" key="VKEY_90">Num Lock</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1397,7 +1397,7 @@
     <entry lang="en" key="IDC_DISABLE_BOOT_LOADER_HASH_PROMPT">Do not request Hash algorithm in the pre-boot authentication screen</entry>
     <entry lang="en" key="KUZNYECHIK_HELP">Kuznyechik is a block cipher first published in 2015 and defined in the National Standard of the Russian Federation GOST R 34.12-2015 and also in RFC 7801. 256-bit key, 128-bit block. Mode of operation is XTS.</entry>
     <entry lang="en" key="CAMELLIA_HELP">Jointly developed by Mitsubishi Electric and NTT of Japan. First published on 2000. 256-bit key, 128-bit block. Mode of operation is XTS. It has been approved for use by the ISO/IEC, the European Union's NESSIE project and the Japanese CRYPTREC project.</entry>
-    <entry lang="en" key="TIME">Time</entry>
+    <entry lang="id" key="TIME">Waktu</entry>
     <entry lang="en" key="ITERATIONS">Iterations</entry>
     <entry lang="en" key="PRE-BOOT">Pre-Boot</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_INFO">Before you can encrypt the partition, you must create a VeraCrypt Rescue Disk (VRD), which serves the following purposes:\n\n- If the VeraCrypt Boot Loader, master key, or other critical data gets damaged, the VRD allows you to restore it (note, however, that you will still have to enter the correct password then).\n\n- If Windows gets damaged and cannot start, the VRD allows you to permanently decrypt the partition before Windows starts.\n\n- The VRD will contain a backup of the present EFI boot loader and will allow you to restore it if necessary.\n\nThe VeraCrypt Rescue Disk ZIP image will be created in the location specified below.</entry>
@@ -1405,9 +1405,9 @@
     <entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NO_CHECK">The Rescue Disk ZIP image has been created and stored in this file:\n%s\n\nNow you should either extract the image to a USB stick that is formatted as FAT/FAT32 or move it to a safe location for later use.\n\n%lsClick Next to continue.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NOTE">IMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\n</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
-    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
-    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' &gt; 'Create Rescue Disk'.</entry>
+    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' &gt; 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1416,17 +1416,28 @@
     <entry lang="en" key="EDIT_DCSPROP_FOR_ADVANCED_ONLY">WARNING: Inexperienced users should never attempt to manually edit boot loader configurations.\n\nContinue?</entry>
     <entry lang="en" key="DCSPROP_XML_VALIDATION_FAILED">WARNING: Failed to validate the XML format of the Boot Loader configuration. Please check your modifications.</entry>
     <entry lang="id" key="IDT_ADVANCED_OPTIONS">Pilihan Lebih Lanjut</entry>
-    <entry lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' > 'Create Rescue Disk'.\nDo you want to do it now?</entry>
+    <entry lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' &gt; 'Create Rescue Disk'.\nDo you want to do it now?</entry>
     <entry lang="en" key="IDC_ALLOW_TRIM_NONSYS_SSD">Allow TRIM command for non-system SSD partition/drive</entry>
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="id" key="IDT_BENCHMARK">Penguji:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">
@@ -1470,4 +1481,4 @@
       </xs:complexType>
     </xs:element>
   </xs:schema>
-</VeraCrypt>
+</VeraCrypt>

Translations/Language.it.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="it" name="Italiano" en-name="Italian" version="1.0.1" translators="Maurizio Ballo, Consiglio Gaetano" />
     <font lang="it" class="normal" size="11" face="default" />
     <font lang="it" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="it" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Digitate la password e /o file chiave per il volume non di sistema dove volete riprendere il processo di codifica in posto.\n\n\nNota: Dopo aver fatto click su Avanti, VeraCrypt tenterà di cercare tutti i volumi non di sistema dove il processo di codifica è stato interrotto e dove la testata del volume VeraCrypt può essere DeCrittata usando la password e/o file chiave fornito. Se più di uno di tali volumi viene trovato, avete bisogno di selezionare uno di essi nel passo successivo.</entry>
     <entry lang="it" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Selezionare uno dei volumi elencati. L’elenco contiene ogni volume non di sistema accessibile dove il processo di codifica è stato interrotto e le quali testate devono essere decodificate usando la password o file chiave forniti.</entry>
     <entry lang="it" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Per favore inserisci la password e/o i file chiave per il/i volume/o VeraCrypt che desideri decifrare.</entry>
-    <entry lang="it" key="PASSWORD_HELP">E' molto importante di scegliere una buona password. Dovete evitare di scegliere una che contenga solo una parola singola che possa essere trovata in un dizionario (oppure una combinazione di  2, 3, o 4 parole del genere). Essa non deve contenere nessun nome o data di nascita. Essa non dovrebbe essere facile da indovinare. Una buona password è una combinazione casuale di lettere maiuscole e minuscole, numeri e caratteri speciali come @ ^ = $ * + ecc. Vi raccomandiamo di scegliere una password consistente di più di 20 caratteri (più è lunga, è meglio). La lunghezza massima possibile è di 64 caratteri.</entry>
+    <entry lang="it" key="PASSWORD_HELP">E' molto importante di scegliere una buona password. Dovete evitare di scegliere una che contenga solo una parola singola che possa essere trovata in un dizionario (oppure una combinazione di  2, 3, o 4 parole del genere). Essa non deve contenere nessun nome o data di nascita. Essa non dovrebbe essere facile da indovinare. Una buona password è una combinazione casuale di lettere maiuscole e minuscole, numeri e caratteri speciali come @ ^ = $ * + ecc. Vi raccomandiamo di scegliere una password consistente di più di 20 caratteri (più è lunga, è meglio). La lunghezza massima possibile è di 128 caratteri.</entry>
     <entry lang="it" key="PASSWORD_HIDDENVOL_HELP">Scegliere una password per il volume nascosto.</entry>
     <entry lang="it" key="PASSWORD_HIDDEN_OS_HELP">Scegliere una password per il sistema operativo nascosto (cioè per il volume nascosto).</entry>
     <entry lang="it" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANTE: La password che avete scelto per il sistema operativo nascosto in questo passo deve essere sostanzialmente differente dalle altre die password (cioè da quella del volume esterno e da quella del sistema operativo di richiamo).</entry>
     <entry lang="it" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Scegliere una password per il volume nel quale si vuole creare il volume nascosto.\n\nDopo aver fatto click 'Avanti', VeraCrypt tenterà di montare il volume. Subito dopo aver montato il volume, verrà analizzata la mappa dei cluster per determinare la dimensione dello spazio libero contiguo (se esiste). Questo spazio ospiterà il volume nascosto e quindi ne limiterà la dimensione massima. La scansione è necessaria per assicurare che nessun dato del volume esterno venga soprascritto dal volume nascosto.</entry>
-    <entry lang="it" key="PASSWORD_HIDDENVOL_HOST_HELP">\n Scegliere una password per il volume esterno. Questa deve essere la password che potrete rivelare ad un avversario se vi viene chiesto o siete obbligati a farlo.\n\nIMPORTANTE: Questa password DEVE essere sostanzialmente differente da quella scelta per il volume nascosto.\n\nNota: La lunghezza massima possibile della password è di 64 caratteri.</entry>
+    <entry lang="it" key="PASSWORD_HIDDENVOL_HOST_HELP">\n Scegliere una password per il volume esterno. Questa deve essere la password che potrete rivelare ad un avversario se vi viene chiesto o siete obbligati a farlo.\n\nIMPORTANTE: Questa password DEVE essere sostanzialmente differente da quella scelta per il volume nascosto.\n\nNota: La lunghezza massima possibile della password è di 128 caratteri.</entry>
     <entry lang="it" key="PASSWORD_SYSENC_OUTERVOL_HELP">Scegliere una password per il volume esterno. Questa deve essere la password che potrete rivelare a chiunque vi obblighi a rivelare la password per la prima partizione dietro al sistema operativo, dove risiede sia il volume esterno che quello nascosto (contenente il sistema operativo nascosto). L’esistenza del volume nascosto (e del sistema operativo nascosto) rimarrà quindi segreto. Da notare che questa non è per il sistema operativo di richiamo.\n\nIMPORTANTE: Questa password DEVE essere sostanzialmente differente da quella da voi scelta per il volume nascosto (cioè per il sistema operativo nascosto).</entry>
     <entry lang="it" key="PASSWORD_HIDVOL_HOST_TITLE">Password per il volume esterno</entry>
     <entry lang="it" key="PASSWORD_HIDVOL_TITLE">Password per il volume nascosto</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="it" key="IDC_BOOT_LOADER_CACHE_PIM">Includi &amp;PIM durante il caching della password di autenticazione pre-boot</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="it" key="PASSWORD_UTF8_TOO_LONG">La password inserita è troppo lunga: la sua rappresentazione in UTF-8 supera i 64 bytes.</entry>
+    <entry lang="it" key="PASSWORD_UTF8_TOO_LONG">La password inserita è troppo lunga: la sua rappresentazione in UTF-8 supera i 128 bytes.</entry>
     <entry lang="it" key="PASSWORD_UTF8_INVALID">La password inserita contiene caratteri Unicode che non possono essere convertiti nella rappresentazione UTF-8.</entry>
     <entry lang="it" key="INIT_DLL">Errore: Caricamento di una libreria di sistema non riuscita.</entry>
     <entry lang="it" key="ERR_EXFAT_INVALID_VOLUME_SIZE">La dimensione del volume specificata nella linea di comando non è compatibile con il filesystem exFAT selezionato.</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="it" key="IDC_BLOCK_SYSENC_TRIM">Blocca comandi TRIM sulla partizione/disco di sistema</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="it" key="IDC_SELECT_LANGUAGE_LABEL">Selezionare la lingua da utilizzare durante l'installazione:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="it" key="IDC_SELECT_LANGUAGE_LABEL">Selezionare la lingua da utilizzare durante l'installazione:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="it" key="STARTING">Caricamento</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="it" key="IDT_BENCHMARK">Riferimenti:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="it" key="LEGACY_PASSWORD_UTF8_TOO_LONG">La password inserita è troppo lunga: la sua rappresentazione in UTF-8 supera i 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.ja.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="ja" name="日本語" en-name="Japanese" version="1.0.0" translators="OGOSHI Masayuki" />
     <font lang="ja" class="normal" size="12" face="MS UI Gothic" />
     <font lang="ja" class="bold" size="16" face="MS UI Gothic" />
@@ -618,12 +618,12 @@
     <entry lang="ja" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">非システムボリュームのその場での暗号化処理に復帰するため、パスワードを入力（またはキーファイルを指定）してください。\n\n\n注：「次へ」をクリックすると、VeraCryptは暗号化処理が中断されていて、与えられたパスワードあるいはキーファイルで復号できるすべての非システムボリュームを検索します。もし複数のボリュームが見つかった場合は、次のステップでその内の一つを選択する必要があります。</entry>
     <entry lang="ja" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">ボリュームリストから一つ選択してください。このリストには、暗号化処理が中断されていて、与えられたパスワードあるいはキーファイルで復号できるすべての非システムボリュームが含まれています。</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="ja" key="PASSWORD_HELP">質の良いパスワードにすることが非常に重要です。辞書に載っているような単語一つだけにしたり、あるいはそれを三つ四つ組み合わせた程度のものは避けるべきです。また何らかの名前や誕生日なども含ませるべきではありません。それは簡単に推測されてしまいます。 良いパスワードとは、大文字や小文字、数字や記号（ @ ^ = $ * + など）をランダムに組み合わせたものです。またパスワードの長さは20文字以上を推奨します（長い方がより良いです）。設定可能な最大長は64文字です。</entry>
+    <entry lang="ja" key="PASSWORD_HELP">質の良いパスワードにすることが非常に重要です。辞書に載っているような単語一つだけにしたり、あるいはそれを三つ四つ組み合わせた程度のものは避けるべきです。また何らかの名前や誕生日なども含ませるべきではありません。それは簡単に推測されてしまいます。 良いパスワードとは、大文字や小文字、数字や記号（ @ ^ = $ * + など）をランダムに組み合わせたものです。またパスワードの長さは20文字以上を推奨します（長い方がより良いです）。設定可能な最大長は128文字です。</entry>
     <entry lang="ja" key="PASSWORD_HIDDENVOL_HELP">隠しボリューム用のパスワードを入力してください </entry>
     <entry lang="ja" key="PASSWORD_HIDDEN_OS_HELP">隠しOS用のパスワードを入力してください（つまり隠しボリューム用です）。 </entry>
     <entry lang="ja" key="PASSWORD_HIDDEN_OS_NOTE">重要：このステップで設定される隠しOS用のパスワードは、他の二つのパスワード（つまり外殻ボリュームおよび囮OS用のもの）とは大幅に変えておく必要があります。</entry>
     <entry lang="ja" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">隠しボリュームを作って入れたいボリュームのパスワードを入力してください。\n\n「次へ」をクリックすると、VeraCryptはそのボリュームのマウントを試みます。ボリュームがマウントされるとすぐにクラスタービットマップが走査され、ボリューム終端からどれだけ連続した空き領域があるのかが測定されます。その領域は隠しボリュームの格納場所であり、これによって隠しボリュームの上限サイズが決まります。クラスターマップの走査は、隠しボリュームによって外殻ボリュームのデータが上書きされてしまわないために必要です。</entry>
-    <entry lang="ja" key="PASSWORD_HIDDENVOL_HOST_HELP">\n外殻ボリューム用のパスワードを入力してください。これはあなたが誰かにパスワードを明かすよう強要されたときなどのためのものです。\n\n重要：このパスワードは隠しボリューム用のものとは大幅に変えておく必要があります。\n\n注：パスワードの最大文字数は64文字です。</entry>
+    <entry lang="ja" key="PASSWORD_HIDDENVOL_HOST_HELP">\n外殻ボリューム用のパスワードを入力してください。これはあなたが誰かにパスワードを明かすよう強要されたときなどのためのものです。\n\n重要：このパスワードは隠しボリューム用のものとは大幅に変えておく必要があります。\n\n注：パスワードの最大文字数は128文字です。</entry>
     <entry lang="ja" key="PASSWORD_SYSENC_OUTERVOL_HELP">外殻ボリューム用のパスワードを入力してください。これはあなたが誰かにシステムパーティションのすぐ次にある、外殻ボリュームと隠しボリューム（この中に隠しOSが含まれます）の入ったパーティションのパスワードを明かすよう強要されたときなどのためのものです。隠しボリューム（そして隠しOSも）の存在は秘匿されたままです。これは囮用OSのためのものではないことに注意してください。重要：このパスワードは隠しボリューム用（つまり隠しOS用）のものとは大幅に変えておく必要があります。</entry>
     <entry lang="ja" key="PASSWORD_HIDVOL_HOST_TITLE">外殻ボリュームのパスワード</entry>
     <entry lang="ja" key="PASSWORD_HIDVOL_TITLE">隠しボリュームのパスワード</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1407,7 +1407,7 @@
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="ja" key="IDC_SELECT_LANGUAGE_LABEL">インストール中に利用する言語を選んでください:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="ja" key="IDC_SELECT_LANGUAGE_LABEL">インストール中に利用する言語を選んでください:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="ja" key="IDT_BENCHMARK">ベンチマーク:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.ka.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="ka" name="ქართული" en-name="Georgian" version="0.1.0" translators="Kakha Lomiashvili" />
     <font lang="ka" class="normal" size="12" face="Arial" />
     <font lang="ka" class="bold" size="12" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system volume where you want to resume the process of in-place encryption.\n\n\nRemark: After you click Next, VeraCrypt will attempt to find all non-system volumes where the process of encryption has been interrupted and where the VeraCrypt volume header can be decrypted using the supplied password and/or keyfile(s). If more than one such volume is found, you will need to select one of them in the next step.</entry>
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Please select one of the listed volumes. The list contains every accessible non-system volume where the process of encryption has been interrupted and whose header could be decrypted using the supplied password and/or keyfile(s).</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 128 characters.</entry>
     <entry lang="ka" key="PASSWORD_HIDDENVOL_HELP">აირციეთ პაროლი ფარული ტომისათვის. </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_HELP">Please choose a password for the hidden operating system (i.e. for the hidden volume). </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANT: The password that you choose for the hidden operating system in this step must be substantially different from the other two passwords (i.e. from the password for the outer volume and from the password for the decoy operating system).</entry>
     <entry lang="ka" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">შეიტანეთ პაროლი ტომისათვის, რომლის შიგნით შეიქმნება ფარული ტომი.\n\n"შემდეგ"-ის დაჭერით VeraCrypt შეეცდება მიაერთოს ტომი, რის შემდეგაც მოხდება მიერებულ ტომზე თავისუფალი არის კლასტერების რუკის სკანირება, რომლის ბოლოშიც იქნება ტომის დაბოლოება. ამ ადგილას განთავსდება ფარული ტომი, ანუ განისაზღვრება მისი მაქსიმალური ზომა. რუკის სკანირება გარანტიას იძლევა, რომ ფარული ტომის მონაცემები არ დააზიანებს გარე ტომის მონაცემებს.</entry>
-    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 128 characters.</entry>
     <entry lang="en" key="PASSWORD_SYSENC_OUTERVOL_HELP">Please choose a password for the outer volume. This will be the password you will be able to reveal to anyone forcing you to disclose the password for the first partition behind the system partition, where both the outer volume and the hidden volume (containing the hidden operating system) will reside. The existence of the hidden volume (and of the hidden operating system) will remain secret. Note that this password is not for the decoy operating system.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume (i.e. for the hidden operating system).</entry>
     <entry lang="ka" key="PASSWORD_HIDVOL_HOST_TITLE">გარე ტომის პაროლი</entry>
     <entry lang="ka" key="PASSWORD_HIDVOL_TITLE">ფარული ტომის პაროლი</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1407,7 +1407,7 @@
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="ko" key="IDT_BENCHMARK">სიჩქარის ტესტი:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">
@@ -1470,4 +1481,4 @@
       </xs:complexType>
     </xs:element>
   </xs:schema>
-</VeraCrypt>
+</VeraCrypt>

Translations/Language.lv.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="lv" name="Latviešu" en-name="Latvian" version="0.1.0" translators="Edmunds Melkers" />
     <font lang="lv" class="normal" size="11" face="default" />
     <font lang="lv" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system volume where you want to resume the process of in-place encryption.\n\n\nRemark: After you click Next, VeraCrypt will attempt to find all non-system volumes where the process of encryption has been interrupted and where the VeraCrypt volume header can be decrypted using the supplied password and/or keyfile(s). If more than one such volume is found, you will need to select one of them in the next step.</entry>
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Please select one of the listed volumes. The list contains every accessible non-system volume where the process of encryption has been interrupted and whose header could be decrypted using the supplied password and/or keyfile(s).</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 128 characters.</entry>
     <entry lang="en" key="PASSWORD_HIDDENVOL_HELP">Please choose a password for the hidden volume. </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_HELP">Please choose a password for the hidden operating system (i.e. for the hidden volume). </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANT: The password that you choose for the hidden operating system in this step must be substantially different from the other two passwords (i.e. from the password for the outer volume and from the password for the decoy operating system).</entry>
     <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Please enter the password for the volume within which you wish to create a hidden volume.\n\nAfter you click Next, VeraCrypt will attempt to mount the volume. As soon as the volume is mounted, its cluster bitmap will be scanned to determine the size of the uninterrupted area of free space (if there is any) whose end is aligned with the end of the volume. This area will accommodate the hidden volume and therefore will limit its maximum possible size. Cluster map scanning is necessary to ensure that no data on the outer volume will be overwritten by the hidden volume.</entry>
-    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 128 characters.</entry>
     <entry lang="en" key="PASSWORD_SYSENC_OUTERVOL_HELP">Please choose a password for the outer volume. This will be the password you will be able to reveal to anyone forcing you to disclose the password for the first partition behind the system partition, where both the outer volume and the hidden volume (containing the hidden operating system) will reside. The existence of the hidden volume (and of the hidden operating system) will remain secret. Note that this password is not for the decoy operating system.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume (i.e. for the hidden operating system).</entry>
     <entry lang="lv" key="PASSWORD_HIDVOL_HOST_TITLE">Ārējā apgabala parole</entry>
     <entry lang="lv" key="PASSWORD_HIDVOL_TITLE">Apslēptā apgabala parole</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1407,7 +1407,7 @@
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="lv" key="IDT_BENCHMARK">Etalons:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">
@@ -1470,4 +1481,4 @@
       </xs:complexType>
     </xs:element>
   </xs:schema>
-</VeraCrypt>
+</VeraCrypt>

Translations/Language.my.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="my" name="မြန်မာ" en-name="Burmese" version="1.0.0" translators="Zaw Myo Htet" />
     <font lang="my" class="normal" size="11" face="Myanmar3" />
     <font lang="my" class="bold" size="13" face="Myanmar3" />
@@ -1380,7 +1380,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1409,7 +1409,7 @@
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1423,12 +1423,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="en" key="IDT_BENCHMARK">Benchmark:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.nl.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="nl" name="Nederlands" en-name="Dutch" version="0.2.3" translators="Jan van der Wal, Peter Tak" />
 																								   
