MacOS: Fix Blake2s SSE 4.1 not being built

For now, we set GCC_GTEQ_430 to 1 to each OS. Later we will always suppose that gcc is newer than 4.3 and remove this logic.
MacOS: set minimum target to OSX 12. Fix About menu not working.
2026-08-30 20:57:10 +00:00 · 2023-10-01 18:52:55 +02:00 · 2023-10-01 18:51:20 +02:00 · 2023-10-01 11:06:46 +02:00 · 2023-10-01 00:48:57 +02:00 · 2023-09-30 15:12:20 +02:00
137 changed files with 1054 additions and 264 deletions
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="ar" name="العربية" en-name="Arabic" version="0.2.0" translators="Ahmad Gharbeia, Khaled Hosny, Ali Khojah" />
    <font lang="ar" class="normal" size="11" face="default" />
    <font lang="ar" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="be" name="Беларуская" en-name="Belarusian" version="0.1.0" translators="Aleg Azarousky" />
    <font lang="be" class="normal" size="11" face="default" />
    <font lang="be" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="bg" name="Български" en-name="Bulgarian" version="0.1.0" translators="Lachezar Gorchev" />
    <font lang="bg" class="normal" size="11" face="default" />
    <font lang="bg" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="ca" name="Català" en-name="Catalan" version="0.1.0" translators="CESICAT, Centre de Seguretat de la Informació de Catalunya" />
    <font lang="ca" class="normal" size="11" face="default" />
    <font lang="ca" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -10,7 +10,7 @@ Information about Corsican localization:
 	- Updated in 2023 by Patriccollu di Santa Maria è Sichè: May 29th (1.26), May 30th (1.26), June 1st (1.26),
 	          June 2nd (1.26), June 5th (1.26.2), June 21st (1.26.2), June 23rd (1.26.2), June 25th (1.26.2),
 	          June 29th (1.26.2), July 1st (1.26.3), July 30th (1.26.4), Aug. 14th (1.26.5), Sep. 8th (1.26.5),
-	          Sep. 20th (1.26.5)
+	          Sep. 20th (1.26.5), Sep. 24th (1.26.7)
 	- Updated on March 23rd, 2022 for version 1.26 by Patriccollu di Santa Maria è Sichè
 	- Created on March 6th, 2022 for version 1.25.9 by Patriccollu di Santa Maria è Sichè
@@ -18,8 +18,8 @@ Information about Corsican localization:
 	https://github.com/Patriccollu/Lingua_Corsa-Infurmatica/blob/ceppu/Prughjetti/VeraCrypt/Traduzzione.md
 -->
 <VeraCrypt>
-	<localization prog-version="1.26.6">
+	<localization prog-version="1.26.7">
-		<language langid="co" name="Corsu" en-name="Corsican" version="1.4.2" translators="Patriccollu di Santa Maria è Sichè"/>
+		<language langid="co" name="Corsu" en-name="Corsican" version="1.4.3" translators="Patriccollu di Santa Maria è Sichè"/>
 		<font lang="co" class="normal" size="11" face="default"/>
 		<font lang="co" class="bold" size="13" face="Arial"/>
 		<font lang="co" class="fixed" size="12" face="Lucida Console"/>
@@ -1651,7 +1651,8 @@ Information about Corsican localization:
 		<entry lang="co" key="EXPANDER_EXTENDING_FILESYSTEM">Estensione di u sistema di schedariu…\n</entry>
 		<entry lang="co" key="PARTIAL_SYSENC_MOUNT_READONLY">Avertimentu : A partizione di u sistema chì vo circate à muntà ùn hè stata micca cifrata sana. Da misura di sicurità, è per impedisce un alterazione pussibule, u vulume « %s » hè statu muntatu solu in lettura.</entry>
 		<entry lang="co" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Infurmazione impurtante nant’à l’impiegu d’estensioni di schedariu terze</entry>
-		<entry lang="co" key="IDC_DISABLE_MEMORY_PROTECTION">Disattivà a prutezzione di memoria in VeraCrypt</entry>
+		<entry lang="co" key="IDC_DISABLE_MEMORY_PROTECTION">Disattivà a prutezzione di memoria per a cumpatibilità cù l’attrezzi d’accessibilità</entry>
 		<entry lang="co" key="DISABLE_MEMORY_PROTECTION_WARNING">AVERTIMENTU : A disattivazione di prutezzione di memoria riduce a sicurità d’una manera significativa. Attivà st’ozzione SOLU s’è vo impiegate l’attrezzi d’accessibilità, cum’è i lettori di screnu, per interagisce cù l’interfaccia grafica di VeraCrypt.</entry>
 	</localization>
 	<xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
 		<xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="cs" name="Čeština" en-name="Czech" version="1.3.0" translators="Vítek Moser, Lagardere" />
    <font lang="cs" class="normal" size="11" face="default" />
    <font lang="cs" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="cs" key="EXPANDER_EXTENDING_FILESYSTEM">Rozšíření souborového systému ...\n</entry>
    <entry lang="cs" key="PARTIAL_SYSENC_MOUNT_READONLY">Upozornění: systémový diskový oddíl, jenž jste se pokusili připojit, nebyl plně zašifrován. Jako bezpečnostní opatření proti možnému poškození nebo nežádoucím změnám byl svazek '%s' připojen pouze pro čtení.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="da" name="Dansk" en-name="Danish" version="0.1.0" translators="Lasse Bond" />
    <font lang="da" class="normal" size="11" face="default" />
    <font lang="da" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <!-- Sprachen -->
    <language langid="de" name="Deutsch" en-name="German" version="1.1.8" translators="Harry Haller, Alexander Schorg, Simon Frankenberger, David Arndt, H. Sauer, Dulla, Ettore Atalan, Matthias Kolja Miehl, Felix Reichmann" />
    <!-- Schriftarten -->
@@ -1635,8 +1635,9 @@
    <entry lang="de" key="EXPANDER_UNMOUNTING_VOLUME">Volume trennen ...\n</entry>
    <entry lang="de" key="EXPANDER_EXTENDING_FILESYSTEM">Dateisystem erweitern ...\n</entry>
    <entry lang="de" key="PARTIAL_SYSENC_MOUNT_READONLY">WARNUNG: Die Systempartition, die Sie einzuhängen versucht haben, war nicht vollständig verschlüsselt. Als Sicherheitsmaßnahme wurde das Volume '%s' schreibgeschützt eingehängt, um mögliche Beschädigungen oder unerwünschte Änderungen zu verhindern.</entry>
-    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
+    <entry lang="de" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Wichtige Informationen zur Verwendung von Dateierweiterungen von Drittanbietern</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="de" key="IDC_DISABLE_MEMORY_PROTECTION">Deaktivieren Sie den Speicherschutz für die Kompatibilität der Eingabehilfen</entry>
    <entry lang="de" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNUNG: Die Deaktivierung des Speicherschutzes verringert die Sicherheit erheblich. Aktivieren Sie diese Option NUR, wenn Sie sich bei der Interaktion mit VeraCrypt auf Eingabehilfen wie Sprachausgabe verlassen.</entry>
  </localization>
  <!-- XML-Schema -->
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="el" name="Ελληνικά" en-name="Greek" version="0.1.0" translators="Βασίλης Κοσμίδης" />
    <font lang="el" class="normal" size="11" face="default" />
    <font lang="el" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="es" name="Español" en-name="Spanish" version="1.0.0" translators="Juan Antonio Auñón Ochando" />
    <font lang="es" class="normal" size="11" face="default" />
    <font lang="es" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="et" name="Eesti" en-name="Estonian" version="0.1.0" translators="Maiko Mõtsar" />
    <font lang="et" class="normal" size="11" face="vaikimisi" />
    <font lang="et" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="eu" name="Euskara" en-name="Basque" version="1.0.0" translators="Ander Genua" />
    <font lang="eu" class="normal" size="11" face="default" />
    <font lang="eu" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="fa" name="فارسي" en-name="Persian" version="0.1.0" translators="Ali Bitazar, Rodabeh Sarmadi" />
    <font lang="fa" class="normal" size="11" face="default" />
    <font lang="fa" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="fi" name="Suomi" en-name="Finnish" version="0.4.0" translators="Matti Ruhanen, Jertzukka" />
    <font lang="fi" class="normal" size="11" face="default" />
    <font lang="fi" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="fi" key="EXPANDER_EXTENDING_FILESYSTEM">Laajennetaan tiedostojärjestelmää ...\n</entry>
    <entry lang="fi" key="PARTIAL_SYSENC_MOUNT_READONLY">Varoitus: Järjestelmäosio, jota yritit liittää, ei ole täysin salattu. Mahdollisen korruptoitumisen tai ei-toivottujen muokkausten estämiseksi, taltio '%s' on liitetty turvallisuustoimenpiteenä Vain luku -tilassa.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="fr" name="Français" en-name="French" version="0.3.0" translators="Stéphane S., Olivier M., Thierry T" />
    <font lang="fr" class="normal" size="11" face="default" />
    <font lang="fr" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="fr" key="PARTIAL_SYSENC_MOUNT_READONLY">AVERTISSEMENT : La partition système que vous avez tenté de monter n'était pas entièrement chiffrée. Comme mesure de sécurité pour prévenir une éventuelle corruption ou des modifications non désirées, le volume « %s » a été monté en lecture seule.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt xmlns:xs="http://www.w3.org/2001/XMLSchema">
-  <localization prog-version="1.26.6">
+  <localization prog-version="1.26.7">
    <language langid="he" name="עברית" en-name="Hebrew" version="0.1.0" translators="thewh1teagle" />
    <font lang="he" class="normal" size="11" face="default" />
    <font lang="he" class="bold" size="13" face="Arial" />
@@ -1634,7 +1634,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="hu" name="Magyar" en-name="Hungarian" version="1.0.0" translators="Nyul Balazs > Szaki, Zityi's Translator Te@m" />
    <font lang="hu" class="normal" size="11" face="default" />
    <font lang="hu" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="id" name="Bahasa Indonesia" en-name="Indonesian" version="1.0.0" translators="Tajuddin N. F.; Transifex contributors" />
    <font lang="id" class="normal" size="11" face="default" />
    <font lang="id" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="it" name="Italiano" en-name="Italian" version="1.0.1" translators="Maurizio Ballo, Consiglio Gaetano" />
    <font lang="it" class="normal" size="11" face="default" />
    <font lang="it" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="ja" name="日本語" en-name="Japanese" version="1.1.0" translators="OGOSHI Masayuki, Transifex contributors" />
    <font lang="ja" class="normal" size="12" face="MS UI Gothic" />
    <font lang="ja" class="bold" size="16" face="MS UI Gothic" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="ka" name="ქართული" en-name="Georgian" version="0.1.0" translators="Kakha Lomiashvili" />
    <font lang="ka" class="normal" size="12" face="Arial" />
    <font lang="ka" class="bold" size="12" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="ko" name="한국어" en-name="Korean" version="0.2.0" translators="Kieaer, Herbert Shin, BaekMu" />
    <font lang="ko" class="normal" size="11" face="돋움" />
    <font lang="ko" class="bold" size="13" face="맑은 고딕" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="lv" name="Latviešu" en-name="Latvian" version="0.1.0" translators="Edmunds Melkers" />
    <font lang="lv" class="normal" size="11" face="default" />
    <font lang="lv" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="my" name="မြန်မာ" en-name="Burmese" version="2.0.0" translators="Zaw Myo Htet; Transifex contributors" />
    <font lang="my" class="normal" size="11" face="Myanmar3" />
    <font lang="my" class="bold" size="13" face="Myanmar3" />
@@ -1635,7 +1635,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" attributeFormDefault="unqualified" elementFormDefault="qualified">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="nl" name="Nederlands" en-name="Dutch" version="0.0.0" translators="Jan van der Wal, Peter Tak, Thomas De Rocker"/>
    <font lang="nl" class="normal" size="11" face="default"/>
    <font lang="nl" class="bold" size="13" face="Arial"/>
@@ -1633,7 +1633,8 @@
    <entry lang="nl" key="EXPANDER_EXTENDING_FILESYSTEM">Bestandssysteem uitbreiden...\n</entry>
    <entry lang="nl" key="PARTIAL_SYSENC_MOUNT_READONLY">Waarschuwing: de systeempartitie die u probeerde te koppelen was niet volledig versleuteld. Als veiligheidsmaatregel om mogelijke beschadiging of ongewenste wijzigingen te voorkomen, is volume '%s' gekoppeld als alleen-lezen.</entry>
