LibreCrypt v6.3β (TBD)
- Separated open and create hidden container dialogs from non-hidden ones - makes both dialogs simpler and less confusing
- Added experimetal feature to create LUKS containers.
- Bug fixes
- improved dm-crypt dialog
LibreCrypt v6.2β (2015)
- Renamed to 'LibreCrypt'
- Fixed bug with minimise on start not working
- Fixed bug with double click of drive not opening Windows Explorer
- Reworked new password form, add password strength meter and fix tab order.
DoxBox v6.1β (17 April 2015)
Security improvements
- Ensured any new container is overwritten with Secure PRNG 'chaff' before use by default. This enables plausible deniability of hidden containers, and also hides the amount of data stored in the container. DoxBox (FreeOTFE) container only.
- Fix bug where the app was contacting the internet for documentation and for updates without a prompt
- Rework internal handling of secure data (e.g keys and IVs) so all sensitive data is wiped in memory immediately after use. This reduces the risk of leaking to swap, hibernation file, and of cold-boot attacks.
UI Improvements
- Fixed issue with translations - updated gettext to Delphi 2009 version (see build notes)
- Prompts to format new containers after creation.
- Many minor UI improvements.
- Much refactoring to ease future work.
DoxBox v6.0β (23 August 2014), based on FreeOTFE v5.21
- Ported GUI to Delphi XE2, with change from ANSI->Unicode
- Converted driver projects to Visual Studio 2010
- Converted drivers to use Windows Driver Development Kit (WinDDK) 7600.16385.1
- Updated 'command line tools' to build with lib tomcrypt 1.17
- Add 'default hidden offset' to container properties
- Add ability to open hidden plain dm-crypt container inside LUKS or FreeOTFE containers
- Add tool to set Windows to allow unsigned drivers
- Rename and re-brand to 'DoxBox'
- Windows Mobile support dropped
FreeOTFE v6.00 (unreleased 2011) - some changes have been merged into DoxBox v6.1, some have been abandoned
- Added password expiry option
- Added password strength enforcement option
- Added password analysis
- Default drive letter processing changed; precedence is now: 1) Drive specified by user at mount time, 2) Any drive set in the volume's CDB, 3) Any default drive letter specified in "Options" dialog, and 4) The first available drive letter.
- Added support for "-plain64" Linux volumes
- Add support for partition based volumes stored on drives with 4096 byte sectors (file based volumes on such drives already supported in previous versions)
- Added support for partition based volumes on GPT partitioned disks
- Added Simplified Chinese translation
- Updated Croatian language translation
- Updated CDB version to v5
- Various minor improvements to the drivers to improve sanity checking and builds under WDK v7.1.0 (7600.16385.1)
- Various changes to allow the source to build under Unicode versions of Delphi (Delphi 2009 and later)
- Bugfix to "keyfile contains ASCII password" option when mounting LUKS volumes using keyfiles
v5.21 (7th February 2010)
- Added Russian language translation
- Added translator credit to "About..." dialog
- Minor tweaks to portableapps.com launcher
v5.20 (3rd January 2010)
- Added support for using keyfiles with LUKS volumes (Hint: For ease of use, keyfiles may also be dragged and dropped onto the LUKS password entry dialog)
- Changed disk/partition selection dialog to treat double-clicking on a disk/partition as selecting it. Selected disk/partition properties can now be accessed via context menu item
- When mounting a file based volume which is read-only, the read-only check-box will automatically be selected
- Change made such that if FreeOTFE's MRU list is disabled (this is the default), then volumes, keyfiles, etc will not appear on the MS Windows system MRU list either.
- Added Greek language translation
- Added Croatian language translation
- Cosmetic display tweaks to better handle translations
v5.10 (13th October 2009)
- Added volume padding option when creating new volumes
- Added Czech translation
- Added Japanese translation
- Updated German and Spanish translations
- Added option to automatically start FreeOTFE on system startup
- Added option to let user define action carried out on clicking/double-clicking system tray icon
- Added options to allow/prevent newlines and tabs in passwords
- Added "/minimize" command line switch, and modified to honor "run minimized" option when launched via a shortcut
- Fixed bug causing hotkeys to be registered even if run with command-line arguments.