     <font lang="nl" class="normal" size="11" face="default" />
@@ -619,12 +619,12 @@
     <entry lang="nl" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Geef a.u.b. wachtwoord en/of sleutelbestand(en) voor het niet-systeem volume waarvan u de Op-De-Plaats coderings wilt hervatten.\n\nNadat u op Volgende heeft gedrukt, zal VeraCrypt proberen alle niet-systeemvolumes te vinden waarvan de codering is onderbroken en waarop het verstrekte wachtwoord en/of de sleutelbestand(en) van toepassing zijn. Indien meer dan één zo'n volume wordt gevonden, dient u het juiste in de volgende stap te selecteren.</entry>
     <entry lang="nl" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Selecteer a.u.b. een van de getoonde volumes. De lijst bevat ieder toegankelijk niet-syteem volume waarvan de codering is onderbroken en waarop het verstrekte wachtwoord en/of sleutelbestand(en) van toepassing zijn.</entry>
     <entry lang="nl" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Voer het wachtwoord en/of sleutelbestand(en) in voor het VerCrypt niet-systeem volume die u wilt decoderen.</entry>
-    <entry lang="nl" key="PASSWORD_HELP">Het is erg belangrijk dat u een goed wachtwoord kiest. U dient een wachtwoord te vermijden dat bestaat uit een of meerdere woorden die kunnen worden teruggevonden in een woordenboek. Ook moeten eigennamen en geboortedata vermeden worden, evenmin mag het makkelijk te raden zijn. We raden u dringend een willekeurige combinatie van hoofd- en kleine letters, nummers en speciale karakters (zoals @ ^ = $ * +) aan. Het is heel belangrijk dat het meer dan 20 karakters telt (hoe langer hoe beter). The maximaal mogelijke lengte is 64 karakters.</entry>
+    <entry lang="nl" key="PASSWORD_HELP">Het is erg belangrijk dat u een goed wachtwoord kiest. U dient een wachtwoord te vermijden dat bestaat uit een of meerdere woorden die kunnen worden teruggevonden in een woordenboek. Ook moeten eigennamen en geboortedata vermeden worden, evenmin mag het makkelijk te raden zijn. We raden u dringend een willekeurige combinatie van hoofd- en kleine letters, nummers en speciale karakters (zoals @ ^ = $ * +) aan. Het is heel belangrijk dat het meer dan 20 karakters telt (hoe langer hoe beter). The maximaal mogelijke lengte is 128 karakters.</entry>
     <entry lang="nl" key="PASSWORD_HIDDENVOL_HELP">Kies een wachtwoord voor het verborgen volume. </entry>
     <entry lang="nl" key="PASSWORD_HIDDEN_OS_HELP">Kies een wachtwoord voor het verborgen besturingssysteem (d.w.z. verborgen volume). </entry>
     <entry lang="nl" key="PASSWORD_HIDDEN_OS_NOTE">BELANGRIJK: Het wachtwoord dat u in deze stap koos voor het verborgen besturingssysteem dient flink verschillend te zijn van de andere twee wachtwoorden (de wachtwoorden voor het buiten volume en voor het lokvogel besturingssysteem).</entry>
     <entry lang="nl" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Kies hier een wachtwoord voor het buiten volume waarin u een verborgen volume wilt aanmaken.\n\nNadat u op Volgende hebt gedrukt, zal VeraCrypt proberen het volume te koppelen. Zodra dit is gebeurd zal de cluster bitmap van het volume worden gescand om de grootte van het aaneengesloten stuk vrije ruimte te bepalen (indien aanwezig) waarvan het einde samenvalt met het buiten volume. Deze ruimte zal het verborgen volume huisvesten en daarmee meteen de maximale grootte ervan beperken. De Cluster map scan is nodig om ervan te verzekeren dat geen data op het buiten volume zullen worden overschreven door het verborgen volume.</entry>
-    <entry lang="nl" key="PASSWORD_HIDDENVOL_HOST_HELP">\nKiest u a.u.b. een wachtwoord voor het buiten volume. Dit wachtwoord kunt u onthullen aan een evt. vijand indien deze u geen andere keuze laat.\n\nBELANGRIJK: Dit wachtwoord dient verschillend te zijn van het wachtwoord dat u later zult gaan kiezen voor het verborgen binnen volume.\n\nNoot: De maximaal mogelijke lengte voor een wachtwoord is 64 karakters.</entry>
+    <entry lang="nl" key="PASSWORD_HIDDENVOL_HOST_HELP">\nKiest u a.u.b. een wachtwoord voor het buiten volume. Dit wachtwoord kunt u onthullen aan een evt. vijand indien deze u geen andere keuze laat.\n\nBELANGRIJK: Dit wachtwoord dient verschillend te zijn van het wachtwoord dat u later zult gaan kiezen voor het verborgen binnen volume.\n\nNoot: De maximaal mogelijke lengte voor een wachtwoord is 128 karakters.</entry>
     <entry lang="nl" key="PASSWORD_SYSENC_OUTERVOL_HELP">Kies a.u.b. een wachtwoord voor het buiten volume. Dit wachtwoord zult u kunnen onthullen aan eenieder die u dwingt de toegang kenbaar te maken tot de eerste partitie achter de systeempartitie, waar zowel een buiten volume en een verborgen volume (met het verborgen besturingssysteem (OS)) in aanwezig zijn. Het verborgen volume en dus het verborgen OS zullen dan geheim blijven. Merk op dat dit wachtwoord niet dient voor het lokvogel OS.\n\nBELANGRIJK: Het wachtwoord dient flink te verschillen van hetgeen u kiest voor het verborgen volume (d.w.z. het verborgen OS).</entry>
     <entry lang="nl" key="PASSWORD_HIDVOL_HOST_TITLE">Buiten volumewachtwoord</entry>
     <entry lang="nl" key="PASSWORD_HIDVOL_TITLE">Verborgen volumewachtwoord</entry>
@@ -1379,7 +1379,7 @@
     <entry lang="nl" key="IDC_BOOT_LOADER_CACHE_PIM">Inclusief &amp;PIM tijdens cachen pre-boot authenticatiewachtwoord</entry>
     <entry lang="nl" key="IDC_PREF_CACHE_PIM">PIM insluiten in wachtwoordencache</entry>
     <entry lang="nl" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Ontkoppelde netwerkstations beschikbaar maken voor koppelen</entry>
-    <entry lang="nl" key="PASSWORD_UTF8_TOO_LONG">Het opgegeven wachtwoord is te lang: de UTF-8 weergave is meer dan 64 bytes.</entry>
+    <entry lang="nl" key="PASSWORD_UTF8_TOO_LONG">Het opgegeven wachtwoord is te lang: de UTF-8 weergave is meer dan 128 bytes.</entry>
     <entry lang="nl" key="PASSWORD_UTF8_INVALID">Het opgegeven wachtwoord bevat unicode tekens die niet kunnen worden omgezet naar UTF-8 weergave.</entry>
     <entry lang="nl" key="INIT_DLL">FOUT: Het laden van een systeembibliotheek is mislukt.</entry>
     <entry lang="nl" key="ERR_EXFAT_INVALID_VOLUME_SIZE">De volumegrootte opgegeven in de opdrachtregel is niet compatibel met het geselecteerde exFAT bestandssysteem.</entry>
@@ -1408,7 +1408,7 @@
     <entry lang="nl" key="RESCUE_DISK_EFI_CHECK_FAILED">Verifiëren of de herstelschijf juist is uitgepakt is niet mogelijk.\n\nAls u de herstelschijf hebt uitgepakt, werp de USB-stick dan uit en plaats deze opnieuw; klik daarna op Volgende om het opnieuw te proberen. Als dit niet helpt, probeer dan een andere USB-stick en/of andere ZIP software.\n\nAls u de herstelschijf nog niet hebt uitgepakt, doe het dan nu en klik daarna op Volgende.\n\nAls u probeerde de VeraCrypt herstelschijf te verifiëren voordat u deze wizard startte, dan moet worden opgemerkt dat de herstelschijf niet kan worden gebruikt, dit omdat deze is aangemaakt met een andere hoofdsleutel. U moet het nieuw aangemaakte herstelschijf ZIP-bestand eerst uitpakken.</entry>
     <entry lang="nl" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Helaas is controleren of de herstelschijf juist is uitgepakt niet mogelijk.\n\nAls je de herstelschijf hebt uitgepakt naar een usb-stick, plaats deze dan en probeer het opnieuw. Als dit niet helpt, probeer het dan met andere software of een andere apparaat.\n\nAls je een VeraCrypt herstelschijf probeert te controleren die is aangemaakt met een andere sleutel, wachtwoord, salt enz., dan zal het controleren van de herstelschijf altijd mislukken. Om een bruikbare herstelschijf met de huidige configuratie te maken, selecteer dan 'Systeem' > 'Een herstelschijf aanmaken'.</entry>
     <entry lang="nl" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">Het bestand voor de herstelschijf is aangemaakt en opgeslagen als:\n%s\n\nNu moet u dit bestand uitpakken op een usb-stick welke is geformatteerd als FAT/FAT32.\n\nBELANGRIJK: Het zip-bestand moet u in de basismap van het USB-station uitpakken. Bijvoorbeeld, als uw USB-station E: is, dan moet het uitgepakte zip-bestand een map E:\\EFI op de USB-stick aanmaken.\n\nNdat u de herstelschijf hebt aangemaakt, selecteer 'Systeem' > 'Controleer herstelschijf' om te controleren dat de herstelschijf juist is aangemaakt.</entry>
-	<entry lang="nl" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Gebruik het Beveiligd Bureaublad voor wachtwoord invoer</entry>
+    <entry lang="nl" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Gebruik het Beveiligd Bureaublad voor wachtwoord invoer</entry>
     <entry lang="nl" key="ERR_REFS_INVALID_VOLUME_SIZE">De in de opdrachtregel opgegeven bestandsgrootte van het volume is niet compatibel met het geselecteerde ReFS bestandssysteem.</entry>
     <entry lang="nl" key="IDC_EDIT_DCSPROP">Bootloader configuratiebestand bewerken</entry>
     <entry lang="nl" key="IDC_SHOW_PLATFORMINFO">Toon de EFI platform informatie</entry>
@@ -1422,12 +1422,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="nl" key="IDC_SELECT_LANGUAGE_LABEL">Selecteer de taal welke Setup gebruikt tijdens de installatie:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="nl" key="IDC_SELECT_LANGUAGE_LABEL">Selecteer de taal welke Setup gebruikt tijdens de installatie:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="en" key="IDT_BENCHMARK">Benchmark:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="nl" key="LEGACY_PASSWORD_UTF8_TOO_LONG">Het opgegeven wachtwoord is te lang: de UTF-8 weergave is meer dan 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.nn.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="nn" name="Norsk Nynorsk" en-name="Norwegian (Nynorsk)" version="0.1.0" translators="Kjell Rune Helland" />
     <font lang="nn" class="normal" size="11" face="default" />
     <font lang="nn" class="bold" size="13" face="Arial " />
@@ -618,12 +618,12 @@
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system volume where you want to resume the process of in-place encryption/decryption.\n\nRemark: After you click Next, VeraCrypt will attempt to find all non-system volumes where the process of encryption/decryption has been interrupted and where the VeraCrypt volume header can be deciphered using the supplied password and/or keyfile(s). If more than one such volume is found, you will need to select one of them in the next step.</entry>
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Please select one of the listed volumes. The list contains each accessible non-system volume where the process of encryption/decryption has been interrupted and where the volume header was successfully deciphered using the supplied password and/or keyfile(s).</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 128 characters.</entry>
     <entry lang="nn" key="PASSWORD_HIDDENVOL_HELP">Vel eit passord for det skjulte volumet. </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_HELP">Please choose a password for the hidden operating system (i.e. for the hidden volume). </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANT: The password that you choose for the hidden operating system in this step must be substantially different from the other two passwords (i.e. from the password for the outer volume and from the password for the decoy operating system).</entry>
     <entry lang="nn" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Skriv inn passordet for volumet som du ønskjer å oppretta eit skjult volum i.\n\nNår du klikkar Neste kjem VeraCrypt til å montera volumet. Når volumet er montert vil sektorgruppe punktkartet av det ytre volumet bli undersøkt for å finna storleiken på det uavbrotne område med ledig plass (vist det er nokon) som sluttar mot slutten av volumet. Dette området vill verta tilpassa det skjulte volumet og derfor vill det begrensa dets maksimale mogelege storleik. Sektorgruppe kart skanning er nødvendig for å sikra att ingen data i det ytre volumet vert overskrive av det skjulte volumet</entry>
-    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 128 characters.</entry>
     <entry lang="en" key="PASSWORD_SYSENC_OUTERVOL_HELP">Please choose a password for the outer volume. This will be the password you will be able to reveal to anyone forcing you to disclose the password for the first partition behind the system partition, where both the outer volume and the hidden volume (containing the hidden operating system) will reside. The existence of the hidden volume (and of the hidden operating system) will remain secret. Note that this password is not for the decoy operating system.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume (i.e. for the hidden operating system).</entry>
     <entry lang="nn" key="PASSWORD_HIDVOL_HOST_TITLE">Ytre Volum Passord</entry>
     <entry lang="nn" key="PASSWORD_HIDVOL_TITLE">Skjult Volum Passord</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1407,7 +1407,7 @@
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="nn" key="IDC_SELECT_LANGUAGE_LABEL">Velg språket som skal brukes under installasjonen:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="nn" key="IDC_SELECT_LANGUAGE_LABEL">Velg språket som skal brukes under installasjonen:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="nn" key="IDT_BENCHMARK">Ytingsprøve:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.pl.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="pl" name="Polski" en-name="Polish" version="1.0.0" translators="Mirek Druchowicz, Janusz Zamecki, Sobiesław Antolak, Begina Felicysym" />
     <font lang="pl" class="normal" size="11" face="default" />
     <font lang="pl" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="pl" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Proszę wprowadzić hasło i/lub plik/i-klucz/e dla bezsystemowego wolumenu, gdzie chcesz wznowić proces szyfrowania "w locie".\n\n\nZapamiętaj: Po kliknięciu Dalej, VeraCrypt przystąpi do wyszukania wszystkich nie systemowych wolumenów, gdzie proces szyfrowania został przerwany, i gdzie nagłówek wolumenu VeraCrypt moż być odszyfrowany używając podanego hasła i/lub pliku/ów-klucza/y. Jeżeli jest znaleziony więcej niż jeden wolumen, będziesz musiał wybrać jeden z nich w następnym kroku.</entry>
     <entry lang="pl" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Proszę wybrać jeden z wyszczególnionych wolumenów. Lista zawiera każdy dostępny nie systemowy wolumen, gdzie proces szyfrowania został przerwany, i gdzie nagłówek mógł być odszyfrowany używając podanego hasła i/lub pliku/ów-klucza/y.</entry>
     <entry lang="pl" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Proszę wprowadzić hasło i/lub plik/i-klucz/e dla bezsystemowego wolumenu VeraCrypt, który chcesz odszyfrować.</entry>
-    <entry lang="pl" key="PASSWORD_HELP">Bardzo ważne jest wybranie dobrego hasła. Powinieneś unikać wybrania pojedynczych słów, które mogą być znalezione w słowniku (lub kombinacji 2, 3, lub 4 znalezionych słów). Nie powinno zawierać, żadnych nazw, imion lub dat urodzin. Nie powinno być łatwe do wymyślenia. Dobrym hasłem jest przypadkowa kombinacja dużych i małych liter, cyfr, i znaków specjalnych, takich jak @ ^ = $ * + itp. Zalecamy wybranie hasła zawierającego więcej niż 20 znaków (dłuższe, lepsze). Maksymalna długość - 64 znaki.</entry>
+    <entry lang="pl" key="PASSWORD_HELP">Bardzo ważne jest wybranie dobrego hasła. Powinieneś unikać wybrania pojedynczych słów, które mogą być znalezione w słowniku (lub kombinacji 2, 3, lub 4 znalezionych słów). Nie powinno zawierać, żadnych nazw, imion lub dat urodzin. Nie powinno być łatwe do wymyślenia. Dobrym hasłem jest przypadkowa kombinacja dużych i małych liter, cyfr, i znaków specjalnych, takich jak @ ^ = $ * + itp. Zalecamy wybranie hasła zawierającego więcej niż 20 znaków (dłuższe, lepsze). Maksymalna długość - 128 znaki.</entry>
     <entry lang="pl" key="PASSWORD_HIDDENVOL_HELP">Wybierz hasło dla wolumenu ukrytego. </entry>
     <entry lang="pl" key="PASSWORD_HIDDEN_OS_HELP">Proszę wybrać hasło dla ukrytego systemu operacyjnego (np. dla ukrytej partycji). </entry>
     <entry lang="pl" key="PASSWORD_HIDDEN_OS_NOTE">WAŻNE: Hasło, które wybrałeś dla ukrytego systemu operacyjnego w tym kroku, musi być zasadniczo inne od pozostałych dwóch haseł (np. od hasła do zewnętrznego wolumenu i od hasła do zwodzącego systemu operacyjnego).</entry>
     <entry lang="pl" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Podaj hasło dla wolumenu, w którym chcesz utworzyć wolumen ukryty.\n\nPo kliknięciu przycisku Dalej program VeraCrypt spróbuje podłączyć ten wolumen. Natychmiast po podłączeniu nastąpi skanowanie mapy bitowej klastrów w celu określenia wielkości ciągłego, wolnego obszaru (jeśli jest) wyrównanego do końca wolumenu. Ten obszar będzie wykorzystany przez wolumen ukryty i dlatego ogranicza maksymalną możliwą wielkość. Skanowanie mapy klastrów jest niezbędne dla zapewnienia, że żadne dane z wolumenu zewnętrznego nie zostaną nadpisane przez wolumen ukryty.</entry>
-    <entry lang="pl" key="PASSWORD_HIDDENVOL_HOST_HELP">\nProszę wybrać hasło do zewnętrznego wolumenu. To będzie hasło, które może być ujawnione, gdy będziesz tego chciał lub zostaniesz zmuszony.\n\nWAŻNE: Hasło musi być zasadniczo inne od innych, których używasz do ukrytego wolumenu.\n\nPamiętaj: Maksymalna możliwa długość hasła to 64 znaki.</entry>
+    <entry lang="pl" key="PASSWORD_HIDDENVOL_HOST_HELP">\nProszę wybrać hasło do zewnętrznego wolumenu. To będzie hasło, które może być ujawnione, gdy będziesz tego chciał lub zostaniesz zmuszony.\n\nWAŻNE: Hasło musi być zasadniczo inne od innych, których używasz do ukrytego wolumenu.\n\nPamiętaj: Maksymalna możliwa długość hasła to 128 znaki.</entry>
     <entry lang="pl" key="PASSWORD_SYSENC_OUTERVOL_HELP">Proszę wybrać hasło do zewnętrznego wolumenu. To będzie hasło, które może być ujawnione, gdy będziesz tego chciał do pierwszej partycji za partycją systemową, gdzie umieszczone są oba: zewnętrzny wolumen i ukryty wolumen (zawierający ukryty system operacyjny). Istnienie ukrytego wolumenu (i ukrytego systemu operacyjnego) pozostanie dalej w tajemnicy. Pamiętaj hasło nie jest do zwodzącego systemu operacyjnego.\n\nWAŻNE: Hasło musi być zasadniczo inne od pozostałych, które wybrałeś do ukrytego wolumenu (np. do ukrytego systemu operacyjnego).</entry>
     <entry lang="pl" key="PASSWORD_HIDVOL_HOST_TITLE">Hasło wolumenu zewnętrznego</entry>
     <entry lang="pl" key="PASSWORD_HIDVOL_TITLE">Hasło wolumenu ukrytego</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="pl" key="IDC_BOOT_LOADER_CACHE_PIM">Dołączaj &amp;PIM w trakcie przechowywania hasła uwierzytelniania rozruchu wstępnego</entry>
     <entry lang="pl" key="IDC_PREF_CACHE_PIM">Dołączaj PIM w trakcie przechowywania hasła w pamięci</entry>
     <entry lang="pl" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Uczyń odłączone napędy sieciowe dostępnymi do montowania</entry>
-    <entry lang="pl" key="PASSWORD_UTF8_TOO_LONG">Wpisane hasło jest zbyt długie: jego reprezentacja UTF-8 przekracza 64 bajty.</entry>
+    <entry lang="pl" key="PASSWORD_UTF8_TOO_LONG">Wpisane hasło jest zbyt długie: jego reprezentacja UTF-8 przekracza 128 bajty.</entry>
     <entry lang="pl" key="PASSWORD_UTF8_INVALID">Wpisane hasło zawiera znaki Unicode, które nie mogą zostać przekonwertowane do reprezentacji UTF-8.</entry>
     <entry lang="pl" key="INIT_DLL">Błąd: Nie można załadować biblioteki systemowej.</entry>
     <entry lang="pl" key="ERR_EXFAT_INVALID_VOLUME_SIZE">Rozmiar pliku wolumenu, który określono w wierszu poleceń, jest niekompatybilny z wybranym systemem plików exFAT.</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="pl" key="IDC_BLOCK_SYSENC_TRIM">Blokuj komendę TRIM na systemowej partycji/napędzie</entry>
     <entry lang="pl" key="WINDOWS_EFI_BOOT_LOADER_MISSING">BŁĄD: Nie można zlokalizować programu rozruchowego EFI systemu Windows na dysku. Operacja zostanie przerwana.</entry>
     <entry lang="pl" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">Obecnie nie jest możliwe szyfrowanie systemu, gdy włączona jest funkcja SecureBoot, a niestandardowe klucze VeraCrypt nie zostały załadowane do oprogramowania sprzętowego urządzenia. Funkcja SecureBoot musi być wyłączona w konfiguracji BIOS-u, aby umożliwić kontynuowanie szyfrowania systemu.</entry>
-    <entry lang="pl" key="PASSWORD_PASTED_TRUNCATED">Wklejony tekst został obcięty, ponieważ maksymalna długość hasła wynosi 64 znaki</entry>
-    <entry lang="pl" key="PASSWORD_MAXLENGTH_REACHED">Hasło osiągnęło już maksymalną długość 64 znaków.\nDodatkowy znak nie jest dozwolony.</entry>
+    <entry lang="pl" key="PASSWORD_PASTED_TRUNCATED">Wklejony tekst został obcięty, ponieważ maksymalna długość hasła wynosi 128 znaki</entry>
+    <entry lang="pl" key="PASSWORD_MAXLENGTH_REACHED">Hasło osiągnęło już maksymalną długość 128 znaków.\nDodatkowy znak nie jest dozwolony.</entry>
     <entry lang="pl" key="IDC_SELECT_LANGUAGE_LABEL">Wybierz używany język podczas instalacji:</entry>
     <entry lang="pl" key="VOLUME_TOO_LARGE_FOR_HOST">BŁĄD: Rozmiar kontenera pliku jest większy niż dostępne wolne miejsce na dysku.</entry>
     <entry lang="pl" key="IDC_ALLOW_WINDOWS_DEFRAG">Zezwalaj Defragmentatorowi dysków Windows na defragmentację bezsystemowej partycji/napędu</entry>
     <entry lang="pl" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">OSTRZEŻENIE: Defragmentacja bezsystemowych partycji/napędów może spowodować wyciek metadanych dotyczących ich zawartości lub spowodować problemy z ukrytymi wolumenami, które mogą zawierać.\n\nKontynuować?</entry>
+    <entry lang="pl" key="VIRTUAL_DEVICE">Urządzenie wirtualne</entry>
+    <entry lang="pl" key="MOUNTED_VOLUME_NOT_ASSOCIATED">Wybrany zamontowany wolumen nie jest powiązany z literą dysku w systemie Windows, więc nie można go otworzyć w Eksploratorze Windows.</entry>
+    <entry lang="pl" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Wyczyść klucze szyfrujące z pamięci, jeśli włożono nowe urządzenie</entry>
+    <entry lang="pl" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">WAŻNE UWAGI:\n - Należy pamiętać, że ta opcja nie będzie obowiązywać po zamknięciu lub ponownym uruchomieniu komputera, więc będziesz musiał wybrać ją ponownie przy następnym uruchomieniu urządzenia.\n\n - Po włączeniu tej opcji i po podłączeniu nowego urządzenia maszyna zawiesi się i w końcu ulegnie awarii BSOD, ponieważ system Windows nie może uzyskać dostępu do zaszyfrowanego dysku po usunięciu kluczy z pamięci.\n</entry>
+    <entry lang="pl" key="STARTING">Rozruch</entry>
+    <entry lang="pl" key="IDC_ENABLE_CPU_RNG">Użyj sprzętowego (CPU) generatora liczb losowych jako dodatkowego źródła entropii</entry>
+    <entry lang="pl" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Użyj starszej maksymalnej długości hasła (64 znaki)</entry>
+    <entry lang="pl" key="IDC_ENABLE_RAM_ENCRYPTION">Aktywuj szyfrowanie kluczy i haseł przechowywanych w RAM</entry>
+    <entry lang="pl" key="IDT_BENCHMARK">Testowanie:</entry>
+    <entry lang="pl" key="IDC_DISABLE_MOUNT_MANAGER">Utwórz tylko urządzenie wirtualne bez montowania na wybranej literze dysku</entry>
+    <entry lang="pl" key="LEGACY_PASSWORD_UTF8_TOO_LONG">Wpisane hasło jest zbyt długie: jego reprezentacja UTF-8 przekracza 64 bajty.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.pt-br.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="pt-br" name="Português-Brasil" en-name="Portuguese (Brazil)" version="0.1.0" translators="Thiago C. L. Mendes, Lecidio S. Alencar , Lucas C. Ferreira" />
     <font lang="pt-br" class="normal" size="11" face="padrão" />
     <font lang="pt-br" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="pt-br" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Digite a senha e/ou arquivo(s)-chave para o volume não-sistema em que pretende retomar o processo de criptografia no local.\n\n\nObservação: Após clicar em Avançar, o VeraCrypt tentará encontrar todos os volumes não-sistema onde o processo de criptografia tenha sido interrompido e onde o cabeçalho do volume VeraCrypt pode ser descriptografado usando a senha e/ou arquivo(s)-chave fornecidos. Se mais de um volume assim for encontrado, você terá que escolher um deles na próxima etapa.</entry>
     <entry lang="pt-br" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Selecione um dos volumes listados. A lista contém todos os volumes não-sistema acessíveis em que o processo de criptografia tenha sido interrompido e cujo cabeçalho poderia ser descriptografado usando a senha e/ou arquivo(s)-chave fornecidos.</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="pt-br" key="PASSWORD_HELP">É muito importante que você escolha uma boa senha. Evite escolher uma que contenha apenas uma única palavra que pode ser encontrada em um dicionário (ou uma combinação de 2, 3 ou 4 palavras assim). A senha não deve conter quaisquer nomes ou datas de nascimento. Não deve ser fácil de adivinhar. Uma boa senha é uma combinação aleatória de letras maiúsculas e minúsculas, números e caracteres especiais, como @ ^ = $ * + etc. Recomendamos escolher uma senha com mais de 20 caracteres (quanto mais longo, melhor). O comprimento máximo é 64 caracteres.</entry>
+    <entry lang="pt-br" key="PASSWORD_HELP">É muito importante que você escolha uma boa senha. Evite escolher uma que contenha apenas uma única palavra que pode ser encontrada em um dicionário (ou uma combinação de 2, 3 ou 4 palavras assim). A senha não deve conter quaisquer nomes ou datas de nascimento. Não deve ser fácil de adivinhar. Uma boa senha é uma combinação aleatória de letras maiúsculas e minúsculas, números e caracteres especiais, como @ ^ = $ * + etc. Recomendamos escolher uma senha com mais de 20 caracteres (quanto mais longo, melhor). O comprimento máximo é 128 caracteres.</entry>
     <entry lang="pt-br" key="PASSWORD_HIDDENVOL_HELP">Escolha uma senha para o volume oculto. </entry>
     <entry lang="pt-br" key="PASSWORD_HIDDEN_OS_HELP">Por favor, escolha uma senha para o sistema operacional oculto (ou seja, para o volume oculto). </entry>
     <entry lang="pt-br" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANTE: A senha que você escolher para o sistema operacional oculto nesta etapa deve ser substancialmente diferente das outras duas senhas (ou seja, da senha do volume externo e da senha do sistema operacional isca).</entry>
     <entry lang="pt-br" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Favor digitar a senha para o disco que você dentro do qual você deseja criar o volume oculto.\n\nDepois de clicar 'Próximo', o VeraCrypt vai tentar montar o disco. Assim que o disco estiver montado, seu bitmap de cluster será varrido para determinar o tamanho da área livre ininterrupta (se houver) cujo final está alinhado com o final do disco. Esta área irá acomodar o volume oculto e irá limitar seu tamanho máximo. A varredura do mapa de clusters é necessária para garantir que nenhum dado do volume externo será sobrescrito pelo volume oculto.</entry>
-    <entry lang="pt-br" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPor favor escolha uma senha para o volume externo. Esta será a senha que você poderá revelar a um adversário se lhe for pedido ou forçado a fazê-lo.\n\nIMPORTANTE: A senha deve ser substancialmente diferente da que você vai escolher para o volume oculto.\n\nNota: O comprimento máximo possível da senha é 64 caracteres.</entry>
+    <entry lang="pt-br" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPor favor escolha uma senha para o volume externo. Esta será a senha que você poderá revelar a um adversário se lhe for pedido ou forçado a fazê-lo.\n\nIMPORTANTE: A senha deve ser substancialmente diferente da que você vai escolher para o volume oculto.\n\nNota: O comprimento máximo possível da senha é 128 caracteres.</entry>
     <entry lang="pt-br" key="PASSWORD_SYSENC_OUTERVOL_HELP">Por favor, escolha uma senha para o volume externo. Esta será a senha que você poderá revelar a alguém forçando-o a expor a senha para a primeira partição atrás da partição do sistema, onde tanto o volume externo quanto o volume oculto (que contém o sistema operacional oculto) irão residir. A existência do volume oculto (e do sistema operacional oculto) permanecerá secreta. Note que esta senha não é para o sistema operacional isca.\n\nIMPORTANTE: A senha deve ser substancialmente diferente da que você vai escolher para o volume oculto (isto é, para o sistema operacional oculto).</entry>
     <entry lang="pt-br" key="PASSWORD_HIDVOL_HOST_TITLE">Senha do volume externo</entry>
     <entry lang="pt-br" key="PASSWORD_HIDVOL_TITLE">Senha do volume oculto</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1407,7 +1407,7 @@
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="pt-br" key="IDC_SELECT_LANGUAGE_LABEL">Selecione o idioma a ser utilizado durante a instalação:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="pt-br" key="IDC_SELECT_LANGUAGE_LABEL">Selecione o idioma a ser utilizado durante a instalação:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="en" key="IDT_BENCHMARK">Benchmark:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.ro.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version="1.24-Update4">
     <language langid="ro" name="Română" en-name="Romanian" version="1.0.0" translators="Barna Cosmin Marian" />
     <font lang="ro" class="normal" size="11" face="default" />
     <font lang="ro" class="bold" size="13" face="Arial" />
@@ -23,7 +23,7 @@
     <entry lang="ro" key="IDHELP">&amp;Ajutor</entry>
     <entry lang="ro" key="IDT_EXTRACT_DESTINATION">Selectați sau introduceți destinaţia unde să fie plasate fișierele extrase:</entry>
     <entry lang="ro" key="IDT_INSTALL_DESTINATION">Selectați sau introduceți destinaţia unde doriți să fie instalate fișierele programului VeraCrypt. Dacă folderul specificat nu există, va fi creat automat.</entry>
-    <entry lang="ro" key="IDT_UNINSTALL_DIR">Apăsați pe Dezinstalare pentru a elimina VeraCrypt din acest sistem.</entry>
+    <entry lang="ro" key="IDT_UNINSTALL_DIR">Apăsați pe «Dezinstalare» pentru a elimina VeraCrypt din acest sistem.</entry>
     <entry lang="ro" key="IDC_ABORT_BUTTON">Oprire</entry>
     <entry lang="ro" key="IDC_BENCHMARK">&amp;Evaluare</entry>
     <entry lang="ro" key="IDC_CIPHER_TEST">&amp;Testare</entry>
@@ -72,7 +72,7 @@
     <entry lang="ro" key="IDC_WHOLE_SYS_DRIVE">Criptare tot discul</entry>
     <entry lang="ro" key="IDD_VOL_CREATION_WIZARD_DLG">Asistent creare volum VeraCrypt</entry>
     <entry lang="ro" key="IDT_CLUSTER">Cluster </entry>
-    <entry lang="ro" key="IDT_COLLECTING_RANDOM_DATA_NOTE">IMPORTANT: Mișcați cursorul cât de aleator posibil în interiorul acestei ferestre. Cu cât îl mișcați mai mult, cu atât mai bine. Aceasta mărește considerabil puterea criptografică a cheilor de criptare. Apoi apăsați pe Înainte pentru a continua.</entry>
+    <entry lang="ro" key="IDT_COLLECTING_RANDOM_DATA_NOTE">IMPORTANT: Mișcați cursorul cât mai aleator posibil în interiorul acestei ferestre. Cu cât îl mișcați mai mult, cu atât mai bine. Aceasta mărește considerabil puterea criptografică a cheilor de criptare. Apoi apăsați pe «Înainte» pentru a continua.</entry>
     <entry lang="ro" key="IDT_CONFIRM">&amp;Confirmare:</entry>
     <entry lang="ro" key="IDT_DONE">Done</entry>
     <entry lang="ro" key="IDT_DRIVE_LETTER">Literă unitate:</entry>
@@ -96,13 +96,13 @@
     <entry lang="ro" key="IDT_SINGLE_BOOT">Selectați această opțiune dacă există un singur sistem de operare instalat în calculator (chiar dacă are mai mulți utilizatori).</entry>
     <entry lang="ro" key="IDT_SPEED">Viteză</entry>
     <entry lang="ro" key="IDT_STATUS">Stare</entry>
-    <entry lang="ro" key="IDT_SYSENC_KEYS_GEN_INFO">Cheile, sarea și alte date au fost generate cu succes. Dacă doriți să generați chei noi, apăsați pe Înapoi și apoi pe Înainte. Altfel, apăsați pe Înainte pentru a continua.</entry>
+    <entry lang="ro" key="IDT_SYSENC_KEYS_GEN_INFO">Cheile, codul aleator și alte date au fost generate cu succes. Dacă doriți să generați chei noi, apăsați pe «Înapoi» și apoi pe «Înainte». Altfel, apăsați pe «Înainte» pentru a continua.</entry>
     <entry lang="ro" key="IDT_SYS_DEVICE">Criptare partiție/disc unde este instalat Windows. Oricine va dori să aibe acces și să utilizeze sistemul și fișierele, va trebui să introducă parola corectă de fiecare dată înainte de pornirea sistemului Windows. Opțional, crează un sistem ascuns.</entry>
     <entry lang="ro" key="IDT_SYS_PARTITION">Selectați această opțiune pentru a cripta partiția unde este instalat sistemul de operare Windows în acest moment.</entry>
     <entry lang="ro" key="IDT_VOLUME_LABEL">Etichetă volum în Windows:</entry>
     <entry lang="ro" key="IDT_WIPE_MODE">Mod ștergere:</entry>
     <entry lang="ro" key="IDCLOSE">În&amp;chidere</entry>
-    <entry lang="ro" key="IDC_ALLOW_ESC_PBA_BYPASS">Permitere evitare autentificare înainte de pornire prin apăsarea tastei Esc (activare manager pornire).</entry>
+    <entry lang="ro" key="IDC_ALLOW_ESC_PBA_BYPASS">Permitere evitare autentificare înainte de pornire prin apăsarea tastei «Esc» (activare manager pornire).</entry>
     <entry lang="ro" key="IDC_AUTORUN_DISABLE">Fără</entry>
     <entry lang="ro" key="IDC_AUTORUN_MOUNT">&amp;Automontare volum VeraCrypt (specificat mai jos)</entry>
     <entry lang="ro" key="IDC_AUTORUN_START">&amp;Start VeraCrypt</entry>
@@ -168,7 +168,7 @@
     <entry lang="ro" key="IDC_PREF_MOUNT_REMOVABLE">Montare volume ca unități detașabile</entry>
     <entry lang="ro" key="IDC_PREF_OPEN_EXPLORER">Deschidere fereastră Explorer pentru volumele montate cu succes</entry>
     <entry lang="ro" key="IDC_PREF_TEMP_CACHE_ON_MULTIPLE_MOUNT">Păstrare temporară parole în timpul operațiilor de "Montare volume favorite"</entry>
-	<entry lang="ro" key="IDC_PREF_USE_DIFF_TRAY_ICON_IF_VOL_MOUNTED">Folosire pictogramă diferită în zona de sistem când există volume montate</entry>
+    <entry lang="ro" key="IDC_PREF_USE_DIFF_TRAY_ICON_IF_VOL_MOUNTED">Folosire pictogramă diferită în zona de sistem când există volume montate</entry>
     <entry lang="ro" key="IDC_PREF_WIPE_CACHE_ON_AUTODISMOUNT">Eliminare parole păstrate după autodemontare</entry>
     <entry lang="ro" key="IDC_PREF_WIPE_CACHE_ON_EXIT">Eliminare parole păstrate la ieșire</entry>
     <entry lang="ro" key="IDC_PRESERVE_TIMESTAMPS">Păstrare dată modificare fișiere container</entry>
@@ -363,7 +363,7 @@
     <entry lang="ro" key="IDT_PLAINTEXT_SIZE_UNIT">biți</entry>
     <entry lang="ro" key="IDT_POOL_CONTENTS">Conținut curent sursă</entry>
     <entry lang="ro" key="IDT_PRF">Amestecare PRF:</entry>
-    <entry lang="ro" key="IDT_RANDOM_POOL_ENRICHMENT_NOTE">IMPORTANT: Mișcați cursorul cât mai aleator posibil în această fereastră. Cu cât îl mișcați mai mult, cu atât mai bine. Aceasta mărește semnificativ securitatea. Când ați terminat, apăsați pe 'Continuare'.</entry>
+    <entry lang="ro" key="IDT_RANDOM_POOL_ENRICHMENT_NOTE">IMPORTANT: Mișcați cursorul cât mai aleator posibil în această fereastră. Cu cât îl mișcați mai mult, cu atât mai bine. Aceasta mărește semnificativ securitatea. Când ați terminat, apăsați pe «Continuare».</entry>
     <entry lang="ro" key="IDT_SECONDARY_KEY">Cheie secundară (hexazecimal)</entry>
     <entry lang="ro" key="IDT_SECURITY_TOKEN">Dispozitiv securitate:</entry>
     <entry lang="ro" key="IDT_SORT_METHOD">Metodă sortare:</entry>
@@ -411,7 +411,7 @@
     <entry lang="ro" key="CIPHER_HIDVOL_TITLE">Opțiuni criptare volum ascuns</entry>
     <entry lang="ro" key="CIPHER_TITLE">Opțiuni criptare</entry>
     <entry lang="ro" key="CLEAN_WINMRU_FAILED">AVERTISMENT: Eșuare golire cale spre ultimul volum/fișier-cheie selectat (memorat de selectorul de fișier)!</entry>
-    <entry lang="ro" key="COMPRESSION_NOT_SUPPORTED">Eroare: fișierul container a fost comprimat la nivel de sistem. VeraCrypt nu suportă fișiere container comprimate (oricum compresia datelor criptate este ineficientă și redundantă).\n\nVă rugăm dezactivați compresia pentru fișierul container urmând acești pași:\n1) Apăsați cu clic-dreapta pe fișierul container în Windows Explorer (nu în VeraCrypt).\n2) Selectați 'Properties'.\n3) În caseta de dialog 'Properties', apăsați pe 'Advanced'.\n4) În caseta de dialog 'Advanced Attributes', dezactivați opțiunea 'Compress contents to save disk space' și apăsați pe OK.\n5) În caseta de dialog 'Compress contents to save disk space', apăsați pe OK.</entry>
+    <entry lang="ro" key="COMPRESSION_NOT_SUPPORTED">Eroare: fișierul container a fost comprimat la nivel de sistem. VeraCrypt nu suportă fișiere container comprimate (oricum compresia datelor criptate este ineficientă și redundantă).\n\nVă rugăm dezactivați compresia pentru fișierul container urmând acești pași:\n1) Apăsați cu clic dreapta pe fișierul container în Windows Explorer (nu în VeraCrypt).\n2) Selectați «Proprietăți».\n3) În caseta de dialog «Proprietăți», apăsați pe «Avansat».\n4) În caseta de dialog «Atribute avansate», dezactivați opțiunea «Comprimare conținut pentru salvare spațiu pe disc» și apăsați pe «OK».\n5) În caseta de dialog «Proprietăți», apăsați pe «OK».</entry>
     <entry lang="ro" key="CREATE_FAILED">Eșuare creare volumul %s</entry>
     <entry lang="ro" key="DEVICE_FREE_BYTES">Mărimea lui %s este %.2f baiți</entry>
     <entry lang="ro" key="DEVICE_FREE_KB">Mărimea lui %s este %.2f KB</entry>
@@ -421,13 +421,13 @@
     <entry lang="ro" key="DEVICE_FREE_PB">Mărimea lui %s este %.2f PB</entry>
     <entry lang="ro" key="DEVICE_IN_USE_FORMAT">AVERTISMENT: Discul/partiția este accesat de către sistemul de operare sau de către aplicații. Formatarea unității/partiției poate determina coruperea datelor și instabilitatea sistemului.\n\nContinuați?</entry>
     <entry lang="ro" key="DEVICE_IN_USE_INPLACE_ENC">Avertisment: Partiția este accesată de către sistemul de operare sau de către aplicații. Ar trebui să închideți orice aplicație care ar putea accesa partiția (inclusiv programele antivirus).\n\nContinuați?</entry>
-    <entry lang="ro" key="FORMAT_CANT_DISMOUNT_FILESYS">Eroare: Discul/partiția conține un sistem de fișiere care nu a putut fi demontat. Sistemul de fișiere ar putea fi utilizat de către sistemul de operare. Formatarea discului/partiției foarte probabil va putea cauza coruperea datelor și instabilitatea sistemului.\n\nPentru a rezolva această situație, vă recomandăm să ștergeți mai întâi partiția și apoi să o recreați fără formatare. Pentru aceasta, urmați acești pași:\n1) Apăsați cu clic-dreapta pe pictograma 'Computer' (sau 'My Computer') din meniul 'Start' și selectați 'Manage'. Ar trebui să apară fereastra 'Computer Management'.\n2) În fereastra 'Computer Management', selectați 'Storage' > 'Disk Management'.\n3) Apăsați cu clic-dreapta pe partiția pe care doriți să o criptați și selectați fie 'Delete Partition', fie 'Delete Volume', sau 'Delete Logical Drive'.\n4) Apăsați pe 'Yes'. Dacă sistemul Windows vă solicită să reporniţi calculatorul, confirmați. Apoi repetați pasul 1 și 2 și continuați de la pasul 5.\n5) Apăsați cu clic-dreapta pe zona cu spațiul nealocat/liber și selectați fie 'New Partition', fie 'New Simple Volume', sau 'New Logical Drive'.\n6) Ar trebui să apară fereastra 'New Partition Wizard' sau 'New Simple Volume Wizard'; urmați instrucțiunile afișate. Pe pagina asistentului intitulată 'Format Partition', selectați fie 'Do not format this partition' fie 'Do not format this volume'. În același asistent, apăsați pe 'Next' și apoi pe 'Finish'.\n7) De acum calea unității selectate în VeraCrypt s-ar putea să fie greșită. De aceea, ieșiți din Asistentul de creare volum VeraCrypt (dacă încă este activ) și apoi porniți-l din nou.\n8) Încercați să criptați discul/partiția din nou.\n\nDacă VeraCrypt eșuează în mod repetat să cripteze discul/partiția, ați putea, în schimb, lua în considerare crearea unui container de tip fișier.</entry>
+    <entry lang="ro" key="FORMAT_CANT_DISMOUNT_FILESYS">Eroare: Discul/partiția conține un sistem de fișiere care nu a putut fi demontat. Sistemul de fișiere ar putea fi utilizat de către sistemul de operare. Formatarea discului/partiției foarte probabil va putea cauza coruperea datelor și instabilitatea sistemului.\n\nPentru a rezolva această situație, vă recomandăm să ștergeți mai întâi partiția și apoi să o recreați fără formatare. Pentru aceasta, urmați acești pași:\n1) Apăsați cu clic dreapta pe pictograma «Computer» (sau «My Computer») din meniul «Start» și selectați «Manage». Ar trebui să apară fereastra «Computer Management».\n2) În fereastra «Computer Management», selectați «Storage» > «Disk Management».\n3) Apăsați cu clic dreapta pe partiția pe care doriți să o criptați și selectați fie «Delete Partition», fie «Delete Volume», sau «Delete Logical Drive».\n4) Apăsați pe «Yes». Dacă sistemul Windows vă solicită să reporniţi calculatorul, confirmați. Apoi repetați pasul 1 și 2 și continuați de la pasul 5.\n5) Apăsați cu clic dreapta pe zona cu spațiul nealocat/liber și selectați fie «New Partition», fie «New Simple Volume», sau «New Logical Drive».\n6) Ar trebui să apară fereastra «New Partition Wizard» sau «New Simple Volume Wizard»; urmați instrucțiunile afișate. Pe pagina asistentului intitulată «Format Partition», selectați fie «Do not format this partition» fie «Do not format this volume». În același asistent, apăsați pe «Next» și apoi pe «Finish».\n7) De acum calea unității selectate în VeraCrypt s-ar putea să fie greșită. De aceea, ieșiți din «Asistentul de creare volum VeraCrypt» (dacă încă este activ) și apoi porniți-l din nou.\n8) Încercați să criptați discul/partiția din nou.\n\nDacă VeraCrypt eșuează în mod repetat să cripteze discul/partiția, ați putea, în schimb, lua în considerare crearea unui container de tip fișier.</entry>
     <entry lang="ro" key="INPLACE_ENC_CANT_LOCK_OR_DISMOUNT_FILESYS">Eroare: fișierul sistem nu poate fi blocat și/sau demontat. S-ar putea să fie accesat de către sistemul de operare sau de către aplicații (de exemplu, programe antivirus). Criptarea partiției ar putea cauza coruperea datelor și instabilitatea sistemului.\n\nVă rugăm închideți orice aplicație care ar putea utiliza sistemul de fișiere (inclusiv programe antivirus) și încercați din nou. Dacă asta nu ajută, vă rugăm urmați pașii de mai jos.</entry>
     <entry lang="ro" key="DEVICE_IN_USE_INFO">AVERTISMENT: Unele partiții/discuri montate sunt deja accesate!\n\nIgnorând acest lucru poate determina rezultate nedorite inclusiv instabilitatea sistemului.\n\nVă recomandăm cu insistență să închideți orice aplicație care le-ar putea accesa.</entry>
     <entry lang="ro" key="DEVICE_PARTITIONS_ERR">Discul selectat conține partiții.\n\nFormatarea discului poate cauza instabilitatea sistemului și/sau coruperea datelor. Vă rugăm fie selectați o partiție de pe disc fie ștergeți toate partițiile de pe disc pentru a permite ca VeraCrypt să-l formateze în siguranță.</entry>
     <entry lang="ro" key="DEVICE_PARTITIONS_ERR_W_INPLACE_ENC_NOTE">Discul non-sistem selectat conține partiții.\n\nVolumele criptate VeraCrypt amplasate pe discuri pot fi create doar pe discuri care nu conțin partiții (inclusiv hard discuri sau unități solid-state). Un disc care conține partiții poate fi criptat în întregime din mers (utilizând o singură cheie principală) numai dacă este discul unde este instalat sistemul Windows și de pe care pornește sistemul.\n\nDacă doriți să criptați discul non-sistem selectat folosind o singură cheie principală, va trebui să eliminați toate partițiile de pe disc mai întâi pentru a permite ca VeraCrypt să-l poată formata în siguranță (formatând un disc care conține partiții poate cauza instabilitatea sistemului și/sau coruperea datelor). Alternativ, puteți cripta fiecare partiție de pe disc individual (fiecare partiție va fi criptată folosind o cheie principală diferită).\n\nNotă: Dacă doriți să ștergeți toate partițiile de pe un disk GPT, ar trebui să-l convertiți într-un disk MBR (folosind de ex. unealta Computer Management) pentru a șterge partițiile ascunse.</entry>
     <entry lang="ro" key="WHOLE_NONSYS_DEVICE_ENC_CONFIRM">Avertisment: Dacă criptați tot discul (spre deosebire de criptarea numai a partiției de pe el), sistemul de operare va considera discul ca nou, gol și neformatat (deoarece nu va conține nici o tabelă de partiții) și s-ar putea să-l inițializeze spontan (sau să vă solicite asta), ceea ce ar distruge volumul. În plus, nu veți putea monta volumul ca favorit în mod regulat (de ex. când numărul unității se modifică) sau să-i atribuiți o etichetă favorită.\n\nPentru a evita asta ar trebui să luați în considerare crearea unei partiții pe disc și să o criptați pe aceasta în schimb.\n\nSunteți sigur că doriți criptarea întregului disc?</entry>
-    <entry lang="ro" key="AFTER_FORMAT_DRIVE_LETTER_WARN">IMPORTANT: Țineți cont că acest volum NU poate fi montat/accesat utilizând litera %c:, care este acum atribuită acestuia!\n\nPentru a monta acest volum, apăsați pe 'Automontare toate' în fereastra principală a VeraCrypt  (alternativ, în fereastra principală VeraCrypt, apăsați pe 'Selectare partiție/disc', apoi selectați această partiție/disc și apăsați pe 'Montare volum'). Volumul va fi montat cu o literă diferită, pe care o selectați din lista aflată în fereastra principală a VeraCrypt.\n\nLitera originală a unității %c: ar trebui folosită numai dacă doriți să eliminați criptarea de pe partiție/disc (de ex. dacă nu mai aveți nevoie de criptare). Într-un astfel de caz, apăsați cu clic-dreapta pe litera unității %c: în lista din 'Computer' (sau 'My Computer') și selectați 'Format'. Altfel, litera unității %c: nu ar trebui folosită deloc (doar dacă o eliminați, așa cum e descris în Întrebări puse frecvent din VeraCrypt și să o atribuiți unei alte partiții/unități).</entry>
+    <entry lang="ro" key="AFTER_FORMAT_DRIVE_LETTER_WARN">IMPORTANT: Țineți cont că acest volum NU poate fi montat/accesat utilizând litera %c:, care este acum atribuită acestuia!\n\nPentru a monta acest volum, apăsați pe 'Automontare toate' în fereastra principală a VeraCrypt  (alternativ, în fereastra principală VeraCrypt, apăsați pe 'Selectare partiție/disc', apoi selectați această partiție/disc și apăsați pe 'Montare volum'). Volumul va fi montat cu o literă diferită, pe care o selectați din lista aflată în fereastra principală a VeraCrypt.\n\nLitera originală a unității %c: ar trebui folosită numai dacă doriți să eliminați criptarea de pe partiție/disc (de ex. dacă nu mai aveți nevoie de criptare). Într-un astfel de caz, apăsați cu clic dreapta pe litera unității %c: în lista din 'Computer' (sau 'My Computer') și selectați 'Format'. Altfel, litera unității %c: nu ar trebui folosită deloc (doar dacă o eliminați, așa cum e descris în Întrebări puse frecvent din VeraCrypt și să o atribuiți unei alte partiții/unități).</entry>
     <entry lang="ro" key="OS_NOT_SUPPORTED_FOR_NONSYS_INPLACE_ENC">Criptarea din mers a unui volum non-sistem nu este suportată în versiunea sistemului de operare curent folosit (este suportată doar în Windows Vista și versiunile ulterioare de Windows).\n\nMotivul este că această versiune de Windows nu suportă reducerea sistemului de fișiere (sistemul de fișiere trebuie redus pentru a face loc pentru antetul volumului și a celui de rezervă).</entry>
     <entry lang="ro" key="ONLY_NTFS_SUPPORTED_FOR_NONSYS_INPLACE_ENC">Partiția selectată se pare că nu conține un sistem de fișiere NTFS. Numai partițiile care conțin un sistem de fișiere NTFS pot fi criptate din mers.\n\nNotă: Motivul este că această versiune de Windows nu suportă reducerea altor tipuri de sisteme de fișiere (sistemul de fișiere trebuie redus pentru a face loc pentru antetul volumului și a celui de rezervă).</entry>
     <entry lang="ro" key="ONLY_MOUNTED_VOL_SUPPORTED_FOR_NONSYS_INPLACE_ENC">Partiția selectată nu pare să conțină un sistem de fișiere NTFS. Numai partițiile care conțin un sistem de fișiere NTFS pot fi criptate din mers.\n\nDacă doriți să creați un volum criptat VeraCrypt în această partiție, alegeți opțiunea "Crează volum criptat și formatează-l" (în locul opțiunii "Criptare partiție din mers").</entry>
@@ -435,8 +435,8 @@
     <entry lang="ro" key="INPLACE_ENC_ALTERNATIVE_STEPS">Pentru a cripta datele de pe această partiție, vă rugăm urmați acești pași:\n\n1) Creați un volum VeraCrypt pe o partiție/disc goală și montați-o.\n\n2) Copiați toate fișiere din partiția pe care ați dorit să o criptați inițial în volumul VercaCrypt montat (care a fost creat și montat la pasul 1). În acest fel, veți crea o copie de rezervă criptată a datelor.\n\n3) Creați un volum VeraCrypt pe partiția pe care ați dorit să o criptați inițial și asigurați-vă că (în asistentul VeraCrypt) alegeți opțiunea "Crează volum criptat și formatează-l" (în locul opțiunii "Criptare partiție din mers"). Țineți cont că toate datele stocate pe partiție vor fi șterse. După ce volunul este creat, montați-l.\n\n4) Copiați toate fișierele de pe volumul copiei de siguranță montat (creat și montat la pasul 1) pe volumul VeraCrypt montat care a fost creat (și montat) la pasul 3.\n\nDupă completarea acestor pași, datele vor fi criptate și, în plus, va exista și o copie de siguranță a datelor.</entry>
     <entry lang="ro" key="RAW_DEV_NOT_SUPPORTED_FOR_INPLACE_ENC">VeraCrypt poate cripta din mers doar o partiție, un volum dinamic sau un disc sistem întreg.\n\nDacă doriți să creați un volum criptat VeraCrypt pe discul non-sistem selectată, alegeți opțiunea "Crează volum criptat și formatează-l"  (în loc de opțiunea "Criptare partiție din mers").</entry>
     <entry lang="ro" key="INPLACE_ENC_INVALID_PATH">Eroare: VeraCrypt poate cripta din mers doar o partiție, un volum dinamic sau un disc sistem întreg. Verificați dacă calea specificată este validă.</entry>
-    <entry lang="ro" key="CANNOT_RESIZE_FILESYS">Eroare: nu se poare reduce sistemul de fișiere (sistemul de fișiere trebuie redus pentru a face loc pentru antetul volumului și a celui de rezervă).\n\nPosibile cauze și soluții:\n\n- Nu există suficient spațiu liber pe volum. Asigurați-vă că nici o altă aplicație nu scrie în sistemul de fișiere.\n\n- Sistem de fișiere corupt. Verificați-l și reparați eventualele erori (apăsați cu clic-dreapta pe litera unității respective în lista din 'Computer', apoi selectați Properties > Tools > 'Check Now', asigurați-vă că opțiunea 'Automatically fix file system errors' este selectată și apoi apăsați pe Start).\n\nDacă operațiile de mai sus nu ajută, vă rugăm urmați pașii de mai jos.</entry>
-    <entry lang="ro" key="NOT_ENOUGH_FREE_FILESYS_SPACE_FOR_SHRINK">Eroare: nu există suficient spațiu liber pe volum astfel încât sistemul de fișiere nu poate fi redus (sistemul de fișiere trebuie redus pentru a face loc pentru antetul volumului și a celui de rezervă).\n\nVă rugăm ștergeți orice fișier inutil și goliți Coșul de gunoi astfel încât să eliberați minim 256 KB de spațiu și apoi încercați din nou. Țineți cont că datorită un probleme ce țin de Windows, spațiul liber raportat de către Windows Explorer poate fi incorect până după restartarea sistemului. Dacă restartarea sistemuluinu ajută, sistemul de fișiere poate fi corupt. Verificați și reparați eventualele erori (apăsați cu clic-dreapta pe litera unității respective în lista din 'Computer', apoi selectați Properties > Tools > 'Check Now', asigurați-vă că opțiunea 'Automatically fix file system errors' este selectată și apoi apăsați pe Start).\n\nDacă operațiile de mai sus nu ajută, vă rugăm urmați pașii de mai jos.</entry>
+    <entry lang="ro" key="CANNOT_RESIZE_FILESYS">Eroare: nu se poare reduce sistemul de fișiere (sistemul de fișiere trebuie redus pentru a face loc pentru antetul volumului și a celui de rezervă).\n\nPosibile cauze și soluții:\n\n- Nu există suficient spațiu liber pe volum. Asigurați-vă că nici o altă aplicație nu scrie în sistemul de fișiere.\n\n- Sistem de fișiere corupt. Verificați-l și reparați eventualele erori (apăsați cu clic dreapta pe litera unității respective în lista din 'Computer', apoi selectați Properties > Tools > 'Check Now', asigurați-vă că opțiunea 'Automatically fix file system errors' este selectată și apoi apăsați pe Start).\n\nDacă operațiile de mai sus nu ajută, vă rugăm urmați pașii de mai jos.</entry>
+    <entry lang="ro" key="NOT_ENOUGH_FREE_FILESYS_SPACE_FOR_SHRINK">Eroare: nu există suficient spațiu liber pe volum astfel încât sistemul de fișiere nu poate fi redus (sistemul de fișiere trebuie redus pentru a face loc pentru antetul volumului și a celui de rezervă).\n\nVă rugăm ștergeți orice fișier inutil și goliți Coșul de gunoi astfel încât să eliberați minim 256 KB de spațiu și apoi încercați din nou. Țineți cont că datorită un probleme ce țin de Windows, spațiul liber raportat de către Windows Explorer poate fi incorect până după restartarea sistemului. Dacă restartarea sistemuluinu ajută, sistemul de fișiere poate fi corupt. Verificați și reparați eventualele erori (apăsați cu clic dreapta pe litera unității respective în lista din 'Computer', apoi selectați Properties > Tools > 'Check Now', asigurați-vă că opțiunea 'Automatically fix file system errors' este selectată și apoi apăsați pe Start).\n\nDacă operațiile de mai sus nu ajută, vă rugăm urmați pașii de mai jos.</entry>
     <entry lang="ro" key="DISK_FREE_BYTES">Spațiul liber pe discul %s este %.2f baiți</entry>
     <entry lang="ro" key="DISK_FREE_KB">Spațiul liber pe discul %s este %.2f KB</entry>
     <entry lang="ro" key="DISK_FREE_MB">Spațiul liber pe discul %s este %.2f MB</entry>
@@ -456,7 +456,7 @@
     <entry lang="ro" key="ASK_KEEP_DETECTING_SYSTEM_CRASH">Doriți ca VeraCrypt să continue detectarea căderilor de sistem?</entry>
     <entry lang="ro" key="NO_MINIDUMP_FOUND">VeraCrypt nu a găsit niciun fișier minidump de cădere a sistemului.</entry>
     <entry lang="ro" key="ASK_DELETE_KERNEL_CRASH_DUMP">Doriți să ștergeți fișierul minidump de cădere a sistemului Windows pentru a elibera spațiu pe disc?</entry>
-    <entry lang="ro" key="ASK_DEBUGGER_INSTALL">Pentru a analiza căderea sistemului, VeraCrypt trebuie să instaleze 'Microsoft Debugging Tools' pentru Windows mai întâi.\n\nDupă ce veți da apăsați pe OK, instalatorul Windows va descărca pachetul de instalare 'Microsoft Debugging Tools' (16 MB) de pe un server Microsoft și-l va instala (instalatorul Windows va fi redirectat pe adresa URL a serverului Microsoft de pe serverul veracrypt.org, care se va asigura că această funcție va fi operațională chiar dacă Microsoft va schimba locația pachetului de instalare).</entry>
+    <entry lang="ro" key="ASK_DEBUGGER_INSTALL">Pentru a analiza căderea sistemului, VeraCrypt trebuie să instaleze 'Microsoft Debugging Tools' pentru Windows mai întâi.\n\nDupă ce veți apăsa pe «OK», instalatorul Windows va descărca pachetul de instalare «Microsoft Debugging Tools» (16 MB) de pe un server Microsoft și-l va instala (instalatorul Windows va fi redirectat pe adresa URL a serverului Microsoft de pe serverul veracrypt.org, care se va asigura că această funcție va fi operațională chiar dacă Microsoft va schimba amplasarea pachetului de instalare).</entry>
     <entry lang="ro" key="SYSTEM_CRASH_ANALYSIS_INFO">După ce veți apăsa pe OK, VeraCrypt va analiza de ce a căzut sistemul. Aceasta ar putea dura câteva minute.</entry>
     <entry lang="ro" key="DEBUGGER_NOT_FOUND">Verificați dacă variabila de sistem 'PATH' include calea spre 'kd.exe' (Kernel Debugger).</entry>
     <entry lang="ro" key="SYSTEM_CRASH_NO_VERACRYPT">Se pare că VeraCrypt cel mai probabil nu a fost cauza căderii sistemului. Există multe cauze potențiale care ar fi putut determina acest lucru (de exemplu, o componentă hardware defectă, o eroare într-un driver de unitate, etc.)</entry>
@@ -648,7 +648,7 @@
     <entry lang="ro" key="PIM_SMALL_WARNING">Ați ales o valoare a MIP care este mai mică decât valoare implicită a VeraCrypt. Rețineți că dacă parola nu este suficient de puternică, aceasta ar putea determina o securitate mai slabă.\n\nConfirmați că utilizați o parolă puternică?</entry>
     <entry lang="ro" key="PIM_SYSENC_TOO_BIG">Valoarea maximă a MIP (Multiplicator Iterații Personal) pentru criptarea sistemului este 65535.</entry>
     <entry lang="ro" key="PIM_TITLE">MIP volum</entry>
-    <entry lang="ro" key="HIDDEN_FILES_PRESENT_IN_KEYFILE_PATH">\n\nATENȚIE: A fost găsit unul sau mai multe fișiere ascunse în calea de căutare a fișierului cheie. Astfel de fișiere ascunse nu pot fi folosite ca fișiere-cheie. Dacă doriți să le folosiți ca fișiere-cheie, ștergeți-le atributul 'Ascuns' (apăsați cu clic-dreapta pe fiecare din ele, selectați 'Properties', debifați 'Hidden' și apoi apăsați pe OK). Notă: Fișierele ascunse sunt vizibile numai dacă opțiunea corespunzătoare este activată (Computer > Organize > 'Folder and search options' > View).</entry>
+    <entry lang="ro" key="HIDDEN_FILES_PRESENT_IN_KEYFILE_PATH">\n\nATENȚIE: A fost găsit unul sau mai multe fișiere ascunse în calea de căutare a fișierului cheie. Astfel de fișiere ascunse nu pot fi folosite ca fișiere-cheie. Dacă doriți să le folosiți ca fișiere-cheie, ștergeți-le atributul 'Ascuns' (apăsați cu clic dreapta pe fiecare din ele, selectați 'Properties', debifați 'Hidden' și apoi apăsați pe OK). Notă: Fișierele ascunse sunt vizibile numai dacă opțiunea corespunzătoare este activată (Computer > Organize > 'Folder and search options' > View).</entry>
     <entry lang="ro" key="HIDDEN_VOL_PROT_PASSWORD_US_KEYB_LAYOUT">Dacă încercați să protejați un volum ascuns ce conține un sistem ascuns, asigurați-vă că folosiți formatul tastaturii standard US când introduceți parola pentru volumul ascuns. Aceasta este necesar deoarece parola trebuie introdusă înainte de pornirea sistemului (înainte de pornirea Windows) unde formatele tastaturilor non-US nu sunt disponibile.</entry>
     <entry lang="ro" key="FOUND_NO_PARTITION_W_DEFERRED_INPLACE_ENC">VeraCrypt nu a găsit vreun volum unde criptarea non-sistem să fie întreruptă și unde antetul volumului să poată fi decriptat folosind parola și/sau fișierele-cheie furnizate.\n\nVă rugăm asigurați-vă că parola și/sau fișierele-cheie sunt corecte și că volumul/partiția nu este utilizat(ă) de către sistem sau aplicații (inclusiv programele antivirus).</entry>
     <entry lang="ro" key="SELECTED_PARTITION_ALREADY_INPLACE_ENC">Partiția/unitatea selectată este deja complet criptată.\nMarcaj antet = 0x%.8X</entry>
@@ -703,7 +703,7 @@
     <entry lang="ro" key="VOL_SIZE_WRONG">Eroare: dimensiune volum incorectă.</entry>
     <entry lang="ro" key="WARN_QUICK_FORMAT">AVERTISMENT: Ar trebui să folosiți Formatare rapidă numai în următoarele cazuri:\n\n1) Discul nu conține date importante și nu aveți nevoie de negare plauzibilă.\n2) Discul a fost deja criptat în siguranță și în întregime.\n\nSunteți sigur că doriți să folosiți Formatarea rapidă?</entry>
     <entry lang="ro" key="CONFIRM_SPARSE_FILE">Containerul dinamic este un fișier NTFS fragmentat prealocat a cărui dimensiune fizică (spațiu pe disc efectiv utilizat) crește pe măsură ce sunt adăugate date în el.\n\nATENȚIE: Performanța volumelor amplasate în fișiere fragmentate este semnificativ mai slabă decât a volumelor obișnuite. Volumele amplasate în fișiere fragmentate sunt, pe deasupra, mai puțin sigure deoarece este posibil de aflat care din sectoarele volumului nu sunt folosite. Prin urmare, volumele amplasate în fișiere nu pot furniza negarea plauzibilă (să gazduiască un volum ascuns). De altfel, țineți cont că, dacă datele sunt scrise într-un fișier  container fragmentat când nu există suficient spațiu pe sistemul de fișiere gazdă, sistemul de fișiere criptat poate deveni corupt.\n\nSunteți sigur că doriți crearea unui volum tip fișier fragmentat?</entry>
-    <entry lang="ro" key="SPARSE_FILE_SIZE_NOTE">Trebuie să știți că dimensiunea containerului raportată de către Windows și de către VeraCrypt va fi întotdeauna egală cu dimensiunea lui maximă. Pentru a afla dimensiunea fizică curentă a containerului (spațiul actual utilizat pe disc), apăsați cu clic-dreapta pe fișierul container (într-o fereastră Windows Explorer, nu în VeraCrypt), apoi selectați 'Properties' și vedeți valoarea 'Size on disk'.\n\nÎn plus, rețineți că dacă mutați un container dinamic pe un alt volum sau disc, dimensiunea fizică a containerului va fi extinsă la cea maximă. (Puteți preveni aceasta prin crearea unui nou container dinamic în locația de destinație, montarea acestuia și apoi mutarea fișierelor de pe vechiul container pe cel nou.)</entry>
+    <entry lang="ro" key="SPARSE_FILE_SIZE_NOTE">Trebuie să știți că dimensiunea containerului raportată de către Windows și de către VeraCrypt va fi întotdeauna egală cu dimensiunea lui maximă. Pentru a afla dimensiunea fizică curentă a containerului (spațiul actual utilizat pe disc), apăsați cu clic dreapta pe fișierul container (într-o fereastră Windows Explorer, nu în VeraCrypt), apoi selectați 'Properties' și vedeți valoarea 'Size on disk'.\n\nÎn plus, rețineți că dacă mutați un container dinamic pe un alt volum sau disc, dimensiunea fizică a containerului va fi extinsă la cea maximă. (Puteți preveni aceasta prin crearea unui nou container dinamic în locația de destinație, montarea acestuia și apoi mutarea fișierelor de pe vechiul container pe cel nou.)</entry>
     <entry lang="ro" key="PASSWORD_CACHE_WIPED_SHORT">Parola păstrată a fost ștearsă</entry>
     <entry lang="ro" key="PASSWORD_CACHE_WIPED">Parolele (și/sau conținutul fișierelor cheie) stocate în driver-ul VeraCrypt au fost șterse.</entry>
     <entry lang="ro" key="WRONG_VOL_TYPE">VeraCrypt nu poate schimba parola pentru un volum străin.</entry>
@@ -947,7 +947,7 @@
     <entry lang="ro" key="VOL_HEADER_RESTORED">Antetul volumului a fost restaurat cu succes.\n\nIMPORTANT: Vă rugăm rețineți că o parolă veche ar fi putut fi restaurată de asemenea. În plus, dacă au fost/sunt necesare fișiere-cheie pentru a monta volumul când a fost efectuată rezerva, aceleași fișiere-cheie sunt și acum necesare pentru a monta volumul.</entry>
     <entry lang="ro" key="EXTERNAL_VOL_HEADER_BAK_FIRST_INFO">Din motive de securitate, va trebui să introduceți parola corectă (și/sau să furnizați fișierele-cheie corecte) pentru volum.\n\nNotă: Dacă volumul conține un volum ascuns, va trebui să introduceți parola corectă (și/sau să furnizați fișierele-cheie corecte) pentru volumul exterior mai întâi. După aceea, dacă alegeți să faceți o copie de rezervă a antetului volumului ascuns, va trebui să introduceți parola corectă (și/sau să furnizați fișierele-cheie corecte) pentru volumul ascuns.</entry>
     <entry lang="ro" key="CONFIRM_VOL_HEADER_BAK">Sunteți sigur că doriți să creați o copie de rezervă a antetului pentru volumul %s?\n\nDupă ce veți apăsa pe Da, vi se va solicita numele fișierului copiei de rezervă a antetului.\n\nNotă: Atât antetul volumului standard cât și cel al volumului ascuns va fi recriptat folosind o nouă cheie și stocat în fișierul de rezervă. Dacă nu există un volum ascuns în acest volum, zona rezervată pentru antetul volumului ascuns în fișierul rezervă va fi completată cu date aleatoare (pentru a păstra negarea plauzibilă). Când restaurați un antet de volum dintr-un fișier rezervă, va trebui să introduceți parola corectă (și/sau să furnizați fișierele-cheie corecte) care au fost valide când a fost creată copia de rezervă a antetului volumului. Parola (și/sau fișierele-cheie) va determina, de asemeni, tipul antetului volumului ce va fi restaurat, adică standard sau ascuns (rețineți că VeraCrypt determină tipul printr-un proces de încercări repetate de decriptare).</entry>
-    <entry lang="ro" key="CONFIRM_VOL_HEADER_RESTORE">Sunteți sigur că doriți să restaurați antetul pentru volumul %s?\n\nATENȚIE: Restaurând antetul volumului se reastaurează și parola volumului care a fost validă când s-a efectuat copia de rezervă. În plus, dacă au fost necesare fișiere-cheie pentru a monta volumul, aceleași fișiere-cheie vor fi necesare pentru a monta din nou volumul când antetul volumului va fi restaurat.\n\nDupă ce veți da apăsa pe Da, veți selecta fișierul de rezervă al antetului.</entry>
+    <entry lang="ro" key="CONFIRM_VOL_HEADER_RESTORE">Sunteți sigur că doriți să restaurați antetul pentru volumul %s?\n\nATENȚIE: Restaurând antetul volumului se reastaurează și parola volumului care a fost validă când s-a efectuat copia de rezervă. În plus, dacă au fost necesare fișiere-cheie pentru a monta volumul, aceleași fișiere-cheie vor fi necesare pentru a monta din nou volumul când antetul volumului va fi restaurat.\n\nDupă ce veți apăsa pe «Da», veți selecta fișierul de rezervă al antetului.</entry>
     <entry lang="ro" key="DOES_VOLUME_CONTAIN_HIDDEN">Volumul conține un volum ascuns?</entry>
     <entry lang="ro" key="VOLUME_CONTAINS_HIDDEN">Volumul conține un volum ascuns</entry>
     <entry lang="ro" key="VOLUME_DOES_NOT_CONTAIN_HIDDEN">Volumul nu conține un volum ascuns</entry>
@@ -957,9 +957,9 @@
     <entry lang="ro" key="HEADER_BACKUP_SIZE_INCORRECT">Dimensiunea fișierului de rezervă a antetului volumului nu este corectă.</entry>
     <entry lang="ro" key="VOLUME_HAS_NO_BACKUP_HEADER">Nu există antet de rezervă inclus în acest volum (rețineți că numai volumele create de VeraCrypt 6.0 sau ulterior conțin antete de rezervă incluse).</entry>
     <entry lang="ro" key="BACKUP_HEADER_NOT_FOR_SYS_DEVICE">Încercați să faceți o copie de rezervă a antetului unei unități/partiții sistem. Aceasta nu este permis. Operațiile de creare rezervă/recuperare referitoare la unități/partiții sistem pot fi efectuate numai folosind Discul de Recuperare VeraCrypt.\n\nDoriți să creați un Disc de Recuperare VeraCrypt?</entry>
-    <entry lang="ro" key="RESTORE_HEADER_NOT_FOR_SYS_DEVICE">Încercați să restaurați un antet a unui volum VeraCrypt virtual, dar ați selectat discul/partiția sistem. Aceasta nu este permis. Operațiile de creare rezervă/recuperare referitoare la unități/partiții sistem pot fi efectuate numai folosind Discul de Recuperare VeraCrypt.\n\nDoriți să creați un Disc de Recuperare VeraCrypt?</entry>
-    <entry lang="ro" key="RESCUE_DISK_NON_WIZARD_CREATION_SELECT_PATH">După ce veți da apăsa pe OK, veți selecta un nume de fișier pentru imaginea noului Disc de Recuperare VeraCrypt și locația unde doriți să o plasați.</entry>
-    <entry lang="ro" key="RESCUE_DISK_NON_WIZARD_CREATION_BURN">Imaginea Discului de Recuperare a fost creată și stocată în acest fișier:\n%s\n\nAcum trebuie să scrieți imaginea discului de recuperare pe un CD sau DVD.\n\nIMPORTANT: Rețineți că fișierul trebuie scris pe CD/DVD ca o imagine disc ISO (nu ca și un fișier individual). Pentru informații despre cum să faceți asta, vă rugăm consultați documentația programului de înregistrare pentru CD/DVD.\n\nDupă ce ați scris Discul de Recuperare, selectați 'Sistem' > 'Verificare disc de recuperare' pentru a verifica dacă a fost scris corect.</entry>
+    <entry lang="ro" key="RESTORE_HEADER_NOT_FOR_SYS_DEVICE">Încercați să restaurați un antet al unui volum VeraCrypt virtual, dar ați selectat discul/partiția sistem. Aceasta nu este permis. Operațiile de creare rezervă/recuperare referitoare la unități/partiții sistem pot fi efectuate numai folosind «Discul de Recuperare VeraCrypt».\n\nDoriți să creați un «Disc de Recuperare VeraCrypt»?</entry>
+    <entry lang="ro" key="RESCUE_DISK_NON_WIZARD_CREATION_SELECT_PATH">După ce veți apăsa pe «OK», veți selecta un nume de fișier pentru imaginea noului «Disc de Recuperare VeraCrypt» și locul unde doriți să o plasați.</entry>
+    <entry lang="ro" key="RESCUE_DISK_NON_WIZARD_CREATION_BURN">Imaginea «Discului de Recuperare» a fost creată și stocată în acest fișier:\n%s\n\nAcum trebuie să scrieți imaginea discului de recuperare pe un CD sau DVD.\n\nIMPORTANT: Rețineți că fișierul trebuie scris pe CD/DVD ca o imagine disc ISO (nu ca și un fișier individual). Pentru informații despre cum să faceți asta, vă rugăm consultați documentația programului de înregistrare pentru CD/DVD.\n\nDupă ce ați scris «Discul de Recuperare», selectați 'Sistem' > 'Verificare disc de recuperare' pentru a verifica dacă a fost scris corect.</entry>
     <entry lang="ro" key="RESCUE_DISK_NON_WIZARD_CREATION_WIN_ISOBURN">Imaginea Discului de Recuperare a fost creată și stocată în acest fișier:\n%s\n\nAcum trebuie să scrieți imaginea discului de recuperare pe un CD sau DVD.\n\nDoriți să lansați acum Microsoft Windows Disc Image Burner?\n\nNotă: După ce ați scris Discul de Recuperare, selectați 'Sistem' > 'Verificare disc de recuperare' pentru a verifica dacă a fost scris corect.</entry>
     <entry lang="ro" key="RESCUE_DISK_NON_WIZARD_CHECK_INSERT">Introduceți Discul de Recuperare VeraCrypt și apoi apăsați pe OK pentru a fi verificat.</entry>
     <entry lang="ro" key="RESCUE_DISK_NON_WIZARD_CHECK_PASSED">Discul de Recuperare VeraCrypt a fost verificat cu succes.</entry>
@@ -1027,7 +1027,7 @@
     <entry lang="ro" key="MOUNTED_VOLUMES_DISMOUNTED">Volumele VeraCrypt au fost demontate.</entry>
     <entry lang="ro" key="VOLUMES_DISMOUNTED_CACHE_WIPED">Volumele VeraCrypt au fost demontate și parola memorată a fost eliminată.</entry>
     <entry lang="ro" key="SUCCESSFULLY_DISMOUNTED">Demontare reușită.</entry>
-    <entry lang="ro" key="CONFIRM_BACKGROUND_TASK_DISABLED">AVERTISMENT: Dacă este dezactivată opțiunea Pornire VeraCrypt în fundal, vor fi dezactivate următoarele funcții:\n\n1) Scurtăturile\n2) Autodemontarea (de ex. după deautentificare, eliminarea bruscă a unităților gazdă, expirare timp, etc.)\n3) Automontare toate favorite\n4) Notificări (de ex., când este împiedicată distrugerea volumelor ascunse)\n5) Pictograma sistem\n\nNotă: Puteți opri programul din fundal oricând, apăsând cu clic-dreapta pe pictograma sistem VeraCrypt și selectând Ieșire.\n\nSunteți sigur că doriți să dezactivați permanent Pornirea VeraCrypt în fundal?</entry>
+    <entry lang="ro" key="CONFIRM_BACKGROUND_TASK_DISABLED">AVERTISMENT: Dacă este dezactivată opțiunea Pornire VeraCrypt în fundal, vor fi dezactivate următoarele funcții:\n\n1) Scurtăturile\n2) Autodemontarea (de ex. după deautentificare, eliminarea bruscă a unităților gazdă, expirare timp, etc.)\n3) Automontare toate favorite\n4) Notificări (de ex., când este împiedicată distrugerea volumelor ascunse)\n5) Pictograma sistem\n\nNotă: Puteți opri programul din fundal oricând, apăsând cu clic dreapta pe pictograma sistem VeraCrypt și selectând Ieșire.\n\nSunteți sigur că doriți să dezactivați permanent Pornirea VeraCrypt în fundal?</entry>
     <entry lang="ro" key="CONFIRM_NO_FORCED_AUTODISMOUNT">AVERTISMENT: Dacă această opțiune este dezactivată, volumele conținând fișiere/foldere deschise NU vor putea fi autodemontate.\n\nSunteți sigur că doriți să dezactivați această opțiune?</entry>
     <entry lang="ro" key="WARN_PREF_AUTO_DISMOUNT">AVERTISMENT: Volumele conținând fișiere/foldere deschise NU vor putea fi autodemontate.\n\nPentru a împiedica aceasta, activați următoarele opțiuni din această fereastră: 'Forțare autodemontare chiar dacă volumul conține fișiere sau foldere deschise'</entry>
     <entry lang="ro" key="WARN_PREF_AUTO_DISMOUNT_ON_POWER">AVERTISMENT: Când bateria sistemului este redusă, Windows poate omite trimiterea mesajelor potrivite pentru executarea aplicațiilor când computerul intră în modul de salvare a energiei. Prin urmare, VeraCrypt poate eșua autodemontarea volumelor în astfel de cazuri.</entry>
@@ -1053,7 +1053,7 @@
     <entry lang="ro" key="INCONSISTENCY_RESOLVED">Inconsistență rezolvată.\n\n\n(Dacă raportați o eroare în legătură cu aceasta, vă rugăm includeți următoarele informații tehnice în raportul de erori:\n%hs)</entry>
     <entry lang="ro" key="UNEXPECTED_STATE">Eroare: stare neașteptată.\n\n\n(Dacă raportați o eroare în legătură cu aceasta, vă rugăm includeți următoarele informații tehnice în raportul de erori:\n%hs)</entry>
     <entry lang="ro" key="NO_SYS_ENC_PROCESS_TO_RESUME">Nu există nici un proces întrerupt de criptare/decriptarea a partiției/unității sistem de reluat.\n\nNotă: Dacă doriți să reluați un proces întrerupt de criptare/decriptare a unei partiții/volum non-sistem, selectați 'Volume' &gt; 'Reluare proces întrerupt'.</entry>
-    <entry lang="ro" key="HIDVOL_PROT_BKG_TASK_WARNING">AVERTISMENT: Pornirea în fundal VeraCrypt este dezactivată. După ce veți închide VeraCrypt, nu veți fi notificat dacă a fost prevenită distrugerea volumului ascuns.\n\nNotă: Puteți opri programul din fundal oricând apăsând cu clic-dreapta pe pictograma VeraCrypt din zona sistem și selectând 'Ieșire'.\n\nActivați pornirea în fundal VeraCrypt?</entry>
+    <entry lang="ro" key="HIDVOL_PROT_BKG_TASK_WARNING">AVERTISMENT: Pornirea în fundal VeraCrypt este dezactivată. După ce veți închide VeraCrypt, nu veți fi notificat dacă a fost prevenită distrugerea volumului ascuns.\n\nNotă: Puteți opri programul din fundal oricând apăsând cu clic dreapta pe pictograma VeraCrypt din zona sistem și selectând 'Ieșire'.\n\nActivați pornirea în fundal VeraCrypt?</entry>
     <entry lang="ro" key="LANG_PACK_VERSION">Versiune pachet lingvistic: %s</entry>
     <entry lang="ro" key="CHECKING_FS">Verificare sistem de fișiere de pe volumul VeraCrypt montat ca %s...</entry>
     <entry lang="ro" key="REPAIRING_FS">Încercare reparare sistem de fișiere de pe volumul VeraCrypt montat ca %s...</entry>
@@ -1284,7 +1284,7 @@
     <entry lang="ro" key="BOOT_PASSWORD_CACHE_KEYBOARD_WARNING">IMPORTANT: Rețineți că parolele de autentificare la prepornire sunt tipărite întotdeauna folosind formatul de tastatură stnadard US. Prin urmare, un volum care utilizează o parolă introdusă folosind alt format de tastatură ar putea fi imposibil de montat folosind parola de autentificare la prepornire (de reținut că aceasta nu este o eroare din VeraCrypt). Pentru a permite unui astfel de volum să fie montat folosind o parolă de autentificare la prepornire, executați următorii pași:\n\n1) Apăsați pe 'Selectare fișier' sau 'Selectare partiție/disc' și selectați volumul.\n2) Selectați 'Volume' > 'Schimbare parolă volum'.\n3) Introduceți parola curentă pentru volum.\n4) Schimbați formatul tastaturii la English (US) apăsând pe bara de limbi din zona de notificare Windows și selectați 'EN  English (United States)'.\n5) În VeraCrypt, în câmpul pentru parola nouă, scrieți parola de autentificare la prepornire.\n6) Confirmați noua parolă prin reintroducerea ei în câmpul de confirmare și apoi apăsați pe OK.\nATENȚIE: Rețineți că dacă urmați acești pași, parola volumului va trebui introdusă întotdeauna folosind formatul de tastatură US (care este automat asigurat numai în mediul de prepornire).</entry>
     <entry lang="ro" key="SYS_FAVORITES_KEYBOARD_WARNING">Volumele sistem favorite vor fi montate folosind parola de autentificare la prepornire. Dacă vreunul din ele folosește o parolă diferită, acesta nu va fi montat.</entry>
     <entry lang="ro" key="SYS_FAVORITES_ADMIN_ONLY_INFO">Rețineți că dacă doriți să împiedicați acțiunile obișnuite pentru un volum VeraCrypt (cum ar fi 'Demontare toate', 'Autodemontare', etc.) să afecteze volumele sistem favorite, ar trebui să activați opțiunea 'Permite numai administratorilor să vadă și să demonteze volume sistem favorite în VeraCrypt'. În plus, când VeraCrypt rulează fără drepturi de administrator (implicit în Windows Vista și ulterior), volumele sistem favorite nu vor fi afișate în lista cu literele unităților din fereastra principală a programului VeraCrypt.</entry>
-    <entry lang="ro" key="SYS_FAVORITES_ADMIN_ONLY_WARNING">IMPORTANT: Rețineți că dacă această opțiune este activată și VeraCrypt nu are drepturi de administrator, volumele sistem favorite montate NU sunt afișate în fereastra principală a programului VeraCrypt și acestea nu pot fi demontate. Prin urmare, dacă aveți nevoie de ex. să demontați un volum sistem favorit, mai întâi apăsați cu clic-dreapta pe pictograma VeraCrypt (din meniul Start) și selectați 'Run as administrator'. Aceeași limitare se aplică și la funcțiile 'Demontare toate', 'Autodemontare', scurtăturile pentru 'Demontare toate', etc.</entry>
+    <entry lang="ro" key="SYS_FAVORITES_ADMIN_ONLY_WARNING">IMPORTANT: Rețineți că dacă această opțiune este activată și VeraCrypt nu are drepturi de administrator, volumele sistem favorite montate NU sunt afișate în fereastra principală a programului VeraCrypt și acestea nu pot fi demontate. Prin urmare, dacă aveți nevoie de ex. să demontați un volum sistem favorit, mai întâi apăsați cu clic dreapta pe pictograma VeraCrypt (din meniul Start) și selectați 'Run as administrator'. Aceeași limitare se aplică și la funcțiile 'Demontare toate', 'Autodemontare', scurtăturile pentru 'Demontare toate', etc.</entry>
     <entry lang="ro" key="SETTING_REQUIRES_REBOOT">Rețineți că această setare se aplică numai după repornirea sistemului.</entry>
     <entry lang="ro" key="COMMAND_LINE_ERROR">Eroare la interpretarea liniei de comandă.</entry>
     <entry lang="ro" key="RESCUE_DISK">Disc recuperare</entry>
@@ -1293,9 +1293,9 @@
     <entry lang="ro" key="DISABLE_NONADMIN_SYS_FAVORITES_ACCESS">Permite numai administratorilor să vadă și să demonteze volume sistem favorite în VeraCrypt</entry>
     <entry lang="ro" key="MOUNT_SYSTEM_FAVORITES_ON_BOOT">Montare volume sistem favorite la pornirea Windows (în faza inițială a procedurii de pornire)</entry>
     <entry lang="ro" key="MOUNTED_VOLUME_DIRTY">Avertisment: Sistemul de fișiere de pe volumul montat '%s' nu a fost demontat în sigurață și deci poate conține erori. Folosirea unui sistem de fișiere corupt poate determina pierderea datelor sau coruperea acestora.\n\nNotă: Înainte de a îndepărta fizic sau opri alimentarea unității (cum ar fi o unitate de memorie USB sau hard disc extern) unde se află un volum VeraCrypt montat, întotdeauna ar trebui ca mai întâi să demontați volumul VeraCrypt din programul VeraCrypt.\n\n\nDoriți ca Windows să încerce să detecteze și să fixeze (dacă e cazul) erorile din sistemul de fișiere?</entry>
-    <entry lang="ro" key="SYS_FAVORITE_VOLUME_DIRTY">Avertisment: Unul sau mai multe volume sistem favorite nu a fost demontat în siguranță și deci poate conține erori în sistemul de fișiere. Verificați jurnalul evenimentelor de sistem pentru mai multe detalii.\n\nUtilizarea un sistem de fișiere corupt poate determina pierderea sau coruprea datelor. Ar trebui să verificați dacă volumele sistem favorite afectate au erori (apăsați cu clic-dreapta pe fiecare din ele în fereastra VeraCrypt și selectați 'Reparare sistem de fișiere').</entry>
+    <entry lang="ro" key="SYS_FAVORITE_VOLUME_DIRTY">Avertisment: Unul sau mai multe volume sistem favorite nu a fost demontat în siguranță și deci poate conține erori în sistemul de fișiere. Verificați jurnalul evenimentelor de sistem pentru mai multe detalii.\n\nUtilizarea un sistem de fișiere corupt poate determina pierderea sau coruprea datelor. Ar trebui să verificați dacă volumele sistem favorite afectate au erori (apăsați cu clic dreapta pe fiecare din ele în fereastra VeraCrypt și selectați 'Reparare sistem de fișiere').</entry>
     <entry lang="ro" key="FILESYS_REPAIR_CONFIRM_BACKUP">Avertisment: Repararea unui sistem de fișiere defect folosind comanda Microsoft 'chkdsk' poate cauza pierderea fișierelor în zonele afectate. Prin urmare, este recomandat să faceți mai întâi o copie a fișierelor stocate în volumul VeraCrypt pe un alt volum VeraCrypt, sănătos.\n\nDoriți să reparați sistemul de fișiere acum?</entry>
-    <entry lang="ro" key="MOUNTED_CONTAINER_FORCED_READ_ONLY">Volumul '%s' a fost montat ca doar-citire deoarece dreptul de scriere nu a fost permis.\n\nVerificați dacă permisiunile de securitate ale fișierului container permit scrierea în el (apăsați cu clic-dreapta pe fișierul container și selectați Properties > Security).\n\nRețineți că, datorită unei probleme în Windows, ați putea vedea acest mesaj de avertizare chiar și după ce ați setat permisiunile de securitate adecvate. Aceasta nu este cauzată de o eroare din VeraCrypt. O soluție posibilă este să mutați containerul, de ex. în folderul 'Documents'.\n\nDacă intenționați să păstrați volumul ca doar-citire, setați atributul containerului ca doar-citire (apăsați cu clic-dreapta pe container și selectați Properties > Read-only), ceea ce va determina evitarea acestui avertisment.</entry>
+    <entry lang="ro" key="MOUNTED_CONTAINER_FORCED_READ_ONLY">Volumul '%s' a fost montat ca doar-citire deoarece dreptul de scriere nu a fost permis.\n\nVerificați dacă permisiunile de securitate ale fișierului container permit scrierea în el (apăsați cu clic dreapta pe fișierul container și selectați Properties > Security).\n\nRețineți că, datorită unei probleme în Windows, ați putea vedea acest mesaj de avertizare chiar și după ce ați setat permisiunile de securitate adecvate. Aceasta nu este cauzată de o eroare din VeraCrypt. O soluție posibilă este să mutați containerul, de ex. în folderul 'Documents'.\n\nDacă intenționați să păstrați volumul ca doar-citire, setați atributul containerului ca doar-citire (apăsați cu clic dreapta pe container și selectați Properties > Read-only), ceea ce va determina evitarea acestui avertisment.</entry>
     <entry lang="ro" key="MOUNTED_DEVICE_FORCED_READ_ONLY">Volumul '%s' trebuie să fie montat ca doar-citire deoarece dreptul de scriere nu a fost permis.\n\nAsigurați-vă că nici o altă aplicație (de ex. programe antivirus) nu accesează partiția/discul pe care este găzduit volumul.</entry>
     <entry lang="ro" key="MOUNTED_DEVICE_FORCED_READ_ONLY_WRITE_PROTECTION">Volumul '%s' a fost montat ca doar-citire deoarce sistemul de operare a raportat că unitatea gazdă este protejată la scriere.\n\nRețineți că unele drivere de cipset particularizate au fost raportate ca și cauză a falsei raportări de protejare la scriere a unor medii inscriptibile. Această problemă nu se datorează lui VeraCrypt. Ea poate fi rezolvată prin actualizarea sau dezinstalarea oricăror drivere de cipset particularizate (non-Microsoft) care sunt instalate acum în sistem.</entry>
     <entry lang="ro" key="LIMIT_ENC_THREAD_POOL_NOTE">Rețineți că tehnologia Hyper-Threading (fire de execuție) pune la dispoziție mai multe nuclee logice la un singur nucleu fizic din procesor. Când este activată funcția de Hyper Threading, numărul selectat mai sus reprezintă numărul de procesoare/nuclee logice.</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="ro" key="IDC_BOOT_LOADER_CACHE_PIM">Include și MI&amp;P la salvarea parolei de autentificare la pornire</entry>
     <entry lang="ro" key="IDC_PREF_CACHE_PIM">Include MIP când se salvează o parolă</entry>
     <entry lang="ro" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Unitățile de rețea deconectate afişate ca disponibile pentru montare</entry>
-    <entry lang="ro" key="PASSWORD_UTF8_TOO_LONG">Parola introdusă este prea lungă: reprezentarea sa în UTF-8 depășește 64 de baiți.</entry>
+    <entry lang="ro" key="PASSWORD_UTF8_TOO_LONG">Parola introdusă este prea lungă: reprezentarea sa în UTF-8 depășește 128 de baiți.</entry>
     <entry lang="ro" key="PASSWORD_UTF8_INVALID">Parola introdusă conține caractere în Unicode care nu s-au putut converti în UTF-8.</entry>
     <entry lang="ro" key="INIT_DLL">Eroare: eșuare la încărcarea unei librării de sistem.</entry>
     <entry lang="ro" key="ERR_EXFAT_INVALID_VOLUME_SIZE">Mărimea fișierului volumului specificată în linia de comandă este incompatibilă cu sistemul de fișiere exFAT.</entry>
@@ -1419,14 +1419,25 @@
     <entry lang="ro" key="AFTER_UPGRADE_RESCUE_DISK">Este recomandată crearea unui Disc de recuperare Veracrypt nou (ce va conține noua versiune a încărcătorului Veracrypt) selectând 'Sistem' > 'Creare disc de recuperare'.\nDoriți crearea lui acum?</entry>
     <entry lang="ro" key="IDC_ALLOW_TRIM_NONSYS_SSD">Permitere comandă TRIM pentru partițiile/unitățile non-sistem SSD</entry>
     <entry lang="ro" key="IDC_BLOCK_SYSENC_TRIM">Blocare comandă TRIM pe partițiile/unitățile sistem</entry>
-    <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
-    <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
-    <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
-    <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="ro" key="WINDOWS_EFI_BOOT_LOADER_MISSING">EROARE: Încărcătorul de sistem Windows EFI nu a fost găsit pe disc. Operația va fi anulată.</entry>
+    <entry lang="ro" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">Momentan nu este posibilă criptarea dacă SecureBoot este activat și dacă cheile personale VeraCrypt nu sunt încărcate în firmware-ul sistemului. SecureBoot trebuie să fie dezactivat în BIOS pentru a permite criptarea sistemului.</entry>
+    <entry lang="ro" key="PASSWORD_PASTED_TRUNCATED">Textul inserat este trunchiat deoarece lungimea maximă a parolei este de 128 de caractere.</entry>
+    <entry lang="ro" key="PASSWORD_MAXLENGTH_REACHED">Parola a atins lungimea maximă de 128 de caractere.\nNu mai sunt admise caractere suplimentare.</entry>
+    <entry lang="ro" key="IDC_SELECT_LANGUAGE_LABEL">Selectați limba folosită la instalare:</entry>
+    <entry lang="ro" key="VOLUME_TOO_LARGE_FOR_HOST">EROARE: Mărimea fișierului container este mai mare decât spațiul liber disponibil.</entry>
+    <entry lang="ro" key="IDC_ALLOW_WINDOWS_DEFRAG">Permitere program de defragmentare din Windows să defragmenteze partițiile/unitățile nonsistem</entry>
+    <entry lang="ro" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">ATENȚIE: Defragmentarea partițiilor/unităților nonsistem pot dezvălui metadate despre conținut sau să creeze probleme cu volumele ascunse pe care le-ar putea conține.\n\nContinuare?</entry>
+    <entry lang="ro" key="VIRTUAL_DEVICE">Dispozitiv virtual</entry>
+    <entry lang="ro" key="MOUNTED_VOLUME_NOT_ASSOCIATED">Volumul montat selectat nu este asociat cu litera sa din Windows astfel încât nu poate fi deschis în Windows Explorer.</entry>
+    <entry lang="ro" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Golire chei de criptare din memorie dacă este inserat un nou dispozitiv</entry>
+    <entry lang="ro" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">NOTE IMPORTANTE:\n - Această opțiune nu va persista după oprire/repornire astfel că va trebui reselectată la următoarea pornire a sistemului.\n\n - Cu această opțiune activată și după conectarea unui dispozitiv, sistemul va îngheța și eventual se va bloca cu afișarea ecranului albastru deoarece Windows nu poate accesa discul criptat după ce cheile sunt golite din memorie.\n</entry>
+    <entry lang="ro" key="STARTING">Pornire</entry>
+    <entry lang="ro" key="IDC_ENABLE_CPU_RNG">Folosire generator hardware aleator al procesorului ca sursă adițională de entropie</entry>
+    <entry lang="ro" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Folosire lungime maximă parolă clasică (64 de caractere)</entry>
+    <entry lang="ro" key="IDC_ENABLE_RAM_ENCRYPTION">Activare criptare chei și parole stocate în RAM</entry>
+    <entry lang="ro" key="IDT_BENCHMARK">Evaluare:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="ro" key="LEGACY_PASSWORD_UTF8_TOO_LONG">Parola introdusă este prea lungă: reprezentarea sa în UTF-8 depășește 64 de baiți.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.sk.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="sk" name="Slovenčina" en-name="Slovak" version="0.1.0" translators="Kamil David" />
     <font lang="sk" class="normal" size="11" face="default" />
     <font lang="sk" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system volume where you want to resume the process of in-place encryption.\n\n\nRemark: After you click Next, VeraCrypt will attempt to find all non-system volumes where the process of encryption has been interrupted and where the VeraCrypt volume header can be decrypted using the supplied password and/or keyfile(s). If more than one such volume is found, you will need to select one of them in the next step.</entry>
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Please select one of the listed volumes. The list contains every accessible non-system volume where the process of encryption has been interrupted and whose header could be decrypted using the supplied password and/or keyfile(s).</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 128 characters.</entry>
     <entry lang="sk" key="PASSWORD_HIDDENVOL_HELP">Zadajte heslo pre skrytý zväzok. </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_HELP">Please choose a password for the hidden operating system (i.e. for the hidden volume). </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANT: The password that you choose for the hidden operating system in this step must be substantially different from the other two passwords (i.e. from the password for the outer volume and from the password for the decoy operating system).</entry>
     <entry lang="sk" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Zadajte prosím heslo pre zväzok, v ktorom si prajete vytvoriť skrytý zväzok.\n\nPo kliknutí Ďalší sa VeraCrypt pokúsi zväzok pripojiť. Po pripojení zväzku bude jeho clusterová bitmapa naskenovaná pre zistenie veľkostí neprerušenej oblasti voľného miesta (pokiaľ také vôbec je) ktorého koniec tvorí zároveň koniec zväzku. Táto oblasť bude obsahovať skrytý zväzok, a preto bude jeho maximálnu veľkosť obmedzená. Skenovanie clusterovej mapy je nutné, aby bolo zaistené, že žiadne údaje na externým disku nebudú prepísané skrytým zväzkom.</entry>
-    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 128 characters.</entry>
     <entry lang="en" key="PASSWORD_SYSENC_OUTERVOL_HELP">Please choose a password for the outer volume. This will be the password you will be able to reveal to anyone forcing you to disclose the password for the first partition behind the system partition, where both the outer volume and the hidden volume (containing the hidden operating system) will reside. The existence of the hidden volume (and of the hidden operating system) will remain secret. Note that this password is not for the decoy operating system.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume (i.e. for the hidden operating system).</entry>
     <entry lang="sk" key="PASSWORD_HIDVOL_HOST_TITLE">Heslo externého zväzku</entry>
     <entry lang="sk" key="PASSWORD_HIDVOL_TITLE">Heslo skrytého zväzku</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1407,7 +1407,7 @@
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="en" key="IDT_BENCHMARK">Benchmark:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">
@@ -1470,4 +1481,4 @@
       </xs:complexType>
     </xs:element>
   </xs:schema>
-</VeraCrypt>
+</VeraCrypt>