    <entry lang="nl" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Belangrijke informatie over het gebruik van bestandsextensies van derden</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" attributeFormDefault="unqualified" elementFormDefault="qualified">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="nn" name="Norsk Nynorsk" en-name="Norwegian (Nynorsk)" version="0.1.0" translators="Kjell Rune Helland" />
    <font lang="nn" class="normal" size="11" face="default" />
    <font lang="nn" class="bold" size="13" face="Arial " />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="pl" name="Polski" en-name="Polish" version="1.0.0" translators="Mirek Druchowicz, Janusz Zamecki, Sobiesław Antolak, Begina Felicysym" />
    <font lang="pl" class="normal" size="11" face="default" />
    <font lang="pl" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="pl" key="EXPANDER_EXTENDING_FILESYSTEM">Rozszerzanie systemu plików...\n</entry>
    <entry lang="pl" key="PARTIAL_SYSENC_MOUNT_READONLY">Ostrzeżenie: Partycja systemowa, którą próbowano podłączyć, nie została w pełni zaszyfrowana. Ze względów bezpieczeństwa, aby zapobiec potencjalnemu uszkodzeniu lub niepożądanym modyfikacjom, wolumen '%s' został podłączony jako tylko do odczytu.</entry>
    <entry lang="pl" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Ważne informacje na temat korzystania z rozszerzeń plików innych dostawców</entry>
-    <entry lang="pl" key="IDC_DISABLE_MEMORY_PROTECTION">Wyłącz ochronę pamięci w VeraCrypt</entry>
+    <entry lang="pl" key="IDC_DISABLE_MEMORY_PROTECTION">Wyłącz ochronę pamięci w celu zapewnienia zgodności z narzędziami ułatwień dostępu</entry>
    <entry lang="pl" key="DISABLE_MEMORY_PROTECTION_WARNING">OSTRZEŻENIE: Wyłączenie ochrony pamięci znacznie zmniejsza bezpieczeństwo. Włącz tę opcję TYLKO wtedy, gdy korzystasz z narzędzi ułatwień dostępu, takich jak czytniki ekranu, do interakcji z interfejsem użytkownika VeraCrypt.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="pt-br" name="Português-Brasil" en-name="Portuguese (Brazil)" version="0.2.0" translators="Thiago C. L. Mendes, Lecidio S. Alencar , Lucas C. Ferreira, Transifex contributors" />
    <font lang="pt-br" class="normal" size="11" face="padrão" />
    <font lang="pt-br" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="ro" name="Română" en-name="Romanian" version="2.0.0" translators="Barna Cosmin Marian" />
    <font lang="ro" class="normal" size="11" face="default" />
    <font lang="ro" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="ro" key="EXPANDER_EXTENDING_FILESYSTEM">Se extinde sistemul de fișiere...\n</entry>
    <entry lang="ro" key="PARTIAL_SYSENC_MOUNT_READONLY">Avertizare: Partiția de sistem pe care ați încercat să o montați nu a fost criptată în întregime. Ca măsură de siguranță pentru a preveni o potențială corupere sau modificări nedorite, volumul „%s” a fost montat doar în mod citire.</entry>
    <entry lang="ro" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Informații importante despre utilizarea extensiilor de fișiere terță parte</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
-    <language langid="ru" name="Русский" en-name="Russian" version="1.26.5-1" translators="Dmitry Yerokhin" />
+    <language langid="ru" name="Русский" en-name="Russian" version="1.26.7" translators="Dmitry Yerokhin" />
    <font lang="ru" class="normal" size="11" face="default" />
    <font lang="ru" class="bold" size="13" face="Arial" />
    <font lang="ru" class="fixed" size="12" face="Lucida Console" />
@@ -1632,8 +1632,9 @@
    <entry lang="ru" key="EXPANDER_UNMOUNTING_VOLUME">Размонтирование тома...\n</entry>
    <entry lang="ru" key="EXPANDER_EXTENDING_FILESYSTEM">Увеличение объёма файловой системы...\n</entry>
    <entry lang="ru" key="PARTIAL_SYSENC_MOUNT_READONLY">ВНИМАНИЕ: Системный раздел, который вы пытались смонтировать, не был полностью зашифрован. Чтобы предотвратить потенциальное повреждение или нежелательные изменения, том '%s' смонтирован как только для чтения.</entry>
-    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
+    <entry lang="ru" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">ВАЖНО: О сторонних расширениях файлов</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="ru" key="IDC_DISABLE_MEMORY_PROTECTION">Отключить защиту памяти для совместимости со специальными возможностями</entry>
    <entry lang="ru" key="DISABLE_MEMORY_PROTECTION_WARNING">ВНИМАНИЕ: Отключение защиты памяти значительно снижает безопасность. Включайте эту опцию, ТОЛЬКО если вам нужны специальные возможности, такие как экранный диктор, для взаимодействия с интерфейсом VeraCrypt.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="sk" name="Slovenčina" en-name="Slovak" version="0.1.0" translators="Kamil David" />
    <font lang="sk" class="normal" size="11" face="default" />
    <font lang="sk" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="sl" name="Slovenščina" en-name="Slovenian" version="0.1.0" translators="Erik David Salam" />
    <font lang="sl" class="normal" size="11" face="default" />
    <font lang="sl" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="sv" name="Svenska" en-name="Swedish" version="1.0.0" translators="Peter Runesson" />
    <font lang="sv" class="normal" size="11" face="default" />
    <font lang="sv" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="th" name="ภาษาไทย" en-name="Thai" version="0.0.0" translators=""/>
    <font lang="th" class="normal" size="11" face="default" />
    <font lang="th" class="bold" size="13" face="Arial" />
@@ -1634,7 +1634,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="tr" name="Türkçe" en-name="Turkish" version="1.25.7" translators="FabSec; By Fabriel, Ali İskender Turan, Zeynel Abidin Öztürk, Mehmet Keçeci" />
    <font lang="tr" class="normal" size="11" face="default" />
    <font lang="tr" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="uk" name="Українська" en-name="Ukrainian" version="1.0.0" translators="Kravchuk Olexandr, Babchuk Volodymyr" />
    <font lang="uk" class="normal" size="11" face="default" />
    <font lang="uk" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="uz" name="Ўзбекча" en-name="Uzbek (Cyrillic)" version="0.1.0" translators="Abdurauf Azizov, Dmitry Yerokhin" />
    <font lang="uz" class="normal" size="11" face="default" />
    <font lang="uz" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="vi" name="Tiếng Việt" en-name="Vietnamese" version="0.1.0" translators="Nguyễn Kim Huy" />
    <font lang="vi" class="normal" size="11" face="default" />
    <font lang="vi" class="bold" size="13" face="Arial" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
-    <language langid="zh-cn" name="简体中文" en-name="Chinese (Simplified)" version="1.0.1" translators="Barney Li, Zhangjintao, Nkh0472" />
+    <language langid="zh-cn" name="简体中文" en-name="Chinese (Simplified)" version="1.0.2" translators="Barney Li, Zhangjintao, Nkh0472，风之暇想" />
    <font lang="zh-cn" class="normal" size="11" face="Tahoma" />
    <font lang="zh-cn" class="bold" size="14" face="Tahoma" />
    <font lang="zh-cn" class="fixed" size="14" face="MingLiU" />
@@ -1573,7 +1573,7 @@
    <entry lang="zh-cn" key="IDC_USE_ALL_FREE_SPACE">使用所有空闲空间。</entry>
    <entry lang="zh-cn" key="SYS_ENCRYPTION_UPGRADE_UNSUPPORTED_ALGORITHM">VeraCrypt无法升级，因为系统分区/驱动器使用了将不再支持的算法进行加密。\n请在升级VeraCrypt之前解密系统，然后再次加密。</entry>
    <entry lang="zh-cn" key="LINUX_EX2MSG_TERMINALNOTFOUND">未找到支持的终端应用程序，您需要xterm、konsole或gnome终端（带有dbus-x11）。</entry>
-    <entry lang="zh-cn" key="IDM_MOUNT_NO_CACHE">无缓存装载</entry>
+    <entry lang="zh-cn" key="IDM_MOUNT_NO_CACHE">无缓存加载</entry>
    <entry lang="zh-cn" key="EXPANDER_INFO">:: VeraCrypt 加密卷扩展向导 ::\n\n无需重新格式化即可即时扩展 VeraCrypt 加密卷\n\n\n支持使用 NTFS 格式化的所有卷（容器文件、磁盘和分区）。唯一的条件是 VeraCrypt 卷的主机驱动器或主机设备上必须有足够的可用空间。\n\n请勿使用本软件扩展包含隐藏加密卷的外层加密卷，因为这会破坏隐藏加密卷！\n</entry>
    <entry lang="zh-cn" key="IDC_STEPSEXPAND">1. 选择要扩展的VeraCrypt卷\n2. 点击 '装载' 按钮</entry>
    <entry lang="zh-cn" key="IDT_VOL_NAME">卷：</entry>
@@ -1634,7 +1634,8 @@
    <entry lang="zh-cn" key="EXPANDER_EXTENDING_FILESYSTEM">正在扩展文件系统...\n</entry>
    <entry lang="zh-cn" key="PARTIAL_SYSENC_MOUNT_READONLY">警告：您尝试装载的系统分区未完全加密。为了防止潜在的损坏或不必要的修改，加密卷 '%s' 已使用只读模式装载。</entry>
    <entry lang="zh-cn" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">有关使用第三方文件扩展名的重要信息</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="zh-cn" key="IDC_DISABLE_MEMORY_PROTECTION">为辅助功能的兼容性禁用内存保护</entry>
    <entry lang="zh-cn" key="DISABLE_MEMORY_PROTECTION_WARNING">警告：禁用内存保护会显著降低安全性。仅当您依赖辅助功能工具（如屏幕阅读器）与VeraCrypt的UI交互时，才需启用此选项。</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="zh-hk" name="繁體中文(香港)" en-name="Chinese (Hong Kong)" version="0.1.0" translators="PUN Chi Ho, Yeung Tim Ming" />
    <font lang="zh-hk" class="normal" size="12" face="Microsoft JhengHei UI" />
    <font lang="zh-hk" class="bold" size="13" face="Microsoft JhengHei UI Bold" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <VeraCrypt>
-  <localization prog-version= "1.26.6">
+  <localization prog-version= "1.26.7">
    <language langid="zh-tw" name="繁體中文" en-name="Chinese (Taiwan)" version="0.1.0" translators="Barney Li, Simon Ma, ChangMing Hsu" />
    <font lang="zh-tw" class="normal" size="12" face="MingLiU" />
    <font lang="zh-tw" class="bold" size="15" face="MingLiU" />
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -242,6 +242,14 @@
 			<param name="Name" value="Unencrypted Data in RAM">
 			<param name="Local" value="Unencrypted Data in RAM.html">
 			</OBJECT>
 		<LI> <OBJECT type="text/sitemap">
 			<param name="Name" value="VeraCrypt RAM Encryption">
 			<param name="Local" value="VeraCrypt RAM Encryption.html">
 			</OBJECT>
 		<LI> <OBJECT type="text/sitemap">
 			<param name="Name" value="VeraCrypt Memory Protection">
 			<param name="Local" value="VeraCrypt Memory Protection.html">
 			</OBJECT>
 		<LI> <OBJECT type="text/sitemap">
 			<param name="Name" value="Physical Security">
 			<param name="Local" value="Physical Security.html">
@@ -175,6 +175,8 @@ Using VeraCrypt Without Administrator Privileges.html
 VeraCrypt Background Task.html
 VeraCrypt Hidden Operating System.html
 VeraCrypt License.html
 VeraCrypt Memory Protection.html
 VeraCrypt RAM Encryption.html
 VeraCrypt Rescue Disk.html
 VeraCrypt System Files.html
 VeraCrypt Volume Format Specification.html
@@ -97,6 +97,8 @@
 </li><li><a href="Hibernation%20File.html">Hibernation File</a>
 </li></ul>
 </li><li><a href="Unencrypted%20Data%20in%20RAM.html">Unencrypted Data in RAM</a>
 </li><li><a href="VeraCrypt%20RAM%20Encryption.html">VeraCrypt RAM Encryption</a>
 </li><li><a href="VeraCrypt%20Memory%20Protection.html">VeraCrypt Memory Protection</a>
 </li><li><a href="Physical%20Security.html">Physical Security</a>
 </li><li><a href="Malware.html">Malware</a> </li><li><a href="Multi-User%20Environment.html">Multi-User Environment</a>
 </li><li><a href="Authenticity%20and%20Integrity.html">Authenticity and Integrity</a>
@@ -748,7 +748,21 @@ sudo /Applications/VeraCrypt.app/Contents/MacOS/VeraCrypt
 Running VeraCrypt with sudo often bypasses certain permission-related issues, but it's always a good practice to grant the necessary permissions via the system settings whenever possible.</p>
 </li>
 </ul>
- </div>
+</div>
 <div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
 <strong style="text-align:left">Why does VeraCrypt show an unknown device in its list that doesn't appear as a physical disk in Windows Disk Management or in DiskPart output?</strong></div>
 <div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
 <p>
 Starting from Windows 10 version 1903 and later, Microsoft introduced a feature called <b>Windows Sandbox</b>. This is an isolated environment designed to run untrusted applications safely. As part of this feature, Windows generates a dynamic virtual hard disk (VHDX) which represents a clean Windows installation. This VHDX contains a base system image, user data, and the runtime state, and its size can vary depending on system configurations and usage.	