- Fixed bug causing emergency dismount hotkey to be treated as normal dismount hotkey
- Various cosmetic improvements
v5.00 (22nd July 2009)
- Significant performance improvements made to driver code
- Added XTS mode to Gladman cyphers (AES, MARS, RC-6, Serpent and Twofish)
- Added RIPEMD-256 and RIPEMD-320 hash algorithms
- Added support for dropping keyfiles onto the password entry dialog to simplify keyfile filename entry
- Added automatic check for updates (turned off by default)
- Allow option to change the default mount type used
- Allow various options to turn on/off confirmation/warning messages
- Allow users to mount volumes as A: or B: if these drive letters aren't in use. Note: Selecting "Use default" for the drive to mount as will still result in using the first unused drive letter after C: - A:/B: may only be used if explicitly selected by the user
- Added support for "refresh" multimedia key
- Added "/create" command line option for creating new volumes
- Added "/settings" command line parameter to read options from user specified location
- Created U3 and portableapps.com specific installers, simplifying installation for users of these particular systems
- Removed restriction requiring hidden volumes to begin at an offset which is a multiple of 512 bytes
- Allow mounting either Linux LUKS or FreeOTFE partitions via the "Partition" toolbar button and "File | Mount partition..." menu-item (previously only FreeOTFE partitions could be mounted this way)
- Fixed minor bug which prevented hidden volumes from being automatically mounted after being created
- Fixed minor bug with "minimise to system tray" functionality
- Fixed bug causing main window to resize continuously if toolbar not shown
v4.71 (19th April 2009)
- Added "/saltlength" and "/keyiterations" command line options
- Added additional check on saltlength when creating new volumes
- Fixed trivial bug introduced in v4.70, causing CDB dumps to report the hash driver used twice, instead of the hash driver and cypher driver used.
- Fixed bug introduced in v4.70, which prevented per-volume IVs from being passed to the backend driver. Only affects CBC based (i.e. very old) volumes which use per-volume IVs.
v4.70 (4th April 2009)
- Spanish translation added
- Added option to volume creation wizard to mount new volumes after creating them
- Added support for Windows 7
- Added autodetect functionality for PKCS#11 libraries
- GUI and driver code refactored to allow common code to be shared between FreeOTFE and FreeOTFE Explorer
- Fixed uninstaller bug which prevented it from cleaning out installation subdirectories
- Fixed bug causing GUI to go into a tight loop when switching to a language for which the translation required certain specific controls to be resized
- Fixed bug which could potentially cause FreeOTFE to crash on dismount
v4.60 (19th February 2009)
- French translation added
- Corrected fault causing exit status 102 to be returned when mounting volume from the command line with "/silent" specified
- Various cosmetic improvements (mainly relating to translations)
v4.50 (1st January 2009)
- Italian translation added
- Added option to prevent message showing on successful mount
- Added option to display large or small toolbar icons (Note: Large icons with captions now shown by default. This may be changed back to show small icons via the "Options" dialog)
- Added option to save FreeOTFE settings to the Windows registry instead of a configuration file
- Added MRU list to system tray icon's menu. (Note: The MRU list is disabled by default; enable via the "Options" dialog)
- Added "/offset" command line option for mounting hidden volumes from the command line
- Message catalog system to simplify translation and reduce risk of errors
- Change to prevent changing the CWD when browsing for files via the standard open/save dialogs. This should stop FreeOTFE preventing USB drive removal when keyfiles, etc are stored on USB drives.
- Changed the broadcast message system informing other windows of drives appearing/disappearing on mount/dismount
- Corrected fault causing drive overwrite to fail under some circumstances with volumes over 4GB
- Refactored some parts of the codebase to eliminate duplicated code
- Various cosmetic tweaks to improve display layout when translated into different languages
v4.40 (20th November 2008)
- German translation added
- Added "Tools" menu item to provide a straightforward user interface to allow the user to quickly and easily copy FreeOTFE to a USB drive, and optionally configure it to run automatically when the drive is plugged in.