Translations/Language.sl.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="sl" name="Slovenščina" en-name="Slovenian" version="0.1.0" translators="Erik David Salam" />
     <font lang="sl" class="normal" size="11" face="default" />
     <font lang="sl" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="sl" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Prosim, da vnesete geslo in/ali ključno datoteko(e) za nesistemski zbirnik kjer želite nadaljevati proces šifriranja na mestu.\n\n\nOpomba: Potem ko kliknete Naprej bo VeraCrypt poizkusil najti vse nesistemske zbirnike kjer je bil proces šifriranja prekinjen in kjer je lahko glava VeraCrypt-ovega zbirnika dešifrirana z uporabo priloženega gesla in/ali ključne(ih) datotek(e). Če je najden več kot eden tovrsten zbirnik, potem boste morali izbrati enega izmed teh v naslednjem koraku.</entry>
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Please select one of the listed volumes. The list contains every accessible non-system volume where the process of encryption has been interrupted and whose header could be decrypted using the supplied password and/or keyfile(s).</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="sl" key="PASSWORD_HELP">Zelo pomembno je, da si izberete dobro geslo. Izogibajte se izbire gesla, ki vsebuje samo eno besedo in slednjo se da najti v slovarju (ali kombinacijo dveh, treh ali štirih tovrstnih besed). Naj tudi ne vsebuje kakršnihkoli imen ali datumov rojstva. Geslo naj ne bo lahko za uganjevanje. Dobro geslo je naključna kombinacija črk z veliko in malo začetnico, številk in posebnih znakov, kot @ ^ = $ * + itn. Pri izbiri gesla priporočamo sestavo le-tega iz več kot 20 znakov (daljše kot je, bolje je). Najvišja možna dolžina je 64 znakov. </entry>
+    <entry lang="sl" key="PASSWORD_HELP">Zelo pomembno je, da si izberete dobro geslo. Izogibajte se izbire gesla, ki vsebuje samo eno besedo in slednjo se da najti v slovarju (ali kombinacijo dveh, treh ali štirih tovrstnih besed). Naj tudi ne vsebuje kakršnihkoli imen ali datumov rojstva. Geslo naj ne bo lahko za uganjevanje. Dobro geslo je naključna kombinacija črk z veliko in malo začetnico, številk in posebnih znakov, kot @ ^ = $ * + itn. Pri izbiri gesla priporočamo sestavo le-tega iz več kot 20 znakov (daljše kot je, bolje je). Najvišja možna dolžina je 128 znakov. </entry>
     <entry lang="sl" key="PASSWORD_HIDDENVOL_HELP">Prosim, da si izberete geslo za skriti zbirnik. </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_HELP">Please choose a password for the hidden operating system (i.e. for the hidden volume). </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANT: The password that you choose for the hidden operating system in this step must be substantially different from the other two passwords (i.e. from the password for the outer volume and from the password for the decoy operating system).</entry>
     <entry lang="sl" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Prosim, da vnesete geslo za zbirnik znotraj katerega želite ustvariti skritega.\n\nPotem ko kliknete Naprej bo VeraCrypt poizkusil priklopiti zbirnik. Čim ko bo slednji priklopljen, bodo njegovi grozdi o prostih informacijah pregledani zato, da se ugotovi velikost neprekinjenega nezasedenega prostora (če ga je kje), čigar konec je poravnan s koncem zbirnika. Ta prostor bo gostil skriti zbirnik in tako torej omejil njegovo najvišjo možno velikost. Pregledovanje zemljevida grozdov je potrebno zato, da podatki iz skritega zbirnika ne bodo prepisali zunanjega.</entry>
-    <entry lang="sl" key="PASSWORD_HIDDENVOL_HOST_HELP">\nProsim, da si izberete geslo za zunanji zbirnik. Slednjega boste lahko razkrili nasprotniku, če boste povprašani po njem ali prisiljeni v to.\n\nPOMEMBNO: Geslo mora biti bistveno drugačno od tistega, ki si ga boste izbrali za skriti zbirnik.\n\nOpomba: Najvišja možna dolžina gesla znaša 64 znakov.</entry>
+    <entry lang="sl" key="PASSWORD_HIDDENVOL_HOST_HELP">\nProsim, da si izberete geslo za zunanji zbirnik. Slednjega boste lahko razkrili nasprotniku, če boste povprašani po njem ali prisiljeni v to.\n\nPOMEMBNO: Geslo mora biti bistveno drugačno od tistega, ki si ga boste izbrali za skriti zbirnik.\n\nOpomba: Najvišja možna dolžina gesla znaša 128 znakov.</entry>
     <entry lang="en" key="PASSWORD_SYSENC_OUTERVOL_HELP">Please choose a password for the outer volume. This will be the password you will be able to reveal to anyone forcing you to disclose the password for the first partition behind the system partition, where both the outer volume and the hidden volume (containing the hidden operating system) will reside. The existence of the hidden volume (and of the hidden operating system) will remain secret. Note that this password is not for the decoy operating system.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume (i.e. for the hidden operating system).</entry>
     <entry lang="sl" key="PASSWORD_HIDVOL_HOST_TITLE">Geslo zunanjega zbirnika </entry>
     <entry lang="sl" key="PASSWORD_HIDVOL_TITLE">Geslo za skriti zbirnik</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1407,7 +1407,7 @@
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="sl" key="IDC_SELECT_LANGUAGE_LABEL">Izberite jezik, ki ga želite uporabljati med namestitvijo:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="sl" key="IDC_SELECT_LANGUAGE_LABEL">Izberite jezik, ki ga želite uporabljati med namestitvijo:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="en" key="IDT_BENCHMARK">Benchmark:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">
@@ -1470,4 +1481,4 @@
       </xs:complexType>
     </xs:element>
   </xs:schema>
-</VeraCrypt>
+</VeraCrypt>

Translations/Language.sv.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="sv" name="Svenska" en-name="Swedish" version="1.0.0" translators="Peter Runesson" />
     <font lang="sv" class="normal" size="11" face="default" />
     <font lang="sv" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="sv" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Ange lösenord och/eller nyckelfil(er) till den icke-systemvolym du vill återuppta på plats-krypteringsprocessen för.\n\n\nAnmärkning: Efter att du klickat på Nästa kommer VeraCrypt att försöka hitta alla icke-systemvolymer för vilka krypteringsprocessen har avbrutits och vars volymhuvuden kan dekrypteras med det lösenord och/eller de nyckelfiler du angett. Om fler än en sådan volym hittas, kommer du i nästa steg att få välja en av dem.</entry>
     <entry lang="sv" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Välj en av följande volymer. Denna lista innehåller samtliga icke-systemvolymer vars krypteringsprocesser har avbrutits och vars volymhuvud inte kunde dekrypteras med det lösenord och/eller de nyckelfiler du angett.</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="sv" key="PASSWORD_HELP">Det är mycket viktigt att du väljer ett bra lösenord. Du bör undvika att välja ett som endast innehåller ett ord som kan finnas i en ordbok (eller en kombination av två, tre eller fyra sådana). Det bör inte innehålla några namn eller födelsedata. Det bör heller inte vara enkelt att gissa. Ett bra lösenord innehåller en kombination av versaler och gemener, siffror och specialtecken som exempelvis @ ^ = $ * + och liknande. Vi rekommenderar att du väljer ett lösenord som består av minst 20 tecken (ju längre desto bättre). Den största tillåtna längden är 64 tecken.</entry>
+    <entry lang="sv" key="PASSWORD_HELP">Det är mycket viktigt att du väljer ett bra lösenord. Du bör undvika att välja ett som endast innehåller ett ord som kan finnas i en ordbok (eller en kombination av två, tre eller fyra sådana). Det bör inte innehålla några namn eller födelsedata. Det bör heller inte vara enkelt att gissa. Ett bra lösenord innehåller en kombination av versaler och gemener, siffror och specialtecken som exempelvis @ ^ = $ * + och liknande. Vi rekommenderar att du väljer ett lösenord som består av minst 20 tecken (ju längre desto bättre). Den största tillåtna längden är 128 tecken.</entry>
     <entry lang="sv" key="PASSWORD_HIDDENVOL_HELP">Ange ett lösenord för den dolda volymen. </entry>
     <entry lang="sv" key="PASSWORD_HIDDEN_OS_HELP">Ange ett lösenord för det dolda operativsystemet, d.v.s. för den dolda volymen. </entry>
     <entry lang="sv" key="PASSWORD_HIDDEN_OS_NOTE">VIKTIGT: Lösenordet du väljer för det dolda operativsystemet i detta steg måste vara påtagligt annorlunda än de två andra lösenord du kommer att välja för den yttre volymen och skenoperativsystemet.</entry>
     <entry lang="sv" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Ange lösenordet för den volym inuti vilken du vill skapa en dold volym.\n\nVeraCrypt kommer att försöka montera volymen när du klickar på ”Nästa”. När volymen har monterats, kommer dess klusterbitmapp att läsas av för att avgöra storleken på det sammanhängande lediga utrymmet i slutet av volymen. Detta utrymme kommer att hysa den dolda volymen och därmed även begränsa dess storlek. Avläsningen av klusterbitmappen säkerställer att inga data i den yttre volymen skrivs över av den dolda volymen.</entry>
-    <entry lang="sv" key="PASSWORD_HIDDENVOL_HOST_HELP">\nAnge ett lösenord för den yttre volymen. Detta är det lösenord du kommer att kunna avslöja om du blir tillfrågad om det eller tvingad till det.\n\nVIKTIGT: Detta lösenord måste vara påtagligt annorlunda än det du kommer att välja för den dolda volymen.\n\nObservera: Maximal längd på lösenord är 64 tecken.</entry>
+    <entry lang="sv" key="PASSWORD_HIDDENVOL_HOST_HELP">\nAnge ett lösenord för den yttre volymen. Detta är det lösenord du kommer att kunna avslöja om du blir tillfrågad om det eller tvingad till det.\n\nVIKTIGT: Detta lösenord måste vara påtagligt annorlunda än det du kommer att välja för den dolda volymen.\n\nObservera: Maximal längd på lösenord är 128 tecken.</entry>
     <entry lang="sv" key="PASSWORD_SYSENC_OUTERVOL_HELP">Ange ett lösenord för den yttre volymen. Detta är det lösenord du kommer att kunna avslöja om du blir tvingad att röja lösenordet för den första partitionen efter systempartitionen, där både den yttre och den dolda volymen (innehållande det dolda operativsystemet) är belägna. Den dolda volymens och det dolda operativsystemets existens kommer dock att förbli hemlig. Observera att detta lösenord inte gäller för skenoperativsystemet.\n\nVIKTIGT: Detta lösenord måste vara påtagligt annorlunda än det du kommer att välja för den dolda volymen, d.v.s. för det dolda operativsystemet.</entry>
     <entry lang="sv" key="PASSWORD_HIDVOL_HOST_TITLE">Lösenord för yttre volym</entry>
     <entry lang="sv" key="PASSWORD_HIDVOL_TITLE">Lösenord för dold volym</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1397,7 +1397,7 @@
     <entry lang="en" key="IDC_DISABLE_BOOT_LOADER_HASH_PROMPT">Do not request Hash algorithm in the pre-boot authentication screen</entry>
     <entry lang="en" key="KUZNYECHIK_HELP">Kuznyechik is a block cipher first published in 2015 and defined in the National Standard of the Russian Federation GOST R 34.12-2015 and also in RFC 7801. 256-bit key, 128-bit block. Mode of operation is XTS.</entry>
     <entry lang="en" key="CAMELLIA_HELP">Jointly developed by Mitsubishi Electric and NTT of Japan. First published on 2000. 256-bit key, 128-bit block. Mode of operation is XTS. It has been approved for use by the ISO/IEC, the European Union's NESSIE project and the Japanese CRYPTREC project.</entry>
-    <entry lang="en" key="TIME">Time</entry>
+    <entry lang="sv" key="TIME">Tid</entry>
     <entry lang="en" key="ITERATIONS">Iterations</entry>
     <entry lang="en" key="PRE-BOOT">Pre-Boot</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_INFO">Before you can encrypt the partition, you must create a VeraCrypt Rescue Disk (VRD), which serves the following purposes:\n\n- If the VeraCrypt Boot Loader, master key, or other critical data gets damaged, the VRD allows you to restore it (note, however, that you will still have to enter the correct password then).\n\n- If Windows gets damaged and cannot start, the VRD allows you to permanently decrypt the partition before Windows starts.\n\n- The VRD will contain a backup of the present EFI boot loader and will allow you to restore it if necessary.\n\nThe VeraCrypt Rescue Disk ZIP image will be created in the location specified below.</entry>
@@ -1405,9 +1405,9 @@
     <entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NO_CHECK">The Rescue Disk ZIP image has been created and stored in this file:\n%s\n\nNow you should either extract the image to a USB stick that is formatted as FAT/FAT32 or move it to a safe location for later use.\n\n%lsClick Next to continue.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NOTE">IMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\n</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
-    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
-    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' &gt; 'Create Rescue Disk'.</entry>
+    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' &gt; 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1415,18 +1415,29 @@
     <entry lang="en" key="EFI_PLATFORM_INFORMATION">EFI Platform Information</entry>
     <entry lang="en" key="EDIT_DCSPROP_FOR_ADVANCED_ONLY">WARNING: Inexperienced users should never attempt to manually edit boot loader configurations.\n\nContinue?</entry>
     <entry lang="en" key="DCSPROP_XML_VALIDATION_FAILED">WARNING: Failed to validate the XML format of the Boot Loader configuration. Please check your modifications.</entry>
-    <entry lang="en" key="IDT_ADVANCED_OPTIONS">Advanced Options</entry>
-    <entry lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' > 'Create Rescue Disk'.\nDo you want to do it now?</entry>
+    <entry lang="sv" key="IDT_ADVANCED_OPTIONS">Avancerade inställningar</entry>
+    <entry lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' &gt; 'Create Rescue Disk'.\nDo you want to do it now?</entry>
     <entry lang="en" key="IDC_ALLOW_TRIM_NONSYS_SSD">Allow TRIM command for non-system SSD partition/drive</entry>
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="sv" key="IDT_BENCHMARK">Prestandamätning:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.th.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="th" name="ภาษาไทย" en-name="Thai" version="0.0.0" translators=""/>
     <font lang="th" class="normal" size="11" face="default" />
     <font lang="th" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system volume where you want to resume the process of in-place encryption/decryption.\n\nRemark: After you click Next, VeraCrypt will attempt to find all non-system volumes where the process of encryption/decryption has been interrupted and where the VeraCrypt volume header can be deciphered using the supplied password and/or keyfile(s). If more than one such volume is found, you will need to select one of them in the next step.</entry>
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Please select one of the listed volumes. The list contains each accessible non-system volume where the process of encryption/decryption has been interrupted and where the volume header was successfully deciphered using the supplied password and/or keyfile(s).</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 128 characters.</entry>
     <entry lang="en" key="PASSWORD_HIDDENVOL_HELP">Please choose a password for the hidden volume. </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_HELP">Please choose a password for the hidden operating system (i.e. for the hidden volume). </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANT: The password that you choose for the hidden operating system in this step must be substantially different from the other two passwords (i.e. from the password for the outer volume and from the password for the decoy operating system).</entry>
     <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Please enter the password for the volume within which you wish to create a hidden volume.\n\nAfter you click Next, VeraCrypt will attempt to mount the volume. As soon as the volume is mounted, its cluster bitmap will be scanned to determine the size of the uninterrupted area of free space (if there is any) whose end is aligned with the end of the volume. This area will accommodate the hidden volume and therefore will limit its maximum possible size. Cluster map scanning is necessary to ensure that no data on the outer volume will be overwritten by the hidden volume.</entry>
-    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 128 characters.</entry>
     <entry lang="en" key="PASSWORD_SYSENC_OUTERVOL_HELP">Please choose a password for the outer volume. This will be the password you will be able to reveal to anyone forcing you to disclose the password for the first partition behind the system partition, where both the outer volume and the hidden volume (containing the hidden operating system) will reside. The existence of the hidden volume (and of the hidden operating system) will remain secret. Note that this password is not for the decoy operating system.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume (i.e. for the hidden operating system).</entry>
     <entry lang="en" key="PASSWORD_HIDVOL_HOST_TITLE">Outer Volume Password</entry>
     <entry lang="en" key="PASSWORD_HIDVOL_TITLE">Hidden Volume Password</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1422,12 +1422,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="en" key="IDT_BENCHMARK">Benchmark:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.tr.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="tr" name="Türkçe" en-name="Turkish" version="0.1.0" translators="Ali İskender Turan, Zeynel Abidin Öztürk" />
     <font lang="tr" class="normal" size="11" face="default" />
     <font lang="tr" class="bold" size="13" face="Arial" />
@@ -95,7 +95,7 @@
     <entry lang="tr" key="IDT_RANDOM_POOL">Rasgele Havuz:</entry>
     <entry lang="en" key="IDT_SINGLE_BOOT">Select this option if there is only one operating system installed on this computer (even if it has multiple users).</entry>
     <entry lang="tr" key="IDT_SPEED">Hız </entry>
-    <entry lang="en" key="IDT_STATUS">Status</entry>
+    <entry lang="tr" key="IDT_STATUS">Durum</entry>
     <entry lang="en" key="IDT_SYSENC_KEYS_GEN_INFO">The keys, salt, and other data have been successfully generated. If you want to generate new keys, click Back and then Next. Otherwise, click Next to continue.</entry>
     <entry lang="en" key="IDT_SYS_DEVICE">Encrypts the partition/drive where Windows is installed. Anyone who wants to gain access and use the system, read and write files, etc., will need to enter the correct password each time before Windows boots. Optionally, creates a hidden system.</entry>
     <entry lang="en" key="IDT_SYS_PARTITION">Select this option to encrypt the partition where the currently running Windows operating system is installed.</entry>
@@ -305,7 +305,7 @@
     <entry lang="tr" key="IDC_AUTO">&amp;Hepsini Test Et</entry>
     <entry lang="en" key="IDC_CONTINUE">&amp;Continue</entry>
     <entry lang="tr" key="IDC_DECRYPT">&amp;Şifreyi Çöz</entry>
-    <entry lang="en" key="IDC_DELETE">&amp;Delete</entry>
+    <entry lang="tr" key="IDC_DELETE">Sil</entry>
     <entry lang="tr" key="IDC_ENCRYPT">&amp;Şifrele</entry>
     <entry lang="en" key="IDC_EXPORT">&amp;Export...</entry>
     <entry lang="tr" key="IDC_GENERATE_AND_SAVE_KEYFILE">Anahtar Dosyası Üret ve Kaydet...</entry>
@@ -445,7 +445,7 @@
     <entry lang="en" key="DISK_FREE_PB">Free space on drive %s is %.2f PB</entry>
     <entry lang="tr" key="DRIVELETTERS">Uygun sürücü harfleri alınamadı.</entry>
     <entry lang="en" key="DRIVER_NOT_FOUND">Error: VeraCrypt driver not found.\n\nPlease copy the files 'veracrypt.sys' and 'veracrypt-x64.sys' to the directory where the main VeraCrypt application (VeraCrypt.exe) is located.</entry>
-    <entry lang="en" key="DRIVER_VERSION">Error: An incompatible version of the VeraCrypt driver is currently running.\n\nIf you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already installed, you must uninstall it first (or upgrade it using the VeraCrypt installer). To uninstall it, follow these steps: On Windows Vista or later, select 'Start Menu' > Computer > 'Uninstall or change a program' > VeraCrypt > Uninstall; on Windows XP, select 'Start Menu' > Settings > 'Control Panel' > 'Add Or Remove Programs' > VeraCrypt > Remove.\n\nSimilarly, if you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already running in portable mode, you must restart the system first and then run only this new version.</entry>
+    <entry lang="en" key="DRIVER_VERSION">Error: An incompatible version of the VeraCrypt driver is currently running.\n\nIf you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already installed, you must uninstall it first (or upgrade it using the VeraCrypt installer). To uninstall it, follow these steps: On Windows Vista or later, select 'Start Menu' &gt; Computer &gt; 'Uninstall or change a program' &gt; VeraCrypt &gt; Uninstall; on Windows XP, select 'Start Menu' &gt; Settings &gt; 'Control Panel' &gt; 'Add Or Remove Programs' &gt; VeraCrypt &gt; Remove.\n\nSimilarly, if you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already running in portable mode, you must restart the system first and then run only this new version.</entry>
     <entry lang="tr" key="ERR_CIPHER_INIT_FAILURE">Hata: Şifreleyici başlatma başarısız.</entry>
     <entry lang="tr" key="ERR_CIPHER_INIT_WEAK_KEY">Hata: Zayıf veya potansiyel olarak zayıf bir anahtar algılandı. Anahtar atılacak. Lütfen tekrar deneyin.</entry>
     <entry lang="en" key="EXCEPTION_REPORT">A critical error has occurred and VeraCrypt must be terminated. If this is caused by a bug in VeraCrypt, we would like to fix it. To help us, you can send us an automatically generated error report containing the following items:\n\n- Program version\n- Operating system version\n- Type of CPU\n- VeraCrypt component name\n- Checksum of VeraCrypt executable\n- Symbolic name of dialog window\n- Error category\n- Error address\n- VeraCrypt call stack\n\nIf you select 'Yes', the following URL (which contains the entire error report) will be opened in your default Internet browser.\n\n%hs\n\nDo you want to send us the above error report?</entry>
@@ -499,7 +499,7 @@
     <entry lang="en" key="WIPE_FINISHED">The content of the partition/device has been successfully erased.</entry>
     <entry lang="en" key="WIPE_FINISHED_DECOY_SYSTEM_PARTITION">The content of the partition where the original system (of which the hidden system is a clone) resided has been successfully erased.</entry>
     <entry lang="en" key="DECOY_OS_VERSION_WARNING">Please make sure the version of Windows you are going to install (on the wiped partition) is the same as the version of Windows you are currently running. This is required due to the fact that both systems will share a common boot partition.</entry>
-    <entry lang="en" key="SYSTEM_ENCRYPTION_FINISHED">The system partition/drive has been successfully encrypted.\n\nNote: If there are non-system VeraCrypt volumes that you need to have mounted automatically every time Windows starts, you can set it up by mounting each of them and selecting 'Favorites' > 'Add Mounted Volume to System Favorites').</entry>
+    <entry lang="en" key="SYSTEM_ENCRYPTION_FINISHED">The system partition/drive has been successfully encrypted.\n\nNote: If there are non-system VeraCrypt volumes that you need to have mounted automatically every time Windows starts, you can set it up by mounting each of them and selecting 'Favorites' &gt; 'Add Mounted Volume to System Favorites').</entry>
     <entry lang="en" key="SYSTEM_DECRYPTION_FINISHED">The system partition/drive has been successfully decrypted.</entry>
     <entry lang="tr" key="FORMAT_FINISHED_HELP">\n\nVeraCrypt birimi oluşturuldu ve birim şu an kullanıma hazır. Başka bir VeraCrypt birimi oluşturmak istiyorsanız Sonraki'ye tıklayın. Aksi halde Çıkış'a tıklayın.</entry>
     <entry lang="en" key="SYSENC_HIDDEN_VOL_FORMAT_FINISHED_HELP">\n\nThe hidden VeraCrypt volume has been successfully created (the hidden operating system will reside within this hidden volume).\n\nClick Next to continue.</entry>
@@ -618,12 +618,12 @@
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system volume where you want to resume the process of in-place encryption/decryption.\n\nRemark: After you click Next, VeraCrypt will attempt to find all non-system volumes where the process of encryption/decryption has been interrupted and where the VeraCrypt volume header can be deciphered using the supplied password and/or keyfile(s). If more than one such volume is found, you will need to select one of them in the next step.</entry>
     <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Please select one of the listed volumes. The list contains each accessible non-system volume where the process of encryption/decryption has been interrupted and where the volume header was successfully deciphered using the supplied password and/or keyfile(s).</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 128 characters.</entry>
     <entry lang="tr" key="PASSWORD_HIDDENVOL_HELP">Lütfen gizli birim için bir parola seçin. </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_HELP">Please choose a password for the hidden operating system (i.e. for the hidden volume). </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANT: The password that you choose for the hidden operating system in this step must be substantially different from the other two passwords (i.e. from the password for the outer volume and from the password for the decoy operating system).</entry>
     <entry lang="tr" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Lütfen içinde gizli bir birim oluşturmak istediğiniz birim için parolayı girin.\n\nSonraki düğmesine tıkladıktan sonra VeraCrypt birimi bağlamayı deneyecektir. Birim bağlandığı anda birimin küme bit eşlemi, birimin sonuyla hizalı kesintiye uğramamış boş alanın (eğer varsa) boyutunu belirlemek için taranacaktır. Bu alan gizli birimi barındıracak, dolayısıyla birimin olası en büyük alanını sınırlandıracaktır. Küme eşlem taraması, gizli birim tarafından dış birimdeki üzerine hiçbir veri yazılmamasından emin olmak için gereklidir.</entry>
-    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 128 characters.</entry>
     <entry lang="en" key="PASSWORD_SYSENC_OUTERVOL_HELP">Please choose a password for the outer volume. This will be the password you will be able to reveal to anyone forcing you to disclose the password for the first partition behind the system partition, where both the outer volume and the hidden volume (containing the hidden operating system) will reside. The existence of the hidden volume (and of the hidden operating system) will remain secret. Note that this password is not for the decoy operating system.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume (i.e. for the hidden operating system).</entry>
     <entry lang="tr" key="PASSWORD_HIDVOL_HOST_TITLE">Dış Birim Parolası</entry>
     <entry lang="tr" key="PASSWORD_HIDVOL_TITLE">Gizli Birim Parolası</entry>
@@ -648,7 +648,7 @@
     <entry lang="en" key="PIM_SMALL_WARNING">You have chosen a Personal Iterations Multiplier (PIM) that is smaller than the default VeraCrypt value. Please note that if your password is not strong enough, this could lead to a weaker security.\n\nDo you confirm that you are using a strong password?</entry>
     <entry lang="en" key="PIM_SYSENC_TOO_BIG">Personal Iterations Multiplier (PIM) maximum value for system encryption is 65535.</entry>
     <entry lang="en" key="PIM_TITLE">Volume PIM</entry>
-    <entry lang="en" key="HIDDEN_FILES_PRESENT_IN_KEYFILE_PATH">\n\nWARNING: Hidden file(s) have been found in a keyfile search path. Such hidden files cannot be used as keyfiles. If you need to use them as keyfiles, remove their 'Hidden' attribute (right-click each of them, select 'Properties', uncheck 'Hidden' and click OK). Note: Hidden files are visible only if the corresponding option is enabled (Computer > Organize > 'Folder and search options' > View).</entry>
+    <entry lang="en" key="HIDDEN_FILES_PRESENT_IN_KEYFILE_PATH">\n\nWARNING: Hidden file(s) have been found in a keyfile search path. Such hidden files cannot be used as keyfiles. If you need to use them as keyfiles, remove their 'Hidden' attribute (right-click each of them, select 'Properties', uncheck 'Hidden' and click OK). Note: Hidden files are visible only if the corresponding option is enabled (Computer &gt; Organize &gt; 'Folder and search options' &gt; View).</entry>
     <entry lang="en" key="HIDDEN_VOL_PROT_PASSWORD_US_KEYB_LAYOUT">If you are attempting to protect a hidden volume containing a hidden system, please make sure you are using the standard US keyboard layout when typing the password for the hidden volume. This is required due to the fact that the password needs to be typed in the pre-boot environment (before Windows starts) where non-US Windows keyboard layouts are not available.</entry>
     <entry lang="en" key="FOUND_NO_PARTITION_W_DEFERRED_INPLACE_ENC">VeraCrypt has not found any volume where the process of encryption/decryption of a non-system volume has been interrupted and where the volume header can be deciphered using the supplied password and/or keyfile(s).\n\nPlease make sure the password and/or keyfile(s) are correct and that the partition/volume is not being used by the system or applications (including antivirus software).</entry>
     <entry lang="en" key="SELECTED_PARTITION_ALREADY_INPLACE_ENC">The selected partition/device is already fully encrypted.\nHeader Flags = 0x%.8X</entry>
@@ -847,7 +847,7 @@
     <entry lang="tr" key="AFTER_INSTALL_TUTORIAL">VeraCrypt'i daha önce hiç kullanmadıysanız, VeraCrypt Kullanıcı Kılavuzundaki Beginner's Tutorial (Yeni Başlayanlar İçin Eğitim) bölümünü okumanızı tavsiye ediyoruz. Eğitimi görüntülemek istiyor musunuz?</entry>
     <entry lang="en" key="SELECT_AN_ACTION">Please select an action to perform from the following:</entry>
     <entry lang="en" key="REPAIR_REINSTALL">Repair/Reinstall</entry>
-    <entry lang="en" key="UPGRADE">Upgrade</entry>
+    <entry lang="tr" key="UPGRADE">Yükselt</entry>
     <entry lang="en" key="UNINSTALL">Uninstall</entry>
     <entry lang="en" key="SETUP_ADMIN">To successfully install/uninstall VeraCrypt, you must have administrator privileges. Do you want to continue?</entry>
     <entry lang="en" key="TC_INSTALLER_IS_RUNNING">VeraCrypt Installer is currently running on this system and performing or preparing installation or update of VeraCrypt. Before you proceed, please wait for it to finish or close it. If you cannot close it, please restart your computer before proceeding.</entry>
@@ -863,7 +863,7 @@
     <entry lang="tr" key="INSTALL_OK">VeraCrypt başarıyla yüklendi.</entry>
     <entry lang="en" key="SETUP_UPDATE_OK">VeraCrypt has been successfully updated.</entry>
     <entry lang="en" key="UPGRADE_OK_REBOOT_REQUIRED">VeraCrypt has been successfully upgraded. However, before you can start using it, the computer must be restarted.\n\nDo you want to restart it now?</entry>
-    <entry lang="en" key="SYS_ENC_UPGRADE_FAILED">Failed to upgrade VeraCrypt!\n\nIMPORTANT: Before you shut down or restart the system, we strongly recommend that you use System Restore (Windows Start menu > All programs > Accessories > System Tools > System Restore) to restore your system to the restore point named 'VeraCrypt installation'. If System Restore is not available, you should try installing the original or the new version of VeraCrypt again before you shut down or restart the system.</entry>
+    <entry lang="en" key="SYS_ENC_UPGRADE_FAILED">Failed to upgrade VeraCrypt!\n\nIMPORTANT: Before you shut down or restart the system, we strongly recommend that you use System Restore (Windows Start menu &gt; All programs &gt; Accessories &gt; System Tools &gt; System Restore) to restore your system to the restore point named 'VeraCrypt installation'. If System Restore is not available, you should try installing the original or the new version of VeraCrypt again before you shut down or restart the system.</entry>
     <entry lang="tr" key="UNINSTALL_OK">VeraCrypt başarıyla kaldırıldı.\n\nVeraCrypt yükleyicisini ve %s klasörünü silmek için 'Bitir'e tıklayın. Buna dikkat edin: Klasör, VeraCrypt yükleyicisi tarafından yüklenmeyen veya VeraCrypt tarafından oluşturulan dosyalar içeriyorsa silinmeyecektir.</entry>
     <entry lang="tr" key="REMOVING_REG">VeraCrypt kayıt defteri girdileri kaldırılıyor</entry>
     <entry lang="tr" key="ADDING_REG">Kayıt defteri girişi ekleniyor</entry>
@@ -918,13 +918,13 @@
     <entry lang="en" key="PROGRESS_STATUS_DECRYPTING">Decrypting</entry>
     <entry lang="en" key="PROGRESS_STATUS_FINALIZING">Finalizing</entry>
     <entry lang="en" key="PROGRESS_STATUS_PAUSED">Paused</entry>
-    <entry lang="en" key="PROGRESS_STATUS_FINISHED">Finished</entry>
-    <entry lang="en" key="PROGRESS_STATUS_ERROR">Error</entry>
+    <entry lang="tr" key="PROGRESS_STATUS_FINISHED">Bitmiş</entry>
+    <entry lang="tr" key="PROGRESS_STATUS_ERROR">Hata</entry>
     <entry lang="en" key="FAVORITE_DISCONNECTED_DEV">Device disconnected</entry>
     <entry lang="en" key="SYS_FAVORITE_VOLUMES_SAVED">System favorite volumes saved.\n\nTo enable mounting of system favorite volumes when the system starts, please select 'Settings' &gt; 'System Favorite Volumes' &gt; 'Mount system favorite volumes when Windows starts'.</entry>
     <entry lang="en" key="FAVORITE_ADD_DRIVE_DEV_WARNING">The volume you are adding to favorites is neither a partition nor a dynamic volume. Therefore, VeraCrypt will be unable to mount this favorite volume if the device number changes.</entry>
     <entry lang="en" key="FAVORITE_ADD_PARTITION_TYPE_WARNING">The volume you are adding to favorites is a partition not recognized by Windows.\n\nVeraCrypt will be unable to mount this favorite volume if the device number changes. Please set the type of the partition to a type recognized by Windows (use the SETID command of the Windows 'diskpart' tool). Then add the partition to favorites again.</entry>
-    <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_BACKGROUND_TASK_ERR">VeraCrypt Background Task is disabled or it is configured to exit when there are no mounted volumes (or VeraCrypt is running in portable mode). This may prevent your favorite volumes from being automatically mounted when devices hosting them get connected.\n\nNote: To enable the VeraCrypt Background Task, select Settings > Preferences and check the 'Enabled' checkbox in the section 'VeraCrypt Background Task'.</entry>
+    <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_BACKGROUND_TASK_ERR">VeraCrypt Background Task is disabled or it is configured to exit when there are no mounted volumes (or VeraCrypt is running in portable mode). This may prevent your favorite volumes from being automatically mounted when devices hosting them get connected.\n\nNote: To enable the VeraCrypt Background Task, select Settings &gt; Preferences and check the 'Enabled' checkbox in the section 'VeraCrypt Background Task'.</entry>
     <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_NETWORK_PATH_ERR">A container stored in a remote filesystem shared over a network cannot be automatically mounted when its host device gets connected.</entry>
     <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_DEVICE_PATH_ERR">The device displayed below is neither a partition nor a dynamic volume. Therefore, the volume hosted on the device cannot be automatically mounted when the device gets connected.</entry>
     <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_PARTITION_TYPE_ERR">Please set the type of the partition displayed below to a type recognized by Windows (use the SETID command of the Windows 'diskpart' tool). Then remove the partition from favorites and add it again. This will enable the volume hosted on the device to be automatically mounted when the device gets connected.</entry>
@@ -965,7 +965,7 @@
     <entry lang="en" key="RESCUE_DISK_NON_WIZARD_CHECK_PASSED">The VeraCrypt Rescue Disk has been successfully verified.</entry>
     <entry lang="en" key="RESCUE_DISK_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly burned.\n\nIf you have burned the Rescue Disk, please eject and reinsert the CD/DVD; then try again. If this does not help, please try other CD/DVD recording software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' &gt; 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_ISO_IMAGE_CHECK_PASSED">The VeraCrypt Rescue Disk image has been successfully verified.</entry>
-    <entry lang="en" key="RESCUE_DISK_ISO_IMAGE_CHECK_FAILED">The Rescue Disk image verification failed.\n\nIf you attempted to verify a VeraCrypt Rescue Disk image created for a different master key, password, salt, etc., please note that such Rescue Disk image will always fail this verification. To create a new Rescue Disk image fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
+    <entry lang="en" key="RESCUE_DISK_ISO_IMAGE_CHECK_FAILED">The Rescue Disk image verification failed.\n\nIf you attempted to verify a VeraCrypt Rescue Disk image created for a different master key, password, salt, etc., please note that such Rescue Disk image will always fail this verification. To create a new Rescue Disk image fully compatible with your current configuration, select 'System' &gt; 'Create Rescue Disk'.</entry>
     <entry lang="en" key="ERROR_CREATING_RESCUE_DISK">Error creating VeraCrypt Rescue Disk.</entry>
     <entry lang="en" key="CANNOT_CREATE_RESCUE_DISK_ON_HIDDEN_OS">VeraCrypt Rescue Disk cannot be created when a hidden operating system is running.\n\nTo create a VeraCrypt Rescue Disk, boot the decoy operating system and then select 'System' &gt; 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly burned.\n\nIf you have burned the Rescue Disk, please eject and reinsert the CD/DVD; then click Next to try again. If this does not help, please try another medium%s.\n\nIf you have not burned the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to burn the newly generated Rescue Disk.</entry>
@@ -1031,9 +1031,9 @@
     <entry lang="tr" key="CONFIRM_NO_FORCED_AUTODISMOUNT">UYARI: Bu seçenek devre dışı ise, açık dosya/dizinler içeren birimlerin bağlantısı otomatik olarak kesilemez.\n\nBu seçeneği devre dışı bırakmak istediğinizden emin misiniz?</entry>
     <entry lang="tr" key="WARN_PREF_AUTO_DISMOUNT">UYARI: açık dosyalar/dizinler içeren birimlerin bağlantısı otomatik olarak KESİLMEYECEKTİR.\n\nBunu engellemek için, bu pencerede belirtilen seçeneği etkinleştirin: 'Birim açık dosyalar veya dizinler içerse bile otomatik bağlantı kesmeye zorla'</entry>
     <entry lang="en" key="WARN_PREF_AUTO_DISMOUNT_ON_POWER">WARNING: When the notebook battery power is low, Windows may omit sending the appropriate messages to running applications when the computer is entering power saving mode. Therefore, VeraCrypt may fail to auto-dismount volumes in such cases.</entry>
-    <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PROMPT">You have scheduled the process of encryption of a partition/volume. The process has not been completed yet.\n\nDo you want to resume the process now?</entry>
+    <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PROMPT">You have scheduled the process of encryption/decryption of a partition/volume. The process has not been completed yet.\n\nDo you want to resume the process now?</entry>
     <entry lang="en" key="SYSTEM_ENCRYPTION_RESUME_PROMPT">You have scheduled the process of encryption or decryption of the system partition/drive. The process has not been completed yet.\n\nDo you want to start (resume) the process now?</entry>
-    <entry lang="en" key="ASK_NONSYS_INPLACE_ENC_NOTIFICATION_REMOVAL">Do you want to be prompted about whether you want to resume the currently scheduled processes of encryption of non-system partitions/volumes?</entry>
+    <entry lang="en" key="ASK_NONSYS_INPLACE_ENC_NOTIFICATION_REMOVAL">Do you want to be prompted about whether you want to resume the currently scheduled processes of encryption/decryption of non-system partitions/volumes?</entry>
     <entry lang="en" key="KEEP_PROMPTING_ME">Yes, keep prompting me</entry>
     <entry lang="en" key="DO_NOT_PROMPT_ME">No, do not prompt me</entry>
     <entry lang="en" key="NONSYS_INPLACE_ENC_NOTIFICATION_REMOVAL_NOTE">IMPORTANT: Keep in mind that you can resume the process of encryption/decryption of any non-system partition/volume by selecting 'Volumes' &gt; 'Resume Interrupted Process' from the menu bar of the main VeraCrypt window.</entry>
@@ -1096,7 +1096,7 @@
     <entry lang="en" key="DECOY_OS_REINSTALL_WARNING">WARNING: During the process of creation of the hidden operating system, you will be required to fully reinstall the currently running system (in order to create a decoy system securely).\n\nNote: The currently running operating system and the entire content of the system partition will be copied to the hidden volume (in order to create the hidden system).\n\n\nAre you sure you will be able to install Windows using a Windows Setup medium (or using a service partition)?</entry>
     <entry lang="en" key="DECOY_OS_REQUIREMENTS">For security reasons, if the currently running operating system requires activation, it must be activated before proceeding. Note that the hidden operating system will be created by copying the content of the system partition to a hidden volume (so if this operating system is not activated, the hidden operating system will not be activated either). For more information, see the section "Security Requirements and Precautions Pertaining to Hidden Volumes" in the VeraCrypt User's Guide.\n\nImportant: Before proceeding, please make sure you have read the section "Security Requirements and Precautions Pertaining to Hidden Volumes" in the VeraCrypt User's Guide.\n\n\nDoes the currently running operating system meet the above condition?</entry>
     <entry lang="en" key="CONFIRM_HIDDEN_OS_EXTRA_BOOT_PARTITION">Your system uses an extra boot partition. VeraCrypt does not support hibernation on hidden operating systems that use an extra boot partition (decoy systems can be hibernated without any problems).\n\nPlease note that the boot partition would be shared by both the decoy and the hidden system. Therefore, in order to prevent data leaks and problems while resuming from hibernation, VeraCrypt has to prevent the hidden system from writing to the shared boot partition and from hibernating.\n\n\nDo you want to continue? If you select 'No', instructions for removing the extra boot partition will be displayed.</entry>
-    <entry lang="en" key="EXTRA_BOOT_PARTITION_REMOVAL_INSTRUCTIONS">\nThe extra boot partition can be removed before installing Windows. To do so, follow these steps:\n\n1) Boot your Windows installation disc.\n\n2) In the Windows installer screen, click 'Install now' > 'Custom (advanced)'.\n\n3) Click 'Drive Options'.\n\n4) Select the main system partition and delete it by clicking 'Delete' and 'OK'.\n\n5) Select the 'System Reserved' partition, click 'Extend', and increase its size so that the operating system can be installed to it.\n\n6) Click 'Apply' and 'OK'.\n\n7) Install Windows on the 'System Reserved' partition.\n\n\nShould an attacker ask why you removed the extra boot partition, you can answer that you wanted to prevent any possible data leaks to the unencrypted boot partition.\n\nNote: You can print this text by clicking the 'Print' button below. If you save a copy of this text or print it (strongly recommended, unless your printer stores copies of documents it prints on its internal drive), you should destroy any copies of it after removing the extra boot partition (otherwise, if such a copy was found, it might indicate that there is a hidden operating system on this computer).</entry>
+    <entry lang="en" key="EXTRA_BOOT_PARTITION_REMOVAL_INSTRUCTIONS">\nThe extra boot partition can be removed before installing Windows. To do so, follow these steps:\n\n1) Boot your Windows installation disc.\n\n2) In the Windows installer screen, click 'Install now' &gt; 'Custom (advanced)'.\n\n3) Click 'Drive Options'.\n\n4) Select the main system partition and delete it by clicking 'Delete' and 'OK'.\n\n5) Select the 'System Reserved' partition, click 'Extend', and increase its size so that the operating system can be installed to it.\n\n6) Click 'Apply' and 'OK'.\n\n7) Install Windows on the 'System Reserved' partition.\n\n\nShould an attacker ask why you removed the extra boot partition, you can answer that you wanted to prevent any possible data leaks to the unencrypted boot partition.\n\nNote: You can print this text by clicking the 'Print' button below. If you save a copy of this text or print it (strongly recommended, unless your printer stores copies of documents it prints on its internal drive), you should destroy any copies of it after removing the extra boot partition (otherwise, if such a copy was found, it might indicate that there is a hidden operating system on this computer).</entry>
     <entry lang="en" key="GAP_BETWEEN_SYS_AND_HIDDEN_OS_PARTITION">Warning: There is unallocated space between the system partition and the first partition behind it. After you create the hidden operating system, you must not create any new partitions in that unallocated space. Otherwise, the hidden operating system will be impossible to boot (until you delete such newly created partitions).</entry>
     <entry lang="en" key="ALGO_NOT_SUPPORTED_FOR_SYS_ENCRYPTION">This algorithm is currently not supported for system encryption.</entry>
     <entry lang="en" key="ALGO_NOT_SUPPORTED_FOR_TRUECRYPT_MODE">This algorithm is not supported for TrueCrypt mode.</entry>
@@ -1250,7 +1250,7 @@
     <entry lang="en" key="NOTE_CASCADE_FOR_SYS_ENCRYPTION">If you encounter any of the previously described problems, decrypt the partition/drive (if it is encrypted) and then try encrypting it again using a non-cascade encryption algorithm (e.g. AES).</entry>
     <entry lang="en" key="UPDATE_TC_IN_DECOY_OS_FIRST">WARNING: For safety and security reasons, you should update VeraCrypt on the decoy operating system before you update it on the hidden operating system.\n\nTo do so, boot the decoy system and run the VeraCrypt installer from within it. Then boot the hidden system and run the installer from within it as well.\n\nNote: The decoy system and the hidden system share a single boot loader. If you upgraded VeraCrypt only on the hidden system (but not on the decoy system), the decoy system would contain a VeraCrypt driver and VeraCrypt applications whose version numbers are different from the version number of the VeraCrypt Boot Loader. Such a discrepancy might indicate that there is a hidden operating system on this computer.\n\n\nDo you want to continue?</entry>
     <entry lang="en" key="UPDATE_TC_IN_HIDDEN_OS_TOO">The version number of the VeraCrypt Boot Loader that booted this operating system is different from the version number of the VeraCrypt driver (and of the VeraCrypt applications) installed on this system.\n\nYou should run the VeraCrypt installer (whose version number is the same as the one of the VeraCrypt Boot Loader) to update VeraCrypt on this operating system.</entry>
-    <entry lang="en" key="BOOT_LOADER_VERSION_DIFFERENT_FROM_DRIVER_VERSION">The version number of the VeraCrypt Boot Loader that booted this operating system is different from the version number of the VeraCrypt driver (and of the VeraCrypt applications) installed on this system. Note that older versions may contain bugs fixed in later versions.\n\nIf you did not boot from the VeraCrypt Rescue Disk, you should reinstall VeraCrypt or upgrade it to the latest stable version (the boot loader will be updated too).\n\nIf you booted from the VeraCrypt Rescue Disk, you should update it ('System' > 'Create Rescue Disk').</entry>
+    <entry lang="en" key="BOOT_LOADER_VERSION_DIFFERENT_FROM_DRIVER_VERSION">The version number of the VeraCrypt Boot Loader that booted this operating system is different from the version number of the VeraCrypt driver (and of the VeraCrypt applications) installed on this system. Note that older versions may contain bugs fixed in later versions.\n\nIf you did not boot from the VeraCrypt Rescue Disk, you should reinstall VeraCrypt or upgrade it to the latest stable version (the boot loader will be updated too).\n\nIf you booted from the VeraCrypt Rescue Disk, you should update it ('System' &gt; 'Create Rescue Disk').</entry>
     <entry lang="en" key="BOOT_LOADER_UPGRADE_OK">The VeraCrypt Boot Loader has been upgraded.\n\nIt is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' &gt; 'Create Rescue Disk' after you restart your computer.</entry>
     <entry lang="en" key="BOOT_LOADER_UPGRADE_OK_HIDDEN_OS">The VeraCrypt Boot Loader has been upgraded.\n\nIt is strongly recommended that you boot the decoy operating system and then create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' &gt; 'Create Rescue Disk'.</entry>
     <entry lang="en" key="BOOT_LOADER_UPGRADE_FAILED">Failed to upgrade the VeraCrypt Boot Loader.</entry>
@@ -1275,7 +1275,7 @@
     <entry lang="en" key="INVALID_TOKEN_KEYFILE_PATH">Security token keyfile path is invalid.</entry>
     <entry lang="en" key="SECURITY_TOKEN_ERROR">Security token error</entry>
     <entry lang="en" key="CKR_PIN_INCORRECT">Password for security token is incorrect.</entry>
-    <entry lang="en" key="CKR_DEVICE_MEMORY">The security token does not have enough memory/space to perform the requested operation.\n\nIf you are attempting to import a keyfile, you should select a smaller file or use a keyfile generated by VeraCrypt (select 'Tools' > 'Keyfile Generator').</entry>
+    <entry lang="en" key="CKR_DEVICE_MEMORY">The security token does not have enough memory/space to perform the requested operation.\n\nIf you are attempting to import a keyfile, you should select a smaller file or use a keyfile generated by VeraCrypt (select 'Tools' &gt; 'Keyfile Generator').</entry>
     <entry lang="en" key="ALL_TOKEN_SESSIONS_CLOSED">All open security token sessions have been closed.</entry>
     <entry lang="en" key="SELECT_TOKEN_KEYFILES">Select Security Token Keyfiles</entry>
     <entry lang="en" key="TOKEN_SLOT_ID">Slot</entry>
@@ -1300,8 +1300,8 @@
     <entry lang="en" key="MOUNTED_DEVICE_FORCED_READ_ONLY_WRITE_PROTECTION">Volume '%s' has been mounted as read-only because the operating system reported the host device to be write-protected.\n\nPlease note that some custom chipset drivers have been reported to cause writable media to falsely appear write-protected. This problem is not caused by VeraCrypt. It may be solved by updating or uninstalling any custom (non-Microsoft) chipset drivers that are currently installed on this system.</entry>
     <entry lang="en" key="LIMIT_ENC_THREAD_POOL_NOTE">Note that the Hyper-Threading technology provides multiple logical cores per a single physical core. When Hyper Threading is enabled, the number selected above represents the number of logical processors/cores.</entry>
     <entry lang="en" key="NUMBER_OF_THREADS">%d threads</entry>
-    <entry lang="en" key="DISABLED_HW_AES_AFFECTS_PERFORMANCE">Note that hardware-accelerated AES is disabled, which will affect benchmark results (worse performance).\n\nTo enable hardware acceleration, select 'Settings' > 'Performance' and enable the corresponding option.</entry>
-    <entry lang="en" key="LIMITED_THREAD_COUNT_AFFECTS_PERFORMANCE">Note that the number of threads is currently limited, which will affect benchmark results (worse performance).\n\nTo utilize the full potential of the processor(s), select 'Settings' > 'Performance' and disable the corresponding option.</entry>
+    <entry lang="en" key="DISABLED_HW_AES_AFFECTS_PERFORMANCE">Note that hardware-accelerated AES is disabled, which will affect benchmark results (worse performance).\n\nTo enable hardware acceleration, select 'Settings' &gt; 'Performance' and enable the corresponding option.</entry>
+    <entry lang="en" key="LIMITED_THREAD_COUNT_AFFECTS_PERFORMANCE">Note that the number of threads is currently limited, which will affect benchmark results (worse performance).\n\nTo utilize the full potential of the processor(s), select 'Settings' &gt; 'Performance' and disable the corresponding option.</entry>
     <entry lang="en" key="ASK_REMOVE_DEVICE_WRITE_PROTECTION">Do you want VeraCrypt to attempt to disable write protection of the partition/drive?</entry>
     <entry lang="en" key="CONFIRM_SETTING_DEGRADES_PERFORMANCE">WARNING: This setting may degrade performance.\n\nAre you sure you want to use this setting?</entry>
     <entry lang="en" key="HOST_DEVICE_REMOVAL_DISMOUNT_WARN_TITLE">Warning: VeraCrypt volume auto-dismounted</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1397,7 +1397,7 @@
     <entry lang="en" key="IDC_DISABLE_BOOT_LOADER_HASH_PROMPT">Do not request Hash algorithm in the pre-boot authentication screen</entry>
     <entry lang="en" key="KUZNYECHIK_HELP">Kuznyechik is a block cipher first published in 2015 and defined in the National Standard of the Russian Federation GOST R 34.12-2015 and also in RFC 7801. 256-bit key, 128-bit block. Mode of operation is XTS.</entry>
     <entry lang="en" key="CAMELLIA_HELP">Jointly developed by Mitsubishi Electric and NTT of Japan. First published on 2000. 256-bit key, 128-bit block. Mode of operation is XTS. It has been approved for use by the ISO/IEC, the European Union's NESSIE project and the Japanese CRYPTREC project.</entry>
-    <entry lang="en" key="TIME">Time</entry>
+    <entry lang="tr" key="TIME">Zaman</entry>
     <entry lang="en" key="ITERATIONS">Iterations</entry>
     <entry lang="en" key="PRE-BOOT">Pre-Boot</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_INFO">Before you can encrypt the partition, you must create a VeraCrypt Rescue Disk (VRD), which serves the following purposes:\n\n- If the VeraCrypt Boot Loader, master key, or other critical data gets damaged, the VRD allows you to restore it (note, however, that you will still have to enter the correct password then).\n\n- If Windows gets damaged and cannot start, the VRD allows you to permanently decrypt the partition before Windows starts.\n\n- The VRD will contain a backup of the present EFI boot loader and will allow you to restore it if necessary.\n\nThe VeraCrypt Rescue Disk ZIP image will be created in the location specified below.</entry>
@@ -1405,9 +1405,9 @@
     <entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NO_CHECK">The Rescue Disk ZIP image has been created and stored in this file:\n%s\n\nNow you should either extract the image to a USB stick that is formatted as FAT/FAT32 or move it to a safe location for later use.\n\n%lsClick Next to continue.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NOTE">IMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\n</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
-    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
-    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' &gt; 'Create Rescue Disk'.</entry>
+    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' &gt; 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1415,18 +1415,29 @@
     <entry lang="en" key="EFI_PLATFORM_INFORMATION">EFI Platform Information</entry>
     <entry lang="en" key="EDIT_DCSPROP_FOR_ADVANCED_ONLY">WARNING: Inexperienced users should never attempt to manually edit boot loader configurations.\n\nContinue?</entry>
     <entry lang="en" key="DCSPROP_XML_VALIDATION_FAILED">WARNING: Failed to validate the XML format of the Boot Loader configuration. Please check your modifications.</entry>
-    <entry lang="en" key="IDT_ADVANCED_OPTIONS">Advanced Options</entry>
-    <entry lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' > 'Create Rescue Disk'.\nDo you want to do it now?</entry>
+    <entry lang="tr" key="IDT_ADVANCED_OPTIONS">Gelişmiş Ayarlar</entry>
+    <entry lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' &gt; 'Create Rescue Disk'.\nDo you want to do it now?</entry>
     <entry lang="en" key="IDC_ALLOW_TRIM_NONSYS_SSD">Allow TRIM command for non-system SSD partition/drive</entry>
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="tr" key="IDC_SELECT_LANGUAGE_LABEL">Kurulum süresince kullanýlacak dili seçin:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="tr" key="IDC_SELECT_LANGUAGE_LABEL">Kurulum süresince kullanýlacak dili seçin:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="tr" key="IDT_BENCHMARK">Hız Testi:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">
@@ -1470,4 +1481,4 @@
       </xs:complexType>
     </xs:element>
   </xs:schema>
-</VeraCrypt>
+</VeraCrypt>