 </p>
 <p>
 When VeraCrypt enumerates devices on a system, it identifies all available disk devices using device path formats like <b>\Device\HardDiskX\PartitionY</b>. VeraCrypt lists these devices, including virtual ones such as those associated with Windows Sandbox, without making distinctions based on their physical or virtual nature. Therefore, you might observe an unexpected device in VeraCrypt, even if it doesn't appear as a physical disk in tools like diskpart.
 </p>
 <p>
 For more details on the Windows Sandbox feature and its associated virtual hard disk, you can refer to this <a href="https://techcommunity.microsoft.com/t5/windows-os-platform-blog/windows-sandbox/ba-p/301849">official Microsoft article</a>.
 </p>
 </div>
 <div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
 <strong style="text-align:left">I haven't found any answer to my question in the FAQ &ndash; what should I do?</strong></div>
 <div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
 Please search the VeraCrypt documentation and website.</div>
@@ -39,7 +39,7 @@
 <strong>Note to users who created volumes with 1.17 version of VeraCrypt or earlier: </strong><br/>
 <span style="color:#ff0000;">To avoid hinting whether your volumes contain a hidden volume or not, or if you depend on plausible deniability when using hidden volumes/OS, then you must recreate both the outer and hidden volumes including system encryption and hidden OS, discarding existing volumes created prior to 1.18a version of VeraCrypt.</span></li>
 </p>
-<p><strong style="text-align:left">1.26.6</strong> (September 21<sup>st</sup>, 2023):</p>
+<p><strong style="text-align:left">1.26.7</strong> (October 1<sup>st</sup>, 2023):</p>
 <ul>
 <li><strong>All OSes:</strong>
 <ul>
@@ -86,6 +86,7 @@
 </ul>
 </li>
 <li>Add process mitigation policy to prevent VeraCrypt from being injected by other processes</li>
 <li>Minor enhancements to RAM Encryption implementation</li>
 <li>Fix Secure Desktop issues under Windows 11 22H2</li>
 <li>Implement support for mounting partially encrypted system partitions.</li>
 <li>Fix false positive detection of new device insertion when Clear Encryption Keys option is enable (System Encryption case only)</li>
@@ -105,7 +106,7 @@
 <li>remove recommendation of keyfiles files extensions and update documentation to mention risks of third-party file extensions.</li>
 <li>Add support for more language in the setup installer</li>
 <li>Update LZMA library to version 23.01</li>
-<li>Update libzip to version 1.10.0 and zlib to version 1.3</li>
+<li>Update libzip to version 1.10.1 and zlib to version 1.3</li>
 </ul>
 </li>
 <li><strong>Linux:</strong>
@@ -59,6 +59,8 @@ The sections in this chapter specify security requirements for using VeraCrypt a
 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 <a href="Unencrypted%20Data%20in%20RAM.html" style="text-align:left; color:#0080c0; text-decoration:none.html">Unencrypted Data in RAM</a>
 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 <a href="VeraCrypt%20Memory%20Protection.html" style="text-align:left; color:#0080c0; text-decoration:none.html">VeraCrypt Memory Protection</a>
 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 <a href="Physical%20Security.html" style="text-align:left; color:#0080c0; text-decoration:none.html">Physical Security</a>
 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 <a href="Malware.html" style="text-align:left; color:#0080c0; text-decoration:none.html">Malware</a>
@@ -0,0 +1,106 @@
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
 <head>
 <meta http-equiv="content-type" content="text/html; charset=utf-8" />
 <title>VeraCrypt - Free Open source disk encryption with strong security for the Paranoid</title>
 <meta name="description" content="VeraCrypt is free open-source disk encryption software for Windows, Mac OS X and Linux. In case an attacker forces you to reveal the password, VeraCrypt provides plausible deniability. In contrast to file encryption, data encryption performed by VeraCrypt is real-time (on-the-fly), automatic, transparent, needs very little memory, and does not involve temporary unencrypted files."/>
 <meta name="keywords" content="encryption, security"/>
 <link href="styles.css" rel="stylesheet" type="text/css" />
 </head>
 <body>
 <div>
 <a href="Documentation.html"><img src="VeraCrypt128x128.png" alt="VeraCrypt"/></a>
 </div>
 <div id="menu">
 	<ul>
 	  <li><a href="Home.html">Home</a></li>
 	  <li><a href="/code/">Source Code</a></li>
 	  <li><a href="Downloads.html">Downloads</a></li>
 	  <li><a class="active" href="Documentation.html">Documentation</a></li>
 	  <li><a href="Donation.html">Donate</a></li>
 	  <li><a href="https://sourceforge.net/p/veracrypt/discussion/" target="_blank">Forums</a></li>
 	</ul>
 </div>
 <div>
 <p>
 <a href="Documentation.html">Documentation</a>
 <img src="arrow_right.gif" alt=">>" style="margin-top: 5px">
 <a href="Security%20Requirements%20and%20Precautions.html">Security Requirements and Precautions</a>
 <img src="arrow_right.gif" alt=">>" style="margin-top: 5px">
 <a href="VeraCrypt%20Memory%20Protection.html">VeraCrypt Memory Protection</a>
 </p></div>
 <div class="wikidoc">
 <h1>VeraCrypt Memory Protection Mechanism</h1>
 <h2>Introduction</h2>
 <p>VeraCrypt always strives to enhance user experience while maintaining the highest level of security. The memory protection mechanism is one such security feature. However, understanding the need for accessibility, we have also provided an option to disable this mechanism for certain users. This page provides in-depth information on both.</p>
 <h2>Memory Protection Mechanism: An Overview</h2>
 <p>
 The memory protection mechanism ensures that non-administrator processes are prohibited from accessing the VeraCrypt process memory. This serves two primary purposes:
 <ul>
 	<li>Security Against Malicious Activities: The mechanism prevents non-admin processes from injecting harmful data or code inside the VeraCrypt process.</li>
 	<li>Protection of Sensitive Data: Although VeraCrypt is designed to not leave sensitive data in memory, this feature offers an extra layer of assurance by ensuring other non-admin processes cannot access or extract potentially sensitive information.</li>
 </ul>
 </p>
 <h2>Why Introduce An Option To Disable Memory Protection?</h2>
 <p>
 	Some accessibility tools, like screen readers, require access to a software's process memory to effectively interpret and interact with its user interface (UI). VeraCrypt's memory protection unintentionally hindered the functioning of such tools. To ensure that users relying on accessibility tools can still use VeraCrypt without impediments, we introduced this option.
 </p>
 <h2>How to Enable/Disable the Memory Protection Mechanism?</h2>
 <p>
 	By default, the memory protection mechanism is enabled. However, you can disable through VeraCrypt main UI or during installation.
 	<ol>
 		<li>During installation:
 			<ul>
 				<li>In the setup wizard, you'll encounter the <b>"Disable memory protection for Accessibility tools compatibility"</b> checkbox.</li>
 				<li>Check the box if you want to disable the memory protection. Leave it unchecked to keep using memory protection.</li>
 				<li>Proceed with the rest of the installation.</li>
 			</ul>
 		</li>
 		<li>Post-Installation:
 			<ul>
 				<li>Open VeraCrypt main UI and navigate to the menu Settings -> "Performance/Driver Configuration".</li>
 				<li>Locate and check/uncheck the <b>"Disable memory protection for Accessibility tools compatibility"</b> option as per your needs. You will be notified that an OS reboot is required for the change to take effect.</li>
 				<li>Click <b>OK</b>.</li>
 			</ul>
 		</li>
 		<li>During Upgrade or Repair/Reinstall
 			<ul>
 				<li>In the setup wizard, you'll encounter the <b>"Disable memory protection for Accessibility tools compatibility"</b> checkbox.</li>
 				<li>Check/uncheck the <b>"Disable memory protection for Accessibility tools compatibility"</b> option as per your needs.</li>
 				<li>Proceed with the rest of the upgrade or repair/reinstall.</li>
 				<li>You will be notified that an OS reboot is required if you have changed the memory protection setting.</li>
 			</ul>
 		</li>
 	</ol>
 <h2>Risks and Considerations</h2>
 <p>
 While disabling the memory protection mechanism can be essential for some users, it's crucial to understand the risks:
 <ul>
 	<li><b>Potential Exposure:</b> Disabling the mechanism could expose the VeraCrypt process memory to malicious processes.</li>
 	<li><b>Best Practice:</b> If you don't require accessibility tools to use VeraCrypt, it's recommended to leave the memory protection enabled.</li>
 </ul>
 </p>
 <h2>FAQ</h2>
 <p>
 	<b>Q: What is the default setting for the memory protection mechanism?</b><br>
 	<b>A:</b> The memory protection mechanism is enabled by default.
 </p>
 <p>
 	<b>Q: How do I know if the memory protection mechanism is enabled or disabled?</b><br>
 	<b>A:</b> You can check the status of the memory protection mechanism in the VeraCrypt main UI. Navigate to the menu Settings -> "Performance/Driver Configuration". If the <b>"Disable memory protection for Accessibility tools compatibility"</b> option is checked, the memory protection mechanism is disabled. If the option is unchecked, the memory protection mechanism is enabled.
 </p>
 <p>
 	<b>Q: Will disabling memory protection reduce the encryption strength of VeraCrypt?</b><br>
 	<b>A:</b> No, the encryption algorithms and their strength remain the same. Only the protection against potential memory snooping and injection by non-admin processes is affected.
 </p>
 <p>
 	<b>Q: I don't use accessibility tools. Should I disable this feature?</b><br>
 	<b>A:</b> No, it's best to keep the memory protection mechanism enabled for added security.
