From a9cb3b474eabb20727edd5bb0c88a702dde51169 Mon Sep 17 00:00:00 2001
From: Tommaso Gagliardoni <tommaso@gagliardoni.net>
Date: Wed, 24 Sep 2025 10:37:14 +0200
Subject: [PATCH] chore: Prepare release v0.5.5

---
 CHANGELOG.md                                    |  11 +++++++++++
 README.md                                       |  12 ++++++++----
 dm-sflc/src/sflc_constants.h                    |   2 +-
 resources/images/badges/badge_version_0.5.4.png | Bin 2330 -> 0 bytes
 resources/images/badges/badge_version_0.5.5.png | Bin 0 -> 2425 bytes
 resources/images/badges/badges.svg              |   8 ++++----
 6 files changed, 24 insertions(+), 9 deletions(-)
 delete mode 100644 resources/images/badges/badge_version_0.5.4.png
 create mode 100644 resources/images/badges/badge_version_0.5.5.png

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 436ac88..e68082b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,17 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 
+## [0.5.5] - 2025-09-24
+
+### Fixed
+
+ - Fixed issue of bad memory allocation on some archs due to the improper use of vmalloc. The fix is experimental, as we could not reproduce the bug on RISCV architecture, so feedback is welcome.
+
+### Added
+
+ - Added explanation on how to deal with unsigned kernel modules with Secure Boot in README.md.
+ 
+ 
 ## [0.5.4] - 2025-09-06
 
 ### Fixed
diff --git a/README.md b/README.md
index 5f32aa5..c2b4ab5 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,5 @@
 [![Status](resources/images/badges/badge_status_active.png)](https://codeberg.org/shufflecake/shufflecake-c)&nbsp;
-[![Version](resources/images/badges/badge_version_0.5.4.png)](https://codeberg.org/shufflecake/shufflecake-c/releases/tag/v0.5.4)&nbsp;
+[![Version](resources/images/badges/badge_version_0.5.5.png)](https://codeberg.org/shufflecake/shufflecake-c/releases/tag/v0.5.5)&nbsp;
 [![License](resources/images/badges/badge_license_gplv2plus.png)](https://www.gnu.org/licenses/old-licenses/gpl-2.0.en.html)&nbsp;
 [![Docs researchpaper](resources/images/badges/badge_docs_researchpaper.png)](https://eprint.iacr.org/2023/1529)&nbsp;
 [![Website](resources/images/badges/badge_web_shufflecakedotnet.png)](https://shufflecake.net/)&nbsp;
@@ -12,7 +12,7 @@
 
 
 
-# Shufflecake - Full C Implementation - v0.5.4
+# Shufflecake - Full C Implementation - v0.5.5
 
 _Shufflecake_ is a plausible deniability (hidden storage) layer for Linux. You can consider Shufflecake a spiritual successor of tools like TrueCrypt and VeraCrypt, but vastly improved, both in terms of security and functionality. Official website: <https://www.shufflecake.net>.
 
@@ -298,7 +298,12 @@ Both these options have security implications, of course, which you should be aw
 
 ## Changelog <a id="user-content-changelog"></a>
 
-Please see the file `CHANGELOG.md` for a detailed history of changes.
+See the file `CHANGELOG.md` for a detailed history of changes.
+
+## [0.5.5] - 2025-09-24
+
+ - Experimental fix for the issue of bad memory allocation on some archs due to the improper use of vmalloc.
+ - Added instructions on how to deal with unsigned kernel modules with Secure Boot on.
 
 ## [0.5.4] - 2025-09-06
 
@@ -336,7 +341,6 @@ Bugs and other issues are tracked at <https://codeberg.org/shufflecake/shuffleca
 
 Outstanding known bugs and/or limitations:
 
- - Opening volumes does not work on certain architectures (see issue <https://codeberg.org/shufflecake/shufflecake-c/issues/143>).
  - Crash consistency is currently not guaranteed (see issue <https://codeberg.org/shufflecake/shufflecake-c/issues/136>).
  - Only a maximum of 15 volumes per device is supported.
  - There is (currently) no protection against multi-snapshot attacks.
diff --git a/dm-sflc/src/sflc_constants.h b/dm-sflc/src/sflc_constants.h
index 4680012..97044f0 100644
--- a/dm-sflc/src/sflc_constants.h
+++ b/dm-sflc/src/sflc_constants.h
@@ -33,7 +33,7 @@
 
 #define SFLC_VER_MAJOR 0
 #define SFLC_VER_MINOR 5
-#define SFLC_VER_REVISION 4
+#define SFLC_VER_REVISION 5
 #define SFLC_VER_SPECIAL ""
 