Translations/Language.uk.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="uk" name="Українська" en-name="Ukrainian" version="1.0.0" translators="Kravchuk Olexandr, Babchuk Volodymyr" />
     <font lang="uk" class="normal" size="11" face="default" />
     <font lang="uk" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="uk" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Введіть пароль і/або ключові файли для несистемного тому, де ви хочете відновити шифрування 'на місці'.\n\n\nПримітка: після нетиснення 'Далі' VeraCrypt спробує знайти всі несистемні томи, на яких був перерваний процес шифрування, і де можна розшифрувати заголовок тома VeraCrypt з допомогою вказаного проля і/або ключових файлів. Якщо таких томів виявиться декілька, на наступному етапі вам буде потрібно вибрати один із них.</entry>
     <entry lang="uk" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Виберіть один із перечислених томів. Це не системні томи з перерваним процесом шифрування, заголовок яких вдалося розшифрувати з допомогою вказаного пароля і/або ключових файлів.</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="uk" key="PASSWORD_HELP">Дуже важливо вибрати хороший пароль. Уникайте вказувати паролі з одного або декількох слів, які можна знайти в словнику (або комбінацій з 2, 3 або 4 таких слів). Пароль не повинен містити імен або дат народження. Він має бути важкий для вгадування. Хороший пароль -- випадкова комбінація прописних і рядкових букв, цифр і особливих символів (@ ^ = $ * + і так далі).\n\nРекомендуємо вибирати паролі, що складаються більш ніж з 20 знаків (чим довше, тим краще). Макс. довжина -- 64 символи.</entry>
+    <entry lang="uk" key="PASSWORD_HELP">Дуже важливо вибрати хороший пароль. Уникайте вказувати паролі з одного або декількох слів, які можна знайти в словнику (або комбінацій з 2, 3 або 4 таких слів). Пароль не повинен містити імен або дат народження. Він має бути важкий для вгадування. Хороший пароль -- випадкова комбінація прописних і рядкових букв, цифр і особливих символів (@ ^ = $ * + і так далі).\n\nРекомендуємо вибирати паролі, що складаються більш ніж з 20 знаків (чим довше, тим краще). Макс. довжина -- 128 символи.</entry>
     <entry lang="uk" key="PASSWORD_HIDDENVOL_HELP">Будь ласка, оберіть пароль для прихованого тому. </entry>
     <entry lang="uk" key="PASSWORD_HIDDEN_OS_HELP">Выберіть пароль для прихованої операційної системи (т.т. для прихованого тому). </entry>
     <entry lang="uk" key="PASSWORD_HIDDEN_OS_NOTE">ВАЖЛИВО: Пароль, що ви вибираєте на цьому етапі для для прихованої операційної системи повинен максимально відрізнятися від двох інших паролів (т.б. від паролів для зовнішнього тому і для підставної операційної системи).</entry>
     <entry lang="uk" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Будь ласка, введіть пароль для тому, всередині якого ви бажаєте створити прихований том.\n\nПісля натиснення 'Далі', VeraCrypt спробує монтувати том, потім перегляне карту кластерів змонтованого тому з метою пошуку безперервної вільної ділянки, в кінці якої виявиться кінець тому. В цій області буде міститись прихований том, тобто вона визначає його максимальний розмір. Перегляд карти потрібен для гарантування, що дані у зовнішньому томі не буде перезаписано внутрішнім томом.</entry>
-    <entry lang="uk" key="PASSWORD_HIDDENVOL_HOST_HELP">\nВиберіть пароль для зовнішнього тому. Це пароль, який ви зможете видати противнику, якщо він змусить вас це зробити.\n\nВАЖЛИВО: Пароль повинен максимально відрізнятися від того, який ви виберете для прихованого тому.\n\nПримітка: максимально довжина пароля - 64 символів.</entry>
+    <entry lang="uk" key="PASSWORD_HIDDENVOL_HOST_HELP">\nВиберіть пароль для зовнішнього тому. Це пароль, який ви зможете видати противнику, якщо він змусить вас це зробити.\n\nВАЖЛИВО: Пароль повинен максимально відрізнятися від того, який ви виберете для прихованого тому.\n\nПримітка: максимально довжина пароля - 128 символів.</entry>
     <entry lang="uk" key="PASSWORD_SYSENC_OUTERVOL_HELP">Виберіть пароль для зовнішнього тому. Це пароль, який ви зможете видати кожному, хто змусить вас повідомити пароль для першого розділу за системним, де будуть знаходитися зовнішній том і прихований том (мвстячий приховану операційну систему). Існування прихованого тому (і прихованої ОС) залишиться в таємниці. Майте на увазі, що цей пароль НЕ для підставної операційної системи.\n\nВАЖЛИВО: Пароль повинен максимально відрізнятися від того, який ви виберете для прихованого тому (т.б. для прихованої операційної системи).</entry>
     <entry lang="uk" key="PASSWORD_HIDVOL_HOST_TITLE">Пароль зовнішнього тому</entry>
     <entry lang="uk" key="PASSWORD_HIDVOL_TITLE">Пароль прихованого тому</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1405,9 +1405,9 @@
     <entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NO_CHECK">The Rescue Disk ZIP image has been created and stored in this file:\n%s\n\nNow you should either extract the image to a USB stick that is formatted as FAT/FAT32 or move it to a safe location for later use.\n\n%lsClick Next to continue.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NOTE">IMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\n</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
-    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
-    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' &gt; 'Create Rescue Disk'.</entry>
+    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' &gt; 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1415,18 +1415,29 @@
     <entry lang="en" key="EFI_PLATFORM_INFORMATION">EFI Platform Information</entry>
     <entry lang="en" key="EDIT_DCSPROP_FOR_ADVANCED_ONLY">WARNING: Inexperienced users should never attempt to manually edit boot loader configurations.\n\nContinue?</entry>
     <entry lang="en" key="DCSPROP_XML_VALIDATION_FAILED">WARNING: Failed to validate the XML format of the Boot Loader configuration. Please check your modifications.</entry>
-    <entry lang="en" key="IDT_ADVANCED_OPTIONS">Advanced Options</entry>
-    <entry lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' > 'Create Rescue Disk'.\nDo you want to do it now?</entry>
+    <entry lang="uk" key="IDT_ADVANCED_OPTIONS">Розширені Параметри</entry>
+    <entry lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' &gt; 'Create Rescue Disk'.\nDo you want to do it now?</entry>
     <entry lang="en" key="IDC_ALLOW_TRIM_NONSYS_SSD">Allow TRIM command for non-system SSD partition/drive</entry>
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="uk" key="IDC_SELECT_LANGUAGE_LABEL">Виберіть мову, яка буде використовуватися під час встановлення:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="uk" key="IDC_SELECT_LANGUAGE_LABEL">Виберіть мову, яка буде використовуватися під час встановлення:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="uk" key="IDT_BENCHMARK">Тест швидкості:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.uz.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="uz" name="Ўзбекча" en-name="Uzbek (Cyrillic)" version="0.1.0" translators="Abdurauf Azizov, Dmitry Yerokhin" />
     <font lang="uz" class="normal" size="11" face="default" />
     <font lang="uz" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="uz" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Введите пароль и/или ключевые файлы для несистемного тома, где вы хотите возобновить шифрование 'на месте'.\n\n\nПримечание: после нажатия 'Далее' VeraCrypt попытается найти все несистемные тома, на которых был прерван процесс шифрования, и где можно расшифровать заголовок тома VeraCrypt с помощью указанного пароля и/или ключевых файлов. Если таких томов окажется несколько, на следующем этапе вам будет нужно выбрать один из них.</entry>
     <entry lang="uz" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Выберите один из перечисленных томов. Это несистемные тома с прерванным процессом шифрования, заголовок которых удалось расшифровать с помощью указанного пароля и/или ключевых файлов.</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="uz" key="PASSWORD_HELP">Очень важно выбрать хороший пароль. Избегайте указывать пароли из одного или нескольких слов, которые можно найти в словаре (или комбинаций из 2, 3 или 4 таких слов). Пароль не должен содержать имён или дат рождения. Он должен быть труден для угадывания. Хороший пароль -- случайная комбинация прописных и строчных букв, цифр и особых символов (@ ^ = $ * + и т.д.).\n\nРекомендуем выбирать пароли, состоящие более чем из 20 знаков (чем длиннее, тем лучше). Макс. длина -- 64 символа.</entry>
+    <entry lang="uz" key="PASSWORD_HELP">Очень важно выбрать хороший пароль. Избегайте указывать пароли из одного или нескольких слов, которые можно найти в словаре (или комбинаций из 2, 3 или 4 таких слов). Пароль не должен содержать имён или дат рождения. Он должен быть труден для угадывания. Хороший пароль -- случайная комбинация прописных и строчных букв, цифр и особых символов (@ ^ = $ * + и т.д.).\n\nРекомендуем выбирать пароли, состоящие более чем из 20 знаков (чем длиннее, тем лучше). Макс. длина -- 128 символа.</entry>
     <entry lang="uz" key="PASSWORD_HIDDENVOL_HELP">Выберите пароль для скрытого тома. </entry>
     <entry lang="uz" key="PASSWORD_HIDDEN_OS_HELP">Выберите пароль для скрытой операционной системы (т.е. для скрытого тома). </entry>
     <entry lang="uz" key="PASSWORD_HIDDEN_OS_NOTE">ВАЖНО: Выбираемый на этом этапе пароль для скрытой операционной системы должен существенно отличаться от двух других паролей (т.е. от паролей для внешнего тома и для обманной операционной системы).</entry>
     <entry lang="uz" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Введите пароль для тома, внутри которого вы хотите создать скрытый том.\n\nПосле нажатия 'Далее' VeraCrypt попытается смонтировать том, после чего просмотреть карту кластеров смонтированного тома в поиске непрерывной свободной области, в конце которой окажется конец тома. В этой области размещается скрытый том, т.е. она определяет его предельный размер. Просмотр карты нужен для гарантии того, что данные во внешнем томе не будут перезаписаны внутренним томом.</entry>
-    <entry lang="uz" key="PASSWORD_HIDDENVOL_HOST_HELP">\nВыберите пароль для внешнего тома. Это пароль, который вы сможете выдать противнику, если он вынудит вас это сделать.\n\nВАЖНО: Пароль должен существенно отличаться от того, который вы выберете для скрытого тома.\n\nПримечание: максимальная длина пароля - 64 символа.</entry>
+    <entry lang="uz" key="PASSWORD_HIDDENVOL_HOST_HELP">\nВыберите пароль для внешнего тома. Это пароль, который вы сможете выдать противнику, если он вынудит вас это сделать.\n\nВАЖНО: Пароль должен существенно отличаться от того, который вы выберете для скрытого тома.\n\nПримечание: максимальная длина пароля - 128 символа.</entry>
     <entry lang="uz" key="PASSWORD_SYSENC_OUTERVOL_HELP">Выберите пароль для внешнего тома. Это пароль, который вы сможете выдать каждому, кто вынудит вас сообщить пароль для первого раздела за системным, где будут располагаться внешний том и скрытый том (содержащий скрытую операционную систему). Существование скрытого тома (и скрытой ОС) останется в тайне. Учтите, что это пароль НЕ для обманной операционной системы.\n\nВАЖНО: Пароль должен существенно отличаться от того, который вы выберете для скрытого тома (т.е. для скрытой операционной системы).</entry>
     <entry lang="uz" key="PASSWORD_HIDVOL_HOST_TITLE">Пароль внешнего тома</entry>
     <entry lang="uz" key="PASSWORD_HIDVOL_TITLE">Пароль скрытого тома</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1407,7 +1407,7 @@
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="uz" key="IDT_BENCHMARK">Тест скорости:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">
@@ -1470,4 +1481,4 @@
       </xs:complexType>
     </xs:element>
   </xs:schema>
-</VeraCrypt>
+</VeraCrypt>

Translations/Language.vi.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="vi" name="Tiếng Việt" en-name="Vietnamese" version="0.1.0" translators="Nguyễn Kim Huy" />
     <font lang="vi" class="normal" size="11" face="default" />
     <font lang="vi" class="bold" size="13" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="vi" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Xin nhập mật mã và/hay (các) tập tin khóa vào cho tập đĩa vô hệ nơi mà bạn muốn tiếp tục lại quá trình mã hóa tại chỗ.\n\n\nGhi chú: Sau khi bạn nhấn Kế tiếp, VeraCrypt sẽ thử tìm tất cả các tập đĩa vô hệ nơi mà quá trình mã hóa đã bị gián đoạn và nơi mà phần đầu tập đĩa VeraCrypt có thể được giải mã khi dùng mật mã và/hay (các) tập tin khóa được cung cấp. Nếu nhiều hơn một tập đĩa như thế được tìm, bạn sẽ cần chọn một trong những cái đó trong bước kế tiếp.</entry>
     <entry lang="vi" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Xin chọn một trong các tập đĩa được liệt kê. Danh sách có chứa mọi tập đĩa vô hệ có thể truy cập được nơi mà quá trình mã hóa đã bị gián đoạn và phần đầu của chúng có thể được giải mã khi dùng mật mã và/hay (các) tập tin khóa được cung cấp.</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="vi" key="PASSWORD_HELP">Chọn một mật mã tốt là điều rất quan trọng. Bạn nên tránh chọn cái mà chỉ có chứa một chữ đơn độc mà có thể tìm trong tự điển (hoặc là một kết hợp của 2, 3, or 4 chữ như thế). Nó không nên chứa bất cứ tên hoặc ngày sinh nào cả. Nó không dễ đoán được. Một mật mã tốt là một kết hợp ngẫu nhiên của chữ hoa và chữ thường, số, và những ký tự đặc biệt như @ ^ = $ * + v.v. Chúng tôi khuyên nên chọn một mật mã có chứa nhiều hơn 20 ký tự (càng dài càng tốt). Chiều dài tối đa có thể được là 64 ký tự.</entry>
+    <entry lang="vi" key="PASSWORD_HELP">Chọn một mật mã tốt là điều rất quan trọng. Bạn nên tránh chọn cái mà chỉ có chứa một chữ đơn độc mà có thể tìm trong tự điển (hoặc là một kết hợp của 2, 3, or 4 chữ như thế). Nó không nên chứa bất cứ tên hoặc ngày sinh nào cả. Nó không dễ đoán được. Một mật mã tốt là một kết hợp ngẫu nhiên của chữ hoa và chữ thường, số, và những ký tự đặc biệt như @ ^ = $ * + v.v. Chúng tôi khuyên nên chọn một mật mã có chứa nhiều hơn 20 ký tự (càng dài càng tốt). Chiều dài tối đa có thể được là 128 ký tự.</entry>
     <entry lang="vi" key="PASSWORD_HIDDENVOL_HELP">Xin chọn một mật mã cho tập đĩa ẩn.</entry>
     <entry lang="vi" key="PASSWORD_HIDDEN_OS_HELP">Xin chọn một mật mã cho hệ điều hành ẩn (nghĩa là cho tập đĩa ẩn).</entry>
     <entry lang="vi" key="PASSWORD_HIDDEN_OS_NOTE">QUAN TRỌNG: Mật mã mà bạn chọn cho hệ điều hành ẩn trong bước này phải khác thật nhiều so với hai mật mã khác (nghĩa là, so với mật mã cho tập đĩa bên ngoài và so với mật mã cho hệ điều hành nghi trang).</entry>
     <entry lang="vi" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">Xin chọn mật mã cho tập đĩa mà bên trong đó bạn muốn cấu tạo một tập đĩa ẩn.\n\nSau khi bạn nhấn Kế tiếp, VeraCrypt sẽ thử nạp tập đĩa lên. Ngay khi tập đĩa được nạp lên, cụm ảnh mảng của nó sẽ được quét để xác định kích cỡ của khu vực chỗ trống không gián đoạn (nếu có bất cứ cái nào) mà phần cuối của nó trùng với phần cuối của tập đĩa. Khu vực này sẽ chứa tập đĩa ẩn và vì thế sẽ giới hạn kích cỡ tối đa có thể được của nó. Quét cụm ảnh mảng là cần thiết để đảm bảo là không có dữ liệu nào trong tập đĩa bên ngoài sẽ bị viết chòng lên bởi tập đĩa ẩn.</entry>
-    <entry lang="vi" key="PASSWORD_HIDDENVOL_HOST_HELP">\nXin chọn một mật mã cho tập đĩa bên ngoài. Đây sẽ là mật mã mà bạn sẽ có thể tiết lộ cho một đối phương nếu bạn bị hỏi hoặc bị buộc phải làm thế.\n\nQUAN TRỌNG: Mật mã phải khác thật nhiều so với cái mà bạn sẽ chọn cho tập đĩa ẩn.\n\nLưu ý: Chiều dài tối đa có thể được là 64 ký tự.</entry>
+    <entry lang="vi" key="PASSWORD_HIDDENVOL_HOST_HELP">\nXin chọn một mật mã cho tập đĩa bên ngoài. Đây sẽ là mật mã mà bạn sẽ có thể tiết lộ cho một đối phương nếu bạn bị hỏi hoặc bị buộc phải làm thế.\n\nQUAN TRỌNG: Mật mã phải khác thật nhiều so với cái mà bạn sẽ chọn cho tập đĩa ẩn.\n\nLưu ý: Chiều dài tối đa có thể được là 128 ký tự.</entry>
     <entry lang="vi" key="PASSWORD_SYSENC_OUTERVOL_HELP">Xin chọn một mật mã cho tập đĩa bên ngoài. Đây sẽ là mật mã mà bạn sẽ có thể tiết lộ cho bất cứ ai buộc bạn để lộ ra mật mã cho phân vùng đầu tiên đằng sau phân vùng hệ thống, nơi mà cả hai tập đĩa bên ngoài và tập đĩa ẩn (có chứa hệ điều hành ẩn) sẽ nằm đó. Sự hiện có của tập đĩa ẩn (và của hệ điều hành ẩn) sẽ vẫn bí mật. Lưu ý là mật mã này không phải cho hệ điều hành nghi trang.\n\nQUAN TRỌNG: Mật mã phải khác thật nhiều so với cái mà bạn sẽ chọn cho tập đĩa ẩn (nghĩa là cho hệ điều hành ẩn).</entry>
     <entry lang="vi" key="PASSWORD_HIDVOL_HOST_TITLE">Mật mã cho Tập đĩa Bên ngoài</entry>
     <entry lang="vi" key="PASSWORD_HIDVOL_TITLE">Mật mã cho Tập đĩa Ẩn</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1407,7 +1407,7 @@
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="vi" key="IDT_BENCHMARK">Tiêu chuẩn:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">
@@ -1470,4 +1481,4 @@
       </xs:complexType>
     </xs:element>
   </xs:schema>
-</VeraCrypt>
+</VeraCrypt>

Translations/Language.zh-cn.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="zh-cn" name="简体中文" en-name="Chinese (Simplified)" version="1.0.0" translators="Barney Li and Zhangjintao" />
     <font lang="zh-cn" class="normal" size="11" face="Tahoma" />
     <font lang="zh-cn" class="bold" size="14" face="Tahoma" />
@@ -618,12 +618,12 @@
     <entry lang="zh-cn" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">请为您想要继续就地加密的非系统分区输入密码 和/或 密钥文件。\n\n\n注解：在您点击〖下一步〗之后，VeraCrypt 将尝试查找所有加密过程被中断的非系统分区（这些中断加密的分区的 VeraCrypt 头信息可以使用提供的密码 和/或 密钥文件解密）。如果发现了多个此类的分区，您需要在下个步骤里面选择他们其中的一个。</entry>
     <entry lang="zh-cn" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">请选择下面列表中的一个加密卷。此列表包含所有加密被中断的非系统加密卷，它们的头信息可以使用提供的密码 和/或 密钥文件解密。</entry>
     <entry lang="zh-cn" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">请输入用于解密非系统加密卷的密码和(或)提供密钥文件。</entry>
-    <entry lang="zh-cn" key="PASSWORD_HELP">选择一个安全的密码非常重要。您应该避免选取能够在字典中查到的简单词汇（或是2、3、4 这类字符组合）作为密码，也不应包含任何名字或生日，同时也不应该容易被猜到。安全的密码应当包含随机的大小写字母、数字、以及类似 @ ^ = $ * + 这样的特殊字符。我们推荐使用大于 20 个字符的密码（越长越好）。最大的密码长度为 64 个字符。</entry>
+    <entry lang="zh-cn" key="PASSWORD_HELP">选择一个安全的密码非常重要。您应该避免选取能够在字典中查到的简单词汇（或是2、3、4 这类字符组合）作为密码，也不应包含任何名字或生日，同时也不应该容易被猜到。安全的密码应当包含随机的大小写字母、数字、以及类似 @ ^ = $ * + 这样的特殊字符。我们推荐使用大于 20 个字符的密码（越长越好）。最大的密码长度为 128 个字符。</entry>
     <entry lang="zh-cn" key="PASSWORD_HIDDENVOL_HELP">请为隐藏加密卷选择一个密码。 </entry>
     <entry lang="zh-cn" key="PASSWORD_HIDDEN_OS_HELP">请为隐形操作系统设置一个密码（即隐藏加密卷的密码）。 </entry>
     <entry lang="zh-cn" key="PASSWORD_HIDDEN_OS_NOTE">重要：您在本步骤中为隐形操作系统设置的密码必须绝对不同于其它的两个密码（也就是要不同于外层加密卷的密码和迷惑操作系统的密码）。</entry>
     <entry lang="zh-cn" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">请输入外层加密卷的密码（您将在该加密卷中创建隐藏加密卷）。\n\n在单击〖下一步〗后，VeraCrypt 会尝试加载此加密卷。一旦加密卷被加载，将进行簇状图扫描来确定连续的自由空间大小（如果有的话），此空间的尾部与加密卷尾部一致。该区域将提供给隐藏加密卷并因此会限制它的最大可能大小。簇状图扫描是必要的，这可以确保外层加密卷的数据不会被隐藏加密卷覆盖。</entry>
-    <entry lang="zh-cn" key="PASSWORD_HIDDENVOL_HOST_HELP">\n请选择外层加密卷的密码。在您被攻击者强迫说出启动验证密码的情况下，这个密码可以告诉攻击者。\n\n重要：您为外层加密卷选择的密码必须不同于隐藏加密卷的密码。\n\n说明：密码的最大长度为 64 个字符。</entry>
+    <entry lang="zh-cn" key="PASSWORD_HIDDENVOL_HOST_HELP">\n请选择外层加密卷的密码。在您被攻击者强迫说出启动验证密码的情况下，这个密码可以告诉攻击者。\n\n重要：您为外层加密卷选择的密码必须不同于隐藏加密卷的密码。\n\n说明：密码的最大长度为 128 个字符。</entry>
     <entry lang="zh-cn" key="PASSWORD_SYSENC_OUTERVOL_HELP">请选择外层加密卷的密码。在您被攻击者强迫说出系统分区后面的第一个分区（外层加密卷和包含隐形操作系统的隐藏加密卷均位于这个分区）密码的情况下，这个密码可以告诉这些攻击者。而隐藏加密卷和隐形操作系统仍然是安全的。需要注意的是，外层加密卷的密码并不是迷惑操作系统的密码。\n\n重要：您为迷惑操作系统选择的密码必须不同于隐藏加密卷的密码（也就是隐形操作系统的密码）。</entry>
     <entry lang="zh-cn" key="PASSWORD_HIDVOL_HOST_TITLE">外层加密卷密码</entry>
     <entry lang="zh-cn" key="PASSWORD_HIDVOL_TITLE">隐藏加密卷密码</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="zh-cn" key="IDC_BOOT_LOADER_CACHE_PIM">当缓存预引导身份验证密码时，包含 &amp;PIM</entry>
     <entry lang="zh-cn" key="IDC_PREF_CACHE_PIM">在缓存密码时，包含 PIM</entry>
     <entry lang="zh-cn" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">使断开的网络驱动器可用于加载</entry>
-    <entry lang="zh-cn" key="PASSWORD_UTF8_TOO_LONG">键入的密码过长：在UTF-8下已超过64字节。</entry>
+    <entry lang="zh-cn" key="PASSWORD_UTF8_TOO_LONG">键入的密码过长：在UTF-8下已超过128字节。</entry>
     <entry lang="zh-cn" key="PASSWORD_UTF8_INVALID">键入的密码中包含无法转换为UTF-8编码的Unicode字符。</entry>
     <entry lang="zh-cn" key="INIT_DLL">错误: 加载系统库失败。</entry>
     <entry lang="zh-cn" key="ERR_EXFAT_INVALID_VOLUME_SIZE">输入的加密卷的大小不兼容所选择的exFAT文件系统。</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="zh-cn" key="IDC_BLOCK_SYSENC_TRIM">阻止系统分区/磁盘上使用 TRIM 命令</entry>
     <entry lang="zh-cn" key="WINDOWS_EFI_BOOT_LOADER_MISSING">错误: 无法在磁盘上找到 Windows EFI 系统加载程序。操作将中止。</entry>
     <entry lang="zh-cn" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">如果启用了 SecureBoot, 并且 VeraCrypt 自定义密钥未加载到计算机固件中, 则无法对当前系统进行加密。SecureBoot 需要在 BIOS 配置中禁用, 以允许系统加密继续进行。</entry>
-    <entry lang="zh-cn" key="PASSWORD_PASTED_TRUNCATED">粘贴的文本被截断, 因为密码最大长度为64个字符</entry>
-    <entry lang="zh-cn" key="PASSWORD_MAXLENGTH_REACHED">密码已达到其最大长度64个字符。\n不允许附加字符。</entry>
+    <entry lang="zh-cn" key="PASSWORD_PASTED_TRUNCATED">粘贴的文本被截断, 因为密码最大长度为128个字符</entry>
+    <entry lang="zh-cn" key="PASSWORD_MAXLENGTH_REACHED">密码已达到其最大长度128个字符。\n不允许附加字符。</entry>
     <entry lang="zh-cn" key="IDC_SELECT_LANGUAGE_LABEL">选择安装期间要使用的语言：</entry>
     <entry lang="zh-cn" key="VOLUME_TOO_LARGE_FOR_HOST">错误：文件容器的大小大于磁盘上的可用空间。</entry>
     <entry lang="zh-cn" key="IDC_ALLOW_WINDOWS_DEFRAG">允许Windows磁盘碎片整理程序对非系统分区/驱动器进行碎片整理</entry>    
     <entry lang="zh-cn" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">警告：对非系统分区/驱动器进行碎片整理可能会泄漏有关其内容的元数据，或导致它们可能包含的隐藏卷出现问题。\n\n是否继续？</entry>
+    <entry lang="zh-cn" key="VIRTUAL_DEVICE">虚拟设备</entry>
+    <entry lang="zh-cn" key="MOUNTED_VOLUME_NOT_ASSOCIATED">选中的已挂载卷与它在Windows中的盘符不相符，因此无法在Windows资源管理器中打开。</entry>
+    <entry lang="zh-cn" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">如果插入了新设备, 则从内存中清除加密密钥</entry>
+    <entry lang="zh-cn" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">重要提示：\n - 请记住此选项在关机/重启后不再有效，因此你需要在下一次开机后再次选择这个选项。\n\n - 当此选项启用且有一个新设备接入后，由于在内存中清除密钥后无法访问加密磁盘，电脑将会死机且最终会蓝屏。\n</entry>
+    <entry lang="zh-cn" key="STARTING">开始</entry>
+    <entry lang="zh-cn" key="IDC_ENABLE_CPU_RNG">使用CPU硬件随机数生成器作为额外的熵源</entry>
+    <entry lang="zh-cn" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">使用旧密码长度 (64个字符)</entry>
+    <entry lang="zh-cn" key="IDC_ENABLE_RAM_ENCRYPTION">激活存储在RAM中的密钥和密码加密</entry>
+    <entry lang="zh-cn" key="IDT_BENCHMARK">基准测试:</entry>
+    <entry lang="zh-cn" key="IDC_DISABLE_MOUNT_MANAGER">仅创建虚拟设备而不加载在选定的盘符上</entry>
+    <entry lang="zh-cn" key="LEGACY_PASSWORD_UTF8_TOO_LONG">键入的密码过长：在UTF-8下已超过64字节。</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.zh-hk.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="zh-hk" name="繁體中文" en-name="Chinese (Hong Kong)" version="0.1.0" translators="PUN Chi Ho" />
     <font lang="zh-hk" class="normal" size="11" face="Arial" />
     <font lang="zh-hk" class="bold" size="14" face="Arial" />
@@ -618,12 +618,12 @@
     <entry lang="zh-hk" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">請為您想要繼續就地加密的非系統分區輸入密碼 和/或 密鑰檔。\n\n\n注解：在您點擊 '下一步' 之後，VeraCrypt 將嘗試查找所有加密過程已被中斷的非系統分區（這些中斷加密的分區的 VeraCrypt 頭資訊可以使用提供的密碼 和/或 密鑰檔解密）。如果發現了多個此類的分區，您需要在下個步驟裏面選擇他們其中的一個。</entry>
     <entry lang="zh-hk" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">請選擇下面列表中的一個加密卷。此列表包含所有加密被中斷非系統加密卷，它們的頭資訊可以使用提供的密碼 和/或 密鑰檔解密。</entry>
     <entry lang="zh-hk" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="zh-hk" key="PASSWORD_HELP">選擇一個安全的密碼非常重要。您應該避免選取能夠在字典中查到的簡單辭彙（或是2、3、4 這類字元組合）作為密碼，也不應包含任何名字或生日，同時也不應該容易被猜到。安全的密碼應當包含隨機的大小寫字元、數位、以及類似 @ ^ = $ * + 這樣的特殊字元。我們推薦使用大於 20 個字元的密碼（越長越好）。最大的密碼長度為 64 個字元。</entry>
+    <entry lang="zh-hk" key="PASSWORD_HELP">選擇一個安全的密碼非常重要。您應該避免選取能夠在字典中查到的簡單辭彙（或是2、3、4 這類字元組合）作為密碼，也不應包含任何名字或生日，同時也不應該容易被猜到。安全的密碼應當包含隨機的大小寫字元、數位、以及類似 @ ^ = $ * + 這樣的特殊字元。我們推薦使用大於 20 個字元的密碼（越長越好）。最大的密碼長度為 128 個字元。</entry>
     <entry lang="zh-hk" key="PASSWORD_HIDDENVOL_HELP">請為隱藏加密卷選擇一個密碼。 </entry>
     <entry lang="zh-hk" key="PASSWORD_HIDDEN_OS_HELP">請為隱形作業系統設置一個密碼（即隱藏加密卷的密碼）。</entry>
     <entry lang="zh-hk" key="PASSWORD_HIDDEN_OS_NOTE">重要：您在本步驟中為隱形作業系統設置的密碼必須絕對不同於其他的兩個密碼（也就是要不同於外層加密卷的密碼和迷惑作業系統的密碼）。</entry>
     <entry lang="zh-hk" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">請輸入外層加密卷的密碼（您將在該加密卷中創建隱藏加密卷）。\n\n在單擊“下一步”後，VeraCrypt 會嘗試載入此加密卷。一旦加密卷被載入，將進行簇狀圖掃描來確定連續的自由空間大小（如果有的話），此空間的尾部與加密卷尾部一致。該區域將提供給隱藏加密卷並因此會限制它的最大可能大小。簇狀圖掃描是必要的，這可以確保外層卷的資料不會被隱藏卷覆蓋。</entry>
-    <entry lang="zh-hk" key="PASSWORD_HIDDENVOL_HOST_HELP">\n請選擇外層加密卷的密碼。在您被攻擊者強迫說出啟動驗證密碼的情況下，這個密碼可以告訴攻擊者。\n\n重要：您為外層加密卷選擇的密碼必須不同於隱藏加密卷的密碼。\n\n說明：密碼的最大長度為 64 個字元。</entry>
+    <entry lang="zh-hk" key="PASSWORD_HIDDENVOL_HOST_HELP">\n請選擇外層加密卷的密碼。在您被攻擊者強迫說出啟動驗證密碼的情況下，這個密碼可以告訴攻擊者。\n\n重要：您為外層加密卷選擇的密碼必須不同於隱藏加密卷的密碼。\n\n說明：密碼的最大長度為 128 個字元。</entry>
     <entry lang="zh-hk" key="PASSWORD_SYSENC_OUTERVOL_HELP">請選擇外層加密卷的密碼。在您被攻擊者強迫說出系統分區後面的第一個分區（外層加密卷和包含隱形作業系統的隱藏加密卷均位於這個分區）密碼的情況下，這個密碼可以告訴這些攻擊者。而隱藏加密卷和隱形作業系統仍然是安全的。需要注意的是，外層加密卷的密碼並不是迷惑作業系統的密碼。\n\n重要：您為迷惑作業系統選擇的密碼必須不同於隱藏加密卷的密碼（也就是隱形作業系統的密碼）。</entry>
     <entry lang="zh-hk" key="PASSWORD_HIDVOL_HOST_TITLE">外層加密卷密碼</entry>
     <entry lang="zh-hk" key="PASSWORD_HIDVOL_TITLE">隱藏加密卷密碼</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="zh-hk" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="zh-hk" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="zh-hk" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="zh-hk" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="zh-hk" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="zh-hk" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="zh-hk" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="zh-hk" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1421,12 +1421,23 @@
     <entry lang="zh-hk" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="zh-hk" key="IDT_BENCHMARK">基準測試:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">