 </p>
 </div><div class="ClearBoth"></div></body></html>
@@ -0,0 +1,158 @@
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
 <head>
 <meta http-equiv="content-type" content="text/html; charset=utf-8" />
 <title>VeraCrypt - Free Open source disk encryption with strong security for the Paranoid</title>
 <meta name="description" content="VeraCrypt is free open-source disk encryption software for Windows, Mac OS X and Linux. In case an attacker forces you to reveal the password, VeraCrypt provides plausible deniability. In contrast to file encryption, data encryption performed by VeraCrypt is real-time (on-the-fly), automatic, transparent, needs very little memory, and does not involve temporary unencrypted files."/>
 <meta name="keywords" content="encryption, security"/>
 <link href="styles.css" rel="stylesheet" type="text/css" />
 </head>
 <body>
 <div>
 <a href="Documentation.html"><img src="VeraCrypt128x128.png" alt="VeraCrypt"/></a>
 </div>
 <div id="menu">
 	<ul>
 	  <li><a href="Home.html">Home</a></li>
 	  <li><a href="/code/">Source Code</a></li>
 	  <li><a href="Downloads.html">Downloads</a></li>
 	  <li><a class="active" href="Documentation.html">Documentation</a></li>
 	  <li><a href="Donation.html">Donate</a></li>
 	  <li><a href="https://sourceforge.net/p/veracrypt/discussion/" target="_blank">Forums</a></li>
 	</ul>
 </div>
 <div>
 <p>
 <a href="Documentation.html">Documentation</a>
 <img src="arrow_right.gif" alt=">>" style="margin-top: 5px">
 <a href="Security%20Requirements%20and%20Precautions.html">Security Requirements and Precautions</a>
 <img src="arrow_right.gif" alt=">>" style="margin-top: 5px">
 <a href="VeraCrypt%20RAM%20Encryption.html">VeraCrypt RAM Encryption</a>
 </p></div>
 <div class="wikidoc">
 <h1>VeraCrypt RAM Encryption Mechanism</h1>
 <h2>Introduction</h2>
 <p>
    VeraCrypt RAM Encryption aims to protect disk encryption keys stored in volatile memory against certain types of attacks. The primary objectives of this mechanism are:
    </p><ul>
        <li>To protect against cold boot attacks.</li>
        <li>To add an obfuscation layer to significantly complicate the recovery of encryption master keys from memory dumps, be it live or offline.</li>
    </ul>
 <p></p>
 <h3>Implementation Overview</h3>
 <p>Here's a summary of how RAM encryption is achieved:</p>
 <ol>
    <li>At Windows startup, the VeraCrypt driver allocates a 1MiB memory region. If this fails, we device the size by two until allocation succeeds (minimal size being 8KiB). All these variables are allocated in non-paged Kernel memory space.</li>
    <li>This memory region is then populated with random bytes generated by a CSPRNG based on ChaCha20.</li>
    <li>Two random 64-bit integers, <code>HashSeedMask</code> and <code>CipherIVMask</code>, are generated.</li>
    <li>For every master key of a volume, the RAM encryption algorithm derives a unique key from a combination of the memory region and unique values extracted from the memory to be encrypted. This ensures a distinct key for each encrypted memory region. The use of location-dependent keys and IVs prevents master keys from being easily extracted from memory dumps.</li>
    <li>The master keys are decrypted for every request, requiring a fast decryption algorithm. For this, ChaCha12 is utilized.</li>
    <li>Once a volume is mounted, its master keys are immediately encrypted using the described algorithm.</li>
    <li>For each I/O request for a volume, the master keys are decrypted only for the duration of that request and then securely wiped.</li>
    <li>Upon volume dismounting, the encrypted master keys are securely removed from memory.</li>
    <li>At Windows shutdown or reboot, the memory region allocated during startup is securely wiped.</li>
 </ol>
 <h3>Protection against Cold Boot Attacks</h3>
 <p>
    The mitigation of cold boot attacks is achieved by utilizing a large memory page for key derivation. This ensures that attackers cannot recover the master key since parts of this large memory area would likely be corrupted and irrecoverable after shutdown. Further details on cold boot attacks and mitigation techniques can be found in the referenced papers:
 </p>
 <ul>
    <li><a href="https://www.blackhat.com/presentations/bh-usa-08/McGregor/BH_US_08_McGregor_Cold_Boot_Attacks.pdf" target="_blank">Cold Boot Attacks (BlackHat)</a></li>
    <li><a href="https://www.grc.com/sn/files/RAM_Hijacks.pdf" target="_blank">RAM Hijacks</a></li>
 </ul>
 <h3>Incompatibility with Windows Hibernate and Fast Startup</h3>
 <p>
 	RAM Encryption in VeraCrypt is not compatible with the Windows Hibernate and Fast Startup features. Before activating RAM Encryption, these features will be disabled by VeraCrypt to ensure the security and functionality of the encryption mechanism.
 </p>
 <h3>Algorithm Choices</h3>
 <p>
    The choice of algorithms was based on a balance between security and performance:
 </p>
 <ul>
    <li><strong>t1ha2:</strong> A non-cryptographic hash function chosen for its impressive speed and ability to achieve GiB/s hashing rates. This is vital since keys are derived from a 1MB memory region for every encryption/decryption request. It also respects the strict avalanche criteria which is crucial for this use case.</li>
    <li><strong>ChaCha12:</strong> Chosen over ChaCha20 for performance reasons, it offers sufficient encryption strength while maintaining fast encryption/decryption speeds.</li>
 </ul>
 <h3>Key Algorithms</h3>
 <p>
    Two core algorithms are fundamental to the RAM encryption process:
 </p>
 <h4>1. VcGetEncryptionID</h4>
 <p>
    Computes a unique ID for the RAM buffer set to be encrypted.
 </p>
 <pre>    <code>
    - Input: pCryptoInfo, a CRYPTO_INFO variable to encrypt/decrypt
    - Output: A 64-bit integer identifying the pCryptoInfo variable
    - Steps:
      - Compute the sum of the virtual memory addresses of the fields ks and ks2 of pCryptoInfo: encID = ((uint64) pCryptoInfo-&gt;ks) + ((uint64) pCryptoInfo-&gt;ks2)
      - Return the result
    </code>
 </pre>
 <h4>2. VcProtectMemory</h4>
 <p>
    Encrypts the RAM buffer using the unique ID generated by VcGetEncryptionID.
 </p>
 <pre>    <code>
    - Input:
      - encID, unique ID for memory to be encrypted
      - pbData, pointer to the memory to be encrypted
      - pbKeyDerivationArea, memory area allocated by the driver at startup
      - HashSeedMask and CipherIVMask, two 64-bit random integers from startup
    - Output:
      - None; memory at pbData is encrypted in place
    - Steps:
      - Derive hashSeed: hashSeed = (((uint64) pbKeyDerivationArea) + encID) ^ HashSeedMask
      - Compute 128-bit hash: hash128 = t1h2 (pbKeyDerivationArea,hashSeed). 
      - Decompose hash128 into two 64-bit integers: hash128 = hash128_1 || hash128_2
      - Create a 256-bit key for ChaCha12: chachaKey = hash128_1 || hash128_2 || (hash128_1 OR hash128_2) || (hash128_1 + hash128_2)
      - Encrypt chachaKey by itself using ChaCha12 using hashSeed as an IV: ChaCha256Encrypt (chachaKey, hashSeed, chachaKey)
      - Derive the 64-bit IV for ChaCha12: chachaIV = (((uint64) pbKeyDerivationArea) + encID) ^ CipherIVMask
      - Encrypt memory at pbData using ChaCha12: ChaCha256Encrypt (chachaKey, chachaIV, pbData)
      - Securely erase temporary values
    </code>
 </pre>
 <p>
    It's important to note that, due to ChaCha12 being a stream cipher, encryption and decryption processes are identical, and the <code>VcProtectMemory</code> function can be used for both.
 </p>
 <p>
    For a deeper understanding and a look into the codebase, one can visit the VeraCrypt repository and explore the mentioned functions in the <code>src/Common/Crypto.c</code> file.
 </p>
 <h3>Additional Security Measures</h3>
 <p>
    Starting from version 1.24, VeraCrypt has integrated a mechanism that detects the insertion of new devices into the system when System Encryption is active. If a new device is inserted, master keys are immediately purged from memory, resulting in a Windows BSOD. This protects against attacks using specialized devices to extract memory from running systems. However, for maximum efficiency, this feature should be paired with RAM encryption.<br>
 	To enable this feature, navigate to the menu System -> Settings and check the <b>"Clear encryption keys from memory if a new device is inserted"</b> option.
 </p>
 <h3>Technical Limitations with Hibernation and Fast Startup</h3>
 <p>
 The Windows Hibernate and Fast Startup features save the content of RAM to the hard drive. In the context of VeraCrypt's RAM Encryption, supporting these features presents a significant challenge, namely a chicken-egg problem.<br>
 To maintain security, the large memory region used for key derivation in RAM Encryption would have to be stored in an encrypted format, separate from the usual VeraCrypt encryption applied to the current drive. This separate encrypted storage must also be unlockable using the same password as the one used for Pre-Boot Authentication. Moreover, this process must happen early in the boot sequence before filesystem access is available, necessitating the raw storage of encrypted data in specific sectors of a different disk.<br>
 While this is technically feasible, the complexity and user-unfriendliness of such a solution make it impractical for standard deployments. Therefore, enabling RAM Encryption necessitates the disabling of the Windows Hibernate and Fast Startup features.<br>
 </p>
 </div><div class="ClearBoth"></div></body></html>
@@ -0,0 +1,85 @@
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="ru" lang="ru">
 <head>
 <meta http-equiv="content-type" content="text/html; charset=utf-8" />
 <title>VeraCrypt - Бесплатное надёжное шифрование дисков с открытым исходным кодом</title>
 <meta name="description" content="VeraCrypt это бесплатное программное обеспечение для шифрования дисков с открытым исходным кодом для Windows, Mac OS X (macOS) и Linux. В случае, если злоумышленник вынуждает вас раскрыть пароль, VeraCrypt обеспечивает правдоподобное отрицание наличия шифрования. В отличие от пофайлового шифрования, VeraCrypt шифрует данные в реальном времени (на лету), автоматически, прозрачно, требует очень мало памяти и не использует временные незашифрованные файлы."/>
 <meta name="keywords" content="encryption, security, шифрование, безопасность"/>
 <link href="styles.css" rel="stylesheet" type="text/css" />
 </head>
 <body>
 <div>
 <a href="Documentation.html"><img src="VeraCrypt128x128.png" alt="VeraCrypt"/></a>
 </div>
 <div id="menu">
 	<ul>
 	  <li><a href="Home.html">Начало</a></li>
 	  <li><a href="/code/">Исходный код</a></li>
 	  <li><a href="Downloads.html">Загрузить</a></li>
 	  <li><a class="active" href="Documentation.html">Документация</a></li>
 	  <li><a href="Donation.html">Поддержать разработку</a></li>
 	  <li><a href="https://sourceforge.net/p/veracrypt/discussion/" target="_blank">Форум</a></li>
 	</ul>
 </div>
 <div>
 <p>
 <a href="Documentation.html">Документация</a>
 <img src="arrow_right.gif" alt=">>" style="margin-top: 5px">
 <a href="Avoid%20Third-Party%20File%20Extensions.html">О рисках, связанных со сторонними расширениями файлов</a>
 </p></div>
 <div class="wikidoc">
 	<h1>Понимание рисков использования сторонних расширений файлов с VeraCrypt</h1>
 	<div>
 	  <p>Хотя VeraCrypt обеспечивает надёжные возможности шифрования для защиты ваших данных, использование сторонних расширений файлов для файловых контейнеров или ключевых файлов может привести к риску сделать зашифрованные данные недоступными.<br />
 	  В этом руководстве содержится подробное объяснение связанных с этим рисков и излагаются рекомендации, как их снизить.</p>
 	</div>
 	<h2>Риски, связанные с файловыми контейнерами</h2>
 	<div>
 	  <p>Использование стороннего расширения файла для файловых контейнеров подвергает вас нескольким рискам:</p>
 	  <ul>
 		<li>ПЕРЕЗАПИСЬ МЕТАДАННЫХ: Обновление метаданных сторонними приложениями может привести к перезаписи важных частей файлового контейнера.</li>
 		<li>НЕПРЕДНАМЕРЕННЫЕ ИЗМЕНЕНИЯ: Случайный запуск файлового контейнера с помощью стороннего приложения может привести к изменению его метаданных без вашего согласия.</li>
 		<li>ПОВРЕЖДЕНИЕ КОНТЕЙНЕРА: Эти действия могут сделать контейнер нечитаемым или непригодным для использования.</li>
 		<li>ПОТЕРЯ ДАННЫХ: Данные внутри контейнера могут быть безвозвратно потеряны, если контейнер будет повреждён.</li>
 	  </ul>
 	</div>
 	<h2>Риски, связанные с ключевыми файлами</h2>
 	<div>
 	  <p>Аналогичные риски связаны с ключевыми файлами:</p>
 	  <ul>
 		<li>ПОВРЕЖДЕНИЕ КЛЮЧЕВОГО ФАЙЛА: Непреднамеренное изменение ключевого файла с помощью стороннего приложения может сделать его непригодным для расшифровки.</li>
 		<li>ПЕРЕЗАПИСЬ ДАННЫХ: Сторонние приложения могут перезаписать ту часть ключевого файла, которую VeraCrypt использует для расшифровки.</li>
 		<li>НЕПРЕДНАМЕРЕННЫЕ ИЗМЕНЕНИЯ: Случайные изменения могут сделать невозможным монтирование тома, если у вас нет неизменённой резервной копии ключевого файла.</li>
 	  </ul>
 	</div>
 	<h2>Примеры расширений, которых следует избегать</h2>
 	<div>
 	  <p>Избегайте использования следующих типов сторонних расширений файлов:</p>
 	  <ul>
 		<li>МЕДИАФАЙЛЫ: Изображения, аудио- и видеофайлы подвержены изменениям метаданных соответствующим программным обеспечением.</li>
 		<li>АРХИВЫ: Файлы ZIP, RAR, 7z могут быть легко изменены, из-за чего нарушится работа зашифрованного тома.</li>
 		<li>ИСПОЛНЯЕМЫЕ ФАЙЛЫ: Эти файлы могут изменяться в результате обновления программного обеспечения, что делает их ненадёжными в качестве файловых контейнеров или ключевых файлов.</li>
 		<li>ФАЙЛЫ ДОКУМЕНТОВ: Файлы Office и PDF могут автоматически обновляться программным обеспечением, что делает их использование рискованным.</li>
 	  </ul>
 	</div>
 	<h2>Рекомендации</h2>
 	<div>
 	  <p>Для безопасного использования примите к сведению следующие рекомендации:</p>
 	  <ul>
 		<li>Используйте нейтральные расширения файлов для файловых контейнеров и ключевых файлов, чтобы свести к минимуму риск автоматической ассоциации файлов.</li>
 		<li>Храните резервные копии файловых контейнеров и ключевых файлов в защищённых местах, изолированных от доступа по сети.</li>
 		<li>Отключите автоматическое открытие для определённых расширений файлов, которые вы используете для файловых контейнеров VeraCrypt и ключевых файлов.</li>
 		<li>Всегда перепроверяйте ассоциации файлов и будьте осторожны при использовании нового устройства или стороннего приложения.</li>
 	  </ul>
 	</div>
 <div class="ClearBoth"></div></body></html>
@@ -60,6 +60,7 @@
 </li><li><a href="Mounting%20VeraCrypt%20Volumes.html">Монтирование томов</a>
 </li></ul>
 </li><li><strong><a href="Normal%20Dismount%20vs%20Force%20Dismount.html">Обычное размонтирование против принудительного</a></strong>
 </li><li><strong><a href="Avoid%20Third-Party%20File%20Extensions.html">О рисках, связанных со сторонними расширениями файлов</a></strong>
 </li><li><strong><a href="Parallelization.html">Распараллеливание</a></strong>
 </li><li><strong><a href="Pipelining.html">Конвейеризация</a></strong>
 </li><li><strong><a href="Hardware%20Acceleration.html">Аппаратное ускорение</a></strong>
@@ -59,8 +59,6 @@
 ключевых файлов должны их предоставить, прежде чем том можно будет смонтировать).</li>
 </ul>
 <div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
 В качестве ключевого файла VeraCrypt можно использовать файл любого типа (например, .txt, .exe, mp3**, .avi),
 однако мы рекомендуем отдавать предпочтение сжатым файлам (.mp3, .jpg, .zip и т. д.).
