VeraCrypt full changelog

All OSes:
Security: Ensure that XTS primary key is different from the secondary key when creating volumes
Issue unlikely to happen thanks to random generator properties but this check must be added to prevent attacks
Reference: CCSS,NSA comment at page 3: https://csrc.nist.gov/csrc/media/Projects/crypto-publication-review-project/documents/initial-comments/sp800-38e-initial-public-comments-2021.pdf
Remove TrueCrypt Mode support. Version 1.25.9 can be used to mount or convert TrueCrypt volumes.
Complete removal of RIPEMD160 and GOST89 algorithms. Legacy volumes using any of them cannot be mounted by VeraCrypt anymore.
Add support for BLAKE2s as new PRF algorithm for both system encryption and standard volumes.
Introducing support for EMV banking smart cards as keyfiles for non-system volumes.
No need for a separate PKCS#11 module configuration.
Card PIN isn't required.
Generates secure keyfile content from unique, encoded data present on the banking card.

All OSes:
Don't allow Hidden volume to have the same password, PIM and keyfiles as Outer volume
Fix random crash in 32-bit builds when using Streebog.
Enable FIPS mode in JitterEntropy random generator.
Update Beginner's Tutorial in documentation to use "MyVolume.hc" instead of "My Volume" for file container name in order to avoid confusion about nature of file nature.
Minor code cleanup
Windows:
Fix wrong results in benchmark of encryption algorithms when RAM encryption is enabled
Fix issue when RAM encryption used, AES selected and AES-NI not supported by CPU that caused the free space of newly created volumes not filled with random data even if "quick format" is not selected.
Fix UI for blocking TRIM in system encryption not working in MBR boot mode.
Support password drag-n-drop from external applications (e.g. KeePass) to password UI fields which is more secure than using clipboard.

Fix PIM label text truncation in password dialog
Fix wrong language used in installer if user selects a language other than English and then selects English before clicking OK on language selection dialog.

Optimize performance for CPUs that have more than 64 logical processors (contributed by Sachin Keswani from AMD)
Support specifying keyfiles (both in tokens and in filesystem) when creating file containers using command line (switches /keyfile, /tokenlib and /tokenpin supported in VeraCrypt Format)
Fix leak of keyfiles path and name after VeraCrypt process exits.
Add CLI switch /secureDesktop to VeraCrypt Format.
Update libzip to version 1.6.1
Minor UI fixes

Fix regression that limited the size available for hidden volumes created on disk or partition.

Fix regression in Expander and Format when RAM encryption is enable that was causing volume headers to be corrupted.
Fix failure of Screen Readers (Accessibility support) to read UI by disabling newly introduced memory protection by default and adding a CLI switch (/protectMemory) to enable it when needed.
Fix side effects related to the fix for CVE-2019-19501 which caused links in UI not to open.
Add switch /signalExit to support notifying WAITFOR Windows command when VeraCrypt.exe exits if /q was specified in CLI (cf documentation for usage).
Don't display mount/dismount examples in help dialog for command line in Format and Expander.
Documentation and translation updates.

Fix regression that limited the size available for hidden volumes created on disk or partition.