Translations/Language.zh-tw.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.23">
+  <localization prog-version= "1.24-Update4">
     <language langid="zh-tw" name="繁體中文" en-name="Chinese (Taiwan)" version="0.1.0" translators="Barney Li, Simon Ma, ChangMing Hsu" />
     <font lang="zh-tw" class="normal" size="12" face="MingLiU" />
     <font lang="zh-tw" class="bold" size="15" face="MingLiU" />
@@ -10,7 +10,7 @@
     <entry lang="zh-tw" key="IDC_ALL_USERS">為所有使用者安裝(&amp;F)</entry>
     <entry lang="zh-tw" key="IDC_BROWSE">瀏覽(&amp;B)...</entry>
     <entry lang="zh-tw" key="IDC_DESKTOP_ICON">在桌面新增 VeraCrypt 圖示(&amp;D)</entry>
-    <entry lang="en" key="IDC_DONATE">Donate now...</entry>
+    <entry lang="zh-tw" key="IDC_DONATE">立即贊助...</entry>
     <entry lang="zh-tw" key="IDC_FILE_TYPE">副檔名 '.hc' 的檔案關聯到 VeraCrypt(&amp;E)</entry>
     <entry lang="zh-tw" key="IDC_OPEN_CONTAINING_FOLDER">完成後開啟目標資料夾(&amp;O)</entry>
     <entry lang="zh-tw" key="IDC_PROG_GROUP">建立 VeraCrypt 的開始功能表項目(&amp;S)</entry>
@@ -27,14 +27,14 @@
     <entry lang="zh-tw" key="IDC_ABORT_BUTTON">中止</entry>
     <entry lang="en" key="IDC_BENCHMARK">&amp;Benchmark</entry>
     <entry lang="zh-tw" key="IDC_CIPHER_TEST">測試(&amp;T)</entry>
-    <entry lang="en" key="IDC_DEVICE_TRANSFORM_MODE_FORMAT">Create encrypted volume and format it</entry>
+    <entry lang="zh-tw" key="IDC_DEVICE_TRANSFORM_MODE_FORMAT">創建加密卷並對其進行格式化</entry>
     <entry lang="en" key="IDC_DEVICE_TRANSFORM_MODE_INPLACE">Encrypt partition in place</entry>
     <entry lang="zh-tw" key="IDC_DISPLAY_KEYS">顯示產生的金匙(其成分)</entry>
     <entry lang="zh-tw" key="IDC_DISPLAY_POOL_CONTENTS">顯示集區內容</entry>
     <entry lang="zh-tw" key="IDC_DOWNLOAD_CD_BURN_SOFTWARE">下載 CD/DVD 燒錄軟體</entry>
-    <entry lang="en" key="IDC_FILE_CONTAINER">Create an encrypted file container</entry>
-    <entry lang="en" key="IDC_GB">&amp;GB</entry>
-    <entry lang="en" key="IDC_TB">&amp;TB</entry>
+    <entry lang="zh-tw" key="IDC_FILE_CONTAINER">創建加密檔案容器</entry>
+    <entry lang="zh-tw" key="IDC_GB">&amp;GB</entry>
+    <entry lang="zh-tw" key="IDC_TB">&amp;TB</entry>
     <entry lang="zh-tw" key="IDC_HIDDEN_SYSENC_INFO_LINK">更多訊息</entry>
     <entry lang="zh-tw" key="IDC_HIDDEN_VOL">建立隱藏的 VeraCrypt 加密區(&amp;D) </entry>
     <entry lang="zh-tw" key="IDC_HIDDEN_VOL_HELP">更多隱藏加密區的訊息</entry>
@@ -47,35 +47,35 @@
     <entry lang="zh-tw" key="IDC_KEY_FILES">金鑰檔案(&amp;K)...</entry>
     <entry lang="zh-tw" key="IDC_LINK_HASH_INFO">關於雜湊演算法的更多資訊</entry>
     <entry lang="zh-tw" key="IDC_LINK_MORE_INFO_ABOUT_CIPHER">更多訊息</entry>
-    <entry lang="en" key="IDC_LINK_PIM_INFO">Information on PIM</entry>
+    <entry lang="zh-tw" key="IDC_LINK_PIM_INFO">有關PIM的信息</entry>
     <entry lang="zh-tw" key="IDC_MB">MB(&amp;M)</entry>
     <entry lang="zh-tw" key="IDC_MORE_INFO_ON_CONTAINERS">更多訊息</entry>
     <entry lang="zh-tw" key="IDC_MORE_INFO_ON_SYS_ENCRYPTION">關於系統磁區加密的更多訊息</entry>
     <entry lang="zh-tw" key="IDC_MORE_INFO_SYS_ENCRYPTION">更多訊息</entry>
     <entry lang="zh-tw" key="IDC_MULTI_BOOT">多重開機</entry>
-    <entry lang="en" key="IDC_NONSYS_DEVICE">Encrypt a non-system partition/drive</entry>
+    <entry lang="zh-tw" key="IDC_NONSYS_DEVICE">加密非系統分區/驅動器</entry>
     <entry lang="zh-tw" key="IDC_NO_HISTORY">不保留歷史記錄(&amp;S)</entry>
     <entry lang="zh-tw" key="IDC_OPEN_OUTER_VOLUME">打開外層加密區</entry>
     <entry lang="zh-tw" key="IDC_PAUSE">暫停(&amp;P)</entry>
-    <entry lang="en" key="IDC_PIM_ENABLE">Use P&amp;IM</entry>
-    <entry lang="en" key="IDC_NEW_PIM_ENABLE">Use PIM</entry>
+    <entry lang="zh-tw" key="IDC_PIM_ENABLE">使用 P&amp;IM</entry>
+    <entry lang="zh-tw" key="IDC_NEW_PIM_ENABLE">使用 PIM</entry>
     <entry lang="zh-tw" key="IDC_QUICKFORMAT">快速格式化</entry>
     <entry lang="zh-tw" key="IDC_SHOW_PASSWORD">顯示密碼(&amp;D)</entry>
     <entry lang="zh-tw" key="IDC_SHOW_PASSWORD_SINGLE">顯示密碼(&amp;A)</entry>
-    <entry lang="en" key="IDC_SHOW_PIM">&amp;Display PIM</entry>
+    <entry lang="zh-tw" key="IDC_SHOW_PIM">顯示PIM(&amp;D)</entry>
     <entry lang="zh-tw" key="IDC_SINGLE_BOOT">單一系統開機</entry>
     <entry lang="zh-tw" key="IDC_STD_VOL">標準 VeraCrypt 加密區</entry>
-    <entry lang="en" key="IDC_SYSENC_HIDDEN">Hi&amp;dden</entry>
+    <entry lang="zh-tw" key="IDC_SYSENC_HIDDEN">隱藏(&amp;D)</entry>
     <entry lang="zh-tw" key="IDC_SYSENC_NORMAL">一般</entry>
     <entry lang="zh-tw" key="IDC_SYS_DEVICE">加密系統分割區或者整個系統所在磁碟機</entry>
     <entry lang="zh-tw" key="IDC_SYS_PARTITION">加密 Windows 系統分割區</entry>
     <entry lang="zh-tw" key="IDC_WHOLE_SYS_DRIVE">加密整個磁碟機</entry>
     <entry lang="zh-tw" key="IDD_VOL_CREATION_WIZARD_DLG">VeraCrypt 加密區建立精靈</entry>
     <entry lang="zh-tw" key="IDT_CLUSTER">叢集 </entry>
-    <entry lang="zh-tw" key="IDT_COLLECTING_RANDOM_DATA_NOTE">重要：請在此視窗內僅可能的隨機移動滑鼠。移動時間越長越好。這將極為增強金鑰的加密強度。然後點 '下一步' 繼續。</entry>
+    <entry lang="zh-tw" key="IDT_COLLECTING_RANDOM_DATA_NOTE">重要：請在此視窗內盡可能的隨機移動滑鼠。移動時間越長越好。這將極為增強金鑰的加密強度。然後點 '下一步' 繼續。</entry>
     <entry lang="zh-tw" key="IDT_CONFIRM">確定(&amp;C)：</entry>
     <entry lang="zh-tw" key="IDT_DONE">完成</entry>
-    <entry lang="en" key="IDT_DRIVE_LETTER">Drive letter:</entry>
+    <entry lang="zh-tw" key="IDT_DRIVE_LETTER">磁碟機代號：</entry>
     <entry lang="zh-tw" key="IDT_ENCRYPTION_ALGO">加密演算法</entry>
     <entry lang="zh-tw" key="IDT_FILESYSTEM">檔案系統 </entry>
     <entry lang="zh-tw" key="IDT_FILE_CONTAINER">在檔案內建立虛擬加密磁碟。推薦給經驗不足的使用者使用。</entry>
@@ -129,14 +129,14 @@
     <entry lang="en" key="IDC_FAVORITE_MOUNT_ON_LOGON">Mount selected volume upon log&amp;on</entry>
     <entry lang="en" key="IDC_FAVORITE_MOUNT_READONLY">Mount selected volume as read-o&amp;nly</entry>
     <entry lang="en" key="IDC_FAVORITE_MOUNT_REMOVABLE">Mount selected volume as remo&amp;vable medium</entry>
-    <entry lang="en" key="IDC_FAVORITE_MOVE_DOWN">Move &amp;Down</entry>
-    <entry lang="en" key="IDC_FAVORITE_MOVE_UP">Move &amp;Up</entry>
+    <entry lang="zh-tw" key="IDC_FAVORITE_MOVE_DOWN">向下移動(&amp;D)</entry>
+    <entry lang="zh-tw" key="IDC_FAVORITE_MOVE_UP">向上移動(&amp;U)</entry>
     <entry lang="en" key="IDC_FAVORITE_OPEN_EXPLORER_WIN_ON_MOUNT">Open &amp;Explorer window for selected volume when successfully mounted</entry>
     <entry lang="zh-tw" key="IDC_FAVORITE_REMOVE">移除(&amp;R)</entry>
     <entry lang="en" key="IDC_FAVORITE_USE_LABEL_IN_EXPLORER">Use favorite label as Explorer drive label</entry>
     <entry lang="en" key="IDC_FAV_VOL_OPTIONS_GLOBAL_SETTINGS_BOX">Global Settings</entry>
     <entry lang="en" key="IDC_HK_DISMOUNT_BALLOON_TOOLTIP">Display balloon tooltip after successful hot-key dismount</entry>
-    <entry lang="en" key="IDC_HK_DISMOUNT_PLAY_SOUND">Play system notification sound after successful hot-key dismount</entry>
+    <entry lang="zh-tw" key="IDC_HK_DISMOUNT_PLAY_SOUND">使用熱鍵卸載成功時，撥放系統通知音效。</entry>
     <entry lang="zh-tw" key="IDC_HK_MOD_ALT">Alt</entry>
     <entry lang="en" key="IDC_HK_MOD_CTRL">Ctrl</entry>
     <entry lang="zh-tw" key="IDC_HK_MOD_SHIFT">Shift</entry>
@@ -144,16 +144,16 @@
     <entry lang="zh-tw" key="IDC_HOTKEY_ASSIGN">指定</entry>
     <entry lang="zh-tw" key="IDC_HOTKEY_REMOVE">移除</entry>
     <entry lang="zh-tw" key="IDC_KEYFILES">金鑰檔案...</entry>
-    <entry lang="en" key="IDC_LIMIT_ENC_THREAD_POOL">Do not use the following number of processors for encryption/decryption:</entry>
+    <entry lang="zh-tw" key="IDC_LIMIT_ENC_THREAD_POOL">請勿使用以下數量的處理器進行加密/解密：</entry>
     <entry lang="zh-tw" key="IDC_MORE_INFO_ON_HW_ACCELERATION">更多訊息</entry>
     <entry lang="zh-tw" key="IDC_MORE_INFO_ON_THREAD_BASED_PARALLELIZATION">更多訊息</entry>
-    <entry lang="en" key="IDC_MORE_SETTINGS">More Settings...</entry>
+    <entry lang="zh-tw" key="IDC_MORE_SETTINGS">更多設定...</entry>
     <entry lang="zh-tw" key="IDC_MOUNTALL">自動掛載磁碟機(&amp;A)</entry>
     <entry lang="zh-tw" key="IDC_MOUNT_OPTIONS">掛載選項(&amp;A)...</entry>
     <entry lang="zh-tw" key="IDC_MOUNT_READONLY">以唯讀模式掛載加密區(&amp;O)</entry>
     <entry lang="zh-tw" key="IDC_NEW_KEYFILES">金鑰檔案...</entry>
-    <entry lang="en" key="IDC_OLD_PIM_HELP">(Empty or 0 for default iterations)</entry>
-    <entry lang="en" key="IDC_PIM_HELP">(Empty or 0 for default iterations)</entry>
+    <entry lang="zh-tw" key="IDC_OLD_PIM_HELP">(空或0表示預設選代)</entry>
+    <entry lang="zh-tw" key="IDC_PIM_HELP">(空或0表示預設選代)</entry>
     <entry lang="zh-tw" key="IDC_PREF_BKG_TASK_ENABLE">啟用</entry>
     <entry lang="zh-tw" key="IDC_PREF_CACHE_PASSWORDS">在驅動記憶體中快取密碼</entry>
     <entry lang="zh-tw" key="IDC_PREF_DISMOUNT_INACTIVE">自動卸載加密區，在無資料讀寫活動以下時間後</entry>
@@ -163,24 +163,24 @@
     <entry lang="zh-tw" key="IDC_PREF_DISMOUNT_SCREENSAVER">螢幕保護裝置啟動時</entry>
     <entry lang="zh-tw" key="IDC_PREF_FORCE_AUTO_DISMOUNT">強制自動卸載，無論加密區是否有使用中的檔案或目錄</entry>
     <entry lang="zh-tw" key="IDC_PREF_LOGON_MOUNT_DEVICES">掛載所有磁碟機類型 VeraCrypt 加密區</entry>
-    <entry lang="en" key="IDC_PREF_LOGON_START">Start VeraCrypt Background Task</entry>
+    <entry lang="zh-tw" key="IDC_PREF_LOGON_START">啟動VeraCrypt後台任務</entry>
     <entry lang="zh-tw" key="IDC_PREF_MOUNT_READONLY">以唯讀模式掛載加密區</entry>
     <entry lang="zh-tw" key="IDC_PREF_MOUNT_REMOVABLE">以卸除式媒體模式掛載加密區</entry>
     <entry lang="zh-tw" key="IDC_PREF_OPEN_EXPLORER">為成功掛載的加密區打開瀏覽器視窗</entry>
     <entry lang="en" key="IDC_PREF_TEMP_CACHE_ON_MULTIPLE_MOUNT">Temporarily cache password during "Mount Favorite Volumes" operations</entry>
-    <entry lang="en" key="IDC_PREF_USE_DIFF_TRAY_ICON_IF_VOL_MOUNTED">Use a different taskbar icon when there are mounted volumes</entry>
+    <entry lang="zh-tw" key="IDC_PREF_USE_DIFF_TRAY_ICON_IF_VOL_MOUNTED">掛載卷時使用不同的任務欄圖標</entry>
     <entry lang="zh-tw" key="IDC_PREF_WIPE_CACHE_ON_AUTODISMOUNT">自動卸載時清除快取的密碼</entry>
     <entry lang="zh-tw" key="IDC_PREF_WIPE_CACHE_ON_EXIT">結束時清除快取的密碼</entry>
-    <entry lang="en" key="IDC_PRESERVE_TIMESTAMPS">Preserve modification timestamp of file containers</entry>
+    <entry lang="zh-tw" key="IDC_PRESERVE_TIMESTAMPS">保留檔案容器的修改時間戳記</entry>
     <entry lang="zh-tw" key="IDC_RESET_HOTKEYS">重設</entry>
     <entry lang="zh-tw" key="IDC_SELECT_DEVICE">選擇磁碟機(&amp;E)...</entry>
     <entry lang="zh-tw" key="IDC_SELECT_FILE">選擇檔案(&amp;F)...</entry>
-    <entry lang="en" key="IDC_SELECT_PKCS11_MODULE">Select &amp;Library...</entry>
+    <entry lang="zh-tw" key="IDC_SELECT_PKCS11_MODULE">選擇函式庫 (&amp;L)...</entry>
     <entry lang="zh-tw" key="IDC_SHOW_PASSWORD_CHPWD_NEW">顯示密碼</entry>
     <entry lang="zh-tw" key="IDC_SHOW_PASSWORD_CHPWD_ORI">顯示密碼</entry>
     <entry lang="zh-tw" key="IDC_TRAVEL_OPEN_EXPLORER">為掛載的加密區打開檔案總管視窗(&amp;E)</entry>
     <entry lang="zh-tw" key="IDC_TRAV_CACHE_PASSWORDS">在動態記憶體中快取密碼(&amp;C)</entry>
-    <entry lang="en" key="IDC_TRUECRYPT_MODE">TrueCrypt Mode</entry>
+    <entry lang="zh-tw" key="IDC_TRUECRYPT_MODE">TrueCrypt 模式</entry>
     <entry lang="zh-tw" key="IDC_UNMOUNTALL">全部卸載(&amp;S)</entry>
     <entry lang="zh-tw" key="IDC_VOLUME_PROPERTIES">加密區內容(&amp;V)...</entry>
     <entry lang="zh-tw" key="IDC_VOLUME_TOOLS">加密區工具(&amp;T)...</entry>
@@ -191,11 +191,11 @@
     <entry lang="zh-tw" key="IDD_MOUNT_DLG">VeraCrypt</entry>
     <entry lang="zh-tw" key="IDD_PASSWORDCHANGE_DLG">修改密碼和金鑰檔</entry>
     <entry lang="zh-tw" key="IDD_PASSWORD_DLG">輸入 VeraCrypt 加密區密碼</entry>
-    <entry lang="en" key="IDD_PERFORMANCE_SETTINGS">VeraCrypt - Performance and Driver Options</entry>
+    <entry lang="zh-tw" key="IDD_PERFORMANCE_SETTINGS">VeraCrypt - 性能和驅動程式選項</entry>
     <entry lang="zh-tw" key="IDD_PREFERENCES_DLG">VeraCrypt - 偏好設定</entry>
-    <entry lang="en" key="IDD_SYSENC_SETTINGS">VeraCrypt - System Encryption Settings</entry>
-    <entry lang="en" key="IDD_TOKEN_PREFERENCES">VeraCrypt - Security Token Preferences</entry>
-    <entry lang="zh-tw" key="IDD_TRAVELER_DLG">VeraCrypt 攜帶版磁碟設定</entry>
+    <entry lang="zh-tw" key="IDD_SYSENC_SETTINGS">VeraCrypt - 系統加密設定</entry>
+    <entry lang="zh-tw" key="IDD_TOKEN_PREFERENCES">VeraCrypt - 安全令牌選項</entry>
+    <entry lang="zh-tw" key="IDD_TRAVELER_DLG">VeraCrypt 可攜式磁碟設定</entry>
     <entry lang="zh-tw" key="IDD_VOLUME_PROPERTIES">VeraCrypt 加密區內容</entry>
     <entry lang="zh-tw" key="IDM_ABOUT">關於 VeraCrypt...</entry>
     <entry lang="zh-tw" key="IDM_ADD_REMOVE_VOL_KEYFILES">新增或移除金鑰檔案...</entry>
@@ -214,10 +214,10 @@
     <entry lang="en" key="IDM_CREATE_HIDDEN_OS">Create Hidden Operating System...</entry>
     <entry lang="zh-tw" key="IDM_CREATE_RESCUE_DISK">建立救援磁碟...</entry>
     <entry lang="zh-tw" key="IDM_CREATE_VOLUME">建立新的加密區...</entry>
-    <entry lang="en" key="IDM_DECRYPT_NONSYS_VOL">Permanently Decrypt...</entry>
+    <entry lang="zh-tw" key="IDM_DECRYPT_NONSYS_VOL">永久解密...</entry>
     <entry lang="zh-tw" key="IDM_DEFAULT_KEYFILES">預設金鑰檔案...</entry>
-    <entry lang="en" key="IDM_DEFAULT_MOUNT_PARAMETERS">Default Mount Parameters...</entry>
-    <entry lang="en" key="IDM_DONATE">Donate now...</entry>
+    <entry lang="zh-tw" key="IDM_DEFAULT_MOUNT_PARAMETERS">預設掛載參數...</entry>
+    <entry lang="zh-tw" key="IDM_DONATE">立即贊助...</entry>
     <entry lang="zh-tw" key="IDM_ENCRYPT_SYSTEM_DEVICE">加密系統分割區/磁碟機...</entry>
     <entry lang="zh-tw" key="IDM_FAQ">常見問題(線上)</entry>
     <entry lang="zh-tw" key="IDM_HELP">使用者指南</entry>
@@ -226,7 +226,7 @@
     <entry lang="zh-tw" key="IDM_KEYFILE_GENERATOR">金鑰檔案產生器</entry>
     <entry lang="zh-tw" key="IDM_LANGUAGE">語言選擇...</entry>
     <entry lang="zh-tw" key="IDM_LICENSE">法律聲明</entry>
-    <entry lang="en" key="IDM_MANAGE_TOKEN_KEYFILES">Manage Security Token Keyfiles...</entry>
+    <entry lang="zh-tw" key="IDM_MANAGE_TOKEN_KEYFILES">管理安全令牌密鑰檔案...</entry>
     <entry lang="zh-tw" key="IDM_MOUNTALL">自動掛載全部磁碟機類型的加密區</entry>
     <entry lang="zh-tw" key="IDM_MOUNT_FAVORITE_VOLUMES">掛載我的最愛加密區</entry>
     <entry lang="zh-tw" key="IDM_MOUNT_SYSENC_PART_WITHOUT_PBA">以沒有啟動前置認證的方式掛載(&amp;A)...</entry>
@@ -237,7 +237,7 @@
     <entry lang="zh-tw" key="IDM_ONLINE_TUTORIAL">新手上路(線上)</entry>
     <entry lang="en" key="IDM_ORGANIZE_FAVORITES">Organize Favorite Volumes...</entry>
     <entry lang="en" key="IDM_ORGANIZE_SYSTEM_FAVORITES">Organize System Favorite Volumes...</entry>
-    <entry lang="en" key="IDM_PERFORMANCE_SETTINGS">Performance/Driver Configuration</entry>
+    <entry lang="en" key="IDM_PERFORMANCE_SETTINGS">性能和驅動程式選項</entry>
     <entry lang="zh-tw" key="IDM_PERMANENTLY_DECRYPT_SYS">永久解密系統分割區/磁碟機...</entry>
     <entry lang="zh-tw" key="IDM_PREFERENCES">偏好設定...</entry>
     <entry lang="zh-tw" key="IDM_REFRESH_DRIVE_LETTERS">重新整理磁碟機代號</entry>
@@ -247,18 +247,18 @@
     <entry lang="zh-tw" key="IDM_SELECT_DEVICE">選擇磁碟機...</entry>
     <entry lang="zh-tw" key="IDM_SELECT_FILE">選擇檔案...</entry>
     <entry lang="zh-tw" key="IDM_SYSENC_RESUME">恢復被中斷的操作</entry>
-    <entry lang="en" key="IDM_SYSENC_SETTINGS">System Encryption...</entry>
-    <entry lang="en" key="IDM_SYSTEM_ENCRYPTION_STATUS">Properties...</entry>
-    <entry lang="en" key="IDM_SYS_ENC_SETTINGS">Settings...</entry>
+    <entry lang="zh-tw" key="IDM_SYSENC_SETTINGS">系統加密...</entry>
+    <entry lang="zh-tw" key="IDM_SYSTEM_ENCRYPTION_STATUS">屬性...</entry>
+    <entry lang="zh-tw" key="IDM_SYS_ENC_SETTINGS">設置...</entry>
     <entry lang="en" key="IDM_SYS_FAVORITES_SETTINGS">System Favorite Volumes...</entry>
     <entry lang="zh-tw" key="IDM_TC_DOWNLOADS">下載(線上)</entry>
     <entry lang="zh-tw" key="IDM_TEST_VECTORS">向量測試...</entry>
-    <entry lang="en" key="IDM_TOKEN_PREFERENCES">Security Tokens...</entry>
-    <entry lang="zh-tw" key="IDM_TRAVELER">攜帶版磁碟設定...</entry>
+    <entry lang="zh-tw" key="IDM_TOKEN_PREFERENCES">安全令牌...</entry>
+    <entry lang="zh-tw" key="IDM_TRAVELER">可攜式磁碟設定...</entry>
     <entry lang="zh-tw" key="IDM_UNMOUNTALL">卸載全部掛載的加密區</entry>
     <entry lang="zh-tw" key="IDM_UNMOUNT_VOLUME">卸載選擇的加密區</entry>
     <entry lang="zh-tw" key="IDM_VERIFY_RESCUE_DISK">驗證救援磁碟</entry>
-    <entry lang="en" key="IDM_VERIFY_RESCUE_DISK_ISO">Verify Rescue Disk Image</entry>
+    <entry lang="zh-tw" key="IDM_VERIFY_RESCUE_DISK_ISO">驗證救援磁盤映像</entry>
     <entry lang="zh-tw" key="IDM_VERSION_HISTORY">版本歷史(線上)</entry>
     <entry lang="en" key="IDM_VOLUME_EXPANDER">Volume Expander</entry>
     <entry lang="zh-tw" key="IDM_VOLUME_PROPERTIES">加密區內容</entry>
@@ -266,7 +266,7 @@
     <entry lang="zh-tw" key="IDM_WEBSITE">官方網站(線上)</entry>
     <entry lang="zh-tw" key="IDM_WIPE_CACHE">清除快取的密碼</entry>
     <entry lang="zh-tw" key="IDOK">確定</entry>
-    <entry lang="en" key="IDT_ACCELERATION_OPTIONS">Hardware Acceleration</entry>
+    <entry lang="zh-tw" key="IDT_ACCELERATION_OPTIONS">硬體加速</entry>
     <entry lang="zh-tw" key="IDT_ASSIGN_HOTKEY">捷徑</entry>
     <entry lang="zh-tw" key="IDT_AUTORUN">自動執行組態(autorun.inf)</entry>
     <entry lang="zh-tw" key="IDT_AUTO_DISMOUNT">自動卸載</entry>
@@ -277,7 +277,7 @@
     <entry lang="en" key="IDT_CUSTOM_BOOT_LOADER_MESSAGE">Display this custom message in the pre-boot authentication screen (24 characters maximum):</entry>
     <entry lang="zh-tw" key="IDT_DEFAULT_MOUNT_OPTIONS">預設掛載選項</entry>
     <entry lang="zh-tw" key="IDT_DISMOUNT_ACTION">快速鍵設定</entry>
-    <entry lang="en" key="IDT_DRIVER_OPTIONS">Driver Configuration</entry>
+    <entry lang="zh-tw" key="IDT_DRIVER_OPTIONS">驅動配置</entry>
     <entry lang="en" key="IDC_ENABLE_EXTENDED_IOCTL_SUPPORT">Enable extended disk control codes support</entry>
     <entry lang="en" key="IDT_FAVORITE_LABEL">Label of selected favorite volume:</entry>
     <entry lang="zh-tw" key="IDT_FILE_SETTINGS">檔案設定</entry>
@@ -289,37 +289,37 @@
     <entry lang="zh-tw" key="IDT_MOUNT_SETTINGS">掛載設定</entry>
     <entry lang="zh-tw" key="IDT_NEW">新密碼</entry>
     <entry lang="zh-tw" key="IDT_NEW_PASSWORD">密碼：</entry>
-    <entry lang="en" key="IDT_PARALLELIZATION_OPTIONS">Thread-Based Parallelization</entry>
+    <entry lang="zh-tw" key="IDT_PARALLELIZATION_OPTIONS">基於執行緒的並行化</entry>
     <entry lang="en" key="IDT_PKCS11_LIB_PATH">PKCS #11 Library Path</entry>
     <entry lang="zh-tw" key="IDT_PKCS5_PRF">PKCS-5 PRF：</entry>
-    <entry lang="en" key="IDT_NEW_PKCS5_PRF">PKCS-5 PRF:</entry>
+    <entry lang="zh-tw" key="IDT_NEW_PKCS5_PRF">PKCS-5 PRF：</entry>
     <entry lang="zh-tw" key="IDT_PW_CACHE_OPTIONS">密碼快取</entry>
-    <entry lang="en" key="IDT_SECURITY_OPTIONS">Security Options</entry>
+    <entry lang="zh-tw" key="IDT_SECURITY_OPTIONS">安全選項</entry>
     <entry lang="zh-tw" key="IDT_TASKBAR_ICON">VeraCrypt 背景工作</entry>
-    <entry lang="zh-tw" key="IDT_TRAVELER_MOUNT">要掛載的 VeraCrypt 加密區(相對於攜帶版磁碟的根目錄)：</entry>
-    <entry lang="zh-tw" key="IDT_TRAVEL_INSERTION">在插入攜帶版磁碟時： </entry>
-    <entry lang="zh-tw" key="IDT_TRAVEL_ROOT">建立攜帶版磁碟檔案於(攜帶版磁碟根目錄)：</entry>
+    <entry lang="zh-tw" key="IDT_TRAVELER_MOUNT">要掛載的 VeraCrypt 加密區(相對於可攜式磁碟的根目錄)：</entry>
+    <entry lang="zh-tw" key="IDT_TRAVEL_INSERTION">在插入可攜式磁碟時： </entry>
+    <entry lang="zh-tw" key="IDT_TRAVEL_ROOT">建立可攜式磁碟檔案於(可攜式磁碟根目錄)：</entry>
     <entry lang="zh-tw" key="IDT_VOLUME">加密區</entry>
     <entry lang="zh-tw" key="IDT_WINDOWS_RELATED_SETTING">Windows</entry>
     <entry lang="zh-tw" key="IDC_ADD_KEYFILE_PATH">新增路徑(&amp;P)...</entry>
     <entry lang="zh-tw" key="IDC_AUTO">全部自動測試(&amp;A)</entry>
-    <entry lang="en" key="IDC_CONTINUE">&amp;Continue</entry>
+    <entry lang="zh-tw" key="IDC_CONTINUE">繼續(&amp;C)</entry>
     <entry lang="zh-tw" key="IDC_DECRYPT">解密(&amp;D)</entry>
-    <entry lang="en" key="IDC_DELETE">&amp;Delete</entry>
+    <entry lang="zh-tw" key="IDC_DELETE">刪除(&amp;D)</entry>
     <entry lang="zh-tw" key="IDC_ENCRYPT">加密(&amp;E)</entry>
-    <entry lang="en" key="IDC_EXPORT">&amp;Export...</entry>
+    <entry lang="zh-tw" key="IDC_EXPORT">匯出(&amp;E)...</entry>
     <entry lang="zh-tw" key="IDC_GENERATE_AND_SAVE_KEYFILE">產生並保存金鑰檔案...</entry>
     <entry lang="zh-tw" key="IDC_GENERATE_KEYFILE">產生隨機金鑰檔(&amp;G)...</entry>
     <entry lang="zh-tw" key="IDC_GET_LANG_PACKS">下載語言檔案</entry>
-    <entry lang="en" key="IDC_HW_AES_LABEL_LINK">Hardware-accelerated AES:</entry>
+    <entry lang="en" key="IDC_HW_AES_LABEL_LINK">AES硬體加速：</entry>
     <entry lang="en" key="IDC_IMPORT_KEYFILE">&amp;Import Keyfile to Token...</entry>
-    <entry lang="en" key="IDC_KEYADD">Add &amp;Files...</entry>
+    <entry lang="zh-tw" key="IDC_KEYADD">加入檔案(&amp;F)...</entry>
     <entry lang="zh-tw" key="IDC_KEYFILES_ENABLE_HIDVOL_PROT">使用金鑰檔(&amp;A)</entry>
     <entry lang="zh-tw" key="IDC_KEYFILES_HIDVOL_PROT">金鑰檔案(&amp;K)...</entry>
     <entry lang="zh-tw" key="IDC_KEYREMOVE">移除(&amp;R)</entry>
     <entry lang="zh-tw" key="IDC_KEYREMOVEALL">全部移除(&amp;A)</entry>
     <entry lang="zh-tw" key="IDC_LINK_HIDVOL_PROTECTION_INFO">什麼是隱藏加密區保護？</entry>
-    <entry lang="en" key="IDC_LINK_KEYFILES_INFO">More information on keyfiles</entry>
+    <entry lang="zh-tw" key="IDC_LINK_KEYFILES_INFO">有關密鑰檔案的更多信息</entry>
     <entry lang="zh-tw" key="IDC_MOUNT_REMOVABLE">掛載加密區為卸除式媒體(&amp;M)</entry>
     <entry lang="zh-tw" key="IDC_MOUNT_SYSENC_PART_WITHOUT_PBA">在使用系統加密而沒有啟動前置認證的情況下掛載分割區(&amp;U)</entry>
     <entry lang="en" key="IDC_PARALLELIZATION_LABEL_LINK">Parallelization:</entry>
@@ -328,8 +328,8 @@
     <entry lang="zh-tw" key="IDC_PROTECT_HIDDEN_VOL">向外層加密區寫入資料時保護隱藏加密區(&amp;P)</entry>
     <entry lang="zh-tw" key="IDC_RESET">重設(&amp;R)</entry>
     <entry lang="zh-tw" key="IDC_SHOW_PASSWORD_MO">顯示密碼(&amp;A)</entry>
-    <entry lang="en" key="IDC_TOKEN_FILES_ADD">Add &amp;Token Files...</entry>
-    <entry lang="en" key="IDC_USE_EMBEDDED_HEADER_BAK">Use backup header embedded in &amp;volume if available</entry>
+    <entry lang="zh-tw" key="IDC_TOKEN_FILES_ADD">加入令牌檔案(&amp;T)...</entry>
+    <entry lang="zh-tw" key="IDC_USE_EMBEDDED_HEADER_BAK">如果可用，請使用嵌入卷中的備份標頭(&amp;V)</entry>
     <entry lang="zh-tw" key="IDC_XTS_MODE_ENABLED">XTS 模式</entry>
     <entry lang="zh-tw" key="IDD_ABOUT_DLG">關於 VeraCrypt</entry>
     <entry lang="zh-tw" key="IDD_BENCHMARK_DLG">VeraCrypt - 加密演算法基準測試</entry>
@@ -339,11 +339,11 @@
     <entry lang="zh-tw" key="IDD_KEYFILE_GENERATOR">VeraCrypt - 金鑰檔案產生器</entry>
     <entry lang="zh-tw" key="IDD_LANGUAGE">VeraCrypt - 語言</entry>
     <entry lang="zh-tw" key="IDD_MOUNT_OPTIONS">VeraCrypt - 掛載選項</entry>
-    <entry lang="en" key="IDD_NEW_TOKEN_KEYFILE">New Security Token Keyfile Properties</entry>
+    <entry lang="zh-tw" key="IDD_NEW_TOKEN_KEYFILE">新安全令牌密鑰檔案屬性</entry>
     <entry lang="en" key="IDD_RANDOM_POOL_ENRICHMENT">VeraCrypt - Random Pool Enrichment</entry>
     <entry lang="zh-tw" key="IDD_RAWDEVICES_DLG">選擇一個磁碟分割區或磁碟機</entry>
     <entry lang="en" key="IDD_STATIC_MODELESS_WAIT_DLG">VeraCrypt</entry>
-    <entry lang="en" key="IDD_TOKEN_KEYFILES">Security Token Keyfiles</entry>
+    <entry lang="zh-tw" key="IDD_TOKEN_KEYFILES">安全令牌密鑰檔案</entry>
     <entry lang="en" key="IDD_TOKEN_PASSWORD">Security token password/PIN required</entry>
     <entry lang="zh-tw" key="IDT_ACTIVE_LANG_PACK">目前語言檔案</entry>
     <entry lang="zh-tw" key="IDT_BOX_BENCHMARK_INFO">速度由 CPU 負載和存放磁碟機特性決定。\n\n這些測試在記憶體中進行。</entry>
@@ -355,32 +355,32 @@
     <entry lang="zh-tw" key="IDT_KEYFILE_GENERATOR_NOTE">重要：請在此視窗內僅可能的隨機移動滑鼠，移動時間越長越好。。這將極為增強金鑰的加密強度。</entry>
     <entry lang="zh-tw" key="IDT_KEYFILE_WARNING">警告：如果您遺失了金鑰檔或者金鑰檔的前 1024 KB 位元組已改變，將不可能再掛載使用該金鑰的加密區！</entry>
     <entry lang="zh-tw" key="IDT_KEY_UNIT">位元</entry>
-    <entry lang="en" key="IDT_NUMBER_KEYFILES">Number of keyfiles:</entry>
-    <entry lang="en" key="IDT_KEYFILES_SIZE">Keyfiles size (in Bytes):</entry>
+    <entry lang="zh-tw" key="IDT_NUMBER_KEYFILES">密鑰檔案數量：</entry>
+    <entry lang="zh-tw" key="IDT_KEYFILES_SIZE">密鑰檔案大小(位元組)：</entry>
     <entry lang="en" key="IDT_KEYFILES_BASE_NAME">Keyfiles base name:</entry>
     <entry lang="zh-tw" key="IDT_LANGPACK_AUTHORS">翻譯人員：</entry>
     <entry lang="zh-tw" key="IDT_PLAINTEXT">純文字密碼長度：</entry>
     <entry lang="zh-tw" key="IDT_PLAINTEXT_SIZE_UNIT">位元</entry>
     <entry lang="zh-tw" key="IDT_POOL_CONTENTS">目前集區內容</entry>
     <entry lang="zh-tw" key="IDT_PRF">混合 PRF：</entry>
-    <entry lang="en" key="IDT_RANDOM_POOL_ENRICHMENT_NOTE">IMPORTANT: Move your mouse as randomly as possible within this window. The longer you move it, the better. This significantly increases security. When done, click 'Continue'.</entry>
+    <entry lang="zh-tw" key="IDT_RANDOM_POOL_ENRICHMENT_NOTE">重要訊息：在此窗口中隨機移動鼠標。移動的時間越長越好。這將顯著提高了安全性。完成後，點擊 "繼續"。</entry>
     <entry lang="zh-tw" key="IDT_SECONDARY_KEY">次金鑰(十六進位)</entry>
-    <entry lang="en" key="IDT_SECURITY_TOKEN">Security token:</entry>
+    <entry lang="zh-tw" key="IDT_SECURITY_TOKEN">安全令牌：</entry>
     <entry lang="zh-tw" key="IDT_SORT_METHOD">排序方式：</entry>
-    <entry lang="en" key="IDT_STATIC_MODELESS_WAIT_DLG_INFO">Please wait. This process may take a long time...</entry>
-    <entry lang="en" key="IDT_STATIC_MODAL_WAIT_DLG_INFO">Please wait...\nThis process may take a long time and VeraCrypt may seem unresponsive.</entry>
+    <entry lang="zh-tw" key="IDT_STATIC_MODELESS_WAIT_DLG_INFO">請耐心等待。這個過程可能需要很長時間...</entry>
+    <entry lang="zh-tw" key="IDT_STATIC_MODAL_WAIT_DLG_INFO">請稍候...\n這個過程可能需要很長時間，VeraCrypt可能會沒有反應。</entry>
     <entry lang="zh-tw" key="IDT_TEST_BLOCK_NUMBER">區塊數值：</entry>
     <entry lang="zh-tw" key="IDT_TEST_CIPHERTEXT">密文(十六進位)</entry>
     <entry lang="zh-tw" key="IDT_TEST_DATA_UNIT_NUMBER">資料單位數值(64 位元十六進位，資料單位大小是 512 位元組)</entry>
     <entry lang="zh-tw" key="IDT_TEST_KEY">金鑰(十六進位)</entry>
     <entry lang="zh-tw" key="IDT_TEST_PLAINTEXT">明文(十六進位)</entry>
-    <entry lang="en" key="IDT_TOKEN_KEYFILE_NAME">Keyfile name:</entry>
+    <entry lang="zh-tw" key="IDT_TOKEN_KEYFILE_NAME">密鑰檔案名稱：</entry>
     <entry lang="zh-tw" key="IDT_XTS_MODE">XTS 模式</entry>
     <entry lang="zh-tw" key="MENU_SYSTEM_ENCRYPTION">系統(&amp;Y)</entry>
     <entry lang="zh-tw" key="MENU_VOLUMES">加密區(&amp;V)</entry>
     <entry lang="en" key="MENU_FAVORITES">Favor&amp;ites</entry>
     <entry lang="zh-tw" key="MENU_TOOLS">工具(&amp;O)</entry>
-    <entry lang="en" key="MENU_SETTINGS">Settin&amp;gs</entry>
+    <entry lang="zh-tw" key="MENU_SETTINGS">設定(&amp;G)</entry>
     <entry lang="zh-tw" key="MENU_HELP">說明(&amp;H)</entry>
     <entry lang="zh-tw" key="MENU_WEBSITE">   首頁(線上)(&amp;P)   </entry>
     <entry lang="zh-tw" key="ABOUTBOX">關於(&amp;A)...</entry>
@@ -393,8 +393,8 @@
     <entry lang="zh-tw" key="ADMIN_PRIVILEGES_WARN_NTFS">請注意您必需以一個具有管理員權限的帳戶登錄如果要把加密區格式化為 NTFS 檔案系統。\n\n如果沒有管理員權限，您可以格式化加密區為 FAT 檔案系統。</entry>
     <entry lang="zh-tw" key="AES_HELP">FIPS 認可的加密演算法(Rijndael，發表於 1998)可能被美國聯邦部門和機構用來對特定資訊進行極機密等級保護。256 位元金鑰，128 位元區塊，14 次離散迴圈(AES-256)。操作模式為 XTS。</entry>
     <entry lang="zh-tw" key="ALREADY_MOUNTED">加密區已掛載。</entry>
-    <entry lang="zh-tw" key="ERR_SELF_TESTS_FAILED">小心：在內置自動檢測時，至少一個加密或雜湊演算法失敗了！\n\n此 VeraCrypt 安裝可能已損壞。</entry>
-    <entry lang="zh-tw" key="ERR_NOT_ENOUGH_RANDOM_DATA">小心：在亂數產生器集區中的資料不足，無法提供要求數量的亂數資料。\n\n您不應繼續進行。請從説明功能表選擇 "報告錯誤" 來報告此軟體錯誤。</entry>
+    <entry lang="zh-tw" key="ERR_SELF_TESTS_FAILED">警告：在內置自動檢測時，至少一個加密或雜湊演算法失敗了！\n\n此 VeraCrypt 安裝可能已損壞。</entry>
+    <entry lang="zh-tw" key="ERR_NOT_ENOUGH_RANDOM_DATA">警告：在亂數產生器集區中的資料不足，無法提供要求數量的亂數資料。\n\n您不應繼續進行。請從説明功能表選擇 "報告錯誤" 來報告此軟體錯誤。</entry>
     <entry lang="en" key="ERR_HARDWARE_ERROR">The drive is damaged (there is a physical defect on it) or a cable is damaged, or the memory is malfunctioning.\n\nPlease note that this is a problem with your hardware, not with VeraCrypt. Therefore, please do NOT report this as a bug/problem in VeraCrypt and please do NOT ask for help with this in the VeraCrypt Forums. Please contact your computer vendor's technical support team for assistance. Thank you.\n\nNote: If the error occurs repeatedly at the same place, it is very likely caused by a bad disk block, which should be possible to correct using third-party software (note that, in many cases, the 'chkdsk /r' command cannot correct it because it works only at the filesystem level; in some cases, the 'chkdsk' tool cannot even detect it).</entry>
     <entry lang="en" key="DEVICE_NOT_READY_ERROR">If you are accessing a drive for removable media, please make sure that a medium is inserted in the drive. The drive/medium may also be damaged (there may be a physical defect on it) or a cable may be damaged/disconnected.</entry>
     <entry lang="en" key="WHOLE_DRIVE_ENCRYPTION_PREVENTED_BY_DRIVERS">Your system appears to be using custom chipset drivers containing a bug that prevents encryption of the whole system drive.\n\nPlease try updating or uninstalling any custom (non-Microsoft) chipset drivers before proceeding. If it does not help, try encrypting the system partition only.</entry>
@@ -416,13 +416,13 @@
     <entry lang="zh-tw" key="DEVICE_FREE_BYTES">%s 的大小為 %.2f 位元組</entry>
     <entry lang="zh-tw" key="DEVICE_FREE_KB">%s 的大小為 %.2f KB</entry>
     <entry lang="zh-tw" key="DEVICE_FREE_MB">%s 的大小為 %.2f MB</entry>
-    <entry lang="en" key="DEVICE_FREE_GB">Size of %s is %.2f GB</entry>
-    <entry lang="en" key="DEVICE_FREE_TB">Size of %s is %.2f TB</entry>
-    <entry lang="en" key="DEVICE_FREE_PB">Size of %s is %.2f PB</entry>
+    <entry lang="zh-tw" key="DEVICE_FREE_GB">%s 的大小為 %.2f GB</entry>
+    <entry lang="zh-tw" key="DEVICE_FREE_TB">%s 的大小為 %.2f TB</entry>
+    <entry lang="zh-tw" key="DEVICE_FREE_PB">%s 的大小為 %.2f PB</entry>
     <entry lang="zh-tw" key="DEVICE_IN_USE_FORMAT">警告：磁碟機/磁碟分割區正被系統或應用程式使用。格式化該磁碟機/磁碟分割區可能導致資料遺失或系統不穩定。\n\n繼續進行格式化嗎？</entry>
-    <entry lang="en" key="DEVICE_IN_USE_INPLACE_ENC">Warning: The partition is in use by the operating system or applications. You should close any applications that might be using the partition (including antivirus software).\n\nContinue?</entry>
+    <entry lang="zh-tw" key="DEVICE_IN_USE_INPLACE_ENC">警告：作業系統或應用程序正在使用該分區。 您應該關閉可能正在使用該分區的任何應用程序(包括防病毒軟件)。\n\n繼續？</entry>
     <entry lang="zh-tw" key="FORMAT_CANT_DISMOUNT_FILESYS">錯誤：該磁碟機/磁碟分割區包含不能被卸載的檔案系統。此檔案系統可能被作業系統所使用。格式化此磁碟機/磁碟分割區很可能會導致資料損壞或者是系統不穩定。\n\n要解決此問題，我們建議您先刪除該磁碟分割區之後在不格式化的情況下重新建立這個磁碟分割區。要達成此目的，請遵照下面步驟： 1) 在 "我的電腦" 的圖示上按右鍵，然後選擇 "管理"，顯示 "電腦管理" 視窗。 2) 在 "電腦管理" 視窗，選擇 "磁碟管理"。 3) 右鍵單點要加密的磁碟分割區，您可以選擇 "刪除磁碟分割"，"刪除磁區" 或者是 "刪除邏輯磁碟"。 4) 如果 Windows 提示要重新啟動，點 "是" 重新啟動。然後在第 5 個步驟中重複第 1 和第 2 步。 5) 右鍵單點未分配/可用空間並選擇 "新建磁碟分割"，"新建磁區" 或者 "新建邏輯磁碟"。 6) 在 "新建磁碟分割精靈" 或者 "新建磁區精靈" 視窗中，在 "格式化磁碟分割區" 標題的對話方塊中，選擇 "不格式化此磁碟分割區" 或者是 "不格式化此磁區"。在此精靈裡面，點 "下一步" 然後點 "完成"。 7) 要注意您現在在 VeraCrypt 中選擇的磁碟機路徑可能是錯誤的，因此，退出並重新啟動 VeraCrypt 加密區建立精靈(如果正在執行)。 8) 嘗試重新加密該設備/磁碟分割區。\n\n如果 VeraCrypt 仍然顯示加密失敗，您可以考慮建立檔案類型的容器。</entry>
-    <entry lang="en" key="INPLACE_ENC_CANT_LOCK_OR_DISMOUNT_FILESYS">Error: The filesystem could not be locked and/or dismounted. It may be in use by the operating system or applications (for example, antivirus software). Encrypting the partition might cause data corruption and system instability.\n\nPlease close any applications that might be using the filesystem (including antivirus software) and try again. If it does not help, please follow the below steps.</entry>
+    <entry lang="zh-tw" key="INPLACE_ENC_CANT_LOCK_OR_DISMOUNT_FILESYS">錯誤：無法鎖定和/或卸載檔案系統。 它可能被操作系統或應用程序(例如，防病毒軟體)使用。 加密分區可能會導致資料損壞和系統不穩定。\n\n請關閉可能正在使用檔案系統的任何應用程序(包括防病毒軟體)，然後重試。 如果沒有幫助，請按照以下步驟進行操作。</entry>
     <entry lang="zh-tw" key="DEVICE_IN_USE_INFO">警告：一些掛載的磁碟機/磁碟分割區正在使用中！\n\n忽略這些可能導致非期望的結果，包括系統不穩定。\n\n我們強烈建議您關閉所有可能正在使用此磁碟機/磁碟分割區的應用程式。</entry>
     <entry lang="zh-tw" key="DEVICE_PARTITIONS_ERR">選定的磁碟機包含磁碟分割區。\n\n格式化該磁碟機可能會導致系統不穩定或資料遺失。您可以選擇該磁碟機的某個磁碟分割區，或者刪除該磁碟機的所有磁碟分割區，以確保 VeraCrypt 對其安全格式化。</entry>
     <entry lang="en" key="DEVICE_PARTITIONS_ERR_W_INPLACE_ENC_NOTE">The selected non-system device contains partitions.\n\nEncrypted device-hosted VeraCrypt volumes can be created within devices that do not contain any partitions (including hard disks and solid-state drives). A device that contains partitions can be entirely encrypted in place (using a single master key) only if it is the drive where Windows is installed and from which it boots.\n\nIf you want to encrypt the selected non-system device using a single master key, you will need to remove all partitions on the device first to enable VeraCrypt to format it safely (formatting a device that contains partitions might cause system instability and/or data corruption). Alternatively, you can encrypt each partition on the drive individually (each partition will be encrypted using a different master key).\n\nNote: If you want to remove all partitions from a GPT disk, you may need to convert it to a MBR disk (using e.g. the Computer Management tool) in order to remove hidden partitions.</entry>
@@ -438,14 +438,14 @@
     <entry lang="en" key="CANNOT_RESIZE_FILESYS">Error: Cannot shrink the filesystem (the filesystem needs to be shrunk to make space for the volume header and backup header).\n\nPossible causes and solutions:\n\n- Not enough free space on the volume. Please make sure no other application is writing to the filesystem.\n\n- Corrupted file system. Try to check it and fix any errors (right-click the corresponding drive letter in the 'Computer' list, then select Properties &gt; Tools &gt; 'Check Now', make sure the option 'Automatically fix file system errors' is enabled and click Start).\n\nIf the above steps do not help, please follow the below steps.</entry>
     <entry lang="en" key="NOT_ENOUGH_FREE_FILESYS_SPACE_FOR_SHRINK">Error: There is not enough free space on the volume and so the filesystem cannot be shrunk (the filesystem needs to be shrunk to make space for the volume header and backup header).\n\nPlease delete any redundant files and empty the Recycle Bin so as to free at least 256 KB of space and then try again. Note that due to a Windows issue, the amount of free space reported by the Windows Explorer may be incorrect until the operating system is restarted. If restarting the system does not help, the file system may be corrupted. Try to check it and fix any errors (right-click the corresponding drive letter in the 'Computer' list, then select Properties &gt; Tools &gt; 'Check Now', make sure the option 'Automatically fix file system errors' is enabled and click Start).\n\nIf the above steps do not help, please follow the below steps.</entry>
     <entry lang="zh-tw" key="DISK_FREE_BYTES">磁碟機 %s 上的可用空間為 %.2f 位元組。</entry>
-    <entry lang="en" key="DISK_FREE_KB">Free space on drive %s is %.2f KB</entry>
-    <entry lang="en" key="DISK_FREE_MB">Free space on drive %s is %.2f MB</entry>
-    <entry lang="en" key="DISK_FREE_GB">Free space on drive %s is %.2f GB</entry>
-    <entry lang="en" key="DISK_FREE_TB">Free space on drive %s is %.2f TB</entry>
-    <entry lang="en" key="DISK_FREE_PB">Free space on drive %s is %.2f PB</entry>
+    <entry lang="zh-tw" key="DISK_FREE_KB">磁碟機 %s 上的可用空間為 %.2f KB</entry>
+    <entry lang="zh-tw" key="DISK_FREE_MB">磁碟機 %s 上的可用空間為 %.2f MB</entry>
+    <entry lang="zh-tw" key="DISK_FREE_GB">磁碟機 %s 上的可用空間為 %.2f GB</entry>
+    <entry lang="zh-tw" key="DISK_FREE_TB">磁碟機 %s 上的可用空間為 %.2f TB</entry>
+    <entry lang="zh-tw" key="DISK_FREE_PB">磁碟機 %s 上的可用空間為 %.2f PB</entry>
     <entry lang="zh-tw" key="DRIVELETTERS">無法得到可用的磁碟機代號。</entry>
     <entry lang="zh-tw" key="DRIVER_NOT_FOUND">錯誤：找不到 VeraCrypt 磁碟機。\n\n請將檔案 "veracrypt.sys" 和 "veracrypt-x64.sys" 複製到 VeraCrypt 主應用程式(VeraCrypt.exe)所在的目錄。</entry>
-    <entry lang="en" key="DRIVER_VERSION">Error: An incompatible version of the VeraCrypt driver is currently running.\n\nIf you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already installed, you must uninstall it first (or upgrade it using the VeraCrypt installer). To uninstall it, follow these steps: On Windows Vista or later, select 'Start Menu' > Computer > 'Uninstall or change a program' > VeraCrypt > Uninstall; on Windows XP, select 'Start Menu' > Settings > 'Control Panel' > 'Add Or Remove Programs' > VeraCrypt > Remove.\n\nSimilarly, if you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already running in portable mode, you must restart the system first and then run only this new version.</entry>
+    <entry lang="en" key="DRIVER_VERSION">Error: An incompatible version of the VeraCrypt driver is currently running.\n\nIf you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already installed, you must uninstall it first (or upgrade it using the VeraCrypt installer). To uninstall it, follow these steps: On Windows Vista or later, select 'Start Menu' &gt; Computer &gt; 'Uninstall or change a program' &gt; VeraCrypt &gt; Uninstall; on Windows XP, select 'Start Menu' &gt; Settings &gt; 'Control Panel' &gt; 'Add Or Remove Programs' &gt; VeraCrypt &gt; Remove.\n\nSimilarly, if you are trying to run VeraCrypt in portable mode (i.e. without installing it) and a different version of VeraCrypt is already running in portable mode, you must restart the system first and then run only this new version.</entry>
     <entry lang="zh-tw" key="ERR_CIPHER_INIT_FAILURE">錯誤：加密初始化失敗。</entry>
     <entry lang="zh-tw" key="ERR_CIPHER_INIT_WEAK_KEY">錯誤：檢測到弱強度金鑰！金鑰將被廢棄。請重試。</entry>
     <entry lang="en" key="EXCEPTION_REPORT">A critical error has occurred and VeraCrypt must be terminated. If this is caused by a bug in VeraCrypt, we would like to fix it. To help us, you can send us an automatically generated error report containing the following items:\n\n- Program version\n- Operating system version\n- Type of CPU\n- VeraCrypt component name\n- Checksum of VeraCrypt executable\n- Symbolic name of dialog window\n- Error category\n- Error address\n- VeraCrypt call stack\n\nIf you select 'Yes', the following URL (which contains the entire error report) will be opened in your default Internet browser.\n\n%hs\n\nDo you want to send us the above error report?</entry>
@@ -460,9 +460,9 @@
     <entry lang="en" key="SYSTEM_CRASH_ANALYSIS_INFO">After you click OK, VeraCrypt will analyze the system crash. This may take up to several minutes.</entry>
     <entry lang="en" key="DEBUGGER_NOT_FOUND">Please make sure the environment variable 'PATH' includes the path to 'kd.exe' (Kernel Debugger).</entry>
     <entry lang="en" key="SYSTEM_CRASH_NO_VERACRYPT">It appears that VeraCrypt most likely did not cause the system crash. There are many potential reasons why the system could have crashed (for example, a failing hardware component, a bug in a device driver, etc.)</entry>
-    <entry lang="en" key="SYSTEM_CRASH_UPDATE_DRIVER">Results of the analysis indicate that updating the following driver might solve this issue: </entry>
-    <entry lang="en" key="SYSTEM_CRASH_REPORT">To help us determine whether there is a bug in VeraCrypt, you can send us an automatically generated error report containing the following items:\n- Program version\n- Operating system version\n- Type of CPU\n- Error category\n- Driver name and version\n- System call stack\n\nIf you select 'Yes', the following URL (which contains the entire error report) will be opened in your default Internet browser.</entry>
-    <entry lang="en" key="ASK_SEND_ERROR_REPORT">Do you want to send us the above error report?</entry>
+    <entry lang="zh-tw" key="SYSTEM_CRASH_UPDATE_DRIVER">分析結果表明更新以下驅動程式可能會解決此問題：</entry>
+    <entry lang="zh-tw" key="SYSTEM_CRASH_REPORT">為了幫助我們確定VeraCrypt是否存在錯誤，您可以向我們發送包含以下項目的自動生成的錯誤報告：\n-程序版本\n-操作系統版本 \n-CPU類型\n-錯誤類別\n-驅動程式名稱和版本\n-系統調用堆棧\n\n如果選擇“是”，將在您的網址中打開以下URL(包含整個錯誤報告) 預設的Internet瀏覽器。</entry>
+    <entry lang="zh-tw" key="ASK_SEND_ERROR_REPORT">您要將上述錯誤報告發送給我們嗎？</entry>
     <entry lang="zh-tw" key="ENCRYPT">加密(&amp;E)</entry>
     <entry lang="zh-tw" key="DECRYPT">解密(&amp;D)</entry>
     <entry lang="zh-tw" key="PERMANENTLY_DECRYPT">永久解密(&amp;p)</entry>
@@ -478,10 +478,10 @@
     <entry lang="zh-tw" key="FILE_IN_USE_FAILED">錯誤：無法掛載加密區。外層加密區或磁碟機正在使用中。嘗試不使用獨佔權限的掛載也同樣會失敗。</entry>
     <entry lang="zh-tw" key="FILE_OPEN_FAILED">檔案無法被打開。</entry>
     <entry lang="zh-tw" key="FILE_TITLE">加密區位置</entry>
-    <entry lang="en" key="FILESYS_PAGE_TITLE">Large Files</entry>
-    <entry lang="en" key="FILESYS_PAGE_HELP_QUESTION">Do you intend to store files larger than 4 GB in this VeraCrypt volume?</entry>
+    <entry lang="zh-tw" key="FILESYS_PAGE_TITLE">大檔案</entry>
+    <entry lang="zh-tw" key="FILESYS_PAGE_HELP_QUESTION">您是否打算在此VeraCrypt卷中儲存大於4 GB的檔案?</entry>
     <entry lang="en" key="FILESYS_PAGE_HELP_EXPLANATION">Depending on your choice above, VeraCrypt will choose a suitable default file system for the VeraCrypt volume (you will be able to select a file system in the next step).</entry>
-    <entry lang="en" key="FILESYS_PAGE_HELP_EXPLANATION_HIDVOL">As you are creating an outer volume, you should consider choosing 'No'. If you choose 'Yes', the default filesystem will be NTFS, which is not as suitable for outer volumes as FAT (for example, the maximum possible size of the hidden volume will be significantly greater if the outer volume is formatted as FAT). Normally, FAT is the default for both hidden and normal volumes (so FAT volumes are not suspicious). However, if the user indicates intent to store files larger than 4 GB (which the FAT file system does not allow), then FAT is not the default.</entry>
+    <entry lang="en" key="FILESYS_PAGE_HELP_EXPLANATION_HIDVOL">As you are creating an outer volume, you should consider choosing 'No'. If you choose 'Yes', the default filesystem will be NTFS, which is not as suitable for outer volumes as FAT/exFAT (for example, the maximum possible size of the hidden volume will be significantly greater if the outer volume is formatted as FAT/exFAT). Normally, FAT is the default for both hidden and normal volumes (so FAT volumes are not suspicious). However, if the user indicates intent to store files larger than 4 GB (which the FAT file system does not allow), then FAT is not the default.</entry>
     <entry lang="en" key="FILESYS_PAGE_HELP_EXPLANATION_HIDVOL_CONFIRM">Are you sure you want to choose 'Yes'?</entry>
     <entry lang="zh-tw" key="DEVICE_TRANSFORM_MODE_PAGE_TITLE">加密區建立模式</entry>
     <entry lang="en" key="DEVICE_TRANSFORM_MODE_PAGE_FORMAT_HELP">This is the fastest way to create a partition-hosted or device-hosted VeraCrypt volume (in-place encryption, which is the other option, is slower because content of each sector has to be first read, encrypted, and then written). Any data currently stored on the selected partition/device will be lost (the data will NOT be encrypted; it will be overwritten with random data). If you want to encrypt existing data on a partition, choose the other option.</entry>
@@ -489,7 +489,7 @@
     <entry lang="en" key="NOTE_BEGINNING">Note: </entry>
     <entry lang="zh-tw" key="RESUME">恢復(&amp;R)</entry>
     <entry lang="zh-tw" key="DEFER">延緩(&amp;D)</entry>
-    <entry lang="en" key="START">&amp;Start</entry>
+    <entry lang="zh-tw" key="START">開始(&amp;S)</entry>
     <entry lang="en" key="CONTINUE">&amp;Continue</entry>
     <entry lang="zh-tw" key="FORMAT">格式化(&amp;F)</entry>
     <entry lang="en" key="WIPE">&amp;Wipe</entry>
@@ -499,7 +499,7 @@
     <entry lang="en" key="WIPE_FINISHED">The content of the partition/device has been successfully erased.</entry>
     <entry lang="en" key="WIPE_FINISHED_DECOY_SYSTEM_PARTITION">The content of the partition where the original system (of which the hidden system is a clone) resided has been successfully erased.</entry>
     <entry lang="en" key="DECOY_OS_VERSION_WARNING">Please make sure the version of Windows you are going to install (on the wiped partition) is the same as the version of Windows you are currently running. This is required due to the fact that both systems will share a common boot partition.</entry>
-    <entry lang="en" key="SYSTEM_ENCRYPTION_FINISHED">The system partition/drive has been successfully encrypted.\n\nNote: If there are non-system VeraCrypt volumes that you need to have mounted automatically every time Windows starts, you can set it up by mounting each of them and selecting 'Favorites' > 'Add Mounted Volume to System Favorites').</entry>
+    <entry lang="en" key="SYSTEM_ENCRYPTION_FINISHED">The system partition/drive has been successfully encrypted.\n\nNote: If there are non-system VeraCrypt volumes that you need to have mounted automatically every time Windows starts, you can set it up by mounting each of them and selecting 'Favorites' &gt; 'Add Mounted Volume to System Favorites').</entry>
     <entry lang="zh-tw" key="SYSTEM_DECRYPTION_FINISHED">該系統割分割區/磁碟機已經被成功解密。</entry>
     <entry lang="zh-tw" key="FORMAT_FINISHED_HELP">\n\nVeraCrypt 加密區已建立並準備就緒。要建立另外的 VeraCrypt 加密區，請點 '下一步'，否則請點 '結束'。</entry>
     <entry lang="en" key="SYSENC_HIDDEN_VOL_FORMAT_FINISHED_HELP">\n\nThe hidden VeraCrypt volume has been successfully created (the hidden operating system will reside within this hidden volume).\n\nClick Next to continue.</entry>
@@ -595,7 +595,7 @@
     <entry lang="zh-tw" key="OUTOFMEMORY">記憶體不足</entry>
     <entry lang="en" key="FORMAT_DEVICE_FOR_ADVANCED_ONLY">IMPORTANT: We strongly recommend that inexperienced users create a VeraCrypt file container on the selected device/partition, instead of attempting to encrypt the entire device/partition.\n\nWhen you create a VeraCrypt file container (as opposed to encrypting a device or partition) there is, for example, no risk of destroying a large number of files. Note that a VeraCrypt file container (even though it contains a virtual encrypted disk) is actually just like any normal file. For more information, see the chapter Beginner's Tutorial in the VeraCrypt User Guide.\n\nAre you sure you want to encrypt the entire device/partition?</entry>
     <entry lang="zh-tw" key="OVERWRITEPROMPT">警告：加密區 '%s' 已存在！\n\n重要：VeraCrypt 並不會加密這個檔案，而是會刪除這個檔案。您確定要刪除這個檔案並用一個新的 VeraCrypt 容器來取代它嗎？</entry>
-    <entry lang="zh-tw" key="OVERWRITEPROMPT_DEVICE">小心：目前儲存在 %s '%s'%s 上的所有資料將會被刪除且遺失(它們將不會被加密)！\n\n您確定要繼續格式化嗎？</entry>
+    <entry lang="zh-tw" key="OVERWRITEPROMPT_DEVICE">警告：目前儲存在 %s '%s'%s 上的所有資料將會被刪除且遺失(它們將不會被加密)！\n\n您確定要繼續格式化嗎？</entry>
     <entry lang="en" key="NONSYS_INPLACE_ENC_CONFIRM">WARNING: You will not be able to mount the volume or access any files stored on it until it has been fully encrypted.\n\nAre you sure you want to start encrypting the selected %s '%s'%s?</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_CONFIRM">WARNING: You will not be able to mount the volume or access any files stored on it until it has been fully decrypted.\n\nAre you sure you want to start decrypting the selected %s '%s'%s?</entry>
     <entry lang="en" key="NONSYS_INPLACE_ENC_CONFIRM_BACKUP">WARNING: Please note that if power supply is suddenly interrupted while encrypting/decrypting existing data in place, or when the operating system crashes due to a software error or hardware malfunction while VeraCrypt is encrypting/decrypting existing data in place, portions of the data will be corrupted or lost. Therefore, before you start encrypting/decrypting, please make sure that you have backup copies of the files you want to encrypt/decrypt.\n\nDo you have such a backup?</entry>
@@ -615,15 +615,15 @@
     <entry lang="zh-tw" key="KEYFILE_CHANGED">金鑰檔已成功新增/移除。</entry>
     <entry lang="en" key="KEYFILE_EXPORTED">Keyfile exported.</entry>
     <entry lang="zh-tw" key="PKCS5_PRF_CHANGED">首金鑰推導演算法已成功設定。</entry>
-    <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system volume where you want to resume the process of in-place encryption.\n\n\nRemark: After you click Next, VeraCrypt will attempt to find all non-system volumes where the process of encryption has been interrupted and where the VeraCrypt volume header can be decrypted using the supplied password and/or keyfile(s). If more than one such volume is found, you will need to select one of them in the next step.</entry>
-    <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Please select one of the listed volumes. The list contains every accessible non-system volume where the process of encryption has been interrupted and whose header could be decrypted using the supplied password and/or keyfile(s).</entry>
+    <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system volume where you want to resume the process of in-place encryption/decryption.\n\nRemark: After you click Next, VeraCrypt will attempt to find all non-system volumes where the process of encryption/decryption has been interrupted and where the VeraCrypt volume header can be deciphered using the supplied password and/or keyfile(s). If more than one such volume is found, you will need to select one of them in the next step.</entry>
+    <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP">Please select one of the listed volumes. The list contains each accessible non-system volume where the process of encryption/decryption has been interrupted and where the volume header was successfully deciphered using the supplied password and/or keyfile(s).</entry>
     <entry lang="en" key="NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP">Please enter the password and/or keyfile(s) for the non-system VeraCrypt volume that you want to decrypt.</entry>
-    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of 20 or more characters (the longer, the better). The maximum possible length is 128 characters.</entry>
     <entry lang="zh-tw" key="PASSWORD_HIDDENVOL_HELP">請為隱藏加密區選擇一個密碼。 </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_HELP">Please choose a password for the hidden operating system (i.e. for the hidden volume). </entry>
     <entry lang="en" key="PASSWORD_HIDDEN_OS_NOTE">IMPORTANT: The password that you choose for the hidden operating system in this step must be substantially different from the other two passwords (i.e. from the password for the outer volume and from the password for the decoy operating system).</entry>
     <entry lang="zh-tw" key="PASSWORD_HIDDENVOL_HOST_DIRECT_HELP">請輸入外層加密區的密碼(您將在該加密區中建立隱藏加密區)。\n\n在點 '下一步' 後，VeraCrypt 會嘗試掛載此加密區。一旦加密區被掛載，將進行叢集圖掃描來確定連續的可用空間大小(如果有的話)，此空間的結尾與加密區結尾一致。該區域將提供給隱藏加密區並因此會限制它的最大可能大小。叢集圖掃描是必要的，這可以確保外層加密區的資料不會被隱藏加密區複寫。</entry>
-    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 64 characters.</entry>
+    <entry lang="en" key="PASSWORD_HIDDENVOL_HOST_HELP">\nPlease choose a password for the outer volume. This will be the password that you will be able to reveal to an adversary if you are asked or forced to do so.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume.\n\nNote: The maximum possible password length is 128 characters.</entry>
     <entry lang="en" key="PASSWORD_SYSENC_OUTERVOL_HELP">Please choose a password for the outer volume. This will be the password you will be able to reveal to anyone forcing you to disclose the password for the first partition behind the system partition, where both the outer volume and the hidden volume (containing the hidden operating system) will reside. The existence of the hidden volume (and of the hidden operating system) will remain secret. Note that this password is not for the decoy operating system.\n\nIMPORTANT: The password must be substantially different from the one you will choose for the hidden volume (i.e. for the hidden operating system).</entry>
     <entry lang="zh-tw" key="PASSWORD_HIDVOL_HOST_TITLE">外層加密區密碼</entry>
     <entry lang="zh-tw" key="PASSWORD_HIDVOL_TITLE">隱藏加密區密碼</entry>
@@ -648,9 +648,9 @@
     <entry lang="en" key="PIM_SMALL_WARNING">You have chosen a Personal Iterations Multiplier (PIM) that is smaller than the default VeraCrypt value. Please note that if your password is not strong enough, this could lead to a weaker security.\n\nDo you confirm that you are using a strong password?</entry>
     <entry lang="en" key="PIM_SYSENC_TOO_BIG">Personal Iterations Multiplier (PIM) maximum value for system encryption is 65535.</entry>
     <entry lang="en" key="PIM_TITLE">Volume PIM</entry>
-    <entry lang="en" key="HIDDEN_FILES_PRESENT_IN_KEYFILE_PATH">\n\nWARNING: Hidden file(s) have been found in a keyfile search path. Such hidden files cannot be used as keyfiles. If you need to use them as keyfiles, remove their 'Hidden' attribute (right-click each of them, select 'Properties', uncheck 'Hidden' and click OK). Note: Hidden files are visible only if the corresponding option is enabled (Computer > Organize > 'Folder and search options' > View).</entry>
+    <entry lang="en" key="HIDDEN_FILES_PRESENT_IN_KEYFILE_PATH">\n\nWARNING: Hidden file(s) have been found in a keyfile search path. Such hidden files cannot be used as keyfiles. If you need to use them as keyfiles, remove their 'Hidden' attribute (right-click each of them, select 'Properties', uncheck 'Hidden' and click OK). Note: Hidden files are visible only if the corresponding option is enabled (Computer &gt; Organize &gt; 'Folder and search options' &gt; View).</entry>
     <entry lang="en" key="HIDDEN_VOL_PROT_PASSWORD_US_KEYB_LAYOUT">If you are attempting to protect a hidden volume containing a hidden system, please make sure you are using the standard US keyboard layout when typing the password for the hidden volume. This is required due to the fact that the password needs to be typed in the pre-boot environment (before Windows starts) where non-US Windows keyboard layouts are not available.</entry>
-    <entry lang="en" key="FOUND_NO_PARTITION_W_DEFERRED_INPLACE_ENC">VeraCrypt has not found any volume where non-system encryption has been interrupted and where the volume header can be decrypted using the supplied password and/or keyfile(s).\n\nPlease make sure the password and/or keyfile(s) are correct and that the partition/volume is not being used by the system or applications (including antivirus software).</entry>
+    <entry lang="en" key="FOUND_NO_PARTITION_W_DEFERRED_INPLACE_ENC">VeraCrypt has not found any volume where the process of encryption/decryption of a non-system volume has been interrupted and where the volume header can be deciphered using the supplied password and/or keyfile(s).\n\nPlease make sure the password and/or keyfile(s) are correct and that the partition/volume is not being used by the system or applications (including antivirus software).</entry>
     <entry lang="en" key="SELECTED_PARTITION_ALREADY_INPLACE_ENC">The selected partition/device is already fully encrypted.\nHeader Flags = 0x%.8X</entry>
     <entry lang="en" key="SELECTED_PARTITION_NOT_INPLACE_ENC">The selected partition/device is not using in-place encryption.\nHeader Flags = 0x%.8X</entry>
     <entry lang="zh-tw" key="SYSENC_MOUNT_WITHOUT_PBA_NOTE">\n\n注意：如果您試圖掛載位於加密的系統磁碟機中的分割區而沒有啟動前置認證的話，或者是掛載作業系統沒有執行的加密的系統分割區，您可以經由選擇 "系統" &gt; "以沒有啟動前置認證的方式掛載" 來達到。</entry>
@@ -666,7 +666,7 @@
     <entry lang="en" key="SELECT_KEYFILE_GENERATION_DIRECTORY">Select a directory where to store the keyfiles.</entry>
     <entry lang="en" key="SELECTED_KEYFILE_IS_CONTAINER_FILE">The current container file was selected as a keyfile. It will be skipped.</entry>
     <entry lang="zh-tw" key="SERPENT_HELP">設計者為 Ross Anderson、Eli Biham、和 Lars Knudsen。發表於 1998 年。256 位金鑰，128 位元資料塊。操作模式為 XTS。Serpent 為與 AES 候選演算法中的一種。</entry>
-    <entry lang="en" key="SIZE_HELP">Please specify the size of the container you want to create.\n\nIf you create a dynamic (sparse-file) container, this parameter will specify its maximum possible size.\n\nNote that the minimum possible size of a FAT volume is 292 KB. The minimum possible size of an NTFS volume is 3792 KB.</entry>
+    <entry lang="en" key="SIZE_HELP">Please specify the size of the container you want to create.\n\nIf you create a dynamic (sparse-file) container, this parameter will specify its maximum possible size.\n\nNote that the minimum possible size of a FAT volume is 292 KB. The minimum possible size of an exFAT volume is 424 KB. The minimum possible size of an NTFS volume is 3792 KB. The minimum possible size of an ReFS volume is 642 MB.</entry>
     <entry lang="en" key="SIZE_HELP_HIDDEN_HOST_VOL">Please specify the size of the outer volume to be created (you will first create the outer volume and then a hidden volume within it). The minimum possible size of a volume within which a hidden volume is intended to be created is 340 KB.</entry>
     <entry lang="en" key="SIZE_HELP_HIDDEN_VOL">Please specify the size of the hidden volume to create. The minimum possible size of a hidden volume is 40 KB (or 3664 KB if it is formatted as NTFS). The maximum possible size you can specify for the hidden volume is displayed above.</entry>
     <entry lang="zh-tw" key="SIZE_HIDVOL_HOST_TITLE">外層加密區大小</entry>
@@ -676,7 +676,7 @@
     <entry lang="en" key="SIZE_PARTITION_HIDDEN_VOL_HELP">\n\nNote that the minimum possible size of a volume within which a hidden volume is intended to be created is 340 KB.</entry>
     <entry lang="zh-tw" key="SIZE_TITLE">加密區大小</entry>
     <entry lang="zh-tw" key="SPARSE_FILE">動態大小的</entry>
-    <entry lang="zh-tw" key="TESTS_FAILED">小心：自我檢測失敗！</entry>
+    <entry lang="zh-tw" key="TESTS_FAILED">警告：自我檢測失敗！</entry>
     <entry lang="zh-tw" key="TESTS_PASSED">全部演算法自我檢測通過</entry>
     <entry lang="zh-tw" key="TEST_INCORRECT_TEST_DATA_UNIT_SIZE">您提供的資料單位數值太長或太短。</entry>
     <entry lang="zh-tw" key="TEST_INCORRECT_SECONDARY_KEY_SIZE">您提供的次金鑰太長或太短。</entry>
@@ -687,7 +687,7 @@
     <entry lang="zh-tw" key="THREE_LAYER_CASCADE_HELP">在 XTS 模式的串聯操作中需要三個加密。每個區塊首先以 %s (%d 位元金鑰)加密，然後以 %s (%d 位元金鑰)加密，最後以 %s (%d 位金鑰)加密。每個加密均使用其各自的金鑰。所有的金鑰均各自獨立。</entry>
     <entry lang="en" key="AUTORUN_MAY_NOT_ALWAYS_WORK">Note that, depending on the operating system configuration, these auto-run and auto-mount features may work only when the traveler disk files are created on a non-writable CD/DVD-like medium. Also note that this is not a bug in VeraCrypt (it is a limitation of Windows).</entry>
     <entry lang="en" key="TRAVELER_DISK_CREATED">VeraCrypt traveler disk has been successfully created.\n\nNote that you need administrator privileges to run VeraCrypt in portable mode. Also note that, after examining the registry file, it may be possible to tell that VeraCrypt was run on a Windows system even if it is run in portable mode.</entry>
-    <entry lang="zh-tw" key="TC_TRAVELER_DISK">VeraCrypt 攜帶版磁碟</entry>
+    <entry lang="zh-tw" key="TC_TRAVELER_DISK">VeraCrypt 可攜式磁碟</entry>
     <entry lang="zh-tw" key="TWOFISH_HELP">設計者為 Bruce Schneie、John Kelsey、Doug Whiting、David Wagner、Chris Hall、和 Niels Ferguson。發表於 1998 年。256 位元金鑰，128 位元區塊。操作模式為 XTS。Twofish 為與 AES 候選演算法中的一種。</entry>
     <entry lang="zh-tw" key="MORE_INFO_ABOUT">關於 %s 的更多訊息</entry>
     <entry lang="zh-tw" key="UNKNOWN">未知</entry>
@@ -767,7 +767,7 @@
     <entry lang="en" key="INPLACE_ENC_CANT_ACCESS_OR_GET_INFO_ON_VOL">Error: Cannot access the volume and/or obtain information about the volume.\n\nMake sure that the selected volume exists, that it is not being used by the system or applications, that you have read/write permission for the volume, and that it is not write-protected.</entry>
     <entry lang="en" key="INPLACE_ENC_CANT_ACCESS_OR_GET_INFO_ON_VOL_ALT">Error: Cannot access the volume and/or obtain information about the volume. Make sure that the selected volume exists, that it is not being used by the system or applications, that you have read/write permission for the volume, and that it is not write-protected.\n\nIf the problem persists, it might help to follow the below steps.</entry>
     <entry lang="en" key="INPLACE_ENC_GENERIC_ERR_ALT_STEPS">An error prevented VeraCrypt from encrypting the partition. Please try fixing any previously reported problems and then try again. If the problems persist, it might help to follow the below steps.</entry>
-    <entry lang="en" key="INPLACE_ENC_GENERIC_ERR_RESUME">An error prevented VeraCrypt from resuming the process of encryption of the partition.\n\nPlease try fixing any previously reported problems and then try resuming the process again. Note that the volume cannot be mounted until it has been fully encrypted.</entry>
+    <entry lang="en" key="INPLACE_ENC_GENERIC_ERR_RESUME">An error prevented VeraCrypt from resuming the process of encryption/decryption of the partition/volume.\n\nPlease try fixing any previously reported problems and then try resuming the process again if possible. Note that the volume cannot be mounted until it has been fully encrypted or fully decrypted.</entry>
     <entry lang="en" key="INPLACE_DEC_GENERIC_ERR">An error prevented VeraCrypt from decrypting the volume. Please try fixing any previously reported problems and then try again if possible.</entry>
     <entry lang="zh-tw" key="CANT_DISMOUNT_OUTER_VOL">錯誤：無法卸載外層加密區！\n\n如果加密區中的檔案或資料夾被程式或系統使用，則該加密區無法被鎖定。\n\n請關閉任何可能使用加密區上檔案或目錄的程式，然後再選取 '重試'。</entry>
     <entry lang="zh-tw" key="CANT_GET_OUTER_VOL_INFO">錯誤：不能獲得外層加密區的訊息！ 加密區建立不能繼續。</entry>
@@ -793,14 +793,14 @@
     <entry lang="zh-tw" key="OUTER">外層</entry>
     <entry lang="zh-tw" key="NORMAL">一般</entry>
     <entry lang="zh-tw" key="SYSTEM_VOLUME_TYPE_ADJECTIVE">系統</entry>
-    <entry lang="en" key="TYPE_HIDDEN_SYSTEM_ADJECTIVE">Hidden (system)</entry>
+    <entry lang="zh-tw" key="TYPE_HIDDEN_SYSTEM_ADJECTIVE">隱藏 (系統)</entry>
     <entry lang="zh-tw" key="READ_ONLY">唯讀</entry>
     <entry lang="zh-tw" key="SYSTEM_DRIVE">系統磁碟機</entry>
     <entry lang="zh-tw" key="SYSTEM_DRIVE_ENCRYPTING">系統磁碟機(正在加密 - %.2f%% 已完成)</entry>
     <entry lang="zh-tw" key="SYSTEM_DRIVE_DECRYPTING">系統磁碟機(正在解密 - %.2f%% 已完成)</entry>
     <entry lang="zh-tw" key="SYSTEM_DRIVE_PARTIALLY_ENCRYPTED">系統磁碟機(%.2f%% 已加密)</entry>
     <entry lang="zh-tw" key="SYSTEM_PARTITION">系統分割區</entry>
-    <entry lang="en" key="HIDDEN_SYSTEM_PARTITION">Hidden system partition</entry>
+    <entry lang="zh-tw" key="HIDDEN_SYSTEM_PARTITION">隱藏的系統分割區</entry>
     <entry lang="zh-tw" key="SYSTEM_PARTITION_ENCRYPTING">系統分割區(正在加密 - %.2f%% 已完成)</entry>
     <entry lang="zh-tw" key="SYSTEM_PARTITION_DECRYPTING">系統分割區(正在解密 - %.2f%% 已完成))</entry>
     <entry lang="zh-tw" key="SYSTEM_PARTITION_PARTIALLY_ENCRYPTED">系統分割區(%.2f%% 已加密)</entry>
@@ -817,13 +817,13 @@
     <entry lang="zh-tw" key="VOLUME_HEADER_DATE">標頭資訊上次修改時間</entry>
     <entry lang="zh-tw" key="VOLUME_HEADER_DAYS"> (%I64d 天前)</entry>
     <entry lang="en" key="VOLUME_FORMAT_VERSION">Volume Format Version</entry>
-    <entry lang="en" key="BACKUP_HEADER">Embedded Backup Header</entry>
+    <entry lang="zh-tw" key="BACKUP_HEADER">嵌入備份標頭</entry>
     <entry lang="en" key="VC_BOOT_LOADER_VERSION">VeraCrypt Boot Loader Version</entry>
     <entry lang="zh-tw" key="FIRST_AVAILABLE">最初可用的</entry>
-    <entry lang="en" key="REMOVABLE_DISK">Removable Disk</entry>
+    <entry lang="zh-tw" key="REMOVABLE_DISK">可移除式磁碟</entry>
     <entry lang="zh-tw" key="HARDDISK">硬碟</entry>
     <entry lang="zh-tw" key="UNCHANGED">不改變</entry>
-    <entry lang="en" key="AUTODETECTION">Autodetection</entry>
+    <entry lang="zh-tw" key="AUTODETECTION">自動檢測</entry>
     <entry lang="zh-tw" key="SETUP_MODE_TITLE">精靈模式</entry>
     <entry lang="en" key="SETUP_MODE_INFO">Select one of the modes. If you are not sure which to select, use the default mode.</entry>
     <entry lang="en" key="SETUP_MODE_HELP_INSTALL">Select this option if you want to install VeraCrypt on this system.</entry>
@@ -833,13 +833,13 @@
     <entry lang="zh-tw" key="SETUP_OPTIONS_INFO">您可以在在這裡設定不同選項來控制安裝的過程。</entry>
     <entry lang="zh-tw" key="SETUP_PROGRESS_TITLE">正在安裝</entry>
     <entry lang="zh-tw" key="SETUP_PROGRESS_INFO">VeraCrypt 正在安裝請稍候。</entry>
-    <entry lang="en" key="SETUP_FINISHED_TITLE_DON">VeraCrypt has been successfully installed</entry>
-    <entry lang="en" key="SETUP_FINISHED_UPGRADE_TITLE_DON">VeraCrypt has been successfully upgraded</entry>
+    <entry lang="zh-tw" key="SETUP_FINISHED_TITLE_DON">VeraCrypt 已成功安裝</entry>
+    <entry lang="zh-tw" key="SETUP_FINISHED_UPGRADE_TITLE_DON">VeryCrypt 已成功升級</entry>
     <entry lang="en" key="SETUP_FINISHED_INFO_DON">Please consider making a donation. You can click Finish anytime to close the installer.</entry>
     <entry lang="zh-tw" key="EXTRACTION_OPTIONS_TITLE">解壓縮選項</entry>
     <entry lang="zh-tw" key="EXTRACTION_OPTIONS_INFO">您可以在這裡設定不同選項來控制解壓縮的過程。</entry>
     <entry lang="zh-tw" key="EXTRACTION_PROGRESS_INFO">正在解壓縮檔案請稍候。</entry>
-    <entry lang="en" key="EXTRACTION_FINISHED_TITLE_DON">Files successfully extracted</entry>
+    <entry lang="zh-tw" key="EXTRACTION_FINISHED_TITLE_DON">檔案已成功提取</entry>
     <entry lang="zh-tw" key="EXTRACTION_FINISHED_INFO">所有檔案已經被成功解壓縮到目標位置。</entry>
     <entry lang="zh-tw" key="AUTO_FOLDER_CREATION">如果指定的資料夾不存在，將會自動建立該資料夾。</entry>
     <entry lang="en" key="SETUP_UPGRADE_DESTINATION">The VeraCrypt program files will be upgraded in the location where VeraCrypt is installed. If you need to select a different location, please uninstall VeraCrypt first.</entry>
@@ -847,7 +847,7 @@
     <entry lang="zh-tw" key="AFTER_INSTALL_TUTORIAL">如果您以前從未沒有使用過 VeraCrypt，我們建議您先閱讀 VeraCrypt 使用者指南中的 Beginner's Tutorial 章節。您想要查看教學導覽嗎？</entry>
     <entry lang="zh-tw" key="SELECT_AN_ACTION">請從下面選擇要執行的操作：</entry>
     <entry lang="zh-tw" key="REPAIR_REINSTALL">修復/重新安裝</entry>
-    <entry lang="en" key="UPGRADE">Upgrade</entry>
+    <entry lang="zh-tw" key="UPGRADE">升級</entry>
     <entry lang="zh-tw" key="UNINSTALL">移除</entry>
     <entry lang="en" key="SETUP_ADMIN">To successfully install/uninstall VeraCrypt, you must have administrator privileges. Do you want to continue?</entry>
     <entry lang="en" key="TC_INSTALLER_IS_RUNNING">VeraCrypt Installer is currently running on this system and performing or preparing installation or update of VeraCrypt. Before you proceed, please wait for it to finish or close it. If you cannot close it, please restart your computer before proceeding.</entry>
@@ -861,9 +861,9 @@
     <entry lang="zh-tw" key="EXTRACTION_FAILED">解壓縮失敗。</entry>
     <entry lang="zh-tw" key="ROLLBACK">安裝已經被返回。</entry>
     <entry lang="zh-tw" key="INSTALL_OK">VeraCrypt 已成功安裝。</entry>
-    <entry lang="en" key="SETUP_UPDATE_OK">VeraCrypt has been successfully updated.</entry>
+    <entry lang="zh-tw" key="SETUP_UPDATE_OK">VeraCrypt 已成功更新。</entry>
     <entry lang="en" key="UPGRADE_OK_REBOOT_REQUIRED">VeraCrypt has been successfully upgraded. However, before you can start using it, the computer must be restarted.\n\nDo you want to restart it now?</entry>
-    <entry lang="en" key="SYS_ENC_UPGRADE_FAILED">Failed to upgrade VeraCrypt!\n\nIMPORTANT: Before you shut down or restart the system, we strongly recommend that you use System Restore (Windows Start menu > All programs > Accessories > System Tools > System Restore) to restore your system to the restore point named 'VeraCrypt installation'. If System Restore is not available, you should try installing the original or the new version of VeraCrypt again before you shut down or restart the system.</entry>
+    <entry lang="en" key="SYS_ENC_UPGRADE_FAILED">Failed to upgrade VeraCrypt!\n\nIMPORTANT: Before you shut down or restart the system, we strongly recommend that you use System Restore (Windows Start menu &gt; All programs &gt; Accessories &gt; System Tools &gt; System Restore) to restore your system to the restore point named 'VeraCrypt installation'. If System Restore is not available, you should try installing the original or the new version of VeraCrypt again before you shut down or restart the system.</entry>
     <entry lang="zh-tw" key="UNINSTALL_OK">VeraCrypt 已成功移除。\n\n點 "完成" 來移除 VeraCrypt 安裝程式和資料夾 %s。要注意如果該資料夾中含有非安裝程式建立的檔案，則該資料夾不會被移除。</entry>
     <entry lang="zh-tw" key="REMOVING_REG">正在移除 VeraCrypt 登錄檔項目。</entry>
     <entry lang="zh-tw" key="ADDING_REG">正在新增登錄檔項目</entry>
@@ -919,12 +919,12 @@
     <entry lang="en" key="PROGRESS_STATUS_FINALIZING">Finalizing</entry>
     <entry lang="zh-tw" key="PROGRESS_STATUS_PAUSED">已暫停</entry>
     <entry lang="zh-tw" key="PROGRESS_STATUS_FINISHED">已完成</entry>
-    <entry lang="en" key="PROGRESS_STATUS_ERROR">Error</entry>
+    <entry lang="zh-tw" key="PROGRESS_STATUS_ERROR">錯誤</entry>
     <entry lang="en" key="FAVORITE_DISCONNECTED_DEV">Device disconnected</entry>
     <entry lang="en" key="SYS_FAVORITE_VOLUMES_SAVED">System favorite volumes saved.\n\nTo enable mounting of system favorite volumes when the system starts, please select 'Settings' &gt; 'System Favorite Volumes' &gt; 'Mount system favorite volumes when Windows starts'.</entry>
     <entry lang="en" key="FAVORITE_ADD_DRIVE_DEV_WARNING">The volume you are adding to favorites is neither a partition nor a dynamic volume. Therefore, VeraCrypt will be unable to mount this favorite volume if the device number changes.</entry>
     <entry lang="en" key="FAVORITE_ADD_PARTITION_TYPE_WARNING">The volume you are adding to favorites is a partition not recognized by Windows.\n\nVeraCrypt will be unable to mount this favorite volume if the device number changes. Please set the type of the partition to a type recognized by Windows (use the SETID command of the Windows 'diskpart' tool). Then add the partition to favorites again.</entry>
-    <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_BACKGROUND_TASK_ERR">VeraCrypt Background Task is disabled or it is configured to exit when there are no mounted volumes (or VeraCrypt is running in portable mode). This may prevent your favorite volumes from being automatically mounted when devices hosting them get connected.\n\nNote: To enable the VeraCrypt Background Task, select Settings > Preferences and check the 'Enabled' checkbox in the section 'VeraCrypt Background Task'.</entry>
+    <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_BACKGROUND_TASK_ERR">VeraCrypt Background Task is disabled or it is configured to exit when there are no mounted volumes (or VeraCrypt is running in portable mode). This may prevent your favorite volumes from being automatically mounted when devices hosting them get connected.\n\nNote: To enable the VeraCrypt Background Task, select Settings &gt; Preferences and check the 'Enabled' checkbox in the section 'VeraCrypt Background Task'.</entry>
     <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_NETWORK_PATH_ERR">A container stored in a remote filesystem shared over a network cannot be automatically mounted when its host device gets connected.</entry>
     <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_DEVICE_PATH_ERR">The device displayed below is neither a partition nor a dynamic volume. Therefore, the volume hosted on the device cannot be automatically mounted when the device gets connected.</entry>
     <entry lang="en" key="FAVORITE_ARRIVAL_MOUNT_PARTITION_TYPE_ERR">Please set the type of the partition displayed below to a type recognized by Windows (use the SETID command of the Windows 'diskpart' tool). Then remove the partition from favorites and add it again. This will enable the volume hosted on the device to be automatically mounted when the device gets connected.</entry>
@@ -965,7 +965,7 @@
     <entry lang="zh-tw" key="RESCUE_DISK_NON_WIZARD_CHECK_PASSED">VeraCrypt 救援磁碟已經被成功驗證。</entry>
     <entry lang="zh-tw" key="RESCUE_DISK_NON_WIZARD_CHECK_FAILED">無法驗證救援磁碟已被正確燒錄。\n\n如果您已經燒錄了救援磁碟，請退出後重新插入 CD/DVD；然後再試一次。如果沒有用，請嘗試使用其他 CD/DVD 燒錄軟體或光碟片。\n\n如果您嘗試驗證一個為不同的主金鑰、密碼、salt 值、等建立的 VeraCrypt 救援磁碟，請注意這樣的救援磁碟永遠無法通過驗證。要建立一個新的和目前組態完全相容的救援磁碟，請選擇 "系統" &gt; "建立救援磁碟"。</entry>
     <entry lang="en" key="RESCUE_DISK_ISO_IMAGE_CHECK_PASSED">The VeraCrypt Rescue Disk image has been successfully verified.</entry>
-    <entry lang="en" key="RESCUE_DISK_ISO_IMAGE_CHECK_FAILED">The Rescue Disk image verification failed.\n\nIf you attempted to verify a VeraCrypt Rescue Disk image created for a different master key, password, salt, etc., please note that such Rescue Disk image will always fail this verification. To create a new Rescue Disk image fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
+    <entry lang="en" key="RESCUE_DISK_ISO_IMAGE_CHECK_FAILED">The Rescue Disk image verification failed.\n\nIf you attempted to verify a VeraCrypt Rescue Disk image created for a different master key, password, salt, etc., please note that such Rescue Disk image will always fail this verification. To create a new Rescue Disk image fully compatible with your current configuration, select 'System' &gt; 'Create Rescue Disk'.</entry>
     <entry lang="zh-tw" key="ERROR_CREATING_RESCUE_DISK">建立 VeraCrypt 救援磁碟時失敗。</entry>
     <entry lang="en" key="CANNOT_CREATE_RESCUE_DISK_ON_HIDDEN_OS">VeraCrypt Rescue Disk cannot be created when a hidden operating system is running.\n\nTo create a VeraCrypt Rescue Disk, boot the decoy operating system and then select 'System' &gt; 'Create Rescue Disk'.</entry>
     <entry lang="en" key="RESCUE_DISK_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly burned.\n\nIf you have burned the Rescue Disk, please eject and reinsert the CD/DVD; then click Next to try again. If this does not help, please try another medium%s.\n\nIf you have not burned the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to burn the newly generated Rescue Disk.</entry>
@@ -977,21 +977,21 @@
     <entry lang="zh-tw" key="CANNOT_SET_TIMER">錯誤：不能設定計時器。</entry>
     <entry lang="zh-tw" key="IDPM_CHECK_FILESYS">檢查檔案系統</entry>
     <entry lang="zh-tw" key="IDPM_REPAIR_FILESYS">修正檔案系統</entry>
-    <entry lang="en" key="IDPM_ADD_TO_FAVORITES">Add to Favorites...</entry>
+    <entry lang="zh-tw" key="IDPM_ADD_TO_FAVORITES">新增到我的最愛...</entry>
     <entry lang="en" key="IDPM_ADD_TO_SYSTEM_FAVORITES">Add to System Favorites...</entry>
     <entry lang="en" key="IDPM_PROPERTIES">P&amp;roperties...</entry>
     <entry lang="zh-tw" key="HIDDEN_VOL_PROTECTION">隱藏加密區已被保護</entry>
     <entry lang="en" key="NOT_APPLICABLE_OR_NOT_AVAILABLE">N/A</entry>
     <entry lang="zh-tw" key="UISTR_YES">是</entry>
     <entry lang="zh-tw" key="UISTR_NO">否</entry>
-    <entry lang="en" key="UISTR_DISABLED">Disabled</entry>
+    <entry lang="zh-tw" key="UISTR_DISABLED">關閉</entry>
     <entry lang="zh-tw" key="DIGIT_ONE">1</entry>
     <entry lang="zh-tw" key="TWO_OR_MORE">2 或更多</entry>
     <entry lang="zh-tw" key="MODE_OF_OPERATION">操作模式</entry>
     <entry lang="en" key="LABEL_ITEM">Label:   </entry>
     <entry lang="en" key="SIZE_ITEM">Size:   </entry>
     <entry lang="en" key="PATH_ITEM">Path:   </entry>
-    <entry lang="en" key="DRIVE_LETTER_ITEM">Drive Letter:   </entry>
+    <entry lang="zh-tw" key="DRIVE_LETTER_ITEM">磁碟機代號：   </entry>
     <entry lang="zh-tw" key="UNSUPPORTED_CHARS_IN_PWD">錯誤：密碼必須只包含 ASCII 字元。\n\n密碼中的非 ASCII 字元可能會導致當作業系統組態改變時加密區無法掛載。\n\n允許使用以下字元：\n\n  ! " # $ % &amp; ' ( ) * + , - . / 0 1 2 3 4  5 6 7 8 9 : ; &lt; = &gt; ? @ A B C D E F  G H I J K L M N O P Q R S T U V W X  Y Z [ \\ ] ^ _ ` a b c d e f g h i j k l m  n o p q r s t u v w x y z { | } ~</entry>
     <entry lang="zh-tw" key="UNSUPPORTED_CHARS_IN_PWD_RECOM">警告：密碼中包含非 ASCII 字元。可能會導致當作業系統組態改變時加密區無法掛載。\n\n您應該使用 ASCII 字元取代密碼中的非 ASCII 字元。如要這樣做，請選取 "加密區" -&gt; "修改加密區密碼"\n\n以下字元為 ASCII 字元：\n\n  ! " # $ % &amp; ' ( ) * + , - . / 0 1 2 3 4  5 6 7 8 9 : ; &lt; = &gt; ? @ A B C D E F  G H I J K L M N O P Q R S T U V W X  Y Z [ \\ ] ^ _ ` a b c d e f g h i j k l m  n o p q r s t u v w x y z { | } ~</entry>
     <entry lang="en" key="EXE_FILE_EXTENSION_CONFIRM">WARNING: We strongly recommend that you avoid file extensions that are used for executable files (such as .exe, .sys, or .dll) and other similarly problematic file extensions. Using such file extensions causes Windows and antivirus software to interfere with the container, which adversely affects the performance of the volume and may also cause other serious problems.\n\nWe strongly recommend that you remove the file extension or change it (e.g., to '.hc').\n\nAre you sure you want to use the problematic file extension?</entry>
@@ -1031,19 +1031,19 @@
     <entry lang="zh-tw" key="CONFIRM_NO_FORCED_AUTODISMOUNT">警告：如果此選項被停用，包含使用中的檔案/目錄 的加密區將無法自動卸載。\n\n您確定要停用這個選項嗎？</entry>
     <entry lang="zh-tw" key="WARN_PREF_AUTO_DISMOUNT">警告：包含使用中的檔案/目錄的加密區將無法自動卸載。\n\n要防止這種情況，在對話方塊視窗中啟用以下選項："強制自動卸載，不論加密區是否包含使用中的檔案或目錄"</entry>
     <entry lang="en" key="WARN_PREF_AUTO_DISMOUNT_ON_POWER">WARNING: When the notebook battery power is low, Windows may omit sending the appropriate messages to running applications when the computer is entering power saving mode. Therefore, VeraCrypt may fail to auto-dismount volumes in such cases.</entry>
-    <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PROMPT">You have scheduled the process of encryption of a partition/volume. The process has not been completed yet.\n\nDo you want to resume the process now?</entry>
+    <entry lang="en" key="NONSYS_INPLACE_ENC_RESUME_PROMPT">You have scheduled the process of encryption/decryption of a partition/volume. The process has not been completed yet.\n\nDo you want to resume the process now?</entry>
     <entry lang="zh-tw" key="SYSTEM_ENCRYPTION_RESUME_PROMPT">您已經排定了加密或解密系統分割區/磁碟機的操作。但該項操作尚未完成。\n\n您希望現在開始(恢復)該項操作嗎？</entry>
-    <entry lang="en" key="ASK_NONSYS_INPLACE_ENC_NOTIFICATION_REMOVAL">Do you want to be prompted about whether you want to resume the currently scheduled processes of encryption of non-system partitions/volumes?</entry>
+    <entry lang="en" key="ASK_NONSYS_INPLACE_ENC_NOTIFICATION_REMOVAL">Do you want to be prompted about whether you want to resume the currently scheduled processes of encryption/decryption of non-system partitions/volumes?</entry>
     <entry lang="en" key="KEEP_PROMPTING_ME">Yes, keep prompting me</entry>
     <entry lang="en" key="DO_NOT_PROMPT_ME">No, do not prompt me</entry>
-    <entry lang="en" key="NONSYS_INPLACE_ENC_NOTIFICATION_REMOVAL_NOTE">IMPORTANT: Keep in mind that you can resume the process of encryption of any non-system partition/volume by selecting 'Volumes' &gt; 'Resume Interrupted Process' from the menu bar of the main VeraCrypt window.</entry>
+    <entry lang="en" key="NONSYS_INPLACE_ENC_NOTIFICATION_REMOVAL_NOTE">IMPORTANT: Keep in mind that you can resume the process of encryption/decryption of any non-system partition/volume by selecting 'Volumes' &gt; 'Resume Interrupted Process' from the menu bar of the main VeraCrypt window.</entry>
     <entry lang="zh-tw" key="SYSTEM_ENCRYPTION_SCHEDULED_BUT_PBA_FAILED">您已經排定了加密或解密系統分割區/磁碟機的操作。然而，啟動前置認證已失敗(或被繞過)。\n\n注意：如果您在啟動前置認證環境中解密了系統分割區/磁碟機，您也許需要經由在 VeraCrypt 主視窗選單中選擇 "系統" &gt; "永久解密系統分割區/磁碟機" 來完成最後的操作。</entry>
     <entry lang="en" key="CONFIRM_EXIT">WARNING: If VeraCrypt exits now, the following functions will be disabled:\n\n1) Hot keys\n2) Auto-dismount (e.g., upon logoff, inadvertent host device removal, time-out, etc.)\n3) Auto-mount of favorite volumes\n4) Notifications (e.g., when damage to hidden volume is prevented)\n\nNote: If you do not wish VeraCrypt to run in the background, disable the VeraCrypt Background Task in the Preferences (and, if necessary, disable the automatic start of VeraCrypt in the Preferences).\n\nAre you sure you want VeraCrypt to exit?</entry>
     <entry lang="zh-tw" key="CONFIRM_EXIT_UNIVERSAL">結束嗎？</entry>
     <entry lang="zh-tw" key="CHOOSE_ENCRYPT_OR_DECRYPT">VeraCrypt 沒有足夠的訊息確定是否加密還是解密了。</entry>
     <entry lang="zh-tw" key="CHOOSE_ENCRYPT_OR_DECRYPT_FINALIZE_DECRYPT_NOTE">VeraCrypt 沒有足夠的訊息確定是否加密還是解密了。\n\n注意：如果您在啟動前置認證環境中解密了系統分割區/磁碟機，您也許需要經由點 '解密' 來完成最後的操作。</entry>
     <entry lang="en" key="NONSYS_INPLACE_ENC_REVERSE_INFO">Note: When you are encrypting a non-system partition/volume in place and an error persistently prevents you from finishing the process, you will not be able to mount the volume (and access data stored on it) until you entirely DECRYPT the volume (i.e. reverse the process).\n\nIf you need to do so, follow these steps:\n1) Exit this wizard.\n2) In the main VeraCrypt window, select 'Volumes' &gt; 'Resume Interrupted Process'.\n3) Select 'Decrypt'.</entry>
-    <entry lang="en" key="NONSYS_INPLACE_ENC_DEFER_CONFIRM">Do you want to interrupt and postpone the process of encryption of the partition/volume?\n\nNote: Keep in mind that the volume cannot be mounted until it has been fully encrypted. You will be able to resume the process of encryption and it will continue from the point it was stopped. You can do so, for example, by selecting 'Volumes' &gt; 'Resume Interrupted Process' from the menu bar of the main VeraCrypt window.</entry>
+    <entry lang="en" key="NONSYS_INPLACE_ENC_DEFER_CONFIRM">Do you want to interrupt and postpone the process of encryption/decryption of the partition/volume?\n\nNote: Keep in mind that the volume cannot be mounted until it has been fully encrypted or decrypted. You will be able to resume the process of encryption/decryption and it will continue from the point where it was stopped. You can do so, for example, by selecting 'Volumes' &gt; 'Resume Interrupted Process' from the menu bar of the main VeraCrypt window.</entry>
     <entry lang="zh-tw" key="SYSTEM_ENCRYPTION_DEFER_CONFIRM">您想要中斷和延緩對系統分割區/磁碟機的加密操作嗎？\n\n注意：您以後也可以從中斷點恢復操作。您可以這樣做，舉例來說，經由在 VeraCrypt 主視窗選單中選擇 "系統" &gt; "恢復被中斷的操作"。如果您想永久終止或返回加密操作，選擇 "系統" &gt; "永久解密系統分割區/磁碟機..."。</entry>
     <entry lang="zh-tw" key="SYSTEM_DECRYPTION_DEFER_CONFIRM">您想要中斷和延緩對系統分割區/磁碟機的解密操作嗎？\n\n注意：您以後也可以從中斷點恢復操作。您可以這樣做，舉例來說，經由在 VeraCrypt 主視窗選單中選擇 "系統" &gt; "恢復被中斷的操作"。如果您想返回解密操作(並開始加密)，選擇 "系統" &gt; "加密系統分割區/磁碟機..."。</entry>
     <entry lang="zh-tw" key="FAILED_TO_INTERRUPT_SYSTEM_ENCRYPTION">錯誤：中斷加密/解密系統分割區/磁碟機的操作失敗。</entry>
@@ -1073,7 +1073,7 @@
     <entry lang="en" key="SYS_ENCRYPTION_UPGRADE_UNSUPPORTED_ON_VISTA_SP0">VeraCrypt no longer supports encryption of the system partition/drive on Windows Vista with no Service Pack installed. Before upgrading VeraCrypt, please install Service Pack 1 or higher for Windows Vista.</entry>
     <entry lang="en" key="FEATURE_REQUIRES_INSTALLATION">Error: This feature requires VeraCrypt to be installed on the system (you are running VeraCrypt in portable mode).\n\nPlease install VeraCrypt and then try again.</entry>
     <entry lang="en" key="WINDOWS_NOT_ON_BOOT_DRIVE_ERROR">WARNING: Windows does not appear to be installed on the drive from which it boots. This is not supported.\n\nYou should continue only if you are sure that Windows is installed on the drive from which it boots.\n\nDo you want to continue?</entry>
-    <entry lang="zh-tw" key="TC_BOOT_LOADER_ALREADY_INSTALLED">小心：VeraCrypt 開機管理程式已經安裝到了您的系統磁碟機上！\n\n這可能在您的電腦上已經加密了另外一個系統。\n\n警告：繼續加密目前執行的系統可能會導致其他系統不可能啟動或導致資料無法存取。\n\n您確定要繼續嗎？</entry>
+    <entry lang="zh-tw" key="TC_BOOT_LOADER_ALREADY_INSTALLED">警告：VeraCrypt 開機管理程式已經安裝到了您的系統磁碟機上！\n\n這可能在您的電腦上已經加密了另外一個系統。\n\n警告：繼續加密目前執行的系統可能會導致其他系統不可能啟動或導致資料無法存取。\n\n您確定要繼續嗎？</entry>
     <entry lang="en" key="SYS_LOADER_RESTORE_FAILED">Failed to restore the original system loader.\n\nPlease use your VeraCrypt Rescue Disk ('Repair Options' &gt; 'Restore original system loader') or Windows installation medium to replace the VeraCrypt Boot Loader with the Windows system loader.</entry>
     <entry lang="zh-tw" key="SYS_LOADER_UNAVAILABLE_FOR_RESCUE_DISK">原來的系統開機管理程式將不會保存到救援磁碟上(可能原因：備份檔案遺失)</entry>
     <entry lang="zh-tw" key="ERROR_MBR_PROTECTED">寫入 MBR 磁扇區時失敗。\n\n您的 BIOS 可能設定為保護 MBR 磁扇區。檢查您的 BIOS 設定(啟動電腦後按 F2，Delete，或 Esc)中的 MBR/防毒保護。</entry>
@@ -1096,7 +1096,7 @@
     <entry lang="en" key="DECOY_OS_REINSTALL_WARNING">WARNING: During the process of creation of the hidden operating system, you will be required to fully reinstall the currently running system (in order to create a decoy system securely).\n\nNote: The currently running operating system and the entire content of the system partition will be copied to the hidden volume (in order to create the hidden system).\n\n\nAre you sure you will be able to install Windows using a Windows Setup medium (or using a service partition)?</entry>
     <entry lang="en" key="DECOY_OS_REQUIREMENTS">For security reasons, if the currently running operating system requires activation, it must be activated before proceeding. Note that the hidden operating system will be created by copying the content of the system partition to a hidden volume (so if this operating system is not activated, the hidden operating system will not be activated either). For more information, see the section "Security Requirements and Precautions Pertaining to Hidden Volumes" in the VeraCrypt User's Guide.\n\nImportant: Before proceeding, please make sure you have read the section "Security Requirements and Precautions Pertaining to Hidden Volumes" in the VeraCrypt User's Guide.\n\n\nDoes the currently running operating system meet the above condition?</entry>
     <entry lang="en" key="CONFIRM_HIDDEN_OS_EXTRA_BOOT_PARTITION">Your system uses an extra boot partition. VeraCrypt does not support hibernation on hidden operating systems that use an extra boot partition (decoy systems can be hibernated without any problems).\n\nPlease note that the boot partition would be shared by both the decoy and the hidden system. Therefore, in order to prevent data leaks and problems while resuming from hibernation, VeraCrypt has to prevent the hidden system from writing to the shared boot partition and from hibernating.\n\n\nDo you want to continue? If you select 'No', instructions for removing the extra boot partition will be displayed.</entry>
-    <entry lang="en" key="EXTRA_BOOT_PARTITION_REMOVAL_INSTRUCTIONS">\nThe extra boot partition can be removed before installing Windows. To do so, follow these steps:\n\n1) Boot your Windows installation disc.\n\n2) In the Windows installer screen, click 'Install now' > 'Custom (advanced)'.\n\n3) Click 'Drive Options'.\n\n4) Select the main system partition and delete it by clicking 'Delete' and 'OK'.\n\n5) Select the 'System Reserved' partition, click 'Extend', and increase its size so that the operating system can be installed to it.\n\n6) Click 'Apply' and 'OK'.\n\n7) Install Windows on the 'System Reserved' partition.\n\n\nShould an attacker ask why you removed the extra boot partition, you can answer that you wanted to prevent any possible data leaks to the unencrypted boot partition.\n\nNote: You can print this text by clicking the 'Print' button below. If you save a copy of this text or print it (strongly recommended, unless your printer stores copies of documents it prints on its internal drive), you should destroy any copies of it after removing the extra boot partition (otherwise, if such a copy was found, it might indicate that there is a hidden operating system on this computer).</entry>
+    <entry lang="en" key="EXTRA_BOOT_PARTITION_REMOVAL_INSTRUCTIONS">\nThe extra boot partition can be removed before installing Windows. To do so, follow these steps:\n\n1) Boot your Windows installation disc.\n\n2) In the Windows installer screen, click 'Install now' &gt; 'Custom (advanced)'.\n\n3) Click 'Drive Options'.\n\n4) Select the main system partition and delete it by clicking 'Delete' and 'OK'.\n\n5) Select the 'System Reserved' partition, click 'Extend', and increase its size so that the operating system can be installed to it.\n\n6) Click 'Apply' and 'OK'.\n\n7) Install Windows on the 'System Reserved' partition.\n\n\nShould an attacker ask why you removed the extra boot partition, you can answer that you wanted to prevent any possible data leaks to the unencrypted boot partition.\n\nNote: You can print this text by clicking the 'Print' button below. If you save a copy of this text or print it (strongly recommended, unless your printer stores copies of documents it prints on its internal drive), you should destroy any copies of it after removing the extra boot partition (otherwise, if such a copy was found, it might indicate that there is a hidden operating system on this computer).</entry>
     <entry lang="en" key="GAP_BETWEEN_SYS_AND_HIDDEN_OS_PARTITION">Warning: There is unallocated space between the system partition and the first partition behind it. After you create the hidden operating system, you must not create any new partitions in that unallocated space. Otherwise, the hidden operating system will be impossible to boot (until you delete such newly created partitions).</entry>
     <entry lang="zh-tw" key="ALGO_NOT_SUPPORTED_FOR_SYS_ENCRYPTION">此演算法目前不支援系統加密。</entry>
     <entry lang="en" key="ALGO_NOT_SUPPORTED_FOR_TRUECRYPT_MODE">This algorithm is not supported for TrueCrypt mode.</entry>
@@ -1120,8 +1120,8 @@
     <entry lang="zh-tw" key="CANNOT_INITIATE_SYS_ENCRYPTION_PRETEST">不能初始化系統加密預先測試。</entry>
     <entry lang="en" key="CANNOT_INITIATE_HIDDEN_OS_CREATION">Cannot initiate the process of creation of the hidden operating system.</entry>
     <entry lang="zh-tw" key="WIPE_MODE_TITLE">清除模式</entry>
-    <entry lang="en" key="INPLACE_ENC_WIPE_MODE_INFO">On some types of storage media, when data is overwritten with other data, it may be possible to recover the overwritten data using techniques such as magnetic force microscopy. This also applies to data that are overwritten with their encrypted form (which happens when VeraCrypt initially encrypts an unencrypted partition or drive). According to some studies and governmental publications, recovery of overwritten data can be prevented (or made very difficult) by overwritting the data with pseudorandom and certain non-random data a certain number of times. Therefore, if you believe that an adversary might be able to use such techniques to recover the data you intend encrypt, you may want to select one of the wipe modes (existing data will NOT be lost). Note that wiping will NOT be performed after the partition/drive is encrypted. When the partition/drive is fully encrypted, no unencrypted data is written to it. Any data being written to it is first encrypted on the fly in memory and only then is the (encrypted) data written to the disk.</entry>
-    <entry lang="en" key="WIPE_MODE_INFO">On some types of storage media, when data is overwritten with other data (e.g. when the data is erased), it may be possible to recover the overwritten data using techniques such as magnetic force microscopy. According to some studies and governmental publications, recovery of overwritten data can be prevented (or made very difficult) by overwritting the data with pseudorandom and certain non-random data a certain number of times. Therefore, if you believe that an adversary might be able to use such techniques to recover the data that is to be erased, you may want to select one of the multi-pass wipe modes.\n\nNote: The more wipe passes you use, the longer it takes to erase the data.</entry>
+    <entry lang="en" key="INPLACE_ENC_WIPE_MODE_INFO">On some types of storage media, when data is overwritten with other data, it may be possible to recover the overwritten data using techniques such as magnetic force microscopy. This also applies to data that are overwritten with their encrypted form (which happens when VeraCrypt initially encrypts an unencrypted partition or drive). According to some studies and governmental publications, recovery of overwritten data can be prevented (or made very difficult) by overwriting the data with pseudorandom and certain non-random data a certain number of times. Therefore, if you believe that an adversary might be able to use such techniques to recover the data you intend to encrypt, you may want to select one of the wipe modes (existing data will NOT be lost). Note that wiping will NOT be performed after the partition/drive is encrypted. When the partition/drive is fully encrypted, no unencrypted data is written to it. Any data being written to it is first encrypted on the fly in memory and only then is the (encrypted) data written to the disk.</entry>
+    <entry lang="en" key="WIPE_MODE_INFO">On some types of storage media, when data is overwritten with other data (e.g. when the data is erased), it may be possible to recover the overwritten data using techniques such as magnetic force microscopy. According to some studies and governmental publications, recovery of overwritten data can be prevented (or made very difficult) by overwriting the data with pseudorandom and certain non-random data a certain number of times. Therefore, if you believe that an adversary might be able to use such techniques to recover the data that is to be erased, you may want to select one of the multi-pass wipe modes.\n\nNote: The more wipe passes you use, the longer it takes to erase the data.</entry>
     <entry lang="en" key="DEVICE_WIPE_PAGE_TITLE">Wiping</entry>
     <entry lang="en" key="DEVICE_WIPE_PAGE_INFO_HIDDEN_OS">\nNote: You can interrupt the process of wiping, shut down your computer, start the hidden system again and then resume the process (this wizard will be launched automatically). However, if you interrupt it, the entire process of wiping will have to start from the beginning.</entry>
     <entry lang="en" key="DEVICE_WIPE_PAGE_INFO">\n\nNote: If you interrupt the process of wiping and then attempt to resume it, the entire process will have to start from the beginning.</entry>
@@ -1130,10 +1130,10 @@
     <entry lang="en" key="CONFIRM_WIPE_START_DECOY_SYS_PARTITION">The entire content of the partition where the original system resides will be erased.\n\nNote: The entire content of the partition that is to be erased has been copied to this hidden system partition.</entry>
     <entry lang="en" key="WIPE_MODE_WARN">WARNING: Note that when you choose e.g. the 3-pass wipe mode, the time necessary to encrypt the partition/drive will be up to 4 times longer. Likewise, if you choose the 35-pass wipe mode, it will be up to 36 times longer (it might even take several weeks).\n\nHowever, please note that wiping will NOT be performed after the partition/drive is fully encrypted. When the partition/drive is fully encrypted, no unencrypted data is written to it. Any data being written to it is first encrypted on the fly in memory and only then is the (encrypted) data written to the disk (so the performance will NOT be affected).\n\nAre you sure you want to use the wipe mode?</entry>
     <entry lang="zh-tw" key="WIPE_MODE_NONE">無(最快)</entry>
-    <entry lang="en" key="WIPE_MODE_1_RAND">1-pass (random data)</entry>
-    <entry lang="zh-tw" key="WIPE_MODE_3_DOD_5220">3 次複寫(美國國防部 5220.22-M 演算法)</entry>
-    <entry lang="zh-tw" key="WIPE_MODE_7_DOD_5220">7 次複寫(美國國防部 5220.22-M 演算法)</entry>
-    <entry lang="en" key="WIPE_MODE_35_GUTMANN">35-pass ("Gutmann")</entry>
+    <entry lang="zh-tw" key="WIPE_MODE_1_RAND">1 次複寫 (隨機資料)</entry>
+    <entry lang="zh-tw" key="WIPE_MODE_3_DOD_5220">3 次複寫(US DoD 5220.22-M)</entry>
+    <entry lang="zh-tw" key="WIPE_MODE_7_DOD_5220">7 次複寫(US DoD 5220.22-M)</entry>
+    <entry lang="zh-tw" key="WIPE_MODE_35_GUTMANN">35 次複寫 ("Gutmann")</entry>
     <entry lang="en" key="WIPE_MODE_256">256-pass</entry>
     <entry lang="zh-tw" key="SYS_MULTI_BOOT_MODE_TITLE">作業系統數目</entry>
     <entry lang="zh-tw" key="MULTI_BOOT_FOR_ADVANCED_ONLY">警告：經驗不足的使用者從不應該試圖在多重開機的組態設定下加密 Windows。\n\n要繼續嗎？</entry>
@@ -1243,14 +1243,14 @@
     <entry lang="zh-tw" key="CONFIRM_CHANGE_WIZARD_MODE_TO_FILE_CONTAINER">您想改為建立 VeraCrypt 檔案型容器嗎？</entry>
     <entry lang="en" key="CONFIRM_SYSTEM_ENCRYPTION_MODE">You have selected the system partition/drive (or the boot partition), but the wizard mode you selected is suitable only for non-system partitions/drives.\n\nDo you want to set up pre-boot authentication (which means that you will need to enter your password each time before Windows boots/starts) and encrypt the system partition/drive?</entry>
     <entry lang="zh-tw" key="CONFIRM_DECRYPT_SYS_DEVICE">您確認要永久解密系統分割區/磁碟機嗎？</entry>
-    <entry lang="zh-tw" key="CONFIRM_DECRYPT_SYS_DEVICE_CAUTION">小心：如果您永久解密系統分割區/磁碟機，所有未加密資料將會寫到它上面。\n\n您真的確定要永久解密系統分割區/磁碟機嗎？</entry>
+    <entry lang="zh-tw" key="CONFIRM_DECRYPT_SYS_DEVICE_CAUTION">警告：如果您永久解密系統分割區/磁碟機，所有未加密資料將會寫到它上面。\n\n您真的確定要永久解密系統分割區/磁碟機嗎？</entry>
     <entry lang="en" key="CONFIRM_DECRYPT_NON_SYS_DEVICE">Are you sure you want to permanently decrypt the following volume?</entry>
     <entry lang="en" key="CONFIRM_DECRYPT_NON_SYS_DEVICE_CAUTION">CAUTION: If you permanently decrypt the VeraCrypt volume, unencrypted data will be written to the disk.\n\nAre you really sure you want to permanently decrypt the selected volume?</entry>
     <entry lang="en" key="CONFIRM_CASCADE_FOR_SYS_ENCRYPTION">Warning: If you use a cascade of ciphers for system encryption, you may encounter the following issues:\n\n1) The VeraCrypt Boot Loader is larger than normal and, therefore, there is not enough space in the first drive track for a backup of the VeraCrypt Boot Loader. Hence, whenever it gets damaged (which often happens, for example, during inappropriately designed anti-piracy activation procedures of certain programs), you will need to use the VeraCrypt Rescue Disk to boot or to repair the VeraCrypt Boot Loader.\n\n2) On some computers, resuming from hibernation takes longer.\n\nThese potential issues can be prevented by choosing a non-cascade encryption algorithm (e.g. AES).\n\nAre you sure you want to use a cascade of ciphers?</entry>
     <entry lang="zh-tw" key="NOTE_CASCADE_FOR_SYS_ENCRYPTION">如果您遭遇任何前面描述的問題，先解密該分割區/磁碟機(如果它已經加密)並試著使用一種非串聯加密演算法對它再次加密(例如 AES)。</entry>
     <entry lang="en" key="UPDATE_TC_IN_DECOY_OS_FIRST">WARNING: For safety and security reasons, you should update VeraCrypt on the decoy operating system before you update it on the hidden operating system.\n\nTo do so, boot the decoy system and run the VeraCrypt installer from within it. Then boot the hidden system and run the installer from within it as well.\n\nNote: The decoy system and the hidden system share a single boot loader. If you upgraded VeraCrypt only on the hidden system (but not on the decoy system), the decoy system would contain a VeraCrypt driver and VeraCrypt applications whose version numbers are different from the version number of the VeraCrypt Boot Loader. Such a discrepancy might indicate that there is a hidden operating system on this computer.\n\n\nDo you want to continue?</entry>
     <entry lang="en" key="UPDATE_TC_IN_HIDDEN_OS_TOO">The version number of the VeraCrypt Boot Loader that booted this operating system is different from the version number of the VeraCrypt driver (and of the VeraCrypt applications) installed on this system.\n\nYou should run the VeraCrypt installer (whose version number is the same as the one of the VeraCrypt Boot Loader) to update VeraCrypt on this operating system.</entry>
-    <entry lang="en" key="BOOT_LOADER_VERSION_DIFFERENT_FROM_DRIVER_VERSION">The version number of the VeraCrypt Boot Loader that booted this operating system is different from the version number of the VeraCrypt driver (and of the VeraCrypt applications) installed on this system. Note that older versions may contain bugs fixed in later versions.\n\nIf you did not boot from the VeraCrypt Rescue Disk, you should reinstall VeraCrypt or upgrade it to the latest stable version (the boot loader will be updated too).\n\nIf you booted from the VeraCrypt Rescue Disk, you should update it ('System' > 'Create Rescue Disk').</entry>
+    <entry lang="en" key="BOOT_LOADER_VERSION_DIFFERENT_FROM_DRIVER_VERSION">The version number of the VeraCrypt Boot Loader that booted this operating system is different from the version number of the VeraCrypt driver (and of the VeraCrypt applications) installed on this system. Note that older versions may contain bugs fixed in later versions.\n\nIf you did not boot from the VeraCrypt Rescue Disk, you should reinstall VeraCrypt or upgrade it to the latest stable version (the boot loader will be updated too).\n\nIf you booted from the VeraCrypt Rescue Disk, you should update it ('System' &gt; 'Create Rescue Disk').</entry>
     <entry lang="zh-tw" key="BOOT_LOADER_UPGRADE_OK">VeraCrypt 開機管理程式已經更新。\n\n強烈建議您建立一片新的 VeraCrypt 救援磁碟(那將包含新版的 VeraCrypt 開機管理程式)經由選擇 "系統" &gt; "建立救援磁碟" 在您重新啟動電腦之後。</entry>
     <entry lang="en" key="BOOT_LOADER_UPGRADE_OK_HIDDEN_OS">The VeraCrypt Boot Loader has been upgraded.\n\nIt is strongly recommended that you boot the decoy operating system and then create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' &gt; 'Create Rescue Disk'.</entry>
     <entry lang="zh-tw" key="BOOT_LOADER_UPGRADE_FAILED">更新 VeraCrypt 開機管理程式失敗。</entry>
@@ -1275,7 +1275,7 @@
     <entry lang="en" key="INVALID_TOKEN_KEYFILE_PATH">Security token keyfile path is invalid.</entry>
     <entry lang="en" key="SECURITY_TOKEN_ERROR">Security token error</entry>
     <entry lang="en" key="CKR_PIN_INCORRECT">Password for security token is incorrect.</entry>
-    <entry lang="en" key="CKR_DEVICE_MEMORY">The security token does not have enough memory/space to perform the requested operation.\n\nIf you are attempting to import a keyfile, you should select a smaller file or use a keyfile generated by VeraCrypt (select 'Tools' > 'Keyfile Generator').</entry>
+    <entry lang="en" key="CKR_DEVICE_MEMORY">The security token does not have enough memory/space to perform the requested operation.\n\nIf you are attempting to import a keyfile, you should select a smaller file or use a keyfile generated by VeraCrypt (select 'Tools' &gt; 'Keyfile Generator').</entry>
     <entry lang="en" key="ALL_TOKEN_SESSIONS_CLOSED">All open security token sessions have been closed.</entry>
     <entry lang="en" key="SELECT_TOKEN_KEYFILES">Select Security Token Keyfiles</entry>
     <entry lang="en" key="TOKEN_SLOT_ID">Slot</entry>
@@ -1300,8 +1300,8 @@
     <entry lang="en" key="MOUNTED_DEVICE_FORCED_READ_ONLY_WRITE_PROTECTION">Volume '%s' has been mounted as read-only because the operating system reported the host device to be write-protected.\n\nPlease note that some custom chipset drivers have been reported to cause writable media to falsely appear write-protected. This problem is not caused by VeraCrypt. It may be solved by updating or uninstalling any custom (non-Microsoft) chipset drivers that are currently installed on this system.</entry>
     <entry lang="en" key="LIMIT_ENC_THREAD_POOL_NOTE">Note that the Hyper-Threading technology provides multiple logical cores per a single physical core. When Hyper Threading is enabled, the number selected above represents the number of logical processors/cores.</entry>
     <entry lang="en" key="NUMBER_OF_THREADS">%d threads</entry>
-    <entry lang="en" key="DISABLED_HW_AES_AFFECTS_PERFORMANCE">Note that hardware-accelerated AES is disabled, which will affect benchmark results (worse performance).\n\nTo enable hardware acceleration, select 'Settings' > 'Performance' and enable the corresponding option.</entry>
-    <entry lang="en" key="LIMITED_THREAD_COUNT_AFFECTS_PERFORMANCE">Note that the number of threads is currently limited, which will affect benchmark results (worse performance).\n\nTo utilize the full potential of the processor(s), select 'Settings' > 'Performance' and disable the corresponding option.</entry>
+    <entry lang="en" key="DISABLED_HW_AES_AFFECTS_PERFORMANCE">Note that hardware-accelerated AES is disabled, which will affect benchmark results (worse performance).\n\nTo enable hardware acceleration, select 'Settings' &gt; 'Performance' and enable the corresponding option.</entry>
+    <entry lang="en" key="LIMITED_THREAD_COUNT_AFFECTS_PERFORMANCE">Note that the number of threads is currently limited, which will affect benchmark results (worse performance).\n\nTo utilize the full potential of the processor(s), select 'Settings' &gt; 'Performance' and disable the corresponding option.</entry>
     <entry lang="en" key="ASK_REMOVE_DEVICE_WRITE_PROTECTION">Do you want VeraCrypt to attempt to disable write protection of the partition/drive?</entry>
     <entry lang="en" key="CONFIRM_SETTING_DEGRADES_PERFORMANCE">WARNING: This setting may degrade performance.\n\nAre you sure you want to use this setting?</entry>
     <entry lang="en" key="HOST_DEVICE_REMOVAL_DISMOUNT_WARN_TITLE">Warning: VeraCrypt volume auto-dismounted</entry>
@@ -1378,7 +1378,7 @@
     <entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>
     <entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>
     <entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>
-    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
+    <entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 128 bytes.</entry>
     <entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>
     <entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>
     <entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>
@@ -1397,7 +1397,7 @@
     <entry lang="en" key="IDC_DISABLE_BOOT_LOADER_HASH_PROMPT">Do not request Hash algorithm in the pre-boot authentication screen</entry>
     <entry lang="en" key="KUZNYECHIK_HELP">Kuznyechik is a block cipher first published in 2015 and defined in the National Standard of the Russian Federation GOST R 34.12-2015 and also in RFC 7801. 256-bit key, 128-bit block. Mode of operation is XTS.</entry>
     <entry lang="en" key="CAMELLIA_HELP">Jointly developed by Mitsubishi Electric and NTT of Japan. First published on 2000. 256-bit key, 128-bit block. Mode of operation is XTS. It has been approved for use by the ISO/IEC, the European Union's NESSIE project and the Japanese CRYPTREC project.</entry>
-    <entry lang="en" key="TIME">Time</entry>
+    <entry lang="zh-tw" key="TIME">時間</entry>
     <entry lang="en" key="ITERATIONS">Iterations</entry>
     <entry lang="en" key="PRE-BOOT">Pre-Boot</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_INFO">Before you can encrypt the partition, you must create a VeraCrypt Rescue Disk (VRD), which serves the following purposes:\n\n- If the VeraCrypt Boot Loader, master key, or other critical data gets damaged, the VRD allows you to restore it (note, however, that you will still have to enter the correct password then).\n\n- If Windows gets damaged and cannot start, the VRD allows you to permanently decrypt the partition before Windows starts.\n\n- The VRD will contain a backup of the present EFI boot loader and will allow you to restore it if necessary.\n\nThe VeraCrypt Rescue Disk ZIP image will be created in the location specified below.</entry>
@@ -1405,9 +1405,9 @@
     <entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NO_CHECK">The Rescue Disk ZIP image has been created and stored in this file:\n%s\n\nNow you should either extract the image to a USB stick that is formatted as FAT/FAT32 or move it to a safe location for later use.\n\n%lsClick Next to continue.</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NOTE">IMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\n</entry>
     <entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>
-    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>
-    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
-	<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
+    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' &gt; 'Create Rescue Disk'.</entry>
+    <entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' &gt; 'Verify Rescue Disk' to verify that it has been correctly created.</entry>
+    <entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>
     <entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>
     <entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>
     <entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>
@@ -1415,18 +1415,29 @@
     <entry lang="en" key="EFI_PLATFORM_INFORMATION">EFI Platform Information</entry>
     <entry lang="en" key="EDIT_DCSPROP_FOR_ADVANCED_ONLY">WARNING: Inexperienced users should never attempt to manually edit boot loader configurations.\n\nContinue?</entry>
     <entry lang="en" key="DCSPROP_XML_VALIDATION_FAILED">WARNING: Failed to validate the XML format of the Boot Loader configuration. Please check your modifications.</entry>
-    <entry lang="en" key="IDT_ADVANCED_OPTIONS">Advanced Options</entry>
-    <entry lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' > 'Create Rescue Disk'.\nDo you want to do it now?</entry>
+    <entry lang="zh-tw" key="IDT_ADVANCED_OPTIONS">進階選項</entry>
+    <entry lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' &gt; 'Create Rescue Disk'.\nDo you want to do it now?</entry>
     <entry lang="en" key="IDC_ALLOW_TRIM_NONSYS_SSD">Allow TRIM command for non-system SSD partition/drive</entry>
     <entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>
     <entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>
     <entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>
-	<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 64 characters</entry>
-	<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 64 characters.\nNo additional character is allowed.</entry>
-	<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
-	<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
+    <entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is 128 characters</entry>
+    <entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of 128 characters.\nNo additional character is allowed.</entry>
+    <entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>
+    <entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>
     <entry lang="en" key="IDC_ALLOW_WINDOWS_DEFRAG">Allow Windows Disk Defragmenter to defragment non-system partition/drive</entry>    
     <entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>
+    <entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>
+    <entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>
+    <entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>
+    <entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>
+    <entry lang="en" key="STARTING">Starting</entry>
+    <entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>
+    <entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>
+    <entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>
+    <entry lang="en" key="IDT_BENCHMARK">Benchmark:</entry>
+    <entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>
+    <entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>
   </localization>
   <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
     <xs:element name="VeraCrypt">
@@ -1470,4 +1481,4 @@
       </xs:complexType>
     </xs:element>
   </xs:schema>
-</VeraCrypt>
+</VeraCrypt>