 <br style="text-align:left">
 <br style="text-align:left">
 Обратите внимание, что VeraCrypt никогда не изменяет содержимое ключевых файлов. Разрешается выбирать более
@@ -42,7 +42,7 @@
 внешние, так и скрытые тома, включая шифрование системы и скрытую ОС, и удалить существующие тома, созданные версией
 VeraCrypt старее, чем 1.18a.</span></li>
 </p>
-<p><strong style="text-align:left">1.26.5</strong> (15 августа 2023 года):</p>
+<p><strong style="text-align:left">1.26.6</strong> (21 сентября 2023 года):</p>
 <ul>
 <li><strong>Все операционные системы:</strong>
 <ul>
@@ -73,6 +73,7 @@ VeraCrypt старее, чем 1.18a.</span></li>
 </li>
 <li><strong>Windows:</strong>
 <ul>
 <li>Официально минимальная поддерживаемая версия теперь – <strong>Windows 10</strong>. VeraCrypt всё ещё может работать в Windows 7 и Windows 8/8.1, но активные тесты на этих платформах не проводятся.</li>
 <li>Загрузчик EFI:
 <ul>
 <li>Исправлена ошибка в обработке значения PasswordTimeout, из-за которой оно ограничивалось 255 секундами.</li>
@@ -80,19 +81,34 @@ VeraCrypt старее, чем 1.18a.</span></li>
 <li>Добавлен BLAKE2s, удалены RIPEMD160 и GOST89.</li>
 </ul>
 </li>
 <li>По умолчанию включена защита памяти. В "Настройки/Быстродействие и настройки драйвера" добавлена опция для отключения защиты, если это нужно.
 <ul>
 	<li>Защита памяти блокирует чтение памяти VeraCrypt неадминистративными процессами.</li>
 	<li>Она может блокировать чтение пользовательского интерфейса VeraCrypt программами чтения с экрана (поддержка специальных возможностей), в этом случае защиту можно отключить.</li>
 	<li>Защиту можно отключить, установив в реестре значение "VeraCryptEnableMemoryProtection" в 0 в ключе "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\veracrypt".</li>
 </ul>
 </li>
 <li>Добавлена политика смягчения последствий процесса, чтобы предотвратить внедрение в VeraCrypt других процессов.</li>
 <li>Исправлены проблемы с безопасным рабочим столом в Windows 11 22H2.</li>
 <li>Реализована поддержка монтирования частично зашифрованных системных разделов.</li>
 <li>Исправлено ложное обнаружение вставки нового устройства, когда включена опция очистки ключей шифрования (только в случае системного шифрования).</li>
 <li>Улучшена реализация быстрого создания файловых контейнеров, использующих UAC для запроса необходимых привилегий, если они ещё не предоставлены.</li>
 <li>При создании файловых контейнеров разрешён выбор быстрого создания в интерфейсе мастера форматирования.</li>
 <li>Исправлены проблемы с форматированием при создании тома на некоторых машинах.</li>
 <li>Исправлена проблема с зависанием, вызванная быстрым форматированием больших файловых контейнеров.</li>
 <li>Добавлено выпадающее меню к кнопке <em>Смонтировать</em>, позволяющее монтировать без использования кэша.</li>
 <li>Возможный обход логарифмического замедления шифрования на месте на больших томах.</li>
 <li>Исправлена проблема с зависанием, вызванная быстрым форматированием больших файловых контейнеров.</li>
 <li>Расширитель томов (Expander) сначала проверяет наличие файла, прежде чем продолжить.</li>
 <li>Возможен выбор единицы размера (КБ/МБ/ГБ) для генерируемых ключевых файлов.</li>
 <li>Во избежание тихого сбоя при быстром создании файловых контейнеров отображается предупреждение, если недостаёт прав.</li>
 <li>При создании файловых контейнеров разрешён выбор быстрого создания в пользовательском интерфейсе мастера форматирования.</li>
 <li>Исправлены проблемы с форматированием при создании тома на некоторых машинах.</li>
 <li>При создании томов отображается полный список поддерживаемых размеров кластеров для файловых систем NTFS, ReFS и exFAT.</li>
 <li>Добавлена поддержка перетаскивания файлов и ключевых файлов в Расширителе томов (Expander).</li>
 <li>Реализован перевод интерфейса Расширителя томов (Expander).</li>
 <li>Заменён устаревший API выбора файла/папки на современный интерфейс IFileDialog для лучшей совместимости с Windows 11.</li>
 <li>Улучшения в безопасной загрузке библиотек зависимостей, включая задержку загрузки.</li>
 <li>Удалена рекомендация по расширениям ключевых файлов, а в документации указаны риски применения сторонних расширений файлов.</li>
 <li>Добавлена поддержка дополнительных языков в программе установки.</li>
 <li>Обновлена библиотека LZMA до версии 23.01.</li>
-<li>Обновлены библиотеки libzip до версии 1.9.2 и zlib до версии 1.2.13.</li>
+<li>Обновлены библиотеки libzip до версии 1.10.0 и zlib до версии 1.3.</li>
 </ul>
 </li>
 <li><strong>Linux:</strong>
@@ -104,6 +120,7 @@ VeraCrypt старее, чем 1.18a.</span></li>
 <li>Исправлены проблемы с запуском fsck в Linux.</li>
 <li>Исправлено игнорирование запросов на повышение привилегий.</li>
 <li>Исправлен неправильный размер скрытого тома при выборе опции использования всего свободного места.</li>
 <li>Исправлена при создании скрытого тома на диске с помощью CLI, вызванная неправильным определением максимального размера.</li>
 <li>Исправлены различные проблемы при работе в текстовом режиме:
 <ul>
 <li>Запрет выбора файловых систем exFAT/BTRFS, если они отсутствуют или несовместимы с созданным томом.</li>
@@ -37,29 +37,18 @@
 <li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows 11 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows 10 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows 8 и 8.1 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows 7 (должно быть установлено обновление KB3033929 или KB4474419)</li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows Vista (должно быть установлено обновление KB4039648 или KB4474419)</li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows XP </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows Server 2016 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
-Windows Server 2012 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+Mac OS X 13 Ventura </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows Server 2008 R2 (64-разрядная) (должно быть установлено обновление KB3033929 или KB4474419)</li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows Server 2008 (должно быть установлено обновление KB4039648 или KB4474419)</li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows Server 2003 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Mac OS X 12 Monterey </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Mac OS X 11 Big Sur </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
-Mac OS X 10.15 Catalina </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+Linux x86, x86-64, ARM64 (начиная с Debian 10, Ubuntu 20.04, CentOS 7, OpenSUSE 15.1)  </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
-Mac OS X 10.14 Mojave </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+FreeBSD x86-64 (начиная с версии 12) </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Mac OS X 10.13 High Sierra </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Mac OS X 10.12 Sierra </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Mac OS X 10.11 El Capitan </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Mac OS X 10.10 Yosemite </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Mac OS X 10.9 Mavericks </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Linux x86 (32- и 64-разрядные, ядро 2.6 или совместимое) </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 FreeBSD x86 (32- и 64-разрядные, начиная с версии 11) </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Raspberry Pi OS (32- и 64-разрядные) </li></ul>
 <div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
-<span style="text-align:left;">VeraCrypt 1.24-Update8 – последняя версия, поддерживающая Mac OS X 10.7 Lion и Mac OS X 10.8 Mountain Lion.</span></div>
+<span style="text-align:left;">Примечание: <br/>
 VeraCrypt 1.25.9 – последняя версия, поддерживающая Windows XP, Windows Vista, Windows 7, Windows 8 и Windows 8.1.<br/>
 VeraCrypt 1.25.9 – последняя версия, поддерживающая Mac OS X, начиная с версии 10.9 Mavericks и по 10.15 Catalina.<br/>
 VeraCrypt 1.24-Update8 – последняя версия, поддерживающая Mac OS X 10.7 Lion и Mac OS X 10.8 Mountain Lion.</span></div>
 <div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
 <br style="text-align:left">
 <span style="text-align:left; font-size:10px; line-height:12px">Примечание. Следующие операционные системы (помимо прочих) не поддерживаются:
@@ -42,15 +42,8 @@
 <ul style="text-align:left; margin-top:18px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
 <li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows 11 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
-Windows 10 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+Windows 10 </li></ul>
-Windows 8 и 8.1 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
+
 Windows 7 (должно быть установлено обновление KB3033929 или KB4474419)</li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows Vista SP2 (должно быть установлено обновление KB4039648 или KB4474419) </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows XP </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows Server 2012 </li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows Server 2008 R2 (64-разрядная) (должно быть установлено обновление KB3033929 или KB4474419)</li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows Server 2008 (должно быть установлено обновление KB4039648 или KB4474419)</li><li style="text-align:left; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-bottom:0px">
 Windows Server 2003 </li></ul>
 <div style="text-align:left; margin-top:19px; margin-bottom:19px; padding-top:0px; padding-bottom:0px">
 <span style="text-align:left; font-size:10px; line-height:12px">Примечание. Следующие операционные системы (помимо прочих) не поддерживаются:
 Windows RT, Windows 2003 IA-64, Windows 2008 IA-64, Windows XP IA-64 и встроенные/планшетные версии Windows.
@@ -76,8 +76,11 @@ XTS</a> (см. раздел <a href="Modes%20of%20Operation.html" style="text-al
 Из-за требований BIOS предзагрузочный пароль вводится с использованием <strong>американской раскладки
 клавиатуры</strong>. Во время шифрования системы VeraCrypt автоматически и прозрачно переключает клавиатуру
 на американскую раскладку, чтобы гарантировать, что введённый пароль будет соответствовать паролю, введённому
-в предзагрузочном режиме. Таким образом, чтобы избежать ошибок из-за неверного пароля, необходимо вводить
+в предзагрузочном режиме. Однако эту защитную меру может обойти вставка пароля из буфера обмена.
