Recent Commits to VeraCrypt:master

Documentation: Update Russian translations by Dmitry Yerokhin

Add python script that automates uploading VeraCrypt release files to Launchpad

All platforms: Update logo icons (#1546)

Update the old logo with a simplified one without extra label text.
.ico and .icns are updated on Windows and macOS, and .png, .svg
are added on Linux and FreeBSD.

Original logo design by Andreas Becker, recreated by danielwerg with
some edits and symbolic version by me.

Use “unmount” instead of “dismount” in scripts and in text shown to the user. (#1548)

Windows:Continuation of fix of tab navigation in various dialogs

Increment version to 1.26.24. Update Release Notes and Windows drivers.

Windows: Fix tab navigation in various dialogs

macOS: use macFUSE name instead of OSXFUSE to match the new name of the macOS fuse library project.

macOS: Create symlink to VeraCrypt binary at /usr/local/bin/veracrypt during installation

This makes it easier to use the VeraCrypt CLI in a manner similar to Linux systems.

Windows: real fix for "Unmount all" button label!!

Increment version to 1.26.3. Update Release Notes and signed drivers

Documentation: Fix rendering issue of localized CHM files by using correct encoding

Windows: Replace remaining "Dismount All" by "Unmount All"

Update Release Notes and release date. Increment version of Windows binaries

Linux/macOS: Make help text less confusing with regards to optional parameter of certain commands

the presence of '=' sign was not correct.

Windows: Implement mutex to serialize initialization across multiple VeraCrypt instances

When multiple VeraCrypt.exe instances were launched simultaneously, race conditions
could occur during the WM_INITDIALOG processing phase, potentially causing application
crashes or hang. This was because the initialization logic handles critical operations
like mounting/unmounting volumes and processing favorite volumes that modify global
system state.

This commit:
- Adds a named local session mutex (MainInitMutex) that serializes the WM_INITDIALOG handler
- Implements proper acquisition and release of the mutex during initialization
- Ensures proper cleanup of mutex resources on application exit

Update Corsican translation on 2025-05 (2) (#1543)

Translations: Update and fix various language files.

Github workflows: enhance xmlvalidate.sh to catch invalid escape sequences

Increment version to 1.26.22. Update Release Notes. Update signed drivers.

Documentation: Add missing image for mastodon contact

Translations: Add translation of newly added fields for some languages

Windows: Enable screen protection by default to block screenshots, recordings & Windows Recall. Add configurable setting in Preferences, Installer, and MSI.

This update introduces a screen protection mechanism that leverages the Windows Display Affinity API to prevent screen capture, screen recording, and inclusion in the Windows 11 Recall feature. By default, all VeraCrypt windows, menus, and tooltips are protected. Users can enable or disable this feature through a new setting available in the application Preferences, as well as in the installer and MSI configurations.

This enhances user privacy by mitigating potential leaks of sensitive interface content.

Note: Due to a regression in Windows 11 affecting layered windows, ComboBox dropdowns cannot currently be protected by this mechanism.

Remove SM4 support!

macOS: make dmg template larger to accommodate increase size of documentation

macOS/FreeBSD: add missing GCC_GTEQ_440 define in Makefile

Update Readme to indicate veracrypt.io as the new official mirror

Update Release Notes.html and release date.

Reorder SM4-based cascade ciphers: apply SM4 as the final stage following external review.

The cascade order has been updated so that SM4 is applied after the other cipher(s) (e.g., Serpent). This change reflects standard cryptanalytic guidance, which shows that the overall strength of a cascade is limited by the first encryption stage. Given that SM4 uses a 128-bit key, its post-quantum brute-force resistance is lower than ciphers with a 256-bit key (such as Serpent). By placing SM4 last, we ensure that any potential weakness in SM4 cannot reduce the security margin provided by the stronger cipher.

Documentation: Add missing reference to SM4-based Cascades ciphers.

Set release date to May 16th.

Silence compiler warning in HasTranslatedDocumentation function

Linux: cleanup old build artifacts before performing new build

Documentation: remove unused donation image files

Update Donation details (bank, crypto, paypal)

Linux/macOS: Fix build error cause by missing conversion

Linux: Update local documentation logic to the new organization of folders under "docs/html"

Update Release Notes and CHM. Set release date and update signed Windows drivers.

Windows: fix path errors in WiX file that blocked creation of MSI.

Linux/macOS: don't advertise SM4 for system encryption until its support is implement.

Documentation: Fix missing AM Crypto references

Removed unused declarations in sm4.cpp

Update PayPal donation links

Move copyright and links to "AM Crypo", amcrypto.jp and veracrypt.jp

Linux: implement automatic creation of AppImage bundle during build of generic binaries

typo Readme.txt (#1538)

Linux: Correct handling of documentation in case of AppImage. Code refactoring.

Linux: Fix link error with gcc 4.8 by build AESNI version of SM4 from gcc 4.4

AESNI support was enabled starting from gcc 4.4 and so AESNI code of SM4 should be built starting from this version.

Linux: Fix AppImage compatibility by using AppImage file for sudo elevation

When VeraCrypt is run as an AppImage, the veracrypt binary resides in a SquashFS mount under /tmp which is inaccessible to root. Using this path with sudo results in a "command not found" error.

This patch detects the AppImage environment by checking both APPIMAGE and APPDIR variables, ensuring the executable path starts with APPDIR and that APPDIR starts with the expected "/tmp/.mount_Veracr" prefix. In this scenario, the AppImage file itself (APPIMAGE) is used as the executable for sudo, resolving the elevation issue.

Update Corsican translation on 2025-05 (#1535)

Linux: Fix typo in CMakeLists.txt after last change

Linux: remove pcsclite dependency from .deb/.rpm packages since it is detected/loaded dynamically at runtime.

Increment version to 1.26.21

Update Polish translation (#1533)

Linux: Fix self-test by making the code supports key length in a generic way

This change allows to support SM4 self-test which uses a 128-bit key.

Linux: Fix build issues caused by changes after SM4 addition

Initial support of SM4 cipher for normal volumes