doc/chm/VeraCrypt.hhp

@@ -62,6 +62,7 @@ Digital Signatures.html
 Disclaimers.html
 Documentation.html
 Donation.html
+Donation_donate.gif
 Donation_donate_CHF.gif
 Donation_donate_Dollars.gif
 Donation_donate_Euros.gif

doc/html/Command Line Usage.html

@@ -37,7 +37,7 @@
 <h1>Command Line Usage</h1>
 <p>Note that this section applies to the Windows version of VeraCrypt. For information on command line usage applying to the
 <strong>Linux and Mac OS X versions</strong>, please run: veracrypt &ndash;h</p>
-<table border="1" cellspacing="0" cellpadding="0">
+<table border="1" cellspacing="0" cellpadding="1">
 <tbody>
 <tr>
 <td><em>/help</em> or <em>/?</em></td>
@@ -123,6 +123,7 @@ If it is followed by <strong>n</strong> or <strong>no</strong>: the password dia
 <td><em>/cache</em> or <em>/c</em></td>
 <td>If it is followed by <strong>y</strong> or <strong>yes</strong> or if no parameter is specified: enable password cache;
 <br>
+If it is followed by <strong>p </strong>or<strong> pim</strong>: enable both password and PIM cache (e.g., /c p).<br>
 If it is followed by <strong>n </strong>or<strong> no</strong>: disable password cache (e.g., /c n).<br>
 If it is followed by <strong>f </strong>or<strong> favorites</strong>: temporary cache password when mounting multiple favorites&nbsp; (e.g., /c f).<br>
 Note that turning the password cache off will not clear it (use /w to clear the password cache).</td>
@@ -170,11 +171,25 @@ Note that turning the password cache off will not clear it (use /w to clear the
 <p><strong>recovery</strong>: Do not verify any checksums stored in the volume header. This option should be used only when the volume header is damaged and the volume cannot be mounted even with the mount option headerbak. Example: /m ro</p>
 <p><strong>label=LabelValue</strong>: Use the given string value <strong>LabelValue</strong> as a label of the mounted volume in Windows Explorer. The maximum length for
 <strong>LabelValue&nbsp;</strong> is 32 characters for NTFS volumes and 11 characters for FAT volumes. For example,
-<em>/m label=MyDrive</em> will set the label of the drive in Explorer to <em>MyDrive</em>.<br>
-<br>
-Please note that this switch may be present several times in the command line in order to specify multiple mount options (e.g.: /m rm /m ts)</p>
+<em>/m label=MyDrive</em> will set the label of the drive in Explorer to <em>MyDrive</em>.</p>
+<p><strong>noattach</strong>: Only create virtual device without actually attaching the mounted volume to the selected drive letter.</p>
+<p>Please note that this switch may be present several times in the command line in order to specify multiple mount options (e.g.: /m rm /m ts)</p>
 </td>
 </tr>
+<tr>
+<td><em>/DisableDeviceUpdate</em>&nbsp;</td>
+<td>Disables periodic internel check on devices connected to the system that is used for handling favorites identified with VolumeID and replace it with on-demande checks.</td>
+</tr>
+<tr>
+<td><em>/protectMemory</em>&nbsp;</td>
+<td>Activates a mechanism that protects VeraCrypt process memory from being accessed by other non-admin processes.</td>
+</tr>
+<tr>
+<td><em>/signalExit</em>&nbsp;</td>
+<td>It must be followed by a parameter specifying the name of the signal to send to unblock a waiting <a href="https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/waitfor" target="_blank">WAITFOR.EXE</a> command when VeraCrypt exists.<br>
+The name of signal must be the same as the one specified to WAITFOR.EXE command (e.g."veracrypt.exe /q /v test.hc /l Z /signal SigName" followed by "waitfor.exe SigName"<br>
+This switch is ignored if /q is not specified</td>
+</tr>
 </tbody>
 </table>
 <h4>VeraCrypt Format.exe (VeraCrypt Volume Creation Wizard):</h4>
@@ -209,7 +224,13 @@ It must be followed by a parameter indicating the PRF hash algorithm to use when
 <td>(Only with /create)<br>
 It must be followed by a parameter indicating the encryption algorithm to use. The default is AES if this switch is not specified. The parameter can have the following values (case insensitive):
 <ul>
-<li>AES </li><li>Serpent </li><li>Twofish </li><li>AES(Twofish) </li><li>AES(Twofish(Serpent)) </li><li>Serpent(AES) </li><li>Serpent(Twofish(AES)) </li><li>Twofish(Serpent) </li></ul>
+<li>AES </li><li>Serpent </li><li>Twofish </li><li>Camellia </li><li>Kuznyechik </li><li>AES(Twofish) </li><li>AES(Twofish(Serpent)) </li><li>Serpent(AES) </li><li>Serpent(Twofish(AES)) </li><li>Twofish(Serpent) </li>
+<li>Camellia(Kuznyechik) </li>
+<li>Kuznyechik(Twofish) </li>
+<li>Camellia(Serpent) </li>
+<li>Kuznyechik(AES) </li>
+<li>Kuznyechik(Serpent(Camellia)) </li>
+</ul>
 </td>
 </tr>
 <tr>
@@ -218,7 +239,10 @@ It must be followed by a parameter indicating the encryption algorithm to use. T
 It must be followed by a parameter indicating the file system to use for the volume. The parameter can have the following values:
 <ul>
 <li>None: don't use any filesystem </li><li>FAT: format using FAT/FAT32 </li><li>NTFS: format using NTFS. Please note that in this case a UAC prompt will be displayed unless the process is run with full administrative privileges.
-</li></ul>
+</li>
+<li>ExFAT: format using ExFAT. This switch is available starting from Windows Vista SP1 </li>
+<li>ReFS: format using ReFS. This switch is available starting from Windows 10 </li>
+</ul>
 </td>
 </tr>
 <tr>
@@ -241,13 +265,29 @@ It has no parameters and it indicates that no message box or dialog will be disp
 <td>Do not verify that VeraCrypt Rescue Disks are correctly burned. <strong>WARNING</strong>: Never attempt to use this option to facilitate the reuse of a previously created VeraCrypt Rescue Disk. Note that every time you encrypt a system partition/drive,
  you must create a new VeraCrypt Rescue Disk even if you use the same password. A previously created VeraCrypt Rescue Disk cannot be reused as it was created for a different master key.</td>
 </tr>
+<tr>
+<td>/nosizecheck</td>
+<td>Don't check that the given size of the file container is smaller than the available disk free. This applies to both UI and command line.</td>
+</tr>
+<tr>
+<td>/quick</td>
+<td>Perform quick formatting of volumes instead of full formatting. This applies to both UI and command line.</td>
+</tr>
+<tr>
+<td>/FastCreateFile</td>
+<td>Use a faster but potentially insecure way to create file containers. This applies to both UI and command line.</td>
+</tr>
+<tr>
+<td><em>/protectMemory</em>&nbsp;</td>
+<td>Activates a mechanism that protects VeraCrypt Format process memory from being accessed by other non-admin processes.</td>
+</tr>
 </tbody>
 </table>
 <h4>Syntax</h4>
-<p>VeraCrypt.exe [/tc] [/hash {sha256|sha-256|sha512|sha-512|whirlpool |ripemd160|ripemd-160}][/a [devices|favorites]] [/b] [/c [y|n|f]] [/d [drive letter]] [/e] [/f] [/h [y|n]] [/k keyfile or search path] [tryemptypass [y|n]] [/l drive letter] [/m {bk|rm|recovery|ro|sm|ts}]
+<p>VeraCrypt.exe [/tc] [/hash {sha256|sha-256|sha512|sha-512|whirlpool |ripemd160|ripemd-160}][/a [devices|favorites]] [/b] [/c [y|n|f]] [/d [drive letter]] [/e] [/f] [/h [y|n]] [/k keyfile or search path] [tryemptypass [y|n]] [/l drive letter] [/m {bk|rm|recovery|ro|sm|ts|noattach}]
  [/p password] [/pim pimvalue] [/q [background|preferences]] [/s] [/tokenlib path] [/v volume] [/w]</p>
-<p>&quot;VeraCrypt Format.exe&quot; [/n] [/create] [/size number[{K|M|G|T}]] [/p password]&nbsp; [/encryption {AES | Serpent | Twofish | AES(Twofish) | AES(Twofish(Serpent)) | Serpent(AES) | Serpent(Twofish(AES)) | Twofish(Serpent)}] [/hash {sha256|sha-256|sha512|sha-512|whirlpool|ripemd160|ripemd-160}]
- [/filesystem {None|FAT|NTFS}] [/dynamic] [/force] [/silent]</p>
+<p>&quot;VeraCrypt Format.exe&quot; [/n] [/create] [/size number[{K|M|G|T}]] [/p password]&nbsp; [/encryption {AES | Serpent | Twofish | Camellia | Kuznyechik | AES(Twofish) | AES(Twofish(Serpent)) | Serpent(AES) | Serpent(Twofish(AES)) | Twofish(Serpent) | Camellia(Kuznyechik) | Kuznyechik(Twofish) | Camellia(Serpent) | Kuznyechik(AES) | Kuznyechik(Serpent(Camellia))}] [/hash {sha256|sha-256|sha512|sha-512|whirlpool|ripemd160|ripemd-160}]
+ [/filesystem {None|FAT|NTFS|ExFAT|ReFS}] [/dynamic] [/force] [/silent] [/noisocheck] [FastCreateFile] [/quick]</p>
 <p>Note that the order in which options are specified does not matter.</p>
 <h4>Examples</h4>
 <p>Mount the volume <em>d:\myvolume</em> as the first free drive letter, using the password prompt (the main program window will not be displayed):</p>

doc/html/Digital Signatures.html

@@ -98,8 +98,8 @@ Note: If you skip this step and attempt to verify any of our PGP signatures, you
 </ol>
 <p>Under Linux, these steps can be achieved using the following commands:</p>
 <ul>
-<li>Check that the fingerprint of the public key is <strong>5069A233D55A0EEB174A5FC3821ACD02680D16DE</strong>:
-<strong>gpg --with-fingerprint VeraCrypt_PGP_public_key.asc</strong> </li><li>If the fingerprint is the expected one, import the public key: <strong>gpg --import VeraCrypt_PGP_public_key.asc</strong>
+<li>Check that the fingerprint of the public key is <strong>5069A233D55A0EEB174A5FC3821ACD02680D16DE</strong>:<strong>gpg --import --import-options show-only VeraCrypt_PGP_public_key.asc</strong> (for older gpg versions, type instead: 
+<strong>gpg --with-fingerprint VeraCrypt_PGP_public_key.asc</strong>)</li><li>If the fingerprint is the expected one, import the public key: <strong>gpg --import VeraCrypt_PGP_public_key.asc</strong>
 </li><li>Verify the signature of the Linux setup archive (here for version 1.23): <strong>
 gpg --verify veracrypt-1.23-setup.tar.bz2.sig veracrypt-1.23-setup.tar.bz2</strong>
 </li></ul>

doc/html/Donation.html

@@ -56,6 +56,10 @@
 </tbody>
 </table>
 
+<p>For other currencies, click on the button below and then select your currency using the drop-down list under the amount.</p>
+<a title="VeraCrypt Donation in any currency" href="https://www.paypal.me/idrix" target="_blank"><img src="Donation_donate.gif" alt="" width="92" height="26"></a>
+
+
 <hr>
 <h3><a href="Donation_Bank.html"><img src="bank_30x30.png" style="margin-right: 5px"></a>Bank Transfer</h3>
 <p>You can use <a href="Donation_Bank.html">IDRIX bank details available here</a> to send your donations using bank transfers.
@@ -64,7 +68,7 @@
 <h3>Donation Platforms:</h3>
 <ul>
 <li><strong>Liberapay: <a href="https://liberapay.com/VeraCrypt/donate" target="_blank"><img alt="Donate using Liberapay" src="liberapay_donate.svg" style="vertical-align: middle; margin-bottom: 5px"></a></strong></li>
-<li><strong>Flattr: <a title="Donate using Flattr" href="https://flattr.com/submit/auto?user_id=idrix&url=https://www.veracrypt.fr&title=VeraCrypt" target="_blank"><img title="Flattr VeraCrypt" src="flattr-badge-large.png" alt="Flattr VeraCrypt" width="93" height="20" border="0" style="vertical-align: middle; margin-bottom: 5px"></a></strong></li>
+<li><strong>Flattr: <a title="Donate using Flattr" href="https://flattr.com/domain/veracrypt.fr" target="_blank"><img title="Flattr VeraCrypt" src="flattr-badge-large.png" alt="Flattr VeraCrypt" width="93" height="20" border="0" style="vertical-align: middle; margin-bottom: 5px"></a></strong></li>
 </ul>
 
 <hr>
@@ -75,7 +79,7 @@
 <hr>
 <h3 id="BitcoinCash"><img src="BCH_Logo_48x30.png" style="vertical-align: middle; margin-right: 5px">Bitcoin Cash</h3>
 <p><img src="Donation_VeraCrypt_BitcoinCash.png" alt="VeraCrypt Bitcoin Cash Address" width="150" height="150"></p>
-<p><strong>1AYu65KkZvriz2DUd6FJJZp73NYqEdHzxa</strong></p>
+<p><strong>bitcoincash:qp5vrqwln247f7l9p98ucj4cqye0cjcyusc94jlpy9</strong></p>
 
 <hr>
 <h3 id="Ethereum"><img src="Ethereum_Logo_19x30.png" style="vertical-align: middle; margin-right: 5px">Ethereum</h3>

doc/html/Donation_Bank.html

@@ -28,7 +28,7 @@
 <div class="wikidoc">
 <h1>Donation to VeraCrypt using bank transfer</h1>
 <p>You can support VeraCrypt development through donations using bank transfers to one of IDRIX bank accounts below, depending on the currency used.<br>
-The supported currencies are <a href="#Euro">Euro<img src="flag-eu-small.png" style="vertical-align: top; margin-left: 5px"></a>, <a href="#USD">US Dollars<img src="flag-us-small.png" style="vertical-align: top; margin-left: 5px"></a>, <a href="#GBP">British Pound<img src="flag-gb-small.png" style="vertical-align: top; margin-left: 5px"></a> and <a href="#AUD">Australian Dollars<img src="flag-au-small.png" style="vertical-align: top; margin-left: 5px"></a>.<br>
+The supported currencies are <a href="#Euro">Euro<img src="flag-eu-small.png" style="vertical-align: top; margin-left: 5px"></a>, <a href="#USD">US Dollar<img src="flag-us-small.png" style="vertical-align: top; margin-left: 5px"></a>, <a href="#GBP">British Pound<img src="flag-gb-small.png" style="vertical-align: top; margin-left: 5px"></a>, <a href="#AUD">Australian Dollar<img src="flag-au-small.png" style="vertical-align: top; margin-left: 5px"></a> and <a href="#NZD">New Zealand Dollar<img src="flag-nz-small.png" style="vertical-align: top; margin-left: 5px"></a>.<br>
 Please <a href="Contact.html" target="_blank.html">contact us</a> if you need an official invoice for your donation.</p>
 <hr>
 <h3 id="Euro"><img src="flag-eu.png" style="vertical-align: middle; margin-right: 5px">Euro SEPA Bank Details</h3>
@@ -37,17 +37,18 @@ Account Holder: IDRIX SARL<br>
 IBAN: DE54 7001 1110 6051 5480 84<br>
 Bank code (SWIFT / BIC): DEKTDE7GXXX<br>
 Address: Handelsbank, Elsenheimer Str. 41, München 80687, Germany<br>
-Reference: VeraCrypt Donation<br>
+Reference: Open Source Donation<br>
 <hr>
 