-пароль, используя те же клавиши, что и при создании шифрования системы.</div>
+Чтобы предотвратить любые проблемы, возникающие из-за этого, VeraCrypt отключает возможность вставки
 паролей из буфера обмена в мастере системного шифрования.
 Таким образом, чтобы избежать ошибок из-за неверного пароля, необходимо вводить
 пароль, используя те же клавиши, что и при шифровании системы, обеспечивая постоянный доступ к зашифрованной системе.</div>
 <p>Примечание. Windows 7 и более новые версии Windows по умолчанию загружаются с особого маленького раздела.
 Этот раздел содержит файлы, необходимые для загрузки системы. Право записи в этот раздел Windows даёт только
 приложениям с административными привилегиями (при работе системы). В режиме загрузки EFI, который используется
@@ -11,8 +11,8 @@ elseif ( NOT DEFINED NOGUI )
 endif()
 # - Set version of the package
-set( FULL_VERSION 		"1.26.5" )
+set( FULL_VERSION 		"1.26.7" )
-set( VERSION 			"1.26.5" )
+set( VERSION 			"1.26.7" )
 set( RELEASE 			"1" )
 # - Set PROJECT_NAME and CONFLICT_PACKAGE values
@@ -74,7 +74,7 @@
 	<string>TRUE</string>
 	<key>CFBundleVersion</key>
-	<string>1.26.5</string>
+	<string>1.26.7</string>
 	<key>CFBundleShortVersionString</key>
 	<string>_VERSION_</string>
@@ -74,7 +74,7 @@
 	<string>TRUE</string>
 	<key>CFBundleVersion</key>
-	<string>1.26.5</string>
+	<string>1.26.7</string>
 	<key>CFBundleShortVersionString</key>
 	<string>_VERSION_</string>
@@ -13,15 +13,15 @@ SOURCEPATH=$(cd "$(dirname "$SCRIPTPATH/../.")"; pwd)
 PARENTDIR=$(cd "$(dirname "$SCRIPTPATH/../../../.")"; pwd)
 # the sources of wxWidgets 3.1.2 must be extracted to the parent directory (for night mode)
-export WX_ROOT=$PARENTDIR/wxWidgets-3.1.2
+export WX_ROOT=$PARENTDIR/wxWidgets-3.2.2.1
 echo "Using wxWidgets sources in $WX_ROOT"
 # this will be the temporary wxWidgets directory
-export WX_BUILD_DIR=$PARENTDIR/wxBuild-3.1.2
+export WX_BUILD_DIR=$PARENTDIR/wxBuild-3.2.2.1
 # define the SDK version to use and OSX minimum target. We target 10.9 by default
-export VC_OSX_TARGET=10.9
+export VC_OSX_TARGET=12
-export VC_OSX_SDK=11.3
+export VC_OSX_SDK=13
 echo "Using MacOSX SDK $VC_OSX_SDK with target set to $VC_OSX_TARGET"
 cd $SOURCEPATH
@@ -30,4 +30,5 @@ echo "Building VeraCrypt"
 make WXSTATIC=FULL wxbuild && make WXSTATIC=FULL clean && make WXSTATIC=FULL && make WXSTATIC=FULL package
 # Uncomment below and comment line above to reuse existing wxWidgets build
-# make WXSTATIC=FULL clean && make WXSTATIC=FULL && make WXSTATIC=FULL package
+# make WXSTATIC=FULL clean && make WXSTATIC=FULL && make WXSTATIC=FULL package
@@ -27,8 +27,8 @@ LANGUAGE LANG_ENGLISH, SUBLANG_ENGLISH_US
 //
 VS_VERSION_INFO VERSIONINFO
- FILEVERSION 1,26,6,0
+ FILEVERSION 1,26,7,0
- PRODUCTVERSION 1,26,6,0
+ PRODUCTVERSION 1,26,7,0
 FILEFLAGSMASK 0x17L
 #ifdef _DEBUG
 FILEFLAGS 0x1L
@@ -45,11 +45,11 @@ BEGIN
        BEGIN
            VALUE "CompanyName", "IDRIX"
            VALUE "FileDescription", "VeraCrypt COMReg"
-            VALUE "FileVersion", "1.26.6"
+            VALUE "FileVersion", "1.26.7"
            VALUE "LegalTrademarks", "VeraCrypt"
            VALUE "OriginalFilename", "VeraCrypt COMReg.exe"
            VALUE "ProductName", "VeraCrypt"
-            VALUE "ProductVersion", "1.26.6"
+            VALUE "ProductVersion", "1.26.7"
        END
    END
    BLOCK "VarFileInfo"
@@ -1305,8 +1305,8 @@ BOOL InitializeSecurityParameters(GetRandSeedFn rngCallback)
 	ChaCha20RngCtx ctx;
 	byte pbSeed[CHACHA20RNG_KEYSZ + CHACHA20RNG_IVSZ];
 #ifdef TC_WINDOWS_DRIVER
-	byte i, tagLength;
+	byte i;
-
+	char randomStr[4];
 	Dump ("InitializeSecurityParameters BEGIN\n");
 #endif
@@ -1315,28 +1315,57 @@ BOOL InitializeSecurityParameters(GetRandSeedFn rngCallback)
 	ChaCha20RngInit (&ctx, pbSeed, rngCallback, 0);
 #ifdef TC_WINDOWS_DRIVER
 	/* generate random tag length between 1 and 4 */
 	tagLength = GetRandomIndex (&ctx, 4) + 1;
-	/* generate random value for tag:
+	/* Generate random value for tag that is similar to pool tag values used by Windows kernel.
-	 * Each ASCII character in the tag must be a value in the range 0x20 (space) to 0x7E (tilde)
+	 * Fully random tag would be too suspicious and outstanding.
-	 * So we have 95 possibility
+     * First character is always a capital letter.
     * Second character is a letter, lowercase or uppercase.
     * Third character is a letter, lowercase or uppercase.
     * Fourth character is a letter or a digit.
 	 */
    /* 1. First character (Capital Letter) */
    randomStr[0] = 'A' + GetRandomIndex(&ctx, 26);
    /* 2. Second character (Letter) */
    i = GetRandomIndex(&ctx, 52);
    if (i < 26)
        randomStr[1] = 'A' + i;
    else
        randomStr[1] = 'a' + (i - 26);
    /* 3. Third character (Letter) */
    i = GetRandomIndex(&ctx, 52);
    if (i < 26)
        randomStr[2] = 'A' + i;
    else
        randomStr[2] = 'a' + (i - 26);
    /* 4. Fourth character (Letter or Digit) */
    i = GetRandomIndex(&ctx, 62);
    if (i < 26)
        randomStr[3] = 'A' + i;
    else if (i < 52)
        randomStr[3] = 'a' + (i - 26);
    else
        randomStr[3] = '0' + (i - 52);
 	/* combine all characters in reverse order as explained in MSDN */
 	AllocTag = 0;
-	for (i = 0; i < tagLength; i++)
+	for (i = 0; i < 4; i++)
 	{
-		AllocTag = (AllocTag << 8) + (((ULONG) GetRandomIndex (&ctx, 95)) + 0x20);
+		AllocTag = (AllocTag << 8) + randomStr[3-i];
 	}
 #endif
 	cbKeyDerivationArea = 1024 * 1024;
-	pbKeyDerivationArea = (byte*) TCalloc(cbKeyDerivationArea);
+	do
 	if (!pbKeyDerivationArea)
 	{
 		cbKeyDerivationArea = 2 * PAGE_SIZE;
 		pbKeyDerivationArea = (byte*) TCalloc(cbKeyDerivationArea);
-	}
+		if (!pbKeyDerivationArea)
 			cbKeyDerivationArea >>= 1;
 	} while (!pbKeyDerivationArea && (cbKeyDerivationArea >= (2*PAGE_SIZE)));
 	if (!pbKeyDerivationArea)
 	{
@@ -1357,7 +1386,7 @@ BOOL InitializeSecurityParameters(GetRandSeedFn rngCallback)
 	FAST_ERASE64 (pbSeed, sizeof (pbSeed));
 	burn (&ctx, sizeof (ctx));
 #ifdef TC_WINDOWS_DRIVER
-	burn (&tagLength, 1);
+	burn (randomStr, sizeof(randomStr));
 	Dump ("InitializeSecurityParameters return=TRUE END\n");
 #endif
@@ -1402,11 +1431,20 @@ void VcProtectMemory (uint64 encID, unsigned char* pbData, size_t cbData,
 		hashLow = t1ha2_atonce128(&hashHigh, pbKeyDerivationArea, cbKeyDerivationArea, hashSeed);
 		/* set the key to the hash result */
-		pbKey[0] = pbKey[2] = hashLow;
+		pbKey[0] = hashLow;
-		pbKey[1] = pbKey[3] = hashHigh;
+		pbKey[1] = hashHigh;
 		/* we now have a 128-bit key and we will expand it to 256-bit by using ChaCha12 cipher */
 		/* first we need to generate a the other 128-bit half of the key */
 		pbKey[2] = hashLow ^ hashHigh;
 		pbKey[3] = hashLow + hashHigh;
 		/* Initialize ChaCha12 cipher */
-		cipherIV = encID ^ CipherIVMask;
+		ChaCha256Init (&ctx, (unsigned char*) pbKey, (unsigned char*) &hashSeed, 12);
 		/* encrypt the key by itself */
 		ChaCha256Encrypt (&ctx, (unsigned char*) pbKey, sizeof(pbKey), (unsigned char*) pbKey);
 		/* Initialize ChaCha12 cipher */
 		cipherIV = (((uint64) pbKeyDerivationArea) + encID) ^ CipherIVMask;
 		ChaCha256Init (&ctx, (unsigned char*) pbKey, (unsigned char*) &cipherIV, 12);
 		ChaCha256Encrypt (&ctx, pbData, cbData, pbData);
@@ -18,6 +18,7 @@
 #include <dbt.h>
 #include <Setupapi.h>
 #include <aclapi.h>
 #include <Netlistmgr.h>
 #include <fcntl.h>
 #include <io.h>
 #include <math.h>
@@ -1759,6 +1760,88 @@ void AccommodateTextField (HWND hwndDlg, UINT ctrlId, BOOL bFirstUpdate, HFONT h
 	}
 }
 // Resizes width of a checkbox according to actual width in pixels of its label text (font size is taken into account)
 void AccommodateCheckBoxTextWidth (HWND hwndDlg, UINT ctrlId)
 {
 	RECT rec;
 	HWND hwndCtrl = GetDlgItem (hwndDlg, ctrlId);
 	int width, origWidth, origHeight;
 	int horizSubOffset;
 	wchar_t text [MAX_URL_LENGTH];
 	HFONT hFont = (HFONT) SendDlgItemMessage (hwndDlg, ctrlId, WM_GETFONT, 0, 0);
 	// Resize the field according to its length and font size and move if centered or right-aligned
 	GetWindowTextW (hwndCtrl, text, sizeof (text) / sizeof (wchar_t));
 	width = GetTextGfxWidth (hwndCtrl, text, hFont);
 	// add to width variable value the width of the checkbox square. We use SM_CXMENUCHECK which is a little larger than actual width
 	width += GetSystemMetrics(SM_CXMENUCHECK);
 	GetClientRect (hwndCtrl, &rec);	
 	origWidth = rec.right;
 	origHeight = rec.bottom;
 	if (width >= 0
 		&& (origWidth > width))	// The original width of the field is the maximum allowed size 
 	{
 		horizSubOffset = origWidth - width;
 		// Resize the text field
 		SetWindowPos (hwndCtrl, 0, 0, 0,
 			origWidth - horizSubOffset,
 			origHeight,
 			SWP_NOMOVE | SWP_NOZORDER);
 		InvalidateRect (hwndCtrl, NULL, TRUE);
 	}
 }
 // makes controls contiguous by moving the second control right next to the first one horizontally
 void MakeControlsContiguous(HWND hwndDlg, UINT ctrl1ID, UINT ctrl2ID) {
    HWND hwndCtrl1 = GetDlgItem(hwndDlg, ctrl1ID);
    HWND hwndCtrl2 = GetDlgItem(hwndDlg, ctrl2ID);
 	RECT rect1, rect2;
 	POINT pt1, pt2;
 	int newLeftPosition;
    // Exit silently if one or both controls are missing
    if (!hwndCtrl1 || !hwndCtrl2) {
        return;
    }
    GetWindowRect(hwndCtrl1, &rect1);
    GetWindowRect(hwndCtrl2, &rect2);
    // Convert the top-right point of the first control from screen to client coordinates
    pt1.x = rect1.right;
 	pt1.y = rect1.top;
    if (!ScreenToClient(hwndDlg, &pt1)) {
        return; // Exit if the conversion fails
    }
    // Convert the top-left point of the second control from screen to client coordinates
    pt2.x = rect2.left;
 	pt2.y = rect2.top;
    if (!ScreenToClient(hwndDlg, &pt2)) {
        return; // Exit if the conversion fails
    }
    // Ensure the second control is always placed to the right of the first one
    newLeftPosition = pt1.x + 1;
    if (pt2.x < pt1.x) { // if the second control is to the left of the first one
        newLeftPosition += (pt1.x - pt2.x);
    }
    // Move the second control to its new position
    SetWindowPos(hwndCtrl2, NULL, newLeftPosition, pt2.y, 0, 0, SWP_NOZORDER | SWP_NOSIZE);
 }
 // Note that the user can still close the window by right-clicking its taskbar icon and selecting 'Close window', or by pressing Alt-F4, or using the Task Manager.
 void DisableCloseButton (HWND hwndDlg)
 {
@@ -2129,6 +2212,42 @@ BOOL CALLBACK AboutDlgProc (HWND hwndDlg, UINT msg, WPARAM wParam, LPARAM lParam
 	return 0;
 }
 HWND CreateToolTip(int toolID, HWND hDlg, const char* strID)
 {
    if (!toolID || !hDlg)
    {
        return FALSE;
    }
    // Create the tooltip.