 #define STRINGIFY0(s) # s
diff --git a/resources/images/badges/badge_version_0.5.4.png b/resources/images/badges/badge_version_0.5.4.png
deleted file mode 100644
index c9a83b912f4b1cc10b1453e49872b7598024cca6..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 2330
zcmXArc{r5a8^<3}QK8UaVnT27qDd5E8e0ZqL}HpOk(x-1eTHn4rIPHjjhzUIkZmGN
zkrFYACQJ4(=(R<*>36z*f1Kw$*Lkk%KIi`4pYMI1NOLnI!F}+35CjPt<FFQB_5eeS
ze-C(u%aCq>Nx&0l?E^tVZ~qRSc8}tlU{R7{U`4U?aH9BK_jZK*{QQu&-Ccc1*F7DP
z9^SVyeq!Jd#9w5L)gw5EF3@k|lD5R#b-Ky1mJ^f2l0LDMq|d6Rj(OGQ1XyoAmd-k_
zXV7zA>`TT$rHcCjtYta=XZx=^68KV51|FH@r;xr)emR47B$84d#m4$vdnnvRefK=@
z4`F-fO=H?i%(UmH|NK&>5Bbis$A0_~Gm1mF@!o76h|9S@dF5PBR8G5xKL>Ww=H55*
z)BODL)XhAWGY*H-E$y?gwf*>O?rY`X!Y~JGU;x%%^^_5nl9Q81YD&J&2?z`C&8?`2
zKXt9?chb(u#~S|2H{nN)+`YX_K}&0DYTl6H5kg>aK|vV5pF>L}ezU#D9|%bg+|N!=
z@5t5)d{rYUCf52oaGhU3fXAUD>0b<On_aZ+L2o3r$FhcowoQUjRF2r#*cj$6H}mm{
zi-}1|*b5g9On=HEu`8~lvOXcviph^;^&gmDxzb*G<pt)>NJAyGwYDHC`c?FfX*NOe
zxUzEe=4L<>ZHL1=qT&D{Q={UJ>g>uTma=9k3dwjE7ncev<@#awgd&TQJAb%Z=q#c8
z=k=_uC83?Ib)(Wgxnw-Zo^bhcq<RwmxSN|B!gsGQBAQrQSXL$&)%GSr_$Vd_M9D8K
z-2K}AVvcrj#o&TfSwCX$xGffoRS8@pL+Wk=tsokMwu4sBh*@0pbm~esaB^}I*UB=B
zz{-tnZ>*3<nsy?{@EAjN_aU5(4LmY3Qmc0<y>V^LxBt0yc$d?}i)OCKESJljXIF;L
z&y%aFsw8x17$xF!D3`&YhlD`(O+g>%YPX!-+}fPas8TtE3-Y2qKRTIYbxR`g-4Mek
zGA5=lFE12?JOdXLMqow<YFr^QyCM|ikeHPfBg6mPsxr*@u{?{-et1D%KhHcqIoW_n
zgh8dmvi$t~U9auq2#N-B2?s&dh8z4CUK8(xcOP=t{=EcM*VZQH<Ou6hsb`&DN`kal
z&a3H-@89DfW!V0urKJP#GY^-Sy}f;W+ISZP!(=?iTLr#11)JdU9nB`$g9}d!3hvE*
zE_!0F&?<7;eF#-x@h_;8yoySELBT(GJigw0Y9A0k8h-W>;8D%BU-@)}o}M1o(9nDP
zx7WPyIhUGrHrq;7O^p$}r4ChAR(57+#ARk?A_dWCbUH{XAv@d5-X0+md9S`6b%R8z
zv{JTGhCxo9X?j5Kwzf9@u$JYik96%|w4|hD{nc{B?kA#5CKC$USZ;fQ>HqR2_wy{4
zt8+SF)frm*Z{(t`ZV0ZKItPmqKecA#!b5yvZwlBnNksyY^V(^fR}X`8n=6RTP|yiZ
zXW;%D%g3oyDsa)5H={n_*E6f}PA9e9yLU^(7+x|0T4!g+_PG?+)Eus{0i_7qTs2N&
z1g@8NYioFoV}XkP{{Ff~m*2mCpWD=wU0keisr=cqN8{r+awit)7vzCp01ho7!xOuB
zd3l`4<keii+ITar4$FT<`!2Wh=Wv52@DkvEV`cg!b&mJ~4Uc&czE{|L<%encRmQSD