- Changed default settings to display system tray icon by default
- Improved support for dismounting drives nested within each other
- Added "/noexit" command line option
- Added "/password" and "/silent" command line parameters for mounting Linux volumes
- Added greater emphasis on the fact that when overwriting a partition with encrypted data, whatever was previously stored on that partition will be overwritten. (Yes, some people did email about this!)
- Prevent FreeOTFE from exiting when the wrong password is entered
- Various cosmetic improvements
v4.30 (27th October 2008)
- Added functionality to support language translations
- Added "/password" and "/silent" command line parameters for mounting FreeOTFE volumes
- Added additional option to overwrite an entire mounted volume, as well as its free space
- Added support for optionally substituting the mounted drive letter as a parameter passed to any post-mount and pre/post-dismount autorun commands configured
- Added support for post-mount and pre-dismount autorun commands with spaces in their paths
- Added option to display passwords as they're entered
- Driver development environment changed to Microsoft Visual Studio 2008 with WDK for Server 2008 v6001.18001 (although older versions can probably still be used)
- Corrected intermittant fault causing FreeOTFE to crash on mounting some volumes
- Corrected fault preventing hidden volumes being created on host volumes greater than 4GB
- Corrected estimated time remaining shown on progress dialog
- Hotkey options now saved correctly
- Minor cosmetic improvements
v4.00 (26th June 2008)
- Added support for 64 bit versions of MS Windows
- Added support for PKCS#11 (Cryptoki) security tokens/smartcards
- Significantly improved partition selection system
- Added "/drive", "/keyfile" and "/lesfile" command line parameters when mounting volumes
- Added user configurable global setting for default drive letter
- Extensive additions, changes and improvements made to documentation
- Various cosmetic and usability improvements
v3.00 (16th December 2007)
- FreeOTFE is now available both as a full installation package, as well as standard ZIP version.
- Added LRW and XTS cypher mode support
- Added post mount/pre dismount/post dismount autorun option to allow automated integrity checking, cleanup, etc
- Added option to explore drive automatically after mounting
- Made volume file timestamp reversion optional (i.e. the timestamps on volume files are automatically set back to their pre-mount values on dismounting; previously it would always do this)
- Simplified password entry for mounting FreeOTFE volumes; advanced options can easily be displayed by clicking button. (Advanced mount options can be displayed by default by setting relevant option)
- Password entry dialog is now only dismissed when the volume is successfully mounted, or the user cancels the mount when mounting a FreeOTFE volume
- Multiple driver files can now be selected for installation when manually installing drivers
- "File | Mount" now also auto detects LUKS volumes, so they can be mounted via this menu-item as well as "File | Linux volume | Mount file...". Similarly, dragging and dropping files onto FreeOTFE will cause it to attempt to auto detect the type of volume used.
- Manually installed drivers will now start up as soon as they've been installed, and set to startup automatically on boot
- Removed short password warning when mounting a LUKS volume with less than 20 characters in its password
- Command line option to mount volumes will now accept relative paths to volume files
- Added command line options to install and uninstall drivers
- Added command line option to return the number of mounted volumes
- Added dialog to report all currently available hash/cyphers algorithms, together with their details (see under "Help" menu)
- Improved support for multimonitor systems
- Corrected fault with mouse RNG that would cause "insufficient random data" errors
- Main development environment changed to:
- CodeGear Delphi 2007
- Microsoft Visual Studio 2005 Professional Edition
(although older versions can probably still be used)
- Updated LibTomCrypt based cypher/hash drivers to use LibTomCrypt v1.17
v2.00.00 (18th March 2007)
- Implemented support for Windows Vista (although previous versions would work under Vista, they had a few minor cosmetic issues under this OS)
- Added option to allow mounted volumes to be visible to all logged on users, or just the current user
- Added option to associate ".vol" files with FreeOTFE, in line with the PDA version, and defaulted open/save dialog filters. (Note that you are still free to use any filename with any filename extension).