    HWND hwndTip = CreateWindowExW(NULL, TOOLTIPS_CLASS, NULL,
                              WS_POPUP | TTS_ALWAYSTIP | TTS_NOPREFIX | TTS_BALLOON,
                              CW_USEDEFAULT, CW_USEDEFAULT,
                              CW_USEDEFAULT, CW_USEDEFAULT,
                              hDlg, NULL, 
                              hInst, NULL);
   if (!hwndTip)
   {
       return (HWND)NULL;
   }                              
    // Associate the tooltip with the tool.
    TOOLINFOW toolInfo = { 0 };
    toolInfo.cbSize = sizeof(toolInfo);
    toolInfo.hwnd = hDlg;
    toolInfo.uFlags = TTF_SUBCLASS | TTF_IDISHWND;
    toolInfo.uId = (UINT_PTR) GetDlgItem(hDlg, toolID);
    toolInfo.lpszText = GetString(strID);
 	// set tooltip maximum width
 	SendMessage(hwndTip, TTM_SETMAXTIPWIDTH, 0, (LPARAM) 300);
    SendMessage(hwndTip, TTM_ADDTOOL, 0, (LPARAM)&toolInfo);
    return hwndTip;
 }
 static HWND StaticModelessWaitDlgHandle = NULL;
@@ -11093,6 +11212,10 @@ void Applink (const char *dest)
 	{
 		StringCbCopyW (page, sizeof (page),L"Personal%20Iterations%20Multiplier%20%28PIM%29.html");
 	}
 	else if (strcmp(dest, "memoryprotection") == 0)
 	{
 		StringCbCopyW (page, sizeof (page),L"VeraCrypt%20Memory%20Protection.html");
 	}
 	else
 	{
 		StringCbCopyW (url, sizeof (url),TC_APPLINK);
@@ -11101,8 +11224,22 @@ void Applink (const char *dest)
 	if (buildUrl)
 	{
 		// in case of setup, open the online documentation if we are connected to Internet because existing documentation may be outdated
 #ifdef SETUP
 		if (IsInternetConnected())
 		{
 			StringCbPrintfW (url, sizeof (url), L"https://www.veracrypt.fr/en/%s", page);
 			buildUrl = FALSE;
 		}
 		else
 		{
 			StringCbPrintfW (url, sizeof (url), L"file:///%sdocs/html/en/%s", installDir, page);
 			CorrectURL (url);
 		}
 #else
 		StringCbPrintfW (url, sizeof (url), L"file:///%sdocs/html/en/%s", installDir, page);
 		CorrectURL (url);
 #endif
 	}
 	if (IsAdmin ())
@@ -15105,6 +15242,33 @@ void PasswordEditDropTarget::GotDrop(CLIPFORMAT format)
 }
 // check if the PC is connected to the internet using INetworkListManager interface
 BOOL IsInternetConnected()
 {
    HRESULT hr;
    BOOL isConnected = FALSE;
    INetworkListManager* pNetworkListManager = nullptr;
    hr = CoInitializeEx(NULL, COINIT_APARTMENTTHREADED | COINIT_DISABLE_OLE1DDE);
    if (SUCCEEDED(hr))
    {
        hr = CoCreateInstance(CLSID_NetworkListManager, NULL, CLSCTX_ALL, IID_PPV_ARGS(&pNetworkListManager));
        if (SUCCEEDED(hr))
        {
            VARIANT_BOOL isConnectedVariant;
            hr = pNetworkListManager->get_IsConnectedToInternet(&isConnectedVariant);
            if (SUCCEEDED(hr))
            {
                isConnected = isConnectedVariant == VARIANT_TRUE;
            }
            pNetworkListManager->Release();
        }
        CoUninitialize();
    }
    return isConnected;
 }
 /*
 * Query the status of Hibernate and Fast Startup
 */
@@ -327,6 +327,7 @@ void HandCursor ();
 void AddComboPair (HWND hComboBox, const wchar_t *lpszItem, int value);
 void SelectAlgo ( HWND hComboBox , int *nCipher );
 void PopulateWipeModeCombo (HWND hComboBox, BOOL bNA, BOOL bInPlaceEncryption, BOOL bHeaderWipe);
 HWND CreateToolTip(int toolID, HWND hDlg, const char* strID);
 wchar_t *GetWipeModeName (WipeAlgorithmId modeId);
 wchar_t *GetPathType (const wchar_t *path, BOOL bUpperCase, BOOL *bIsPartition);
 LRESULT CALLBACK CustomDlgProc ( HWND hwnd , UINT uMsg , WPARAM wParam , LPARAM lParam );
@@ -532,6 +533,8 @@ void EnableCloseButton (HWND hwndDlg);
 void ToBootPwdField (HWND hwndDlg, UINT ctrlId);
 void ToNormalPwdField (HWND hwndDlg, UINT ctrlId);
 void AccommodateTextField (HWND hwndDlg, UINT ctrlId, BOOL bFirstUpdate, HFONT hFont);
 void AccommodateCheckBoxTextWidth (HWND hwndDlg, UINT ctrlId);
 void MakeControlsContiguous(HWND hwndDlg, UINT ctrl1ID, UINT ctrl2ID);
 BOOL GetDriveLabel (int driveNo, wchar_t *label, int labelSize);
 BOOL GetSysDevicePaths (HWND hwndDlg);
 BOOL DoDriverInstall (HWND hwndDlg);
@@ -594,6 +597,7 @@ DWORD FastResizeFile (const wchar_t* filePath, __int64 fileSize);
 #ifdef _WIN64
 void GetAppRandomSeed (unsigned char* pbRandSeed, size_t cbRandSeed);
 #endif
 BOOL IsInternetConnected();
 #ifdef __cplusplus
 }
@@ -43,9 +43,9 @@ namespace VeraCrypt
 	map<EMVCardType, vector<byte>> InitializeSupportedAIDs()
 	{
 		map<EMVCardType, vector<byte>> supportedAIDs;
-		supportedAIDs.insert(std::make_pair(EMVCardType::AMEX, vector<byte>(EMVCard::AMEX_AID, EMVCard::AMEX_AID + (std::end(EMVCard::AMEX_AID) - std::begin(EMVCard::AMEX_AID)))));
+		supportedAIDs.insert(std::make_pair(EMVCardType::AMEX, vector<byte>(EMVCard::AMEX_AID, EMVCard::AMEX_AID + sizeof(EMVCard::AMEX_AID))));
-		supportedAIDs.insert(std::make_pair(EMVCardType::MASTERCARD, vector<byte>(EMVCard::MASTERCARD_AID, EMVCard::MASTERCARD_AID + (std::end(EMVCard::MASTERCARD_AID) - std::begin(EMVCard::MASTERCARD_AID)))));
+		supportedAIDs.insert(std::make_pair(EMVCardType::MASTERCARD, vector<byte>(EMVCard::MASTERCARD_AID, EMVCard::MASTERCARD_AID + sizeof(EMVCard::MASTERCARD_AID))));
-		supportedAIDs.insert(std::make_pair(EMVCardType::VISA, vector<byte>(EMVCard::VISA_AID, EMVCard::VISA_AID + (std::end(EMVCard::VISA_AID) - std::begin(EMVCard::VISA_AID)))));
+		supportedAIDs.insert(std::make_pair(EMVCardType::VISA, vector<byte>(EMVCard::VISA_AID, EMVCard::VISA_AID + sizeof(EMVCard::VISA_AID))));
 		return supportedAIDs;
 	}
@@ -1633,7 +1633,8 @@
    <entry lang="en" key="EXPANDER_EXTENDING_FILESYSTEM">Extending file system ...\n</entry>
    <entry lang="en" key="PARTIAL_SYSENC_MOUNT_READONLY">Warning: The system partition you attempted to mount was not fully encrypted. As a safety measure to prevent potential corruption or unwanted modifications, volume '%s' was mounted as read-only.</entry>
    <entry lang="en" key="IDC_LINK_KEYFILES_EXTENSIONS_WARNING">Important information on using third-party file extensions</entry>
-    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection in VeraCrypt</entry>
+    <entry lang="en" key="IDC_DISABLE_MEMORY_PROTECTION">Disable memory protection for Accessibility tools compatibility</entry>
    <entry lang="en" key="DISABLE_MEMORY_PROTECTION_WARNING">WARNING: Disabling memory protection significantly reduces security. Enable this option ONLY if you rely on Accessibility tools, like Screen Readers, to interact with VeraCrypt's UI.</entry>
  </localization>
  <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <xs:element name="VeraCrypt">
@@ -227,6 +227,7 @@
 #define IDC_KEYFILES_SIZE_UNIT          5143
 #define IDC_LINK_KEYFILES_EXTENSIONS_WARNING 5144
 #define IDC_DISABLE_MEMORY_PROTECTION   5145
 #define IDC_DISABLE_MEMORY_PROTECTION_HELP   5146
 // Next default values for new objects
 // 
@@ -235,7 +236,7 @@
 #define _APS_NO_MFC                     1
 #define _APS_NEXT_RESOURCE_VALUE        578
 #define _APS_NEXT_COMMAND_VALUE         40001
-#define _APS_NEXT_CONTROL_VALUE         5146
+#define _APS_NEXT_CONTROL_VALUE         5147
 #define _APS_NEXT_SYMED_VALUE           101
 #endif
 #endif
@@ -59,7 +59,7 @@ extern unsigned short _rotl16(unsigned short value, unsigned char shift);
 #define TC_APP_NAME						"VeraCrypt"
 // Version displayed to user 
-#define VERSION_STRING					"1.26.6"
+#define VERSION_STRING					"1.26.7"
 #ifdef VC_EFI_CUSTOM_MODE
 #define VERSION_STRING_SUFFIX			"-CustomEFI"
@@ -73,9 +73,9 @@ extern unsigned short _rotl16(unsigned short value, unsigned char shift);
 #define VERSION_NUM						0x0126
 // Release date
-#define TC_STR_RELEASE_DATE			L"September 21, 2023"
+#define TC_STR_RELEASE_DATE			L"October 1, 2023"
 #define TC_RELEASE_DATE_YEAR			2023
-#define TC_RELEASE_DATE_MONTH			 09
+#define TC_RELEASE_DATE_MONTH			 10
 #define BYTES_PER_KB                    1024LL
 #define BYTES_PER_MB                    1048576LL
@@ -305,6 +305,10 @@ typedef NTSTATUS (NTAPI *ExGetFirmwareEnvironmentVariableFn) (
  PULONG          Attributes
 );
 typedef ULONG64 (NTAPI *KeQueryInterruptTimePreciseFn)(
  PULONG64 QpcTimeStamp
 );
 typedef BOOLEAN (NTAPI *KeAreAllApcsDisabledFn) ();
 typedef void (NTAPI *KeSetSystemGroupAffinityThreadFn)(
@@ -50,9 +50,9 @@ namespace VeraCrypt
 	class Token
 	{
 	public:
-		static vector<shared_ptr<TokenKeyfile>> GetAvailableKeyfiles(bool isEMVSupportEnabled);
+		static vector< shared_ptr<TokenKeyfile> > GetAvailableKeyfiles(bool isEMVSupportEnabled);
 		static bool IsKeyfilePathValid(const wstring& tokenKeyfilePath, bool isEMVSupportEnabled);
-		static list <shared_ptr<TokenInfo>> GetAvailableTokens();
+		static list < shared_ptr<TokenInfo> > GetAvailableTokens();
 		static shared_ptr<TokenKeyfile> getTokenKeyfile(const TokenKeyfilePath& path);
 	};
 };
@@ -1,3 +1,8 @@
 # 1.10.1 [2023-08-23]
 * Add `ZIP_LENGTH_TO_END` and `ZIP_LENGTH_UNCHECKED`. Unless `ZIP_LENGTH_UNCHECKED` is used as `length`, it is an error for a file to shrink between the time when the source is created and when its data is read.
