/* Copyright (c) 2008-2010 TrueCrypt Developers Association. All rights reserved. Governed by the TrueCrypt License 3.0 the full text of which is contained in the file License.txt included in TrueCrypt binary and source code distribution packages. */ #include "Volume/EncryptionTest.h" #include "Volume/EncryptionModeXTS.h" #include "Core.h" #ifdef TC_UNIX #include #include #include #endif #include "VolumeCreator.h" #include "FatFormatter.h" namespace VeraCrypt { VolumeCreator::VolumeCreator () : SizeDone (0) { } VolumeCreator::~VolumeCreator () { } void VolumeCreator::Abort () { AbortRequested = true; } void VolumeCreator::CheckResult () { if (ThreadException) ThreadException->Throw(); } void VolumeCreator::CreationThread () { try { uint64 endOffset; uint64 filesystemSize = Layout->GetDataSize (HostSize); if (filesystemSize < 1) throw ParameterIncorrect (SRC_POS); DataStart = Layout->GetDataOffset (HostSize); WriteOffset = DataStart; endOffset = DataStart + Layout->GetDataSize (HostSize); VolumeFile->SeekAt (DataStart); // Create filesystem if (Options->Filesystem == VolumeCreationOptions::FilesystemType::FAT) { if (filesystemSize < TC_MIN_FAT_FS_SIZE || filesystemSize > TC_MAX_FAT_SECTOR_COUNT * Options->SectorSize) throw ParameterIncorrect (SRC_POS); struct WriteSectorCallback : public FatFormatter::WriteSectorCallback { WriteSectorCallback (VolumeCreator *creator) : Creator (creator), OutputBuffer (File::GetOptimalWriteSize()), OutputBufferWritePos (0) { } virtual bool operator() (const BufferPtr §or) { OutputBuffer.GetRange (OutputBufferWritePos, sector.Size()).CopyFrom (sector); OutputBufferWritePos += sector.Size(); if (OutputBufferWritePos >= OutputBuffer.Size()) FlushOutputBuffer(); return !Creator->AbortRequested; } void FlushOutputBuffer () { if (OutputBufferWritePos > 0) { Creator->Options->EA->EncryptSectors (OutputBuffer.GetRange (0, OutputBufferWritePos), Creator->WriteOffset / ENCRYPTION_DATA_UNIT_SIZE, OutputBufferWritePos / ENCRYPTION_DATA_UNIT_SIZE, ENCRYPTION_DATA_UNIT_SIZE); Creator->VolumeFile->Write (OutputBuffer.GetRange (0, OutputBufferWritePos)); Creator->WriteOffset += OutputBufferWritePos; Creator->SizeDone.Set (Creator->WriteOffset - Creator->DataStart); OutputBufferWritePos = 0; } } VolumeCreator *Creator; SecureBuffer OutputBuffer; size_t OutputBufferWritePos; }; WriteSectorCallback sectorWriter (this); FatFormatter::Format (sectorWriter, filesystemSize, Options->FilesystemClusterSize, Options->SectorSize); sectorWriter.FlushOutputBuffer(); } if (!Options->Quick) { // Empty sectors are encrypted with different key to randomize plaintext Core->RandomizeEncryptionAlgorithmKey (Options->EA); SecureBuffer outputBuffer (File::GetOptimalWriteSize()); uint64 dataFragmentLength = outputBuffer.Size(); while (!AbortRequested && WriteOffset < endOffset) { if (WriteOffset + dataFragmentLength > endOffset) dataFragmentLength = endOffset - WriteOffset; outputBuffer.Zero(); Options->EA->EncryptSectors (outputBuffer, WriteOffset / ENCRYPTION_DATA_UNIT_SIZE, dataFragmentLength / ENCRYPTION_DATA_UNIT_SIZE, ENCRYPTION_DATA_UNIT_SIZE); VolumeFile->Write (outputBuffer, (size_t) dataFragmentLength); WriteOffset += dataFragmentLength; SizeDone.Set (WriteOffset - DataStart); } } if (!AbortRequested) { SizeDone.Set (Options->Size); // Backup header SecureBuffer backupHeader (Layout->GetHeaderSize()); SecureBuffer backupHeaderSalt (VolumeHeader::GetSaltSize()); RandomNumberGenerator::GetData (backupHeaderSalt); Options->VolumeHeaderKdf->DeriveKey (HeaderKey, *PasswordKey, backupHeaderSalt); Layout->GetHeader()->EncryptNew (backupHeader, backupHeaderSalt, HeaderKey, Options->VolumeHeaderKdf); if (Options->Quick || Options->Type == VolumeType::Hidden) VolumeFile->SeekEnd (Layout->GetBackupHeaderOffset()); VolumeFile->Write (backupHeader); if (Options->Type == VolumeType::Normal) { // Write random data to space reserved for hidden volume backup header Core->RandomizeEncryptionAlgorithmKey (Options->EA); Options->EA->Encrypt (backupHeader); VolumeFile->Write (backupHeader); } VolumeFile->Flush(); } } catch (Exception &e) { ThreadException.reset (e.CloneNew()); } catch (exception &e) { ThreadException.reset (new ExternalException (SRC_POS, StringConverter::ToExceptionString (e))); } catch (...) { ThreadException.reset (new UnknownException (SRC_POS)); } VolumeFile.reset(); mProgressInfo.CreationInProgress = false; } void VolumeCreator::CreateVolume (shared_ptr options) { EncryptionTest::TestAll(); { #ifdef TC_UNIX // Temporarily take ownership of a device if the user is not an administrator UserId origDeviceOwner ((uid_t) -1); if (!Core->HasAdminPrivileges() && options->Path.IsDevice()) { origDeviceOwner = FilesystemPath (wstring (options->Path)).GetOwner(); Core->SetFileOwner (options->Path, UserId (getuid())); } finally_do_arg2 (FilesystemPath, options->Path, UserId, origDeviceOwner, { if (finally_arg2.SystemId != (uid_t) -1) Core->SetFileOwner (finally_arg, finally_arg2); }); #endif VolumeFile.reset (new File); VolumeFile->Open (options->Path, (options->Path.IsDevice() || options->Type == VolumeType::Hidden) ? File::OpenReadWrite : File::CreateReadWrite, File::ShareNone); HostSize = VolumeFile->Length(); } try { // Sector size if (options->Path.IsDevice()) { options->SectorSize = VolumeFile->GetDeviceSectorSize(); if (options->SectorSize < TC_MIN_VOLUME_SECTOR_SIZE || options->SectorSize > TC_MAX_VOLUME_SECTOR_SIZE #if !defined (TC_LINUX) || options->SectorSize != TC_SECTOR_SIZE_LEGACY #endif || options->SectorSize % ENCRYPTION_DATA_UNIT_SIZE != 0) { throw UnsupportedSectorSize (SRC_POS); } } else options->SectorSize = TC_SECTOR_SIZE_FILE_HOSTED_VOLUME; // Volume layout switch (options->Type) { case VolumeType::Normal: Layout.reset (new VolumeLayoutV2Normal()); break; case VolumeType::Hidden: Layout.reset (new VolumeLayoutV2Hidden()); if (HostSize < TC_MIN_HIDDEN_VOLUME_HOST_SIZE) throw ParameterIncorrect (SRC_POS); break; default: throw ParameterIncorrect (SRC_POS); } // Volume header shared_ptr header (Layout->GetHeader()); SecureBuffer headerBuffer (Layout->GetHeaderSize()); VolumeHeaderCreationOptions headerOptions; headerOptions.EA = options->EA; headerOptions.Kdf = options->VolumeHeaderKdf; headerOptions.Type = options->Type; headerOptions.SectorSize = options->SectorSize; if (options->Type == VolumeType::Hidden) headerOptions.VolumeDataStart = HostSize - Layout->GetHeaderSize() * 2 - options->Size; else headerOptions.VolumeDataStart = Layout->GetHeaderSize() * 2; headerOptions.VolumeDataSize = Layout->GetMaxDataSize (options->Size); if (headerOptions.VolumeDataSize < 1) throw ParameterIncorrect (SRC_POS); // Master data key MasterKey.Allocate (options->EA->GetKeySize() * 2); RandomNumberGenerator::GetData (MasterKey); headerOptions.DataKey = MasterKey; // PKCS5 salt SecureBuffer salt (VolumeHeader::GetSaltSize()); RandomNumberGenerator::GetData (salt); headerOptions.Salt = salt; // Header key HeaderKey.Allocate (VolumeHeader::GetLargestSerializedKeySize()); PasswordKey = Keyfile::ApplyListToPassword (options->Keyfiles, options->Password); options->VolumeHeaderKdf->DeriveKey (HeaderKey, *PasswordKey, salt); headerOptions.HeaderKey = HeaderKey; header->Create (headerBuffer, headerOptions); // Write new header if (Layout->GetHeaderOffset() >= 0) VolumeFile->SeekAt (Layout->GetHeaderOffset()); else VolumeFile->SeekEnd (Layout->GetHeaderOffset()); VolumeFile->Write (headerBuffer); if (options->Type == VolumeType::Normal) { // Write random data to space reserved for hidden volume header Core->RandomizeEncryptionAlgorithmKey (options->EA); options->EA->Encrypt (headerBuffer); VolumeFile->Write (headerBuffer); } // Data area keys options->EA->SetKey (MasterKey.GetRange (0, options->EA->GetKeySize())); shared_ptr mode (new EncryptionModeXTS ()); mode->SetKey (MasterKey.GetRange (options->EA->GetKeySize(), options->EA->GetKeySize())); options->EA->SetMode (mode); Options = options; AbortRequested = false; mProgressInfo.CreationInProgress = true; struct ThreadFunctor : public Functor { ThreadFunctor (VolumeCreator *creator) : Creator (creator) { } virtual void operator() () { Creator->CreationThread (); } VolumeCreator *Creator; }; Thread thread; thread.Start (new ThreadFunctor (this)); } catch (...) { VolumeFile.reset(); throw; } } VolumeCreator::KeyInfo VolumeCreator::GetKeyInfo () const { KeyInfo info; info.HeaderKey = HeaderKey; info.MasterKey = MasterKey; return info; } VolumeCreator::ProgressInfo VolumeCreator::GetProgressInfo () { mProgressInfo.SizeDone = SizeDone.Get(); return mProgressInfo; } }