【VeraCrypt】暗号化仮想ドライブ作成ソフト Part25

178 ：名無しさん＠お腹いっぱい。 ：2021/12/04(土) 17:48:45.36 ID:alkLnGGw0.net

https://sourceforge.net/p/veracrypt/discussion/general/thread/cf230ea553/

9/5のRC1では

> Drop support of Windows XP, Windows Vista and Windows 7. Windows 8 is now the minimum supported Windows version.

とされていて、ドライバーへの署名をSHA-1で付けることができなくなってSHA-256が必須になったことでXPと7のサポートを落とさざるを得なくなったと言ってた

> For Windows, we have no choice but drop complete support for Windows XP and Windows 7 because we cannot renew the SHA-1 certificate that is needed for signing VeraCrypt driver. All public CAs have stopped issuing SHA-1 certificates and drivers signed with SHA-256 will refuse to load on Windows XP and Windows 7 (and in case of system encryption, Windows will not boot at all).
> Microsoft has its own internal CA so it can issue SHA-1 certificates to itself but third-party developers like us cannot have such certificates.

https://sourceforge.net/p/veracrypt/discussion/general/thread/cf230ea553/?page=1#2376/2f14

その後の調査で、XPはドライバーの署名を検証してないので利用可能なことが判明した一方、8および8.1においても署名の問題が発生して解決できないことが発覚

> What is worse is that cross-signing is also not allowed anymore for Windows 8 and Windows 8.1 and Microsoft clearly writes that if a certificate is used for cross-signing then it will be revoked.


https://sourceforge.net/p/veracrypt/discussion/general/thread/064102a9e2/

その結果、11/21のRC2では

> Drop support of Windows Vista, Windows 7, Windows 8 and Windows 8.1 because of new requirement for driver code signing.

Vistaから8.1が落とされてXPが残るという変態仕様に