- Added ability to store FreeOTFE settings in different places, or not at all if required
- Updated to automatically prompt user if they want to start portable mode if the main FreeOTFE driver isn't installed/running
- Added indicator to show portable mode activating
- Added ability to combine random number generators (RNGs) when generating random data for new volumes/changing passwords
- Added option to start FreeOTFE in portable mode without prompting if no installed drivers are found
- Added option to suppress prompting for volume type when volume files are drag 'n' dropped onto FreeOTFE
- Added additional prompt when creating new volumes to make it clearer when the minimum amount of information required had been entered
- Added option to allow user to specify where their settings should be stored (if they are to be saved)
- Added extra support for "odd" LUKS volumes which don't use the same cypher keylength for IV generation as encrypting data (e.g. volumes which use Blowfish-448 for data encryption, and cbc-essiv:sha256 actually use Blowfish-256 for their ESSIV IVs - this is now supported)
- Added detection of (nonstandard) Tiger and Whirlpool hashes when using LUKS volumes
- Removed redundant warning about drivers not being started in portable mode when they had been manually installed
- Corrected minor cosmetic issue with status bar display
- Added OS version ID to human readable CDB dumps
- Moved weaker drivers (FreeOTFE4PDAHashNull.dll, FreeOTFE4PDACypherNull.dll and FreeOTFE4PDACypherXOR.dll) into a "weak drivers" directory; most users shouldn't use these drivers, but they're still included in the release if needed
v1.60.00 (28th January 2006)
- Added the following cyphers:
- CAST6 (Gladman library)
- Fixed minor bug that prevented FreeOTFE from properly dismounting volumes under certain conditions.
- Corrected build error that prevented previous version from operating correctly under MS Windows 2000
v1.50.00 (8th January 2006)
- Changed email address from sdean12@softhome.net to (finally!) sdean12@sdean12.org
- Added the following cyphers:
- Serpent
- AES (Gladman library)
- RC-6 (Gladman library)
- Twofish (Gladman library)
- MARS (Gladman library; source only pending licence clarification)
- Updated to allow volumes to be mounted across networks
- Added ability to resize the driver control dialog
- Corrected fault that prevented LUKS partitions from being mounted
- Added support for LUKS volumes which use ESSIV, subject to the hashlength of the ESSIV hash generating the same number or less bits as the cypher used. Note: Although LUKS can create volumes with ESSIV - ESSIV is not part of the LUKS specification!
- Corrected errors that were displayed when a non-admin attempted to access the driver control dialog
v1.00.00 (20th November 2005)
- Added dismount hotkeys.
- Added optional system tray icon (tasktray icon), together with ability to minimize/close FreeOTFE to the system tray.
- Added optional toolbar and statusbar
- Added command line support
- Improved support for MS Windows XP Themes
- Switched from Delphi 5 to Delphi 7
v0.59.00 BETA (29th July 2005)
- Minor change to FreeOTFE.sys device driver to fix error introduced by compiler. Specifically, debug builds work correctly, but for release builds the compiler handles the "%" (modulus) operator differently for 64 bit arithmetic; calling a kernel function ("_alldvrm") that doesn't exist in Windows 2000, causing the driver to fail to load.
v0.58.00 BETA (24th July 2005)
- Added support for cryptlib (cl32.dll) as an RNG, if installed
- Added support for Linux LUKS volumes
- Removed redundant warnings when run by a user without Administrative privileges
v0.57.9900 BETA (8th June 2005 - restricted test release)
- Added support for encrypted CDs/DVDs
- Added support for encrypting disk devices, as well as partitions (i.e. You can now encrypt an entire disk, not just partitions held on it)
v00.57.00 BETA (28th May 2005)
- Compatibility with Linux volumes improved
- Fixed bug found when creating a new volume and storing the volume's CDB separately. (The CDB file wasn't being created before the CDB was written to it, causing an "Unable to write critical data block" error.)
v00.56.00 BETA (7th May 2005 - restricted release)
- Corrected issues relating to formatting volumes
v00.54.00 BETA (7th May 2005 - restricted release)
- Now tested under Windows 2000, as well as Windows XP.