 * Fix test on Windows.
 # 1.10.0 [2023-06-23]
 * Make support for layered sources public.
@@ -88,6 +88,6 @@
 #define HAVE_SHARED
 /* END DEFINES */
 #define PACKAGE "libzip"
-#define VERSION "1.10.0"
+#define VERSION "1.10.1"
 #endif /* HAD_CONFIG_H */
@@ -116,6 +116,10 @@ extern "C" {
 #define ZIP_EXTRA_FIELD_ALL ZIP_UINT16_MAX
 #define ZIP_EXTRA_FIELD_NEW ZIP_UINT16_MAX
 /* length parameter to various functions */
 #define ZIP_LENGTH_TO_END 0
 #define ZIP_LENGTH_UNCHECKED (-2) /* only supported by zip_source_file and its variants */
 /* libzip error codes */
@@ -396,6 +396,11 @@ add_data(zip_t *za, zip_source_t *src, zip_dirent_t *de, zip_uint32_t changed) {
    src_final = src;
    zip_source_keep(src_final);
    if (!needs_decrypt && st.encryption_method == ZIP_EM_TRAD_PKWARE && (de->changed & ZIP_DIRENT_LAST_MOD)) {
        /* PKWare encryption uses the last modification time for password verification, therefore we can't change it without re-encrypting. Ignoring the requested modification time change seems more sensible than failing to close the archive. */
         de->changed &= ~ZIP_DIRENT_LAST_MOD;
    }
    if (needs_decrypt) {
        zip_encryption_implementation impl;
@@ -83,6 +83,11 @@ zip_secure_random(zip_uint8_t *buffer, zip_uint16_t length) {
 #ifndef HAVE_RANDOM_UINT32
 #include <stdlib.h>
 #ifndef HAVE_RANDOM
 #define srandom srand
 #define random rand
 #endif
 zip_uint32_t
 zip_random_uint32(void) {
    static bool seeded = false;
@@ -95,6 +100,7 @@ zip_random_uint32(void) {
    if (!seeded) {
        srandom((unsigned int)time(NULL));
        seeded = true;
    }
    return (zip_uint32_t)random();
@@ -74,6 +74,7 @@ zip_random_uint32(void) {
    if (!seeded) {
        srand((unsigned int)time(NULL));
        seeded = true;
    }
    return (zip_uint32_t)rand();
@@ -74,6 +74,7 @@ zip_random_uint32(void) {
    if (!seeded) {
        srand((unsigned int)time(NULL));
        seeded = true;
    }
    return (zip_uint32_t)rand();
@@ -57,7 +57,8 @@ zip_set_archive_flag(zip_t *za, zip_flags_t flag, int value) {
        return 0;
    }
-    if (ZIP_IS_RDONLY(za)) {
+    /* Allow removing ZIP_AFL_RDONLY if manually set, not if archive was opened read-only. */
    if (za->flags & ZIP_AFL_RDONLY) {
        zip_error_set(&za->error, ZIP_ER_RDONLY, 0);
        return -1;
    }
@@ -54,6 +54,7 @@ zip_source_file_common_new(const char *fname, void *file, zip_uint64_t start, zi
    zip_source_file_context_t *ctx;
    zip_source_t *zs;
    zip_source_file_stat_t sb;
    zip_uint64_t length;
    if (ops == NULL) {
        zip_error_set(error, ZIP_ER_INVAL, 0);
@@ -82,10 +83,17 @@ zip_source_file_common_new(const char *fname, void *file, zip_uint64_t start, zi
    }
    if (len < 0) {
-        len = 0;
+        if (len == -1) {
            len = ZIP_LENGTH_TO_END;
        }
        // TODO: return ZIP_ER_INVAL if len != ZIP_LENGTH_UNCHECKED?
        length = 0;
    }
    else {
        length = (zip_uint64_t)len;
    }
-    if (start > ZIP_INT64_MAX || start + (zip_uint64_t)len < start) {
+    if (start > ZIP_INT64_MAX || start + length < start) {
        zip_error_set(error, ZIP_ER_INVAL, 0);
        return NULL;
    }
@@ -107,7 +115,7 @@ zip_source_file_common_new(const char *fname, void *file, zip_uint64_t start, zi
    }
    ctx->f = file;
    ctx->start = start;
-    ctx->len = (zip_uint64_t)len;
+    ctx->len = length;
    if (st) {
        (void)memcpy_s(&ctx->st, sizeof(ctx->st), st, sizeof(*st));
        ctx->st.name = NULL;
@@ -169,9 +177,11 @@ zip_source_file_common_new(const char *fname, void *file, zip_uint64_t start, zi
            }
            if (ctx->len == 0) {
-                ctx->len = sb.size - ctx->start;
+                if (len != ZIP_LENGTH_UNCHECKED) {
-                ctx->st.size = ctx->len;
+                    ctx->len = sb.size - ctx->start;
-                ctx->st.valid |= ZIP_STAT_SIZE;
+                    ctx->st.size = ctx->len;
                    ctx->st.valid |= ZIP_STAT_SIZE;
                }
                /* when using a partial file, don't allow writing */
                if (ctx->fname && start == 0 && ops->write != NULL) {
@@ -78,7 +78,7 @@ zip_source_filep(zip_t *za, FILE *file, zip_uint64_t start, zip_int64_t len) {
 ZIP_EXTERN zip_source_t *
 zip_source_filep_create(FILE *file, zip_uint64_t start, zip_int64_t length, zip_error_t *error) {
-    if (file == NULL || length < -1) {
+    if (file == NULL || length < ZIP_LENGTH_UNCHECKED) {
        zip_error_set(error, ZIP_ER_INVAL, 0);
        return NULL;
    }
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Mounir IDRASSI	9d36f15bfc	MacOS: Fix Blake2s SSE 4.1 not being built For now, we set GCC_GTEQ_430 to 1 to each OS. Later we will always suppose that gcc is newer than 4.3 and remove this logic.	2023-10-01 18:52:55 +02:00
Mounir IDRASSI	8eb232a4a3	MacOS: set minimum target to OSX 12. Fix About menu not working. The modification to Forms.cpp is temporary until we find a better approach	2023-10-01 18:51:20 +02:00
Mounir IDRASSI	19fa1f8684	Linux: use "-std=c++11" for gcc 4.8 and adapt code to old compilers	2023-10-01 11:06:46 +02:00
Mounir IDRASSI	da49ebb927	Linux: Better detection of gcc version to correctly enable c++11 This allows to build correctly under CentOS 6 and CentOS 7	2023-10-01 00:48:57 +02:00
Mounir IDRASSI	0df7976e32	XML translations: increment version to 1.26.7 in Simplified Chinese file	2023-09-30 15:12:20 +02:00
风之暇想andGitHub	a69921eaff	Update Language.zh-cn.xml (#1206 ) 1、翻译 2、统一加载按钮的翻译	2023-09-30 15:11:31 +02:00
Mounir IDRASSI	54ef22ce0a	XML translations: downgrade version of Simplified Chinese to be able to merge PR	2023-09-30 15:09:08 +02:00
Mounir IDRASSI	8d87b6a778	Windows: Update MBR bootloader for version 1.26.7	2023-09-30 11:24:05 +02:00
Mounir IDRASSI	53cbe028cd	Increment version to 1.26.7. Set release date to October 1st. Update Windows signed driver files.	2023-09-30 11:20:46 +02:00
Mounir IDRASSI	b96ae29abd	Documentation: Add documentation for RAM Encryption	2023-09-30 11:08:59 +02:00
Mounir IDRASSI	c0f8179f2a	Windows: enhancement to RAM encryption - use a more standard-looking memory value tag instead of fully random one that will look suspicious and outstanding - If we fail to allocate 1MiB for derivation area, we device the size by two in a loop until we succeed. This is better than falling back directly to 8KiB size - Better method to derive actual encryption key: instead of simply duplicating 128bit key value, we combine a xor addition and self-encryption to build a 256-bit key - use both encID and pbKeyDerivationArea to derive IV for encryption and not only endID	2023-09-29 22:26:54 +02:00
Mounir IDRASSI	5192eac233	Windows Driver: Use KeQueryInterruptTimePrecise on Windows 8.1 and newer as better seed for internal RNG compared to KeQueryInterruptTime	2023-09-29 22:14:43 +02:00
Mounir IDRASSI	5234c479a4	Translations: update Russian translation file by Dmitry Yerokhin.	2023-09-29 01:50:24 +02:00
Mr-UpdateandGitHub	ad4e5b3198	Update Language.de.xml (#1213 )	2023-09-27 09:21:42 +02:00
Mounir IDRASSI	662b8d1b2f	Windows: during Setup, and if VeraCrypt already installed, open online help only if PC connected to Internet	2023-09-26 01:22:24 +02:00
Mounir IDRASSI	4cb4ec3500	Documentation: Mention Upgrade/Repair/Reinstall case in Memory Protection help page	2023-09-26 01:20:34 +02:00
nkh0472andGitHub	c5e5e44e44	Update Language.zh-cn.xml (#1205 ) * Update Language.zh-cn.xml * Update Language.zh-cn.xml	2023-09-25 09:10:30 +02:00
MatthaiksandGitHub	c4b3bc7f97	Update Polish translation (#1210 )	2023-09-25 08:57:18 +02:00
PatriccolluandGitHub	1caf587b2a	Update Corsican translation on 2023-09 (3rd) (#1211 )	2023-09-25 08:56:56 +02:00
Mounir IDRASSI	7f902227b0	Documentation: Add entry in FAQ about ghost drive that maybe listed by VeraCrypt on Windows Behavior report in Github: https://github.com/veracrypt/VeraCrypt/issues/1212. There is also a Reddit thread about it: https://www.reddit.com/r/VeraCrypt/comments/r9sg11/veracrypt_showing_a_hdd_which_does_not_exist/ Closes #1212	2023-09-24 22:24:21 +02:00
Mounir IDRASSI	bbced81c6e	Documentation: mention that OS reboot is required after changing memory protection status	2023-09-24 21:53:29 +02:00
Mounir IDRASSI	718f11d9c3	Windows: make Setup correctly manage option to disable memory protection during upgrade	2023-09-24 12:48:34 +02:00
DLL125andGitHub	2363506e09	Libzip 1.10.1 (#1209 ) Updated to the latest version for the VeraCrypt 1.26.6 release.	2023-09-24 10:18:54 +02:00
Mounir IDRASSI	937c5cd5cd	Windows: always open online help in case of Setup because local help may be outdated	2023-09-24 01:41:35 +02:00
Mounir IDRASSI	76c64d49ea	Windows: Add tooltip message and help button for new option to disable memory protection Also a dedicated page in the documentation was added for it.	2023-09-24 01:26:02 +02:00
Mounir IDRASSI	07c827c849	Language XML files: update Russian XML file by Dmitry Yerokhin.	2023-09-23 10:08:57 +02:00
Mr-UpdateandGitHub	5a6a7a416f	Update Language.de.xml (#1207 )	2023-09-22 22:44:13 +02:00
Mounir IDRASSI	91b3f0af0c	Linux/MacOSX: Increment packaging version to 1.26.6	2023-09-22 22:23:13 +02:00