-<h3 id="USD"><img src="flag-us.png" style="vertical-align: middle; margin-right: 5px">US Dollars Bank Details</h3>
+<h3 id="USD"><img src="flag-us.png" style="vertical-align: middle; margin-right: 5px">US Dollar Bank Details</h3>
 <p>Accepted payment types are Wire, ACH and SWIFT/International Wire.</p>
 Account Holder: IDRIX SARL<br>
 Account number: 8310085792<br>
-ACH Routing Number: 026073150<br>
-Wire Routing Number: 026073008<br>
+Routing number (ACH or ABA): 026073150<br>
+Wire transfer number: 026073008<br>
+Bank code (SWIFT/BIC): CMFGUS33<br>
 Address: TransferWise, 19 W 24th Street, New York, NY, 10010, United States<br>
-Reference: VeraCrypt Donation<br>
+Reference: Open Source Donation<br>
 <hr>
 
 <h3 id="GBP"><img src="flag-gb.png" style="vertical-align: middle; margin-right: 5px">British Pound Bank Details</h3>
@@ -56,18 +57,42 @@ Reference: VeraCrypt Donation<br>
 Account Holder: IDRIX SARL<br>
 Account number: 56385007<br>
 UK Sort Code: 23-14-70<br>
+IBAN (to receive GBP from UK only): GB18 TRWI 2314 7056 3850 07<br>
 Address: TransferWise, 56 Shoreditch High Street, London, E1 6JJ, United Kingdom<br>
-Reference: VeraCrypt Donation<br>
+Reference: Open Source Donation<br>
 <hr>
 
-<h3 id="AUD"><img src="flag-au.png" style="vertical-align: middle; margin-right: 5px">Australian Dollars Bank Details</h3>
+<h3 id="AUD"><img src="flag-au.png" style="vertical-align: middle; margin-right: 5px">Australian Dollar Bank Details</h3>
 <p>Accepted payment types to this account are local AUD bank transfers only.</p>
 Account Holder: IDRIX SARL<br>
-Account number: 811079213<br>
-BSB Code: 082-182<br>
-Address: TransferWise, 800 Bourke Street, Melbourne VIC 3008, Autralia.<br>
-Reference: VeraCrypt Donation<br>
+Account number: 711714051<br>
+BSB Code: 802-985<br>
+Address: TransferWise, 36-38 Gipps Street, Collingwood VIC 3066, Autralia.<br>
+Reference: Open Source Donation<br>
 <hr>
+
+<h3 id="NZD"><img src="flag-nz.png" style="vertical-align: middle; margin-right: 5px">New Zealand Dollar Bank Details</h3>
+<p>Accepted payment types to this account are local NZD bank transfers only.</p>
+Account Holder: IDRIX SARL<br>
+Account number: 02-1291-0218919-000<br>
+Address: TransferWise, 56 Shoreditch High Street, London, E1 6JJ, United Kingdom<br>
+Reference: Open Source Donation<br>
+<hr>
+
+<p>&nbsp;</p>
+<p>&nbsp;</p>
+<p>&nbsp;</p>
+<p>&nbsp;</p>
+<p>&nbsp;</p>
+<p>&nbsp;</p>
+<p>&nbsp;</p>
+<p>&nbsp;</p>
+<p>&nbsp;</p>
+<p>&nbsp;</p>
+<p>&nbsp;</p>
+<p>&nbsp;</p>
+<p>&nbsp;</p>
+<p>&nbsp;</p>
 <p>&nbsp;</p>
 <p>&nbsp;</p>
 <p>&nbsp;</p>

doc/html/Favorite Volumes.html

@@ -35,7 +35,7 @@
 </p></div>
 
 <div class="wikidoc">
-<h2 style="text-align:left; font-family:Arial,Helvetica,Verdana,sans-serif; font-weight:bold; margin-top:0px; font-size:14px; margin-bottom:17px">
+<h2 style="text-align:left; font-family:Arial,Helvetica,Verdana,sans-serif; font-weight:bold; margin-top:0px; margin-bottom:17px">
 Favorite Volumes</h2>
 <div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
 <p>Favorite volumes are useful, for example, in any the following cases:</p>
@@ -46,6 +46,9 @@ Favorite Volumes</h2>
 </li><li>You have a volume that needs to be <strong>automatically mounted when you log on
 </strong>to the operating system. </li><li>You have a volume that always needs to be <strong>mounted as read-only </strong>
 or removable medium. </li></ul>
+<p>
+<strong>Note: </strong>Please refer to <a href="Issues%20and%20Limitations.html">Known Issues and Limitations</a> section for issues that may affect favorite volumes when Windows "Fast Startup" feature is enabled.
+</p>
 <h3>To configure a VeraCrypt volume as a favorite volume, follow these steps:</h3>
 <ol>
 <li>Mount the volume (to the drive letter to which you want it to be mounted every time).

doc/html/Issues and Limitations.html

@@ -36,7 +36,7 @@
 <h1>Known Issues &amp; Limitations</h1>
 <h3>Known Issues</h3>
 <ul>
-<li>On Windows, it may happen that two drive letters are assigned to a mounted volume instead of a single one. This is caused by an issue with Windows Mount Manager cache and it can be solve by typing the command &quot;<strong>mountvol.exe /r</strong>&quot; in an elevated
+<li>On Windows, it may happen that two drive letters are assigned to a mounted volume instead of a single one. This is caused by an issue with Windows Mount Manager cache and it can be solved by typing the command &quot;<strong>mountvol.exe /r</strong>&quot; in an elevated
  command prompt (run as an administrator) before mounting any volume. If the issue persists after rebooting, the following procedure can be used to solve it:
 <ul>
 <li>Check the registry key &quot;HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices&quot; using regedit. Scroll down and you'll find entries starting with &quot;\DosDevices\&quot; or &quot;\Global??\&quot; which indicate the drive letters that are taken by the system. Before mounting any volume,
@@ -45,7 +45,7 @@
 Also, there are other entries whose name start with &quot;#{&quot; and &quot;\??\Volume{&quot;: double click on each one of them and remove the ones whose data value contains the name &quot;VeraCrypt&quot; and &quot;TrueCrypt&quot;.
 </li></ul>
 </li>
-<li>On some Windows machines, VeraCrypt may hang intermittently when mounting or dismounting a volume. Similar hanging may affect other running applications during veraCrypt mounting or dismounting operations.
+<li>On some Windows machines, VeraCrypt may hang intermittently when mounting or dismounting a volume. Similar hanging may affect other running applications during VeraCrypt mounting or dismounting operations.
 This issue is caused by a conflict between VeraCrypt waiting dialog displayed during mount/dismount operations and other software installed on the machine (e.g. Outpost Firewall Pro).
 In such situations, the issue can be solved by disabling VeraCrypt waiting dialog in the Preferences: use menu "Settings -> Preferences" and check the option "Don't show wait message dialog when performing operations".
 </li>

doc/html/Keyfiles.html

@@ -40,7 +40,7 @@
 <p>VeraCrypt keyfile is a file whose content is combined with a password. The user can use any kind of file as a VeraCrypt keyfile. The user can also generate a keyfile using the built-in keyfile generator, which utilizes the VeraCrypt RNG to generate a file
  with random content (for more information, see the section <a href="Random%20Number%20Generator.html">
 <em>Random Number Generator</em></a>).</p>
-<p>The maximum size of a keyfile is not limited; however, only its first 1,048,576 bytes (1 MB) are processed (all remaining bytes are ignored due to performance issues connected with processing extremely large files). The user can supply one or more keyfiles
+<p>The maximum size of a keyfile is not limited; however, only its first 1,048,576 bytes (1 MiB) are processed (all remaining bytes are ignored due to performance issues connected with processing extremely large files). The user can supply one or more keyfiles
  (the number of keyfiles is not limited).</p>
 <p>Keyfiles can be stored on PKCS-11-compliant [23] security tokens and smart cards protected by multiple PIN codes (which can be entered either using a hardware PIN pad or via the VeraCrypt GUI).</p>
 <p>Keyfiles are processed and applied to a password using the following method:</p>
@@ -78,4 +78,4 @@ Note that if the password was shorter than the keyfile pool, then the password w
 <p>&nbsp;</p>
 <p><a href="Personal%20Iterations%20Multiplier%20%28PIM%29.html" style="text-align:left; color:#0080c0; text-decoration:none; font-weight:bold.html">Next Section &gt;&gt;</a></p>
 </div>
-</div><div class="ClearBoth"></div></body></html>
+</div><div class="ClearBoth"></div></body></html>

doc/html/Legal Information.html

@@ -43,10 +43,10 @@ can be found here</a>.</p>
 <h3>Copyright Information</h3>
 <p>This software as a whole:<br>
 <br>
-Copyright &copy; 2013-2018 IDRIX. All rights reserved.<br>
+Copyright &copy; 2013-2019 IDRIX. All rights reserved.<br>
 <br>
 Portions of this software:</p>
-<p>Copyright &copy; 2013-2018 IDRIX. All rights reserved.<br>
+<p>Copyright &copy; 2013-2019 IDRIX. All rights reserved.<br>
 <br>
 Copyright &copy; 2003-2012 TrueCrypt Developers Association. All rights reserved.</p>
 <p>Copyright &copy; 1998-2000 Paul Le Roux. All rights reserved.<br>
@@ -56,7 +56,8 @@ Copyright &copy; 1998-2008 Brian Gladman, Worcester, UK. All rights reserved.</p
 <p>Copyright &copy; 2016 Disk Cryptography Services for EFI (DCS), Alex Kolotnikov</p>
 <p>Copyright &copy; 1999-2017 Dieter Baron and Thomas Klausner.</p>
 <p>Copyright &copy; 2013, Alexey Degtyarev. All rights reserved.</p>
-<p>Copyright &copy; 1999-2016 Jack Lloyd. All rights reserved.<br>
+<p>Copyright &copy; 1999-2016 Jack Lloyd. All rights reserved.</p>
+<p>Copyright &copy; 2013-2018 Stephan Mueller &lt;smueller@chronox.de&gt;</p>
 <br>
 For more information, please see the legal notices attached to parts of the source code.</p>
 <h3>Trademark Information</h3>

doc/html/Personal Iterations Multiplier (PIM).html

@@ -79,7 +79,7 @@ Motivations behind using a custom PIM value can be:<br>
 <td><img src="Personal Iterations Multiplier (PIM)_VeraCrypt_UsePIM_Step1.png" alt="" width="499" height="205"></td>
 </tr>
 <tr>
-<td><img src="Personal Iterations Multiplier (PIM)_VeraCrypt_UsePIM_Step1.png" alt="" width="499" height="205"></td>
+<td><img src="Personal Iterations Multiplier (PIM)_VeraCrypt_UsePIM_Step2.png" alt="" width="499" height="205"></td>
 </tr>
 </tbody>
 </table>

doc/html/Release Notes.html

@@ -35,6 +35,233 @@
 <div class="wikidoc">
 <h1>Release Notes</h1>
 
+<p>
+<strong>Note to users who created volumes with 1.17 version of VeraCrypt or earlier: </strong><br/>
+<span style="color:#ff0000;">To avoid hinting whether your volumes contain a hidden volume or not, or if you depend on plausible deniability when using hidden volumes/OS, then you must recreate both the outer and hidden volumes including system encryption and hidden OS, discarding existing volumes created prior to 1.18a version of VeraCrypt.</span></li>
+</p>
+
+<p><strong style="text-align:left">1.24-Update4 </strong>(January 23<sup>rd</sup>, 2020):</p>
+<ul>
+<li><strong>Windows:</strong>
+<ul>
+<li>Fix regression in Expander and Format when RAM encryption is enable that was causing volume headers to be corrupted.</li>
+<li>Fix failure of Screen Readers (Accessibility support) to read UI by disabling newly introduced memory protection by default and adding a CLI switch (/protectMemory) to enable it when needed.</li>
+<li>Fix side effects related to the fix for CVE-2019-19501 which caused links in UI not to open.</li>
+<li>Add switch /signalExit to support notifying <a href="https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/waitfor" target="_blank">WAITFOR</a> Windows command when VeraCrypt.exe exits if /q was specified in CLI (cf documentation for usage).</li>
+<li>Don't display mount/dismount examples in help dialog for command line in Format and Expander.</li>
+<li>Documentation and translation updates.</li>
+</ul>
+</li>
+<li><strong>Linux:</strong>
+<ul>
+<li>Fix regression that limited the size available for hidden volumes created on disk or partition.</li>
+</ul>
+</li>
+<li><strong>MacOSX:</strong>
+<ul>
+<li>Fix regression that limited the size available for hidden volumes created on disk or partition.</li>
+</ul>
+</li>
+</ul>
+
+<p><strong style="text-align:left">1.24-Update3 </strong>(December 21<sup>nd</sup>, 2019):</p>
+<ul>
+<li><strong>Linux:</strong>
+<ul>
+<li>Fix console-only build to remove dependency on GTK that is not wanted on headless servers.</li>
+</ul>
+</li>
+</ul>
+
+<p><strong style="text-align:left">1.24-Update2 </strong>(December 16<sup>th</sup>, 2019):</p>
+<ul>
+<li><strong>All OSes:</strong>
+<ul>
+<li>clear AES key from stack memory when using non-optimized implementation. Doesn't apply to VeraCrypt official build (Reported and fixed by Hanno Böck)</li>
+<li>Update Jitterentropy RNG Library to version 2.2.0</li>
+<li>Start following IEEE 1541 agreed naming of bytes (KiB, MiB, GiB, TiB, PiB).</li>
+<li>Various documentation enhancements.</li>
+</ul>
+</li>
+<li><strong>Windows:</strong>
+<ul>
+<li>Fix possible local privilege escalation vulnerability during execution of VeraCrypt Expander (CVE-2019-19501)</li>
+<li>MBR bootloader:
+<ul>
+<li>workaround for SSD disks that don't allow write operations in BIOS mode with buffers less than 4096 bytes.</li>
+<li>Don't restore MBR to VeraCrypt value if it is coming from a loader different from us or different from Microsoft one.</li>
+</ul>
+</li>
+<li>EFI bootloader:
+<ul>
+<li>Fix "ActionFailed" not working and add "ActionCancelled" to customize handling of user hitting ESC on password prompt</li>
+<li>Fix F5 showing previous password after failed authentication attempt. Ensure that even wrong password value are cleared from memory.</li>
+</ul>
+</li>
+<li>Fix multi-OS boot compatibility by only setting VeraCrypt as first bootloader of the system if the current first bootloader is Windows one.</li>
+<li>Add new registry flags for SystemFavoritesService to control updating of EFI BIOS boot menu on shutdown.</li>
+<li>Allow system encrypted drive to be mounted in WindowsPE even if changing keyboard layout fails (reported and fixed by Sven Strickroth)</li>
+<li>Enhancements to the mechanism preserving file timestamps, especially for keyfiles.</li>
+<li>Fix RDRAND instruction not detected on AMD CPUs.</li>
+<li>Detect cases where RDRAND is flawed (e.g. AMD Ryzen) to avoid using it if enabled by user.</li>
+<li>Don't write extra 0x00 byte at the end of DcsProp file when modifying it through UI</li>
+<li>Reduce memory usage of IOCTL_DISK_VERIFY handler used in disk verification by Windows.</li>
+<li>Add switch /FastCreateFile for VeraCrypt Format.exe to speedup creation of large file container if quick format is selected.</li>
+<li>Fix the checkbox for skipping verification of Rescue Disk not reflecting the value of /noisocheck switch specified in VeraCrypt Format command line.</li>
+<li>check "TrueCrypt Mode" in password dialog when mounting a file container with .tc extension</li>
+<li>Update XML languages files.</li>
+</ul>
+</li>
+<li><strong>Linux:</strong>
+<ul>
+<li>Fix regression causing admin password to be requested too many times in some cases</li>
+<li>Fix off by one buffer overflow in function Process::Execute (Reported and fixed by Hanno Böck)</li>
+<li>Make sure password gets deleted in case of internal error when mounting volume (Reported and fixed by Hanno Böck)</li>
+<li>Fix passwords using Unicode characters not recognized in text mode.</li>
+<li>Fix failure to run VeraCrypt binary built for console mode on headless machines.</li>
+<li>Add switch to force the use of legacy maximum password length (64 UTF8 bytes)</li>
+<li>Add CLI switch (--use-dummy-sudo-password) to force use of old sudo behavior of sending a dummy password</li>
+<li>During uninstall, output error message to STDERR instead of STDOUT for better compatibility with package managers.</li>
+<li>Make sector size mismatch error when mounting disks more verbose.</li>
+<li>Speedup SHA256 in 64-bit mode by using assembly code.</li>
+</ul>
+</li>
+<li><strong>MacOSX:</strong>
+<ul>
+<li>Add switch to force the use of legacy maximum password length (64 UTF8 bytes)</li>
+<li>Fix off by one buffer overflow in function Process::Execute (Reported and fixed by Hanno Böck)</li>
+<li>Fix passwords using Unicode characters not recognized in text mode.</li>
+<li>Make sector size mismatch error when mounting disks more verbose.</li>
+<li>Speedup SHA256 in 64-bit mode by using assembly code.</li>
+<li>Link against latest wxWidgets version 3.1.3</li>
+</ul>
+</li>
+</ul>
+
+
+<p><strong style="text-align:left">1.24-Hotfix1 </strong>(October 27<sup>rd</sup>, 2019):</p>
+<ul>
+<li><strong>Windows:</strong>
+<ul>
+<li>Fix 1.24 regression that caused system favorites not to mount at boot if VeraCrypt freshly installed.</li>
+<li>Fix failure to encrypt system if the current Windows username contains a Unicode non-ASCII character.</li>
+<li>Make VeraCrypt Expander able to resume expansion of volumes whose previous expansion was aborted before it finishes.</li>
+<li>Add "Quick Expand" option to VeraCrypt Expander to accelarate the expansion of large file containers.</li>
+<li>Add several robustness checks and validation in case of system encryption to better handle some corner cases.</li>
+<li>Minor UI and documentation changes.</li>
+</ul>
+</li>
+<li><strong>Linux:</strong>
+<ul>
+<li>Workaround gcc 4.4.7 bug under CentOS 6 that caused VeraCrypt built under CentOS 6 to crash when Whirlpool hash is used.</li>
+<li>Fix "incorrect password attempt" written to /var/log/auth.log when mounting volumes.</li>
+<li>Fix dropping file in UI not showing its correct path , specifically under GTK-3.</li>
+<li>Add missing JitterEntropy implementation/</li>
+</ul>
+</li>
+<li><strong>MacOSX:</strong>
+<ul>
+<li>Fix some devices and partitions not showing in the device selection dialog under OSX 10.13 and newer.</li>
+<li>Fix keyboard tab navigation between password fields in "Volume Password" page of volume creation wizard.</li>
+<li>Add missing JitterEntropy implementation/</li>
+<li>Support APFS filesystem for creation volumes.</li>
+<li>Support Dark Mode.</li>
+</ul>
+</li>
+</ul>
+
+
+<p><strong style="text-align:left">1.24 </strong>(October 6<sup>th</sup>, 2019):</p>
+<ul>
+<li><strong>All OSs:</strong>
+<ul>
+<li>Increase password maximum length to 128 bytes in UTF-8 encoding for non-system volumes.</li>
+<ul>
+<li>Add option to use legacy maximum password length (64) instead of new one for compatibility reasons.</li>
+</ul>
+<li>Use Hardware RNG based on CPU timing jitter "Jitterentropy" by Stephan Mueller as a good alternative to CPU RDRAND (<a href="http://www.chronox.de/jent.html" target="_blank">http://www.chronox.de/jent.html</a>)</li>
+<li>Speed optimization of XTS mode on 64-bit machine using SSE2 (up to 10% faster).</li>
+<li>Fix detection of CPU features AVX2/BMI2. Add detection of RDRAND/RDSEED CPU features. Detect Hygon CPU as AMD one.</li>
+</ul>
+</li>
+<li><strong>Windows:</strong>
+<ul>
+<li>Implement RAM encryption for keys and passwords using ChaCha12 cipher, t1ha non-cryptographic fast hash and ChaCha20 based CSPRNG.</li>
+<ul>
+<li>Available only on 64-bit machines.</li>
+<li>Disabled by default. Can be enabled using option in UI.</li>
+<li>Less than 10% overhead on modern CPUs.</li>
+<li>Side effect: Windows Hibernate is not possible if VeraCrypt System Encryption is also being used.</li>
+</ul>
+<li>Mitigate some memory attacks by making VeraCrypt applications memory inaccessible to non-admin users (based on KeePassXC implementation)</li>
+<li>New security features:</li>
+<ul>
+<li>Erase system encryption keys from memory during shutdown/reboot to help mitigate some cold boot attacks</li>
+<li>Add option when system encryption is used to erase all encryption keys from memory when a new device is connected to the system.</li>
+<li>Add new driver entry point that can be called by applications to erase encryption keys from memory in case of emergency.</li>
+</ul>
+<li>MBR Bootloader: dynamically determine boot loader memory segment instead of hardcoded values (proposed by neos6464)</li>
+<li>MBR Bootloader: workaround for issue affecting creation of hidden OS on some SSD drives.</li>
+<li>Fix issue related to Windows Update breaking VeraCrypt UEFI bootloader.</li>
+<li>Several enhancements and fixes for EFI bootloader:</li>
+<ul>
+<li>Implement timeout mechanism for password input. Set default timeout value to 3 minutes and default timeout action to "shutdown".</li>
+<li>Implement new actions "shutdown" and "reboot" for EFI DcsProp config file.</li>
+<li>Enhance Rescue Disk implementation of restoring VeraCrypt loader.</li>
+<li>Fix ESC on password prompt during Pre-Test not starting Windows.</li>
+<li>Add menu entry in Rescue Disk that enables starting original Windows loader.</li>
+<li>Fix issue that was preventing Streebog hash from being selected manually during Pre-Boot authentication.</li>
+<li>If "VeraCrypt" folder is missing from Rescue Disk, it will boot PC directly from bootloader stored on hard drive</li>
+<ul>
+<li>This makes it easy to create a bootable disk for VeraCrypt from Rescue Disk just by removing/renaming its "VeraCrypt" folder.</li>
+</ul>
+</ul>
+<li>Add option (disabled by default) to use CPU RDRAND or RDSEED as an additional entropy source for our random generator when available.</li>
+<li>Add mount option (both UI and command line) that allows mounting a volume without attaching it to the specified drive letter.</li>
+<li>Update libzip to version 1.5.2</li>
+<li>Do not create uninstall shortcut in startmenu when installing VeraCrypt. (by Sven Strickroth)</li>
+<li>Enable selection of Quick Format for file containers creation. Separate Quick Format and Dynamic Volume options in the wizard UI.</li>
+<li>Fix editor of EFI system encryption configuration file not accepting ENTER key to add new lines.</li>
+<li>Avoid simultaneous calls of favorites mounting, for example if corresponding hotkey is pressed multiple times.</li>
+<li>Ensure that only one thread at a time can create a secure desktop.</li> 
+<li>Resize some dialogs in Format and Mount Options to to fix some text truncation issues with non-English languages.</li>
+<li>Fix high CPU usage when using favorites and add switch to disable periodic check on devices to reduce CPU load.</li>
+<li>Minor UI changes.</li>
+<li>Updates and corrections to translations and documentation.</li>
+</ul>
+</li>
+<li><strong>MacOSX:</strong>
+<ul>
+<li>Add check on size of file container during creation to ensure it's smaller than available free disk space. Add CLI switch --no-size-check to disable this check.</li>
+</ul>
+</li>
+<li><strong>Linux:</strong>
+<ul>
+<li>Make CLI switch --import-token-keyfiles compatible with Non-Interactive mode.</li>
+<li>Add check on size of file container during creation to ensure it's smaller than available free disk space. Add CLI switch --no-size-check to disable this check.</li>
+</ul>
+</li>
+</ul>
+
+<p><strong style="text-align:left">1.23-Hotfix-2 </strong>(October 8<sup>th</sup>, 2018):</p>
+<ul>
+<li><strong>Windows:</strong>
+<ul>
+<li>Fix low severity vulnerability inherited from TrueCrypt that allowed reading 3 bytes of kernel stack memory (with a rare possibility of 25 additional bytes).
+<ul>
+<li>Reported by Tim Harrison.</li>
+</ul>
+</li>
+<li>Disable quick format when creating file containers from command line. Add /quick switch to enable it in this case if needed.</li>
+<li>Add /nosizecheck switch to disable checking container size against available free space during its creation.
+<ul>
+<li>This enables to workaround a bug in Microsoft Distributed File System (DFS).</li>
+</ul>
+</li>
+</ul>
+</li>
+</ul>
+
 <p><strong style="text-align:left">1.23 </strong>(September 12<sup>th</sup>, 2018):</p>
 <ul>
 <li><strong>Windows:</strong>
@@ -247,11 +474,12 @@
 <ul>
 <li>Support Japanese encryption standard Camellia, including for Windows system encryption (MBR &amp; EFI).
 </li><li>Support Russian encryption and hash standards Kuznyechik, Magma and Streebog, including for Windows EFI system encryption.
+</li><li>Fix TrueCrypt vulnerability allowing detection of hidden volumes presence (reported by Ivanov Aleksey Mikhailovich, alekc96 [at] mail dot ru)
+<ul><li> <strong style="color:#ff0000;">To avoid hinting whether your volumes contain a hidden volume or not, or if you depend on plausible deniability when using hidden volumes/OS, then you must recreate both the outer and hidden volumes including system encryption and hidden OS, discarding existing volumes created prior to 1.18a version of VeraCrypt.</strong></li></ul>
 </li></ul>
 </li><li><strong>Windows:</strong>
 <ul>
 <li>Support EFI Windows system encryption (limitations: no hidden os, no boot custom message)
-</li><li>Fix TrueCrypt vulnerability allowing detection of hidden volumes presence(reported by Ivanov Aleksey Mikhailovich, alekc96 [at] mail dot ru)
 </li><li>Enhanced protection against dll hijacking attacks. </li><li>Fix boot issues on some machines by increasing required memory by 1 KiB </li><li>Add benchmarking of hash algorithms and PRF with PIM (including for pre-boot).
 </li><li>Move build system to Visual C&#43;&#43; 2010 for better stability. </li><li>Workaround for AES-NI support under Hyper-V on Windows Server 2008 R2. </li><li>Correctly remove driver file veracrypt.sys during uninstall on Windows 64-bit.
 </li><li>Implement passing smart card PIN as command line argument (/tokenpin) when explicitly mounting a volume.

doc/html/Supported Operating Systems.html

@@ -44,6 +44,8 @@ Windows Server 2012 </li><li style="text-align:left; margin-top:0px; margin-bott
 Windows Server 2008 R2 (64-bit) </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows Server 2008 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows Server 2003 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+Mac OS X 10.15 Catalina </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+Mac OS X 10.14 Mojave </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Mac OS X 10.13 High Sierra </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Mac OS X 10.12 Sierra </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Mac OS X 10.11 El Capitan </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">

doc/html/System Encryption.html

@@ -65,7 +65,8 @@ Because of BIOS requirement, the pre-boot password is typed using <strong>US key
 </strong>During the system encryption process, VeraCrypt automatically and transparently switches the keyboard to US layout in order to ensure that the password value typed will match the one typed in pre-boot mode. Thus, in order to avoid wrong password errors,
  one must type the password using the same keys as when creating the system encryption.</div>
 <p>Note: By default, Windows 7 and later boot from a special small partition. The partition contains files that are required to boot the system. Windows allows only applications that have administrator privileges to write to the partition (when the system is
- running). VeraCrypt encrypts the partition only if you choose to encrypt the whole system drive (as opposed to choosing to encrypt only the partition where Windows is installed).</p>
+ running). In EFI boot mode, which is the default on modern PCs, VeraCrypt can not encrypt this partition since it must remain unencrypted so that the BIOS can load the EFI bootloader from it. This in turn implies that in EFI boot mode, VeraCrypt offers only to encrypt the system partition where Windows is installed (the user can later manualy encrypt other data partitions using VeraCrypt). 
+ In MBR legacy boot mode, VeraCrypt encrypts the partition only if you choose to encrypt the whole system drive (as opposed to choosing to encrypt only the partition where Windows is installed).</p>
 <p>&nbsp;</p>
 <p><a href="Hidden%20Operating%20System.html" style="text-align:left; color:#0080c0; text-decoration:none; font-weight:bold.html">Next Section &gt;&gt;</a></p>
 </div>

doc/html/Unencrypted Data in RAM.html

@@ -48,6 +48,10 @@ Inherently, unencrypted master keys have to be stored in RAM too. When a non-sys
  cleanly restarted), or when the system crashes, <strong style="text-align:left">
 VeraCrypt naturally stops running and therefore cannot </strong>erase any keys or any other sensitive data. Furthermore, as Microsoft does not provide any appropriate API for handling hibernation and shutdown, master keys used for system encryption cannot be
  reliably (and are not) erased from RAM when the computer hibernates, is shut down or restarted.**</div>
+<div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
+Starting from version 1.24, VeraCrypt introduces a mechanism to encrypt master keys and cached passwords in RAM. This RAM encryption mechanism must be activated manually in "Performance/Driver Configuration" dialog. RAM encryption comes with a performance overhead (between 5% and 15% depending on the CPU speed) and it disables Windows hibernate. <br>
+Moreover, VeraCrypt 1.24 and above provide an additional security mechanism when system encryption is used that makes VeraCrypt erase master keys from RAM when a new device is connected to the PC. This additional mechanism can be activated using an option in System Settings dialog.<br/>
+Even though both above mechanisms provides strong protection for masterskeys and cached password, users should still take usual precautions related for the safery of sensitive data in RAM.</div>
 <table style="border-collapse:separate; border-spacing:0px; text-align:left; font-size:11px; line-height:13px; font-family:Verdana,Arial,Helvetica,sans-serif">
 <tbody style="text-align:left">
 <tr style="text-align:left">

doc/html/VeraCrypt License.html

@@ -404,5 +404,21 @@ Redistribution and use in source and binary forms, with or without modification,
 <br>
 THIS SOFTWARE IS PROVIDED BY THE AUTHORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.<br>
 ____________________________________________________________<br>
+<br>
+Copyright (c) 2013-2018 Stephan Mueller &lt;smueller@chronox.de&gt;<br>
+<br>
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:<br>
+<ol>
+<li>Redistributions of source code must retain the above copyright notice, and the entire permission notice in its entirety, including the disclaimer of warranties.</li>
+<li>Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.</li>
+<li>The name of the author may not be used to endorse or promote products derived from this software without specific prior written permission.</li>
+</ol>
+<p>
+ALTERNATIVELY, this product may be distributed under the terms of the GNU General Public License, in which case the provisions of the GPL2 are required INSTEAD OF the above restrictions. (This clause is necessary due to a potential bad interaction between the GPL and the restrictions contained in a BSD-style copyright.)
+</p>
+<p>
+THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ALL OF WHICH ARE HEREBY DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF NOT ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+</p>
+____________________________________________________________<br>
 </div>
 </body></html>

doc/html/VeraCrypt Rescue Disk.html

@@ -37,24 +37,24 @@
 <div class="wikidoc">
 <h1>VeraCrypt Rescue Disk</h1>
 <div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
-During the process of preparing the encryption of a system partition/drive, VeraCrypt requires that you create a so-called VeraCrypt Rescue Disk (CD/DVD), which serves the following purposes:</div>
+During the process of preparing the encryption of a system partition/drive, VeraCrypt requires that you create a so-called VeraCrypt Rescue Disk (USB disk in EFI boot mode, CD/DVD in MBR legacy boot mode), which serves the following purposes:</div>
 <ul style="text-align:left; margin-top:18px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
 <li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 If the VeraCrypt Boot Loader screen does not appear after you start your computer (or if Windows does not boot), the
 <strong style="text-align:left">VeraCrypt Boot Loader may be damaged</strong>. The VeraCrypt Rescue Disk allows you restore it and thus to regain access to your encrypted system and data (however, note that you will still have to enter the correct password
- then). In the Rescue Disk screen, select <em style="text-align:left">Repair Options</em> &gt;
-<em style="text-align:left">Restore VeraCrypt Boot Loader</em>. Then press 'Y' to confirm the action, remove the Rescue Disk from your CD/DVD drive and restart your computer.
+ then). For EFI boot mode, select <em style="text-align:left">Restore VeraCrypt loader binaries to system disk</em> in the Rescue Disk screen. For MBR legacy boot mode, select instead <em style="text-align:left">Repair Options</em> &gt;
+<em style="text-align:left">Restore VeraCrypt Boot Loader</em>. Then press 'Y' to confirm the action, remove the Rescue Disk from your USB port or CD/DVD drive and restart your computer.
 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 If the <strong style="text-align:left">VeraCrypt Boot Loader is frequently damaged
 </strong>(for example, by inappropriately designed activation software) or if <strong style="text-align:left">
 you do not want the VeraCrypt boot loader </strong><strong style="text-align:left">to reside on the hard drive
 </strong>(for example, if you want to use an alternative boot loader/manager for other operating systems), you can boot directly from the VeraCrypt Rescue Disk (as it contains the VeraCrypt boot loader too) without restoring the boot loader to the hard drive.
- Just insert your Rescue Disk into your CD/DVD drive and then enter your password in the Rescue Disk screen.
+ For EFI boot mode, just insert your Rescue Disk into a USB port, boot your computer on it and then select <em style="text-align:left">Boot VeraCrypt loader from rescue disk</em> on the Rescue Disk screen. For MBR legacy boot mode, you need to insert the Rescue Disk in your CD/DVD drive and then enter your password in the Rescue Disk screen.
 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 If you repeatedly enter the correct password but VeraCrypt says that the password is incorrect, it is possible that the
 <strong style="text-align:left">master key or other critical data are damaged</strong>. The VeraCrypt Rescue Disk allows you to restore them and thus to regain access to your encrypted system and data (however, note that you will still have to enter the correct
- password then). In the Rescue Disk screen, select <em style="text-align:left">Repair Options</em> &gt;
-<em style="text-align:left">Restore key data</em>. Then enter your password, press 'Y' to confirm the action, remove the Rescue Disk from your CD/DVD drive, and restart your computer.<br style="text-align:left">
+ password then). For EFI boot mode, select <em style="text-align:left">Restore OS header keys</em> in the Rescue Disk screen. For MBR legacy boot mode, select instead <em style="text-align:left">Repair Options</em> &gt;
+<em style="text-align:left">Restore VeraCrypt Boot Loader</em>. Then enter your password, press 'Y' to confirm the action, remove the Rescue Disk from the USB port or CD/DVD drive, and restart your computer.<br style="text-align:left">
 <br style="text-align:left">
 Note: This feature cannot be used to restore the header of a hidden volume within which a
 <a href="Hidden%20Operating%20System.html" style="text-align:left; color:#0080c0; text-decoration:none.html">
@@ -68,19 +68,19 @@ WARNING: By restoring key data using a VeraCrypt Rescue Disk, you also restore t
  one (select <em style="text-align:left">System</em> -&gt; <em style="text-align:left">
 Create Rescue Disk</em>). Otherwise, if an attacker knows your old password (for example, captured by a keystroke logger) and if he then finds your old VeraCrypt Rescue Disk, he could use it to restore the key data (the master key encrypted with the old password)
  and thus decrypt your system partition/drive </li><li id="WindowsDamaged" style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
-If <strong style="text-align:left">Windows is damaged and cannot start</strong>, the VeraCrypt Rescue Disk allows you to permanently decrypt the partition/drive before Windows starts. In the Rescue Disk screen, select
-<em style="text-align:left">Repair Options</em> &gt; <em style="text-align:left">
+If <strong style="text-align:left">Windows is damaged and cannot start</strong> after typing the correct password on VeraCrypt password prompt, the VeraCrypt Rescue Disk allows you to permanently decrypt the partition/drive before Windows starts. For EFI boot, select
+<em style="text-align:left">Decrypt OS</em> in the Rescue Disk screen. For MBR legacy boot mode, select instead <em style="text-align:left">Repair Options</em> &gt; <em style="text-align:left">
 Permanently decrypt system partition/drive</em>. Enter the correct password and wait until decryption is complete. Then you can e.g. boot your MS Windows setup CD/DVD to repair your Windows installation. Note that this feature cannot be used to decrypt a hidden
  volume within which a <a href="Hidden%20Operating%20System.html" style="text-align:left; color:#0080c0; text-decoration:none.html">
 hidden operating system</a> resides (see the section <a href="Hidden%20Operating%20System.html">
 Hidden Operating System</a>).<br style="text-align:left">
 <br style="text-align:left">
 Note: Alternatively, if Windows is damaged (cannot start) and you need to repair it (or access files on it), you can avoid decrypting the system partition/drive by following these steps:&nbsp;If you have multiple operating systems installed on your computer,
- boot the one that does not require pre-boot authentication. If you do not have multiple operating systems installed on your computer, you can boot a WinPE or BartPE CD/DVD or you can connect your system drive as a secondary or external drive to another computer
+ boot the one that does not require pre-boot authentication. If you do not have multiple operating systems installed on your computer, you can boot a WinPE or BartPE CD/DVD or a Linux Live CD/DVD/USB. You can also connect your system drive as a secondary or external drive to another computer
  and then boot the operating system installed on the computer. After you boot a system, run VeraCrypt, click Select Device, select the affected system partition, click OK , select System &gt; Mount Without Pre-Boot Authentication, enter your pre-boot-authentication
  password and click OK. The partition will be mounted as a regular VeraCrypt volume (data will be on-the-fly decrypted/encrypted in RAM on access, as usual).
 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
-Your VeraCrypt Rescue Disk contains a <strong style="text-align:left">backup of the original content of the first drive track</strong> (made before the VeraCrypt Boot Loader was written to it) and allows you to restore it if necessary. The first track typically
+In case of MBR legacy boot mode, your VeraCrypt Rescue Disk contains a <strong style="text-align:left">backup of the original content of the first drive track</strong> (made before the VeraCrypt Boot Loader was written to it) and allows you to restore it if necessary. The first track typically
  contains a system loader or boot manager. In the Rescue Disk screen, select Repair Options &gt; Restore original system loader.
 </li></ul>
 <div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
@@ -89,12 +89,80 @@ Your VeraCrypt Rescue Disk contains a <strong style="text-align:left">backup of
 <em style="text-align:left">Note that even if you lose your VeraCrypt Rescue Disk and an attacker finds it, he or she will
 <strong style="text-align:left">not</strong> be able to decrypt the system partition or drive without the correct password.</em></div>
 <div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
-To boot a VeraCrypt Rescue Disk, insert it into your CD/DVD drive and restart your computer. If the VeraCrypt Rescue Disk screen does not appear (or if you do not see the 'Repair Options' item in the 'Keyboard Controls' section of the screen), it is possible
- that your BIOS is configured to attempt to boot from hard drives before CD/DVD drives. If that is the case, restart your computer, press F2 or Delete (as soon as you see a BIOS start-up screen), and wait until a BIOS configuration screen appears. If no BIOS
- configuration screen appears, restart (reset) the computer again and start pressing F2 or Delete repeatedly as soon as you restart (reset) the computer. When a BIOS configuration screen appears, configure your BIOS to boot from the CD/DVD drive first (for
+To boot a VeraCrypt Rescue Disk, insert it into a USB port or your CD/DVD drive depending on its type and restart your computer. If the VeraCrypt Rescue Disk screen does not appear (or in case of MBR legacy boot mode if you do not see the 'Repair Options' item in the 'Keyboard Controls' section of the screen), it is possible
+ that your BIOS is configured to attempt to boot from hard drives before USB drivers and CD/DVD drives. If that is the case, restart your computer, press F2 or Delete (as soon as you see a BIOS start-up screen), and wait until a BIOS configuration screen appears. If no BIOS
+ configuration screen appears, restart (reset) the computer again and start pressing F2 or Delete repeatedly as soon as you restart (reset) the computer. When a BIOS configuration screen appears, configure your BIOS to boot from the USB drive and CD/DVD drive first (for
  information on how to do so, please refer to the documentation for your BIOS/motherboard or contact your computer vendor's technical support team for assistance). Then restart your computer. The VeraCrypt Rescue Disk screen should appear now. Note: In the
- VeraCrypt Rescue Disk screen, you can select 'Repair Options' by pressing F8 on your keyboard.</div>
+ case of MBR legacy boot mode, you can select 'Repair Options' on the VeraCrypt Rescue Disk screen by pressing F8 on your keyboard.</div>
 <p>If your VeraCrypt Rescue Disk is damaged, you can create a new one by selecting
-<em style="text-align:left">System</em> &gt; <em style="text-align:left">Create Rescue Disk</em>. To find out whether your VeraCrypt Rescue Disk is damaged, insert it into your CD/DVD drive and select
+<em style="text-align:left">System</em> &gt; <em style="text-align:left">Create Rescue Disk</em>. To find out whether your VeraCrypt Rescue Disk is damaged, insert it into a USB port (or into your CD/DVD drive in case of MBR legacy boot mode) and select
 <em style="text-align:left">System</em> &gt; <em style="text-align:left">Verify Rescue Disk</em>.</p>
-</div><div class="ClearBoth"></div></body></html>
+</div><div class="ClearBoth"></div>
+
+
+<h2>VeraCrypt Rescue Disk for MBR legacy boot mode on USB Stick</h2>
+<div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
+It is also possible to create a VeraCrypt Rescue Disk for MBR legacy boot mode on a USB drive, in case your machine does not have a CD/DVD drive. <strong style="text-align:left">Please note that you must ensure that the data on the USB stick is not overwritten! If you lose the USB drive or your data is damaged, you will not be able to recover your system in case of a problem!</strong>
+</div>
+<div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
+To create a bootable VeraCrypt Rescue USB drive you have to create a bootable USB drive which bootloader runs up the iso image. Solutions like Unetbootin, which try to copy the data inside the iso image to the usb drive do not work yet. On Windows please follow the steps below:
+</div>
+<ul style="text-align:left; margin-top:18px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
+	<li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+		Download the required files from the official SourceForge repository of VeraCrypt: <a href="https://sourceforge.net/projects/veracrypt/files/Contributions/VeraCryptUsbRescueDisk.zip" style="text-align:left; 		color:#0080c0; text-decoration:none.html">
+		https://sourceforge.net/projects/veracrypt/files/Contributions/VeraCryptUsbRescueDisk.zip</a>
+	</li>
+
+	<li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+		Insert a USB drive.
+	</li>
+	<li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+		Format the USB drive with FAT16 oder FAT32:
+		<ul style="text-align:left; margin-top:6px; margin-bottom:6px; padding-top:0px; padding-bottom:0px">
+			<li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+				Launch usb_format.exe as an administrator (right click "Run as Administrator").
+			</li>
+			<li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+				Select your USB drive in the Device list.
+			</li>
+			<li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+				Choose FAT as filesystem and check "Quick Format". Click Start.
+			</li>
+		</ul>
+
+	</li>
+	<li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+		Create a bootloader which can start up an iso image:
+		<ul style="text-align:left; margin-top:6px; margin-bottom:6px; padding-top:0px; padding-bottom:0px">
+			<li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+				Launch grubinst_gui.exe.
+			</li>
+			<li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+				Check "Disk" and then select your USB drive in the list.
+			</li>
+			<li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+				Click the "Refresh" button in front of "Part List" and then choose "Whole disk (MBR)".
+			</li>
+			<li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+				Leave all other options unchanged and then click "Install".
+			</li>
+			<li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+				You should see an console window that reads "The MBR/BS has been successfully installed. Press &ltENTER&gt; to continue ..."
+			</li>
+			<li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+				Close the tool.
+			</li>
+		</ul>
+	</li>
+	<li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+		Copy the file "grldr" to your USB drive at the root (e.g. if the drive letter is I:, you should have I:\grldr). This file loads Grub4Dos.
+	</li>
+	<li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+		Copy the file "menu.lst" to your USB drive at the root (e.g. if the drive letter is I:, you should have I:\menu.lst). This file configures the shown menu and its options.
+	</li>
+	<li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+		Copy the rescue disk file "VeraCrypt Rescue Disk.iso" to the USB drive at the root and rename it "veracrypt.iso". Another possibility is to change the link in the "menu.lst" file.
+	</li>
+
+</ul>
+</body></html>

src/Boot/Windows/Bios.h

@@ -24,7 +24,8 @@
 enum
 {
 	BiosResultSuccess = 0x00,
-	BiosResultInvalidFunction = 0x01
+	BiosResultInvalidFunction = 0x01,
+	BiosResultTimeout = 0x80
 };
 
 typedef byte BiosResult;

src/Boot/Windows/BootCommon.h

@@ -17,7 +17,7 @@
 #include "BootDefs.h"
 
 // The user will be advised to upgrade the rescue disk if upgrading from the following or any previous version
-#define TC_RESCUE_DISK_UPGRADE_NOTICE_MAX_VERSION 0x0122
+#define TC_RESCUE_DISK_UPGRADE_NOTICE_MAX_VERSION 0x0123
 
 #define TC_BOOT_LOADER_AREA_SIZE (TC_BOOT_LOADER_AREA_SECTOR_COUNT * TC_SECTOR_SIZE_BIOS)
 
@@ -58,7 +58,7 @@ typedef struct
 	uint16 CryptoInfoOffset;
 	uint16 CryptoInfoLength;
 	uint32 HeaderSaltCrc32;
-	Password BootPassword;
+	PasswordLegacy BootPassword;
 	uint64 HiddenSystemPartitionStart;
 	uint64 DecoySystemPartitionStart;
 	uint32 Flags;
@@ -206,9 +206,9 @@ typedef struct _DCS_DEP_PWD_CACHE {
 	uint64       Sign;
 	uint32       CRC;
 	uint32       Count;
-	Password     Pwd[4];
+	PasswordLegacy     Pwd[4];
 	int32        Pim[4];
-	byte         pad[512 - 8 - 4 - 4 - (sizeof(Password) + 4) * 4];
+	byte         pad[512 - 8 - 4 - 4 - (sizeof(PasswordLegacy) + 4) * 4];
 } DCS_DEP_PWD_CACHE;
 CSTATIC_ASSERT(sizeof(DCS_DEP_PWD_CACHE) == 512, Wrong_size_DCS_DEP_PWD_CACHE);
 #pragma pack()

src/Boot/Windows/BootConfig.cpp

@@ -85,14 +85,29 @@ ret:
 
 BiosResult UpdateBootSectorConfiguration (byte drive)
 {
-	AcquireSectorBuffer();
+	uint64 mbrSector;
+	mbrSector.HighPart = 0;
+	mbrSector.LowPart = 0;
 
+	AcquireSectorBuffer();
+/*
 	BiosResult result = ReadWriteMBR (false, drive);
 	if (result != BiosResultSuccess)
 		goto ret;
 
 	SectorBuffer[TC_BOOT_SECTOR_CONFIG_OFFSET] = BootSectorFlags;
 	result = ReadWriteMBR (true, drive);
+*/
+
+	BiosResult result = ReadWriteSectors (false, TC_BOOT_LOADER_BUFFER_SEGMENT, 0, drive, mbrSector, 8, false);
+	if (result != BiosResultSuccess)
+		goto ret;
+
+	CopyMemory (TC_BOOT_LOADER_BUFFER_SEGMENT, 0, SectorBuffer, TC_LB_SIZE);
+	SectorBuffer[TC_BOOT_SECTOR_CONFIG_OFFSET] = BootSectorFlags;
+	CopyMemory (SectorBuffer, TC_BOOT_LOADER_BUFFER_SEGMENT,0, TC_LB_SIZE);
+
+	result = ReadWriteSectors (true, TC_BOOT_LOADER_BUFFER_SEGMENT, 0, drive, mbrSector, 8, false);
 
 ret:
 	ReleaseSectorBuffer();

src/Boot/Windows/BootDefs.h

@@ -205,6 +205,7 @@ TC_HIDDEN_OS_CREATION_PHASE_WIPED = TC__HIDDEN_OS_CREATION_PHASE_WIPED
 0x100000, 0x200000, 0x300000, 0x400000, 0x500000, 0x600000, 0x700000, 0x800000, \
 0x900000, 0xA00000, 0xB00000, 0xC00000, 0xD00000, 0xE00000, 0xF00000, 0x1000000
 
-#define EFI_BOOTARGS_REGIONS EFI_BOOTARGS_REGIONS_LOW, EFI_BOOTARGS_REGIONS_HIGH
+#define EFI_BOOTARGS_REGIONS_DEFAULT EFI_BOOTARGS_REGIONS_LOW, EFI_BOOTARGS_REGIONS_HIGH
+#define EFI_BOOTARGS_REGIONS_EFI EFI_BOOTARGS_REGIONS_HIGH, EFI_BOOTARGS_REGIONS_LOW
 
 #endif // TC_HEADER_Boot_BootDefs

src/Boot/Windows/BootDiskIo.cpp

@@ -105,7 +105,7 @@ void Print (const ChsAddress &chs)
 
 void PrintSectorCountInMB (const uint64 &sectorCount)
 {
-	Print (sectorCount >> (TC_LB_SIZE_BIT_SHIFT_DIVISOR + 2)); Print (" MB ");
+	Print (sectorCount >> (TC_LB_SIZE_BIT_SHIFT_DIVISOR + 2)); Print (" MiB ");
 }
 
 
@@ -237,7 +237,7 @@ static BiosResult ReadWriteSectors (bool write, BiosLbaPacket &dapPacket, byte d
 }
 
 
-static BiosResult ReadWriteSectors (bool write, byte *buffer, byte drive, const uint64 &sector, uint16 sectorCount, bool silent)
+BiosResult ReadWriteSectors (bool write, byte *buffer, byte drive, const uint64 &sector, uint16 sectorCount, bool silent)
 {
 	BiosLbaPacket dapPacket;
 	dapPacket.Buffer = (uint32) buffer;

src/Boot/Windows/BootDiskIo.h

@@ -112,6 +112,7 @@ BiosResult ReadSectors (uint16 bufferSegment, uint16 bufferOffset, byte drive, c
 BiosResult ReadSectors (byte *buffer, byte drive, const uint64 &sector, uint16 sectorCount, bool silent = false);
 BiosResult ReadSectors (byte *buffer, byte drive, const ChsAddress &chs, byte sectorCount, bool silent = false);
 BiosResult ReadWriteSectors (bool write, uint16 bufferSegment, uint16 bufferOffset, byte drive, const uint64 &sector, uint16 sectorCount, bool silent);
+BiosResult ReadWriteSectors (bool write, byte *buffer, byte drive, const uint64 &sector, uint16 sectorCount, bool silent);
 BiosResult WriteSectors (byte *buffer, byte drive, const uint64 &sector, uint16 sectorCount, bool silent = false);
 BiosResult WriteSectors (byte *buffer, byte drive, const ChsAddress &chs, byte sectorCount, bool silent = false);
 

src/Boot/Windows/BootEncryptedIo.cpp

@@ -108,10 +108,22 @@ BiosResult WriteEncryptedSectors (uint16 sourceSegment, uint16 sourceOffset, byt
 			EncryptDataUnits (SectorBuffer, &dataUnitNo, 1, BootCryptoInfo);
 		}
 
-		result = WriteSectors (SectorBuffer, drive, sector + writeOffset, 1);
+		result = ReadWriteSectors (true, SectorBuffer, drive, sector + writeOffset, 1, true);
+		if (BiosResultTimeout == result)
+		{
+			if (BiosResultSuccess == ReadWriteSectors (false, TC_BOOT_LOADER_BUFFER_SEGMENT, 0, drive, sector + writeOffset, 8, false))
+			{
+				CopyMemory (SectorBuffer, TC_BOOT_LOADER_BUFFER_SEGMENT,0, TC_LB_SIZE);
+				result = ReadWriteSectors (true, TC_BOOT_LOADER_BUFFER_SEGMENT, 0, drive, sector + writeOffset, 8, true);
+			}
+		}
 
 		if (result != BiosResultSuccess)
+		{
+			sector += writeOffset;
+			PrintDiskError (result, true, drive, &sector);
 			break;
+		}
 
 		++sector;
 		++dataUnitNo;

src/Boot/Windows/BootSector.asm

@@ -43,23 +43,24 @@ main:
 	call print
 skip_loader_name_msg:
 
-	; Determine boot loader segment
-	mov ax, TC_BOOT_LOADER_SEGMENT
+    ; Determine boot loader segment
+    mov ax, word ptr [ds:413h]      ;available kB from BIOS
+    sub ax, TC_BOOT_MEMORY_REQUIRED ;minus TC_BOOT_MEMORY_REQUIRED
+    jc mem_toolow
+    and ax, 0FFE0h                  ;32K align
+    shl ax, 6                       ;convert kB to segment addr (*1024/16)
+    cmp ax, 8000h
+    jb mem_toolow                   ;we can't load below 8000h
+    cmp ax, TC_BOOT_LOADER_SEGMENT
+    jbe memory_ok                   ;don't load above TC_BOOT_LOADER_SEGMENT (9000h)
+    mov ax, TC_BOOT_LOADER_SEGMENT
+    jmp memory_ok
 