- Removed buffering between data transfers to increase reliability.
- Updated to fix "Format incomplete" problems when formatting as FAT/FAT32 while running under Windows 2000.
- Added warning to user if an attempt is made to use a volume file created with a later volume format layout ID.
- Corrected fault with Windows XP/Windows 2000 differing QueryDosDevice behaviour that sometimes prevented FreeOTFE listing all cyphers/hash algorithms installed.
- Updated to only accept drag 'n dropped files when the drivers are active.
- Extra checks included to ensure user has at least one hash and cypher driver installed and running.
- Fixed MB/GB selection in new volume creation.
- More sensible saving/loading of Linux encryption settings.
- Added prompt when exiting if volumes are still mounted.
v00.53.00 BETA (24th April 2005 - restricted release)
- Fixed major bug causing the main driver to ignore its queue when large amounts of data were written to an encrypted volume.
- Improved emergency dismount (dismounts faster by cancelling all queued requests to the driver).
- Improved progress dialog's responsiveness when overwriting free space, preventing it from appearing frozen and giving user a better indication of progress.
- Fixed minor cosmetic fault on the keyfile creation dialog.
- FreeOTFE volume creation wizard now gives user more flexibility to specify the sector IV generation method used.
- Added support for Linux dm-crypt volumes (e.g. ESSIV).
- Added progress dialog when creating volume files.
- Message shown when FreeOTFE exits and stops portable mode no longer displayed, unless there was a problem stopping portable mode.
v00.50.00 BETA 1 (4th April 2005)
- Implementation of "portable mode"
- Added support for keyfiles
- User passwords are no longer displayed; they are blanked out with "*" characters
- Added option to backup and restore the CDB from volumes with a CDB
- Added option to dump critical data block to a human readable file
- Driver control dialog now indicates state of drivers - making it a lot clearer what's happening!
- Added support for encrypted partitions
- User can now change their passwords, and many other FreeOTFE volume properties.
- When volume files are mounted and used, their timestamps (created, last accessed and last modified) and attributes are recorded. They are then reset on dismount.
- Volume file timestamps and attributes are reset after dismounting, improving "plausible deniability"
- Added ability to save settings when mounting Linux volumes
- Volumes can now be mounted as removable drives (no recycle bin, files deleted directly)
- User's password is now processed with PKCS#5 PBKDF2 (HMAC), instead of being salted and hashed.
- Improved handling if more than one hash/cypher can be used for encryption/decryption.
- Added the following cyphers:
- DES
- 3DES
- Blowfish
- RC6
- CAST5
- libtomcrypt version of Twofish
- Added the following hash algorithms:
- Added per-volume IVs
- Rewrote most of the driver control dialog
- Critical data block checksum now uses the HMAC of the volume details block, instead of its hash
- Fixed bug that could cause new volumes to be created with an extra newline tacked onto the end of the user's password. If you have problems mounting volumes created like this, you should still be able to mount them by entering an extra newline (just press <ENTER>) at the end of your password.
- Fixed bug that caused VolumeFlags to be read back from the volume incorrectly. In order to continue support for older (CDB format 1) volumes, these volumes will still be read incorrectly, but newer (CDB format 2) volumes are processed correctly. To update older volumes to use the later CDB format, simply change your password via the "Tools | Change volume/keyfile password/details..." menu-item. It is highly recommended that you do this anyway, in order to better ensure future compatibility
v0.00.02 BETA 1 (11th October 2004)
- Fix to correct bug with salt handling which prevented FreeOTFE volumes from being mounted.
v0.00.01 BETA 1 (10th October 2004)
- First public release for compatibility testing
LibreCrypt: Open-Source disk encryption for Windows