-	; Check available memory
-	cmp word ptr [ds:413h], TC_BOOT_LOADER_SEGMENT / 1024 * 16 + TC_BOOT_MEMORY_REQUIRED
-	jge memory_ok
-
-	mov ax, TC_BOOT_LOADER_SEGMENT_LOW
-
-	cmp word ptr [ds:413h], TC_BOOT_LOADER_SEGMENT_LOW / 1024 * 16 + TC_BOOT_MEMORY_REQUIRED
-	jge memory_ok
-
-	; Insufficient memory
-	mov ax, TC_BOOT_LOADER_LOWMEM_SEGMENT
+mem_toolow:
+    mov ax, TC_BOOT_LOADER_LOWMEM_SEGMENT
 
 memory_ok:
-	mov es, ax
+    mov es, ax
 
 	; Clear BSS section
 	xor al, al

src/Build/CMakeLists.txt

@@ -0,0 +1,330 @@
+# - Minimum CMake version
+cmake_minimum_required(VERSION 2.8.0)
+
+# - Obligatory parameters
+#		-DVERACRYPT_BUILD_DIR 	: folder that contains 'usr' folder
+#		-DNOGUI					: TRUE if building 'Console' version, 'FALSE' if building 'GUI' version
+if ( NOT DEFINED VERACRYPT_BUILD_DIR )
+	MESSAGE(FATAL_ERROR "VERACRYPT_BUILD_DIR variable MUST BE set to the path of the folder which contains 'usr' folder")
+elseif ( NOT DEFINED NOGUI )
+	MESSAGE(FATAL_ERROR "NOGUI variable MUST BE set to TRUE if building 'Console' version, 'FALSE' otherwise")
+endif()
+
+# - Set version of the package
+set( FULL_VERSION 		"1.24-Update4" )
+set( VERSION 			"1.24.12" )
+set( RELEASE 			"1" )
+
+# - Set PROJECT_NAME and CONFLICT_PACKAGE values
+if (NOGUI)
+	set( PROJECT_NAME 		"veracrypt-console" )
+	set( CONFLICT_PACKAGE	"veracrypt" )
+else()
+	set( PROJECT_NAME 		"veracrypt" )
+	set( CONFLICT_PACKAGE	"veracrypt-console" )
+endif()
+project(${PROJECT_NAME})
+
+# - Check whether 'Tcdefs.h' and 'License.txt' exist
+if(NOT EXISTS "$ENV{SOURCEPATH}/Common/Tcdefs.h")
+	MESSAGE(FATAL_ERROR "Tcdefs.h does not exist.")
+elseif(NOT EXISTS "$ENV{SOURCEPATH}/License.txt")
+	MESSAGE(FATAL_ERROR "License.txt does not exist.")
+endif()
+
+# - Detect build system bitness
+#	The following variable will be set
+#		$SUFFIX					32			64
+#		$CMAKE_SYSTEM_NAME		Windows		Linux	Darwin
+# 	N.B : 
+#		To build for 32-bit under 64-bit, set 'CMAKE_SIZEOF_VOID_P' to '4'
+if( CMAKE_SIZEOF_VOID_P EQUAL 8 )
+
+	#	Build System is under 64-bit arch
+	set (SUFFIX "64")
+	MESSAGE(STATUS "Build System = ${CMAKE_SYSTEM_NAME} - Bitness : 64-bit - Compiler : ${CMAKE_CXX_COMPILER_ID}")
+	
+elseif( CMAKE_SIZEOF_VOID_P EQUAL 4 )
+
+	#	Build System is under 32-bit arch
+	set (SUFFIX "32")
+	MESSAGE(STATUS "Build System = ${CMAKE_SYSTEM_NAME} - Bitness : 32-bit - Compiler : ${CMAKE_CXX_COMPILER_ID}")
+	
+else( )
+
+	MESSAGE(FATAL_ERROR "Could not detect system bitness")
+	
+endif( )
+
+# - Detect OSX, CentOS, Debian, Ubuntu or openSUSE platform of the build system
+#   The following variable(s) will be set
+#   	$PLATFORM						Debian		Ubuntu 		CentOS		openSUSE (TODO)
+#   	$PLATFORM_VERSION	
+#										9.x 		16.04		7.X			42.3
+#										10.X		18.04		8.X			15.0
+#										...			...			...			...
+# 		$DISTRO_NAME					${PLATFORM}-${PLATFORM_VERSION}
+if ( UNIX )
+
+	# /etc/debian_version exists for both Debian and Ubuntu
+	if(EXISTS "/etc/debian_version")
+	
+		set ( PLATFORM "Debian" )
+	
+		# Read lsb-release to get flavour name and flavour release version (only supported one for now is Ubuntu)
+		if(EXISTS "/etc/lsb-release")		
+			
+			file(READ "/etc/lsb-release" LSB_RELEASE_ID)
+			string(REGEX MATCH "DISTRIB_ID=([a-zA-Z0-9 /\\.]+)" _ ${LSB_RELEASE_ID})
+			set(FULL_FLAVOUR ${CMAKE_MATCH_1})
+			
+			if (FULL_FLAVOUR MATCHES "^.*Ubuntu.*$")
+			
+				set ( PLATFORM "Ubuntu" )
+			
+				file(READ "/etc/lsb-release" UBUNTU_RELEASE)
+				string(REGEX MATCH "DISTRIB_RELEASE=([0-9 /\\.]+)" _ ${UBUNTU_RELEASE})
+				set(PLATFORM_VERSION ${CMAKE_MATCH_1})
+				
+			else()
+			
+				file(READ "/etc/debian_version" DEBIAN_RELEASE)
+				string(REGEX MATCH "([0-9]+\\.[0-9]+)" _ ${DEBIAN_RELEASE})
+				set(PLATFORM_VERSION ${CMAKE_MATCH_1})
+				
+			endif()
+			
+		# Get debian release version
+		elseif(EXISTS "/etc/debian_version")
+			
+			file(READ "/etc/debian_version" DEBIAN_RELEASE)
+			string(REGEX MATCH "([0-9]+\\.[0-9]+)" _ ${DEBIAN_RELEASE})
+			set(PLATFORM_VERSION ${CMAKE_MATCH_1})
+			
+		endif()
+	
+	# Get centos release version
+	elseif(EXISTS "/etc/centos-release")	
+	
+		set ( PLATFORM "CentOS" )
+		
+		file(READ "/etc/centos-release" CENTOS_RELEASE)
+		string(REGEX MATCH "release ([0-9 /\\.]+)" _ ${CENTOS_RELEASE})
+        set(PLATFORM_VERSION ${CMAKE_MATCH_1})
+	
+	# Only if distribution uses systemd and if all previous files didn't exist
+	# i.e OpenSUSE
+	elseif(EXISTS "/etc/os-release")	
+	
+		file(READ "/etc/os-release" OS_RELEASE_NAME)
+		string(REGEX MATCH "NAME=\"([a-zA-Z0-9 /\\.]+)\"" _ ${OS_RELEASE_NAME})
+		set(FULL_PLATFORM ${CMAKE_MATCH_1})
+		
+		if (FULL_PLATFORM MATCHES "^.*openSUSE.*$")
+			set ( PLATFORM "openSUSE" )
+		elseif ( FULL_PLATFORM MATCHES "^.*Ubuntu.*$")
+			set ( PLATFORM "Ubuntu" )
+		elseif ( FULL_PLATFORM MATCHES "^.*Debian.*$")
+			set ( PLATFORM "Debian" )
+		elseif ( FULL_PLATFORM MATCHES "^.*CentOS.*$" )
+			set ( PLATFORM "CentOS" )
+		endif ( )
+		
+		# Get ditribution release version
+		file(READ "/etc/os-release" OS_RELEASE)
+		string(REGEX MATCH "VERSION=\"([a-zA-Z0-9 /\\.]+)\"" _ ${OS_RELEASE})
+		set(PLATFORM_VERSION ${CMAKE_MATCH_1})
+		
+	endif()
+
+endif ( )
+string(REGEX REPLACE " $" "" PLATFORM_VERSION "${PLATFORM_VERSION}")	# Trim the last trailing whitespace
+set ( DISTRO_NAME ${PLATFORM}-${PLATFORM_VERSION} )
+MESSAGE ( STATUS "Platform = ${PLATFORM}" )
+MESSAGE ( STATUS "Platform Version = ${PLATFORM_VERSION}" )
+MESSAGE ( STATUS "Distribution name = ${DISTRO_NAME}" )
+
+# - Detect the architecture under OSX, Debian, CentOS and OpenSUSE platforms
+#	The following variable will be set
+#		$ARCHITECTURE
+if ( PLATFORM STREQUAL "Debian" OR PLATFORM STREQUAL "Ubuntu" )
+
+	# There is no such thing as i686 architecture on debian, i386 is to be used instead
+	# dpkg --print-architecture
+	find_program(DPKG_CMD dpkg)
+	if(NOT DPKG_CMD)
+		# Cannot find dpkg in path
+		# Try best guess following SUFFIX value calculated from CMAKE_SIZEOF_VOID_P
+		if (SUFFIX STREQUAL "32")
+			SET(ARCHITECTURE i386)
+		elseif (SUFFIX STREQUAL "64")
+			SET(ARCHITECTURE amd64)
+		endif()
+	else( )
+		execute_process(COMMAND dpkg --print-architecture OUTPUT_VARIABLE ARCHITECTURE OUTPUT_STRIP_TRAILING_WHITESPACE)
+	endif( )
+	
+elseif ( ( PLATFORM STREQUAL "CentOS" ) OR ( PLATFORM STREQUAL "openSUSE" ) )
+
+	execute_process(COMMAND arch OUTPUT_VARIABLE ARCHITECTURE OUTPUT_STRIP_TRAILING_WHITESPACE)
+	
+else ()
+
+	MESSAGE(FATAL_ERROR "Unrecognized / unsupported distribution")
+	
+endif ( )
+MESSAGE ( STATUS "Architecture = ${ARCHITECTURE}" )
+
+# - Create installation folder directory at install time
+#	This won't lead to the files being actually installed (in CMAKE_INSTALL_PREFIX)
+#	unless "cmake --build . --target install" is executed, which is not the case here.
+# 	
+#	Doing things like the following
+#		-	install(DIRECTORY 	${VERACRYPT_BUILD_DIR}/usr DESTINATION /)
+#		-	install(DIRECTORY 	${VERACRYPT_BUILD_DIR}/usr/bin DESTINATION /usr)
+#	lead to conflicts despite the usage of CPACK_RPM_EXCLUDE_FROM_AUTO_FILELIST_ADDITION
+#	because install() forces CpackRPM to create the DESTINATION folders.
+#
+#	We fix this by installing ALL directories inside '/usr' in '.', and setting 
+#	CPACK_PACKAGING_INSTALL_PREFIX to '/usr'.
+#	This way, during the packaging, 'bin' and 'share' folders will be installed 
+#	inside '${CPACK_PACKAGE_DIRECTORY}/_CPack_Packages/<system_name>/DEB,RPM/${CPACK_PACKAGE_NAME}/${CPACK_PACKAGING_INSTALL_PREFIX}'.
+#
+#	Also, we use USE_SOURCE_PERMISSIONS to save the permissions
+install(DIRECTORY 	${VERACRYPT_BUILD_DIR}/usr/bin
+		DESTINATION .
+		USE_SOURCE_PERMISSIONS)
+install(DIRECTORY 	${VERACRYPT_BUILD_DIR}/usr/share
+		DESTINATION .
+		USE_SOURCE_PERMISSIONS)
+set(CPACK_PACKAGING_INSTALL_PREFIX "/usr")
+
+# For packaging 
+# CPack will first install into ${CPACK_PACKAGE_DIRECTORY}/_CPack_Packages/<system_name>/DEB,RPM/${CPACK_PACKAGE_NAME}/${CPACK_PACKAGING_INSTALL_PREFIX}
+# See https://gitlab.kitware.com/cmake/community/wikis/doc/cpack/PackageGenerators
+# See https://cmake.org/cmake/help/latest/cpack_gen/deb.html
+# See https://cmake.org/cmake/help/latest/cpack_gen/rpm.html
+#
+
+# Installation scripts should be provided in this order
+# 	PREINST;POSTINST;PRERM;POSTRM
+
+file(MAKE_DIRECTORY ${CMAKE_CURRENT_BINARY_DIR}/Packaging)	# creates the Packaging directory under build directory when CMake generates the build system
+
+set( VENDOR "IDRIX" )
+set( LICENSE "VeraCrypt License" )
+set( CONTACT "VeraCrypt Team <veracrypt@idrix.fr>" )
+set( CPACK_PACKAGE_DESCRIPTION_SUMMARY "Disk encryption with strong security based on TrueCrypt." )
+set( CPACK_PACKAGE_DESCRIPTION "This package contains binaries for VeraCrypt, a disk encryption with strong security based on TrueCrypt." )
+set( CPACK_PACKAGE_NAME 			${PROJECT_NAME} )
+set( CPACK_PACKAGE_VERSION 			${VERSION} )
+set( CPACK_PACKAGE_RELEASE 			${RELEASE} )
+set( CPACK_PACKAGE_VENDOR 			${VENDOR} )
+set( CPACK_PACKAGE_LICENSE 			${LICENSE} )
+set( CPACK_RESOURCE_FILE_LICENSE 	"$ENV{SOURCEPATH}/License.txt")
+set( CPACK_PACKAGE_CONTACT 			${CONTACT} )	
+set( CPACK_PACKAGE_FILE_NAME 		${CPACK_PACKAGE_NAME}-${FULL_VERSION}-${DISTRO_NAME}-${ARCHITECTURE} )
+set( CPACK_PACKAGE_CHECKSUM 		SHA256 )
+set( CPACK_PACKAGE_RELOCATABLE 		"OFF")																						# Disable package relocation (especially for rpm)
+set( CPACK_PACKAGE_DIRECTORY 		${CMAKE_CURRENT_BINARY_DIR}/Packaging )
+
+if ( ( PLATFORM STREQUAL "Debian" ) OR ( PLATFORM STREQUAL "Ubuntu" ) )
+	
+	# Debian control script(s)
+	file( MAKE_DIRECTORY ${CMAKE_CURRENT_BINARY_DIR}/Packaging/debian-control)
+	configure_file(		${CMAKE_CURRENT_SOURCE_DIR}/Packaging/debian-control/prerm 		${CMAKE_CURRENT_BINARY_DIR}/Packaging/debian-control/prerm)
+	set( DEBIAN_PRERM 	${CMAKE_CURRENT_BINARY_DIR}/Packaging/debian-control/prerm)
+	
+	set( CPACK_GENERATOR 					"DEB" )																				# mandatory
+	set( CPACK_DEBIAN_PACKAGE_NAME 			${CPACK_PACKAGE_NAME}  )															# mandatory
+	set( CPACK_DEBIAN_FILE_NAME 			${CPACK_PACKAGE_FILE_NAME}.deb )													# mandatory
+	set( CPACK_DEBIAN_PACKAGE_VERSION 		${CPACK_PACKAGE_VERSION} )															# mandatory
+	set( CPACK_DEBIAN_PACKAGE_RELEASE 		${CPACK_PACKAGE_RELEASE} )
+	set( CPACK_DEBIAN_PACKAGE_ARCHITECTURE 	${ARCHITECTURE} )																	# mandatory
+	
+	if (NOGUI)
+		# Link against statically built wxWidgets so that we don't depend on any GTK library
+		set( CPACK_DEBIAN_PACKAGE_DEPENDS 		"libfuse2, dmsetup, sudo" )
+	else ()
+		# Link against gtk3 version of wxWidgets if >= Debian 10 or >= Ubuntu 18.04
+		# Otherwise, link against gtk2 version of wxWidgets
+		if ( ( ( PLATFORM STREQUAL "Debian" ) AND ( PLATFORM_VERSION VERSION_GREATER_EQUAL "10" ) ) 
+			OR ( ( PLATFORM STREQUAL "Ubuntu" ) AND ( PLATFORM_VERSION VERSION_GREATER_EQUAL "18.04" ) ) )
+			
+			set( CPACK_DEBIAN_PACKAGE_DEPENDS 		"libwxgtk3.0-gtk3-0v5, libfuse2, dmsetup, sudo" )										
+			
+		else ()
+			# Link against statically built wxWidgets on Ubuntu 14.04 and older, and Debian 8 and older
+			if ( ( ( PLATFORM STREQUAL "Debian" ) AND ( PLATFORM_VERSION VERSION_LESS_EQUAL "8" ) ) 
+				OR ( ( PLATFORM STREQUAL "Ubuntu" ) AND ( PLATFORM_VERSION VERSION_LESS_EQUAL "14.04" ) ) )
+				set( CPACK_DEBIAN_PACKAGE_DEPENDS 		"libgtk2.0-0, libfuse2, dmsetup, sudo" )
+			else ()
+				set( CPACK_DEBIAN_PACKAGE_DEPENDS 		"libwxgtk3.0-0v5, libfuse2, dmsetup, sudo" )
+			endif ()
+			
+		endif()
+	endif()
+
+	set( CPACK_DEBIAN_PACKAGE_MAINTAINER 	${CONTACT} )																		# mandatory
+	set( CPACK_DEBIAN_PACKAGE_DESCRIPTION 	${CPACK_PACKAGE_DESCRIPTION_SUMMARY} )												# mandatory
+	set( CPACK_DEBIAN_ARCHIVE_TYPE 			"gnutar")																			# mandatory
+	set( CPACK_DEBIAN_COMPRESSION_TYPE 		"gzip")																				# mandatory
+	set( CPACK_DEBIAN_PACKAGE_PRIORITY 		"optional" )																		# mandatory
+	set( CPACK_DEBIAN_PACKAGE_SECTION 		"libs" )		 																	# recommended, Section relative to Debian sections (https://www.debian.org/doc/debian-policy/ch-archive.html#s-subsections)
+	set(CPACK_DEBIAN_PACKAGE_CONTROL_EXTRA 	${DEBIAN_PREINST};${DEBIAN_POSTINST};${DEBIAN_PRERM};${DEBIAN_POSTRM})
+	set(CPACK_DEBIAN_PACKAGE_CONFLICTS 		"${CONFLICT_PACKAGE}")
+	
+elseif ( ( PLATFORM STREQUAL "CentOS" ) OR ( PLATFORM STREQUAL "openSUSE" ) )
+	
+	# RPM control script(s)
+	file( MAKE_DIRECTORY ${CMAKE_CURRENT_BINARY_DIR}/Packaging/rpm-control)
+	configure_file(	${CMAKE_CURRENT_SOURCE_DIR}/Packaging/rpm-control/prerm.sh 		${CMAKE_CURRENT_BINARY_DIR}/Packaging/rpm-control/prerm.sh)
+	set( RPM_PRERM 	${CMAKE_CURRENT_BINARY_DIR}/Packaging/rpm-control/prerm.sh)
+	
+	set( CPACK_GENERATOR 				"RPM" )																					# mandatory
+	set( CPACK_RPM_PACKAGE_SUMMARY 		${CPACK_PACKAGE_SUMMARY} )																# mandatory
+	set( CPACK_RPM_PACKAGE_DESCRIPTION 	${CPACK_PACKAGE_DESCRIPTION} )															# mandatory
+	set( CPACK_RPM_PACKAGE_NAME 		${CPACK_PACKAGE_NAME} )																	# mandatory
+	set( CPACK_RPM_FILE_NAME 			${CPACK_PACKAGE_FILE_NAME}.rpm )														# mandatory
+	set( CPACK_RPM_PACKAGE_VERSION 		${CPACK_PACKAGE_VERSION} )																# mandatory
+	set( CPACK_RPM_PACKAGE_ARCHITECTURE ${ARCHITECTURE} )																		# mandatory
+	set( CPACK_RPM_PACKAGE_RELEASE 		${CPACK_PACKAGE_RELEASE} )																# mandatory
+	set( CPACK_RPM_PACKAGE_LICENSE 		${CPACK_PACKAGE_LICENSE} )																# mandatory 
+	set( CPACK_RPM_PACKAGE_GROUP 		"Applications/System" )																	# mandatory, https://fedoraproject.org/wiki/RPMGroups
+	set( CPACK_RPM_PACKAGE_VENDOR 		${CPACK_PACKAGE_VENDOR} )																# mandatory
+	set( CPACK_RPM_PACKAGE_AUTOREQ 		"no" ) 																					# disable automatic shared libraries dependency detection (most of the time buggy)
+	
+	if (NOGUI)
+		set( CPACK_RPM_PACKAGE_REQUIRES 	"fuse, device-mapper, sudo" )
+	else ()
+		if ( PLATFORM STREQUAL "CentOS" )
+				
+			if ( DEFINED WITHGTK3 AND WITHGTK3 )
+				set( CPACK_RPM_PACKAGE_REQUIRES 	"fuse, device-mapper, gtk3, sudo" )
+			else ()
+				set( CPACK_RPM_PACKAGE_REQUIRES 	"fuse, device-mapper, gtk2, sudo" )
+			endif()
+			
+		elseif ( PLATFORM STREQUAL "openSUSE" )
+			
+			set( CPACK_RPM_PACKAGE_REQUIRES 	"fuse, device-mapper, gtk2, sudo" )
+		endif()
+	endif()
+
+	set( CPACK_RPM_PRE_UNINSTALL_SCRIPT_FILE 			${RPM_PRERM})															# optional
+	
+	# Prevents CPack from generating file conflicts
+	# This is to avoid having %dir of these directories in the .spec file
+	set( CPACK_RPM_EXCLUDE_FROM_AUTO_FILELIST_ADDITION 			"/usr" )
+	list(APPEND CPACK_RPM_EXCLUDE_FROM_AUTO_FILELIST_ADDITION	"/usr/bin" )
+	list(APPEND CPACK_RPM_EXCLUDE_FROM_AUTO_FILELIST_ADDITION	"/usr/share" )
+	list(APPEND CPACK_RPM_EXCLUDE_FROM_AUTO_FILELIST_ADDITION	"/usr/share/applications" )
+	list(APPEND CPACK_RPM_EXCLUDE_FROM_AUTO_FILELIST_ADDITION	"/usr/share/doc" )
+	list(APPEND CPACK_RPM_EXCLUDE_FROM_AUTO_FILELIST_ADDITION	"/usr/share/pixmaps" )
+	
+	set( CPACK_RPM_PACKAGE_RELOCATABLE 					"OFF" )
+	set( CPACK_RPM_PACKAGE_CONFLICTS 					"${CONFLICT_PACKAGE}")
+	
+endif()
+
+include(CPack)

src/Build/Include/Makefile.inc

@@ -14,12 +14,16 @@ $(NAME): $(NAME).a
 
 clean:
 	@echo Cleaning $(NAME)
-	rm -f $(APPNAME) $(NAME).a $(OBJS) $(OBJSEX) $(OBJS:.o=.d) *.gch
+	rm -f $(APPNAME) $(NAME).a $(OBJS) $(OBJSEX) $(OBJSNOOPT) $(OBJS:.o=.d) $(OBJSEX:.oo=.d) $(OBJSNOOPT:.o0=.d) *.gch
 
 %.o: %.c
 	@echo Compiling $(<F)
 	$(CC) $(CFLAGS) -c $< -o $@
 
+%.o0: %.c
+	@echo Compiling $(<F)
+	$(CC) $(CFLAGS) -O0 -c $< -o $@
+
 %.o: %.cpp
 	@echo Compiling $(<F)
 	$(CXX) $(CXXFLAGS) -c $< -o $@
@@ -64,10 +68,10 @@ TR_SED_BIN := tr '\n' ' ' | tr -s ' ' ',' | sed -e 's/^,//g' -e 's/,$$/n/' | tr
 
 
 # Dependencies
--include $(OBJS:.o=.d) $(OBJSEX:.oo=.d)
+-include $(OBJS:.o=.d) $(OBJSEX:.oo=.d) $(OBJSNOOPT:.o0=.d)
 
 
-$(NAME).a: $(OBJS) $(OBJSEX)
+$(NAME).a: $(OBJS) $(OBJSEX) $(OBJSNOOPT)
 	@echo Updating library $@
-	$(AR) $(AFLAGS) -rcu $@ $(OBJS) $(OBJSEX)
+	$(AR) $(AFLAGS) -rcu $@ $(OBJS) $(OBJSEX) $(OBJSNOOPT)
 	$(RANLIB) $@

src/Build/Packaging/debian-control/prerm

@@ -0,0 +1,9 @@
+#!/bin/sh
+V="$(mount | grep veracrypt_aux_mnt)"
+if [ ! -z "$V" ]
+then
+	echo "Error: All VeraCrypt volumes must be dismounted first." >&2
+	exit 1
+else
+	exit 0
+fi 

src/Build/Packaging/rpm-control/prerm.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+V="$(mount | grep veracrypt_aux_mnt)"
+if [ ! -z "$V" ]
+then
+	echo "Error: All VeraCrypt volumes must be dismounted first." >&2
+	exit 1
+else
+	exit 0
+fi 

src/Build/Resources/MacOSX/Info.plist.legacy.xml

@@ -0,0 +1,106 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist SYSTEM "file://localhost/System/Library/DTDs/PropertyList.dtd">
+<plist version="0.9">
+<dict>
+	<key>CFBundleInfoDictionaryVersion</key>
+	<string>6.0</string>
+
+	<key>CFBundleIdentifier</key>
+	<string>org.idrix.VeraCrypt</string>
+	
+ 	<key>UTExportedTypeDeclarations</key>
+    <array>
+    	<dict>
+			<key>UTTypeIdentifier</key>
+			<string>org.idrix.veracrypt.hc</string>
+            
+            <key>UTTypeDescription</key>
+            <string>VeraCrypt Container File</string>
+            
+            <key>UTTypeConformsTo</key>
+            <array>
+            	<string>public.data</string>
+        	</array>
+                
+            <key>UTTypeTagSpecification</key>
+            <dict>
+                <key>public.filename-extension</key>
+                <array>
+                    <string>hc</string>
+                    <string>tc</string>
+                </array>
+                    
+                <key>public.mime-type</key>
+                <string>application/veracrypt</string>
+            </dict>
+            </dict>
+        </array>
+
+	<key>CFBundleDocumentTypes</key>
+	<array>
+    	<dict>
+     	   <key>CFBundleTypeIconFile</key>
+     	   <string>VeraCrypt_Volume.icns</string>
+    	    <key>CFBundleTypeName</key>
+        	<string>VeraCrypt Container File</string>
+	        <key>CFBundleTypeRole</key>
+    	    <string>Viewer</string>
+        	<key>LSHandlerRank</key>
+        	<string>Owner</string>
+        	<key>LSItemContentTypes</key>
+        	<array>
+            	<!-- my app supports files with my custom extension (see UTExportedTypeDeclarations) -->
+            	<string>org.idrix.veracrypt.hc</string>
+        	</array>
+    	</dict>
+	</array>
+
+	<key>CFBundleDevelopmentRegion</key>
+	<string>English</string>
+
+	<key>CFBundleExecutable</key>
+	<string>VeraCrypt</string>
+
+	<key>CFBundleIconFile</key>
+	<string>VeraCrypt.icns</string>
+
+	<key>CFBundleName</key>
+	<string>VeraCrypt</string>
+
+	<key>CFBundlePackageType</key>
+	<string>APPL</string>
+
+	<key>CFBundleSignature</key>
+	<string>TRUE</string>
+
+	<key>CFBundleVersion</key>
+	<string>1.24.12</string>
+
+	<key>CFBundleShortVersionString</key>
+	<string>_VERSION_</string>
+
+	<key>CFBundleLongVersionString</key>
+	<string>VeraCrypt _VERSION_</string>
+
+	<key>LSArchitecturePriority</key>
+	<array>
+		<string>x86_64</string>
+		<string>i386</string>
+	</array>
+
+	<key>LSMinimumSystemVersion</key>
+	<string>10.7.0</string>
+
+	<key>LSRequiresCarbon</key>
+	<false/>
+
+	<key>CSResourcesFileMapped</key>
+	<true/>
+
+    <key>NSHighResolutionCapable</key>
+    <true/>
+
+    <key>NSPrincipalClass</key>
+    <string>NSApplication</string>
+</dict>
+</plist>

src/Build/Resources/MacOSX/Info.plist.xml

@@ -74,7 +74,7 @@
 	<string>TRUE</string>
 
 	<key>CFBundleVersion</key>
-	<string>1.23.8</string>
+	<string>1.24.12</string>
 
 	<key>CFBundleShortVersionString</key>
 	<string>_VERSION_</string>
@@ -82,6 +82,9 @@
 	<key>CFBundleLongVersionString</key>
 	<string>VeraCrypt _VERSION_</string>
 
+	<key>LSMinimumSystemVersion</key>
+	<string>10.9.0</string>
+
 	<key>LSRequiresCarbon</key>
 	<false/>
 

src/Build/build_cmake_deb.sh

@@ -0,0 +1,69 @@
+#!/bin/sh
+
+# Errors should cause script to exit
+set -e
+
+# Absolute path to this script
+export SCRIPT=$(readlink -f "$0")
+# Absolute path this script is in
+export SCRIPTPATH=$(dirname "$SCRIPT")
+# Source directory which contains the Makefile
+export SOURCEPATH=$(readlink -f "$SCRIPTPATH/..")
+# Directory where the VeraCrypt has been checked out
+export PARENTDIR=$(readlink -f "$SCRIPTPATH/../../..")
+
+# The sources of wxWidgets 3.0.4 must be extracted to the parent directory
+export WX_ROOT=$PARENTDIR/wxWidgets-3.0.4
+echo "Using wxWidgets sources in $WX_ROOT"
+
+cd $SOURCEPATH
+
+if [ "$#" = "1" ] && [ "$1" = "WXSTATIC" ]
+then
+echo "Building GUI version of VeraCrypt for DEB using wxWidgets static libraries"
+
+# This will be the temporary wxWidgets directory
+export WX_BUILD_DIR=$PARENTDIR/wxBuildGUI
+
+# To build wxWidgets without GUI
+make WXSTATIC=1 wxbuild 	|| exit 1
+make WXSTATIC=1 clean 		|| exit 1
+make WXSTATIC=1  			|| exit 1
+make WXSTATIC=1 install DESTDIR="$PARENTDIR/VeraCrypt_Setup/GUI"	|| exit 1
+
+else
+
+echo "Building GUI version of VeraCrypt for DEB using system wxWidgets"
+make clean 	|| exit 1
+make 		|| exit 1
+make install DESTDIR="$PARENTDIR/VeraCrypt_Setup/GUI"	|| exit 1
+
+fi
+
+echo "Building console version of VeraCrypt for DEB using wxWidgets static libraries"
+
+# This is to avoid " Error: Unable to initialize GTK+, is DISPLAY set properly?" 
+# when building over SSH without X11 Forwarding
+# export DISPLAY=:0.0
+
+# This will be the temporary wxWidgets directory
+export WX_BUILD_DIR=$PARENTDIR/wxBuildConsole
+
+# To build wxWidgets without GUI
+make WXSTATIC=1 NOGUI=1 wxbuild 	|| exit 1
+make WXSTATIC=1 NOGUI=1 clean 		|| exit 1
+make WXSTATIC=1 NOGUI=1 			|| exit 1
+make WXSTATIC=1 NOGUI=1 install DESTDIR="$PARENTDIR/VeraCrypt_Setup/Console"	|| exit 1
+
+echo "Creating VeraCrypt DEB packages"
+
+# -DCPACK_RPM_PACKAGE_DEBUG=TRUE for debugging cpack DEB
+# -DCPACK_RPM_PACKAGE_DEBUG=TRUE for debugging cpack DEB
+
+mkdir -p $PARENTDIR/VeraCrypt_Packaging/GUI
+mkdir -p $PARENTDIR/VeraCrypt_Packaging/Console
+
+cmake -H$SCRIPTPATH -B$PARENTDIR/VeraCrypt_Packaging/GUI -DVERACRYPT_BUILD_DIR="$PARENTDIR/VeraCrypt_Setup/GUI" -DNOGUI=FALSE || exit 1
+cpack --config $PARENTDIR/VeraCrypt_Packaging/GUI/CPackConfig.cmake || exit 1
+cmake -H$SCRIPTPATH -B$PARENTDIR/VeraCrypt_Packaging/Console -DVERACRYPT_BUILD_DIR="$PARENTDIR/VeraCrypt_Setup/Console" -DNOGUI=TRUE || exit 1
+cpack --config $PARENTDIR/VeraCrypt_Packaging/Console/CPackConfig.cmake	|| exit 1

src/Build/build_cmake_opensuse.sh

@@ -0,0 +1,71 @@
+#!/bin/sh
+
+# Errors should cause script to exit
+set -e
+
+# Absolute path to this script
+export SCRIPT=$(readlink -f "$0")
+# Absolute path this script is in
+export SCRIPTPATH=$(dirname "$SCRIPT")
+# Source directory which contains the Makefile
+export SOURCEPATH=$(readlink -f "$SCRIPTPATH/..")
+# Directory where the VeraCrypt has been checked out
+export PARENTDIR=$(readlink -f "$SCRIPTPATH/../../..")
+
+# The sources of wxWidgets 3.0.4 must be extracted to the parent directory
+export WX_ROOT=$PARENTDIR/wxWidgets-3.0.4
+echo "Using wxWidgets sources in $WX_ROOT"
+
+cd $SOURCEPATH
+
+echo "Building GUI version of VeraCrypt for RPM using wxWidgets static libraries"
+
+# This will be the temporary wxWidgets directory
+export WX_BUILD_DIR=$PARENTDIR/wxBuildGui
+
+# To build wxWidgets using GTK-2
+make WXSTATIC=1 wxbuild 	|| exit 1
+ln -s $WX_BUILD_DIR/lib  $WX_BUILD_DIR/lib64
+make WXSTATIC=1 clean 				|| exit 1
+make WXSTATIC=1 					|| exit 1
+make WXSTATIC=1 install DESTDIR="$PARENTDIR/VeraCrypt_Setup/GUI"	|| exit 1
+
+# Uncomment below and comment lines above to reuse existing wxWidgets build
+# make WXSTATIC=1 clean || exit 1
+# make WXSTATIC=1		|| exit 1
+# make WXSTATIC=1 install DESTDIR="$PARENTDIR/VeraCrypt_Setup/GUI"	|| exit 1
+
+echo "Building console version of VeraCrypt for RPM using wxWidgets static libraries"
+
+# This is to avoid " Error: Unable to initialize GTK+, is DISPLAY set properly?" 
+# when building over SSH without X11 Forwarding
+# export DISPLAY=:0.0
+
+# This will be the temporary wxWidgets directory
+export WX_BUILD_DIR=$PARENTDIR/wxBuildConsole
+
+# To build wxWidgets using GTK-2
+make WXSTATIC=1 NOGUI=1 wxbuild 	|| exit 1
+ln -s $WX_BUILD_DIR/lib  $WX_BUILD_DIR/lib64
+make WXSTATIC=1 NOGUI=1 clean 				|| exit 1
+make WXSTATIC=1 NOGUI=1 					|| exit 1
+make WXSTATIC=1 NOGUI=1 install DESTDIR="$PARENTDIR/VeraCrypt_Setup/Console"	|| exit 1
+
+# Uncomment below and comment lines above to reuse existing wxWidgets build
+# make WXSTATIC=1 NOGUI=1 clean || exit 1
+# make WXSTATIC=1 NOGUI=1		|| exit 1
+# make WXSTATIC=1 NOGUI=1 install DESTDIR="$PARENTDIR/VeraCrypt_Setup/Console"	|| exit 1
+
+echo "Creating VeraCrypt RPM packages "
+
+# -DCPACK_RPM_PACKAGE_DEBUG=TRUE for debugging cpack RPM
+# -DCPACK_RPM_PACKAGE_DEBUG=TRUE for debugging cpack RPM
+
+mkdir -p $PARENTDIR/VeraCrypt_Packaging/GUI
+mkdir -p $PARENTDIR/VeraCrypt_Packaging/Console
+
+# wxWidgets was built using GTK-2
+cmake -H$SCRIPTPATH -B$PARENTDIR/VeraCrypt_Packaging/GUI -DVERACRYPT_BUILD_DIR="$PARENTDIR/VeraCrypt_Setup/GUI" -DWITHGTK3=FALSE -DNOGUI=FALSE || exit 1		
+cpack --config $PARENTDIR/VeraCrypt_Packaging/GUI/CPackConfig.cmake || exit 1
+cmake -H$SCRIPTPATH -B$PARENTDIR/VeraCrypt_Packaging/Console -DVERACRYPT_BUILD_DIR="$PARENTDIR/VeraCrypt_Setup/Console" -DWITHGTK3=FALSE -DNOGUI=TRUE || exit 1
+cpack --config $PARENTDIR/VeraCrypt_Packaging/Console/CPackConfig.cmake|| exit 1

src/Build/build_cmake_rpm_gtk2.sh

@@ -0,0 +1,69 @@
+#!/bin/sh
+
+# Errors should cause script to exit
+set -e
+
+# Absolute path to this script
+export SCRIPT=$(readlink -f "$0")
+# Absolute path this script is in
+export SCRIPTPATH=$(dirname "$SCRIPT")
+# Source directory which contains the Makefile
+export SOURCEPATH=$(readlink -f "$SCRIPTPATH/..")
+# Directory where the VeraCrypt has been checked out
+export PARENTDIR=$(readlink -f "$SCRIPTPATH/../../..")
+
+# The sources of wxWidgets 3.0.4 must be extracted to the parent directory
+export WX_ROOT=$PARENTDIR/wxWidgets-3.0.4
+echo "Using wxWidgets sources in $WX_ROOT"
+
+cd $SOURCEPATH
+
+echo "Building GUI version of VeraCrypt for RPM using wxWidgets static libraries"
+
+# This will be the temporary wxWidgets directory
+export WX_BUILD_DIR=$PARENTDIR/wxBuildGui
+
+# To build wxWidgets using GTK-2
+make WXSTATIC=1 wxbuild 			|| exit 1
+make WXSTATIC=1 clean 				|| exit 1
+make WXSTATIC=1 					|| exit 1
+make WXSTATIC=1 install DESTDIR="$PARENTDIR/VeraCrypt_Setup/GUI"	|| exit 1
+
+# Uncomment below and comment lines above to reuse existing wxWidgets build
+# make WXSTATIC=1 clean || exit 1
+# make WXSTATIC=1		|| exit 1
+# make WXSTATIC=1 install DESTDIR="$PARENTDIR/VeraCrypt_Setup/GUI"	|| exit 1
+
+echo "Building console version of VeraCrypt for RPM using wxWidgets static libraries"
+
+# This is to avoid " Error: Unable to initialize GTK+, is DISPLAY set properly?" 
+# when building over SSH without X11 Forwarding
+# export DISPLAY=:0.0
+
+# This will be the temporary wxWidgets directory
+export WX_BUILD_DIR=$PARENTDIR/wxBuildConsole
+
+# To build wxWidgets using GTK-2
+make WXSTATIC=1 NOGUI=1 wxbuild 			|| exit 1
+make WXSTATIC=1 NOGUI=1 clean 				|| exit 1
+make WXSTATIC=1 NOGUI=1 					|| exit 1
+make WXSTATIC=1 NOGUI=1 install DESTDIR="$PARENTDIR/VeraCrypt_Setup/Console"	|| exit 1
+
+# Uncomment below and comment lines above to reuse existing wxWidgets build
+# make WXSTATIC=1 NOGUI=1 clean || exit 1
+# make WXSTATIC=1 NOGUI=1		|| exit 1
+# make WXSTATIC=1 NOGUI=1 install DESTDIR="$PARENTDIR/VeraCrypt_Setup/Console"	|| exit 1
+
+echo "Creating VeraCrypt RPM packages "
+
+# -DCPACK_RPM_PACKAGE_DEBUG=TRUE for debugging cpack RPM
+# -DCPACK_RPM_PACKAGE_DEBUG=TRUE for debugging cpack RPM
+
+mkdir -p $PARENTDIR/VeraCrypt_Packaging/GUI
+mkdir -p $PARENTDIR/VeraCrypt_Packaging/Console
+
+# wxWidgets was built using GTK-2
+cmake -H$SCRIPTPATH -B$PARENTDIR/VeraCrypt_Packaging/GUI -DVERACRYPT_BUILD_DIR="$PARENTDIR/VeraCrypt_Setup/GUI" -DWITHGTK3=FALSE -DNOGUI=FALSE || exit 1
+cpack --config $PARENTDIR/VeraCrypt_Packaging/GUI/CPackConfig.cmake || exit 1
+cmake -H$SCRIPTPATH -B$PARENTDIR/VeraCrypt_Packaging/Console -DVERACRYPT_BUILD_DIR="$PARENTDIR/VeraCrypt_Setup/Console" -DWITHGTK3=FALSE -DNOGUI=TRUE || exit 1
+cpack --config $PARENTDIR/VeraCrypt_Packaging/Console/CPackConfig.cmake || exit 1

src/Build/build_cmake_rpm_gtk3.sh

@@ -0,0 +1,69 @@
+#!/bin/sh
+
+# Errors should cause script to exit
+set -e
+
+# Absolute path to this script
+export SCRIPT=$(readlink -f "$0")
+# Absolute path this script is in
+export SCRIPTPATH=$(dirname "$SCRIPT")
+# Source directory which contains the Makefile
+export SOURCEPATH=$(readlink -f "$SCRIPTPATH/..")
+# Directory where the VeraCrypt has been checked out
+export PARENTDIR=$(readlink -f "$SCRIPTPATH/../../..")
+
+# The sources of wxWidgets 3.0.4 must be extracted to the parent directory
+export WX_ROOT=$PARENTDIR/wxWidgets-3.0.4
+echo "Using wxWidgets sources in $WX_ROOT"
+
+cd $SOURCEPATH
+
+echo "Building GUI version of VeraCrypt for RPM using wxWidgets static libraries"
+
+# This will be the temporary wxWidgets directory
+export WX_BUILD_DIR=$PARENTDIR/wxBuildGui
+
+# To build wxWidgets using GTK-3
+make WXSTATIC=1 WITHGTK3=1 wxbuild 	|| exit 1
+make WXSTATIC=1 clean 				|| exit 1
+make WXSTATIC=1 					|| exit 1
+make WXSTATIC=1 install DESTDIR="$PARENTDIR/VeraCrypt_Setup/GUI"	|| exit 1
+
+# Uncomment below and comment lines above to reuse existing wxWidgets build
+# make WXSTATIC=1 clean || exit 1
+# make WXSTATIC=1		|| exit 1
+# make WXSTATIC=1 install DESTDIR="$PARENTDIR/VeraCrypt_Setup/GUI"	|| exit 1
+
+echo "Building console version of VeraCrypt for RPM using wxWidgets static libraries"
+
+# This is to avoid " Error: Unable to initialize GTK+, is DISPLAY set properly?" 
+# when building over SSH without X11 Forwarding
+# export DISPLAY=:0.0
+
+# This will be the temporary wxWidgets directory
+export WX_BUILD_DIR=$PARENTDIR/wxBuildConsole
+
+# To build wxWidgets using GTK-3
+make WXSTATIC=1 WITHGTK3=1 NOGUI=1 wxbuild 	|| exit 1
+make WXSTATIC=1 NOGUI=1 clean 				|| exit 1
+make WXSTATIC=1 NOGUI=1 					|| exit 1
+make WXSTATIC=1 NOGUI=1 install DESTDIR="$PARENTDIR/VeraCrypt_Setup/Console"	|| exit 1
+
+# Uncomment below and comment lines above to reuse existing wxWidgets build
+# make WXSTATIC=1 NOGUI=1 clean || exit 1
+# make WXSTATIC=1 NOGUI=1		|| exit 1
+# make WXSTATIC=1 NOGUI=1 install DESTDIR="$PARENTDIR/VeraCrypt_Setup/Console"	|| exit 1
+
+echo "Creating VeraCrypt RPM packages "
+
+# -DCPACK_RPM_PACKAGE_DEBUG=TRUE for debugging cpack RPM
+# -DCPACK_RPM_PACKAGE_DEBUG=TRUE for debugging cpack RPM
+
+mkdir -p $PARENTDIR/VeraCrypt_Packaging/GUI
+mkdir -p $PARENTDIR/VeraCrypt_Packaging/Console
+
+# wxWidgets was built using GTK-3
+cmake -H$SCRIPTPATH -B$PARENTDIR/VeraCrypt_Packaging/GUI -DVERACRYPT_BUILD_DIR="$PARENTDIR/VeraCrypt_Setup/GUI" -DWITHGTK3=TRUE -DNOGUI=FALSE || exit 1		
+cpack --config $PARENTDIR/VeraCrypt_Packaging/GUI/CPackConfig.cmake || exit 1
+cmake -H$SCRIPTPATH -B$PARENTDIR/VeraCrypt_Packaging/Console -DVERACRYPT_BUILD_DIR="$PARENTDIR/VeraCrypt_Setup/Console" -DWITHGTK3=TRUE -DNOGUI=TRUE || exit 1
+cpack --config $PARENTDIR/VeraCrypt_Packaging/Console/CPackConfig.cmake|| exit 1

src/Build/build_veracrypt_macosx.sh

@@ -1,5 +1,5 @@
 #
-# Copyright (c) 2013-2017 IDRIX
+# Copyright (c) 2013-2019 IDRIX
 # Governed by the Apache License 2.0 the full text of which is contained
 # in the file License.txt included in VeraCrypt binary and source
 # code distribution packages.
@@ -12,22 +12,22 @@ SOURCEPATH=$(cd "$(dirname "$SCRIPTPATH/../.")"; pwd)
 # directory where the VeraCrypt project has been checked out
 PARENTDIR=$(cd "$(dirname "$SCRIPTPATH/../../../.")"; pwd)
 
-# the sources of wxWidgets 3.0.3 must be extracted to the parent directory
-export WX_ROOT=$PARENTDIR/wxWidgets-3.0.4
+# the sources of wxWidgets 3.1.2 must be extracted to the parent directory (for night mode)
+export WX_ROOT=$PARENTDIR/wxWidgets-3.1.2
 echo "Using wxWidgets sources in $WX_ROOT"
 
 # this will be the temporary wxWidgets directory
-export WX_BUILD_DIR=$PARENTDIR/wxBuild
-
-# define the SDK version to use. We use 10.7 by default
-export VC_OSX_TARGET=10.7
-echo "Using MacOSX SDK $VC_OSX_TARGET"
+export WX_BUILD_DIR=$PARENTDIR/wxBuild-3.1.2
 
+# define the SDK version to use and OSX minimum target. We target 10.9 by default
+export VC_OSX_TARGET=10.9
+export VC_OSX_SDK=10.14
+echo "Using MacOSX SDK $VC_OSX_SDK with target set to $VC_OSX_TARGET"
 
 cd $SOURCEPATH
 
 echo "Building VeraCrypt"
-make WXSTATIC=1 wxbuild && make WXSTATIC=1 clean && make WXSTATIC=1 && make WXSTATIC=1 package
+make WXSTATIC=FULL wxbuild && make WXSTATIC=FULL clean && make WXSTATIC=FULL && make WXSTATIC=FULL package
 
 # Uncomment below and comment line above to reuse existing wxWidgets build
-# make WXSTATIC=1 clean && make WXSTATIC=1 && make WXSTATIC=1 package
+# make WXSTATIC=FULL clean && make WXSTATIC=FULL && make WXSTATIC=FULL package

src/Build/build_veracrypt_macosx_legacy.sh

@@ -0,0 +1,33 @@
+#
+# Copyright (c) 2013-2017 IDRIX
+# Governed by the Apache License 2.0 the full text of which is contained
+# in the file License.txt included in VeraCrypt binary and source
+# code distribution packages.
+#
+
+# Absolute path this script is in
+SCRIPTPATH=$(cd "$(dirname "$0")"; pwd)
+# source directory which contains the Makefile
+SOURCEPATH=$(cd "$(dirname "$SCRIPTPATH/../.")"; pwd)
+# directory where the VeraCrypt project has been checked out
+PARENTDIR=$(cd "$(dirname "$SCRIPTPATH/../../../.")"; pwd)
+
+# the sources of wxWidgets 3.1.2 must be extracted to the parent directory
+export WX_ROOT=$PARENTDIR/wxWidgets-3.1.2
+echo "Using wxWidgets sources in $WX_ROOT"
+# this will be the temporary wxWidgets directory
+export WX_BUILD_DIR=$PARENTDIR/wxBuild
+
+# define the SDK version to use. We use 10.7 by default
+export VC_OSX_TARGET=10.7
+export VC_OSX_SDK=10.9
+echo "Using MacOSX SDK $VC_OSX_TARGET"
+
+
+cd $SOURCEPATH
+
+echo "Building VeraCrypt"
+make WXSTATIC=FULL wxbuild && make WXSTATIC=FULL clean && make WXSTATIC=FULL && make WXSTATIC=FULL package
+
+# Uncomment below and comment line above to reuse existing wxWidgets build
+# make WXSTATIC=FULL clean && make WXSTATIC=FULL && make WXSTATIC=FULL package

src/Common/Apidrvr.h

@@ -123,6 +123,10 @@
 // IN OUT - DISK_GEOMETRY_EX_STRUCT
 #define VC_IOCTL_GET_DRIVE_GEOMETRY_EX					TC_IOCTL (40)
 
+#define VC_IOCTL_EMERGENCY_CLEAR_ALL_KEYS				TC_IOCTL (41)
+
+#define VC_IOCTL_IS_RAM_ENCRYPTION_ENABLED				TC_IOCTL (42)
+
 // Legacy IOCTLs used before version 5.0
 #define TC_IOCTL_LEGACY_GET_DRIVER_VERSION		466968
 #define TC_IOCTL_LEGACY_GET_MOUNTED_VOLUMES		466948
@@ -220,6 +224,7 @@ typedef struct
 	wchar_t wszLabel[33];
 	BOOL bDriverSetLabel;
 	unsigned char volumeID[VOLUME_ID_SIZE];
+	BOOL mountDisabled;
 } VOLUME_PROPERTIES_STRUCT;
 
 typedef struct
@@ -413,5 +418,8 @@ typedef struct
 #define VC_DRIVER_CONFIG_ALLOW_NONSYS_TRIM							0x80
 #define VC_DRIVER_CONFIG_BLOCK_SYS_TRIM								0x100
 #define VC_DRIVER_CONFIG_ALLOW_WINDOWS_DEFRAG						0x200
+#define VC_DRIVER_CONFIG_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION			0x400
+#define VC_DRIVER_CONFIG_ENABLE_CPU_RNG								0x800
+#define VC_DRIVER_CONFIG_ENABLE_RAM_ENCRYPTION						0x1000
 
 #endif		/* _WIN32 */

src/Common/BootEncryption.h

@@ -29,6 +29,10 @@ typedef NTSTATUS (WINAPI *NtQuerySystemInformationFn)(
 		PULONG                   ReturnLength
 );
 
+typedef ULONG (WINAPI *RtlNtStatusToDosErrorFn)(
+  NTSTATUS Status
+);
+
 using namespace std;
 
 namespace VeraCrypt
@@ -189,9 +193,11 @@ namespace VeraCrypt
 		BOOL Load (const wchar_t* fileName);
 		void Load (char* configContent);
 		BOOL Save (const wchar_t* fileName, HWND hwnd);
+		static BOOL IsPostExecFileField (const string& szFieldValue, string& filePath);
+		static BOOL IsPostExecFileField (const string& szFieldValue, wstring& filePath);
 	};
 
-	void GetVolumeESP(wstring& path);
+	void GetVolumeESP(wstring& path, wstring& bootVolumePath);
 	std::string ReadESPFile (LPCWSTR szFilePath, bool bSkipUTF8BOM);
 	void WriteESPFile (LPCWSTR szFilePath, LPBYTE pbData, DWORD dwDataLen, bool bAddUTF8BOM);
 
@@ -199,43 +205,42 @@ namespace VeraCrypt
 	public:
 		EfiBoot();
 
-		void MountBootPartition(WCHAR letter);
-		void DismountBootPartition();
+		void PrepareBootPartition(bool bDisableException = false);
 		bool IsEfiBoot();
 
 		void DeleteStartExec(uint16 statrtOrderNum = 0xDC5B, wchar_t* type = NULL);
-		void SetStartExec(wstring description, wstring execPath, uint16 statrtOrderNum = 0xDC5B, wchar_t* type = NULL, uint32 attr = 1);
+		void SetStartExec(wstring description, wstring execPath, bool setBootEntry = true, bool forceFirstBootEntry = true, bool setBootNext = true, uint16 statrtOrderNum = 0xDC5B, wchar_t* type = NULL, uint32 attr = 1);
 		void SaveFile(const wchar_t* name, byte* data, DWORD size);
 		void GetFileSize(const wchar_t* name, unsigned __int64& size);
 		void ReadFile(const wchar_t* name, byte* data, DWORD size);
 		void CopyFile(const wchar_t* name, const wchar_t* targetName);
 		bool FileExists(const wchar_t* name);
+		static bool CompareFiles (const wchar_t* fileName1, const wchar_t* fileName2);
+		static bool CompareFileData (const wchar_t* fileName, const byte* data, DWORD size);
 
-		BOOL RenameFile(const wchar_t* name, wchar_t* nameNew, BOOL bForce);
+		BOOL RenameFile(const wchar_t* name, const wchar_t* nameNew, BOOL bForce);
 		BOOL DelFile(const wchar_t* name);
 		BOOL MkDir(const wchar_t* name, bool& bAlreadyExists);
 		BOOL ReadConfig (const wchar_t* name, EfiBootConf& conf);
 		BOOL UpdateConfig (const wchar_t* name, int pim, int hashAlgo, HWND hwndDlg);
 		BOOL WriteConfig (const wchar_t* name, bool preserveUserConfig, int pim, int hashAlgo, const char* passPromptMsg, HWND hwndDlg);
 		BOOL DelDir(const wchar_t* name);
-		void SelectBootVolumeESP();
-		void SelectBootVolume(WCHAR* bootVolumePath);
-		PSTORAGE_DEVICE_NUMBER GetStorageDeviceNumber () { return &sdn;}
+		PSTORAGE_DEVICE_NUMBER GetStorageDeviceNumber () { if (bDeviceInfoValid) return &sdn; else { SetLastError (ERROR_INVALID_DRIVE); throw SystemException(SRC_POS);}}
 
 	protected:
 		bool m_bMounted;
-		WCHAR	EfiBootPartPath[3];
+		std::wstring	EfiBootPartPath;
 		STORAGE_DEVICE_NUMBER sdn;
 		PARTITION_INFORMATION_EX partInfo;
+		bool bDeviceInfoValid;
 		WCHAR     tempBuf[1024];
-		bool  bBootVolumePathSelected;
-		WCHAR BootVolumePath[MAX_PATH];
+		std::wstring BootVolumePath;
 	};
 
 	class BootEncryption
 	{
 	public:
-		BootEncryption (HWND parent, bool postOOBE = false);
+		BootEncryption (HWND parent, bool postOOBE = false, bool setBootEntry = true, bool forceFirstBootEntry = true, bool setBootNext = false);
 		~BootEncryption ();
 
 		enum FilterType
@@ -282,16 +287,19 @@ namespace VeraCrypt
 		void ProbeRealSystemDriveSize ();
 		bool ReadBootSectorConfig (byte *config, size_t bufLength, byte *userConfig = nullptr, string *customUserMessage = nullptr, uint16 *bootLoaderVersion = nullptr);
 		uint32 ReadDriverConfigurationFlags ();
+		uint32 ReadServiceConfigurationFlags ();
 		void RegisterBootDriver (bool hiddenSystem);
 		void RegisterFilterDriver (bool registerDriver, FilterType filterType);
 		void RegisterSystemFavoritesService (BOOL registerService);
 		void RegisterSystemFavoritesService (BOOL registerService, BOOL noFileHandling);
+		bool IsSystemFavoritesServiceRunning ();
 		void UpdateSystemFavoritesService ();
 		void RenameDeprecatedSystemLoaderBackup ();
 		bool RestartComputer (BOOL bShutdown = FALSE);
 		void InitialSecurityChecksForHiddenOS ();
 		void RestrictPagingFilesToSystemPartition ();
 		void SetDriverConfigurationFlag (uint32 flag, bool state);
+		void SetServiceConfigurationFlag (uint32 flag, bool state);
 		void SetDriverServiceStartType (DWORD startType);
 		void SetHiddenOSCreationPhase (unsigned int newPhase);
 		void StartDecryption (BOOL discardUnreadableEncryptedSectors);
@@ -344,6 +352,9 @@ namespace VeraCrypt
 		bool RescueVolumeHeaderValid;
 		bool VolumeHeaderValid;
 		bool PostOOBEMode;
+		bool SetBootNext;
+		bool SetBootEntry;
+		bool ForceFirstBootEntry;
 	};
 }
 
@@ -358,6 +369,12 @@ namespace VeraCrypt
 #define TC_SYSTEM_FAVORITES_SERVICE_NAME				_T(TC_APP_NAME) L"SystemFavorites"
 #define	TC_SYSTEM_FAVORITES_SERVICE_LOAD_ORDER_GROUP	L"Event Log"
 #define TC_SYSTEM_FAVORITES_SERVICE_CMDLINE_OPTION		L"/systemFavoritesService"
+#define VC_SYSTEM_FAVORITES_SERVICE_ARG_SKIP_MOUNT		L"/SkipMount"
+
+#define VC_SYSTEM_FAVORITES_SERVICE_CONFIG_DONT_UPDATE_LOADER			0x1
+#define VC_SYSTEM_FAVORITES_SERVICE_CONFIG_FORCE_SET_BOOTNEXT			0x2
+#define VC_SYSTEM_FAVORITES_SERVICE_CONFIG_DONT_SET_BOOTENTRY			0x4
+#define VC_SYSTEM_FAVORITES_SERVICE_CONFIG_DONT_FORCE_FIRST_BOOTENTRY	0x8
 
 #define VC_WINDOWS_UPGRADE_POSTOOBE_CMDLINE_OPTION		L"/PostOOBE"
 

src/Common/Cache.c

@@ -24,6 +24,25 @@ int	 CachedPim[CACHE_SIZE];
 int cacheEmpty = 1;
 static int nPasswordIdx = 0;
 
+#ifdef _WIN64
+
+uint64 VcGetPasswordEncryptionID (Password* pPassword)
+{
+	return ((uint64) pPassword->Text) + ((uint64) pPassword);
+}
+
+void VcProtectPassword (Password* pPassword, uint64 encID)
+{
+	VcProtectMemory (encID, (unsigned char*) pPassword->Text, sizeof(pPassword->Text), (unsigned char*) &pPassword->Length, sizeof (pPassword->Length));
+}
+
+void VcUnprotectPassword (Password* pPassword, uint64 encID)
+{
+	VcProtectPassword (pPassword, encID);
+}
+
+#endif
+
 int ReadVolumeHeaderWCache (BOOL bBoot, BOOL bCache, BOOL bCachePim, char *header, Password *password, int pkcs5_prf, int pim, BOOL truecryptMode, PCRYPTO_INFO *retInfo)
 {
 	int nReturnCode = ERR_PASSWORD_WRONG;
@@ -37,16 +56,37 @@ int ReadVolumeHeaderWCache (BOOL bBoot, BOOL bCache, BOOL bCachePim, char *heade
 		/* Save mount passwords back into cache if asked to do so */
 		if (bCache && (nReturnCode == 0 || nReturnCode == ERR_CIPHER_INIT_WEAK_KEY))
 		{
+#ifdef _WIN64
+			Password tmpPass;
+#endif
 			for (i = 0; i < CACHE_SIZE; i++)
 			{
-				if (memcmp (&CachedPasswords[i], password, sizeof (Password)) == 0)
+				Password* pCurrentPassword = &CachedPasswords[i];
+#ifdef _WIN64
+				if (IsRamEncryptionEnabled())
+				{
+					memcpy (&tmpPass, pCurrentPassword, sizeof (Password));
+					VcUnprotectPassword (&tmpPass, VcGetPasswordEncryptionID (pCurrentPassword));
+					pCurrentPassword = &tmpPass;
+				}
+#endif
+				if (memcmp (pCurrentPassword, password, sizeof (Password)) == 0)
 					break;
 			}
 
+#ifdef _WIN64
+			if (IsRamEncryptionEnabled())
+				burn (&tmpPass, sizeof (Password));
+#endif
+
 			if (i == CACHE_SIZE)
 			{
 				/* Store the password */
 				CachedPasswords[nPasswordIdx] = *password;
+#ifdef _WIN64
+				if (IsRamEncryptionEnabled ())
+					VcProtectPassword (&CachedPasswords[nPasswordIdx], VcGetPasswordEncryptionID (&CachedPasswords[nPasswordIdx]));
+#endif
 
 				/* Store also PIM if requested, otherwise set to default */
 				if (bCachePim && (pim > 0))
@@ -67,10 +107,22 @@ int ReadVolumeHeaderWCache (BOOL bBoot, BOOL bCache, BOOL bCachePim, char *heade
 	}
 	else if (!cacheEmpty)
 	{
+#ifdef _WIN64
+		Password tmpPass;
+#endif
 		/* Attempt to recognize volume using cached passwords */
 		for (i = 0; i < CACHE_SIZE; i++)
 		{
-			if (CachedPasswords[i].Length > 0)
+			Password* pCurrentPassword = &CachedPasswords[i];
+#ifdef _WIN64
+			if (IsRamEncryptionEnabled())
+			{
+				memcpy (&tmpPass, pCurrentPassword, sizeof (Password));
+				VcUnprotectPassword (&tmpPass, VcGetPasswordEncryptionID (pCurrentPassword));
+				pCurrentPassword = &tmpPass;
+			}
+#endif
+			if ((pCurrentPassword->Length > 0) && (pCurrentPassword->Length <= (unsigned int) ((bBoot? MAX_LEGACY_PASSWORD: MAX_PASSWORD))))
 			{
 				if (truecryptMode)
 					effectivePim = 0;
@@ -78,12 +130,16 @@ int ReadVolumeHeaderWCache (BOOL bBoot, BOOL bCache, BOOL bCachePim, char *heade
 					effectivePim = CachedPim[i];
 				else
 					effectivePim = pim;
-				nReturnCode = ReadVolumeHeader (bBoot, header, &CachedPasswords[i], pkcs5_prf, effectivePim, truecryptMode, retInfo, NULL);
+				nReturnCode = ReadVolumeHeader (bBoot, header, pCurrentPassword, pkcs5_prf, effectivePim, truecryptMode, retInfo, NULL);
 
 				if (nReturnCode != ERR_PASSWORD_WRONG)
 					break;
 			}
 		}
+#ifdef _WIN64
+		if (IsRamEncryptionEnabled())
+			burn (&tmpPass, sizeof (Password));
+#endif
 	}
 
 	return nReturnCode;
@@ -92,19 +148,52 @@ int ReadVolumeHeaderWCache (BOOL bBoot, BOOL bCache, BOOL bCachePim, char *heade
 
 void AddPasswordToCache (Password *password, int pim)
 {
+#ifdef _WIN64
+	Password tmpPass;
+#endif
 	int i;
 	for (i = 0; i < CACHE_SIZE; i++)
 	{
-		if (memcmp (&CachedPasswords[i], password, sizeof (Password)) == 0)
-			return;
+		Password* pCurrentPassword = &CachedPasswords[i];
+#ifdef _WIN64
+		if (IsRamEncryptionEnabled())
+		{
+			memcpy (&tmpPass, pCurrentPassword, sizeof (Password));
+			VcUnprotectPassword (&tmpPass, VcGetPasswordEncryptionID (pCurrentPassword));
+			pCurrentPassword = &tmpPass;
+		}
+#endif
+		if (memcmp (pCurrentPassword, password, sizeof (Password)) == 0)
+			break;
 	}
 
-	CachedPasswords[nPasswordIdx] = *password;
-	CachedPim[nPasswordIdx] = pim > 0? pim : 0;
-	nPasswordIdx = (nPasswordIdx + 1) % CACHE_SIZE;
-	cacheEmpty = 0;
+	if (i == CACHE_SIZE)
+	{
+		CachedPasswords[nPasswordIdx] = *password;
+#ifdef _WIN64
+		if (IsRamEncryptionEnabled ())
+			VcProtectPassword (&CachedPasswords[nPasswordIdx], VcGetPasswordEncryptionID (&CachedPasswords[nPasswordIdx]));
+#endif
+		CachedPim[nPasswordIdx] = pim > 0? pim : 0;
+		nPasswordIdx = (nPasswordIdx + 1) % CACHE_SIZE;
+		cacheEmpty = 0;
+	}
+#ifdef _WIN64
+	if (IsRamEncryptionEnabled())
+		burn (&tmpPass, sizeof (Password));
+#endif
 }
 
+void AddLegacyPasswordToCache (PasswordLegacy *password, int pim)
+{
+	Password inputPass = {0};
+	inputPass.Length = password->Length;
+	memcpy (inputPass.Text, password->Text, password->Length);
+
+	AddPasswordToCache (&inputPass, pim);
+
+	burn (&inputPass, sizeof (inputPass));
+}
 
 void WipeCache ()
 {

src/Common/Cache.h

@@ -21,5 +21,6 @@
 extern int cacheEmpty;
 
 void AddPasswordToCache (Password *password, int pim);
+void AddLegacyPasswordToCache (PasswordLegacy *password, int pim);
 int ReadVolumeHeaderWCache (BOOL bBoot, BOOL bCache, BOOL bCachePim,char *header, Password *password, int pkcs5_prf, int pim, BOOL truecryptMode, PCRYPTO_INFO *retInfo);
 void WipeCache (void);

src/Common/Cmdline.c

@@ -51,7 +51,7 @@ BOOL CALLBACK CommandHelpDlgProc (HWND hwndDlg, UINT msg, WPARAM wParam, LPARAM
 
 		*tmp = 0;
 
-		StringCchCopyW (tmp, 8192, L"VeraCrypt " _T(VERSION_STRING));
+		StringCchCopyW (tmp, 8192, L"VeraCrypt " _T(VERSION_STRING) _T(VERSION_STRING_SUFFIX));
 #ifdef _WIN64
 		StringCchCatW (tmp, 8192, L"  (64-bit)");
 #else
@@ -70,9 +70,9 @@ BOOL CALLBACK CommandHelpDlgProc (HWND hwndDlg, UINT msg, WPARAM wParam, LPARAM
 				StringCchCatW(tmp, 8192, tmp2);
 			}
 		}
-
+#if defined(TCMOUNT) && !defined(VCEXPANDER)
 		StringCchCatW (tmp, 8192, L"\nExamples:\n\nMount a volume as X:\tveracrypt.exe /q /v volume.hc /l X\nDismount a volume X:\tveracrypt.exe /q /d X");
-
+#endif
 		SetWindowTextW (GetDlgItem (hwndDlg, IDC_COMMANDHELP_TEXT), tmp);
 
 		TCfree(tmp);