zZBxqX`|Cg>Q&Yh`;h|Mks$X2r9y5#{eRF?5bT1-ef`X=>^DB?AcXn0)%JYXo6uzy6
z!8*A=0Btr|Juxvc4NX<-&enPhh_ka>=!=VwKe%uIel2HY>i&$bcP*j31~#UqrsDJ*
z14~QM9#&xU{hXYmA>G$GJ$d?>+QI4Kr|j>nE_P*Ty!4*J$4Y7T8l2G7l#DTan{v{Y
z#_o1cT?Of`2570$4}>#yO-!Otp16NRhTJt2lRGA+Jy8mZiszB3ywbrFgSxM-BF!>U
z%&Cv5Ug)g9EM%SYtMXs@fn<iohSXG7Q}Q%4G@{he3)@#bQBn{eAK$}>gSpq5X%OP_
zgss@&!(P*$q~lttYn=(li~{=TT7l~L!o-daJlIY>!*ud63|8efsGdXfZBR@~NvU#R
z?y58v7Z;B@-aF=b5DxDEJ8Mz4cXlo*CTq_%06QU5EzQk!_4IfEf&!xQ@o8x|zzgV-
zh-IOOx2|yl0s^zXp*tEg^H1=FBA}P}`)kr@v}j4SJuP!pWfmnU-+76i%FnN9JMfvb
zL>>-@(>U;~y!@%hNYnUT`h|D#vic#hzw(=!z8B>Te{Tf6Xz54S5vNa?k;Kwp3fG9G
z$=sc-z)Xb_LdUz9Bi2<nBfD?KN}o#s^%I4`_E3`gPF&0$rJ%LkElzxI^bcn`=#~+q
zs+r+?)hIJPf4+%$sM1?UiwX)<oH`{eEG*1R2&gPGuU=&(rMF|Ao~tvL($mu)Mn#d{
zJ`gN;`cxGd1%|w;P<|lG@;?BU7fNb;AsT%Cy*M`RF;IOw|0rk-nOcGUML8pOy`U95
zjEkEFeFYIb3t9m%XMdTk5sjuT6u}$LYzg7v#a+C(zR?J30Efe^>fEJ)d8(_c9aJRZ
z@r9rUz6s61`{3$uoa-+WgTdrdKY})zS6fSzy1{j=uB&?)xbEKD+Y7EX8ChAqNonn%
zw1EMeToRlAzyWNb1y6<RS0wUkeM^<&N2^*gy?BMwr<C~kacFFZn1sa4uUxJ|0gJ`@
zFf4$Q5&{@(Y-}KEzAyN$OnwmM)6*^boY&{Fu{g#HFcuq;2V{a{wyN?0MN5i{Wl*Rz
zK$6IzL$VyIkhC{Ls<aPpXD8j&)rAS(Od1_^kUMrvKv1ylrfNb;ioB4JDm|LRafxfQ
zlS}v;;ra7b&Bn>8shWu=n@OpumIMM8hvRpz%b4!Y@fmI5iObV3Ay^Oyf3MTx;^Gz%
zCL=>>&9Gtk6EM7WgKyby3xFW0ZqR>q<`9Fyu$$i(79zus30QqU$C;EJ+%le74>Dkj
puF^y{!&w=PIufrxZ2kY`E^iF?8O*iw&EG#C$k@OPTYlal?0;Xpa2Nmp

diff --git a/resources/images/badges/badge_version_0.5.5.png b/resources/images/badges/badge_version_0.5.5.png
new file mode 100644
index 0000000000000000000000000000000000000000..588a6bc1f04077643d5557bb6029efcd9f22aab4
GIT binary patch
literal 2425
zcmV-<35NEGP)<h;3K|Lk000e1NJLTq003_Q000yS1^@s6gCJvK00009a7bBm000id
z000id0mpBsWB>pF8FWQhbW?9;ba!ELWdL_~cP?peYja~^aAhuUa%Y?FJQ@H12?j|-
zK~!jg?U`+CjA<9ge{)Y~Ivtr--;`<%p{A`eMm5qVh^0yd+kWs;HiRf?LN*dfMIs_3
z>^6K@>w|=3?M8|UvRR>+vPfSuMW=K}htYOuOYf@fH0^X=o)44Wk1;ddUD+qd<Nxto
z*SXKRu5(@gbIx_kcJAEi<^L2%jvR3TVISL%4~6it9r%I|$0vE}R;*Zo#bTkkx%s2|
z5fv3hK|ujpt(LB?E-qibjNNV@Q70=ai>Rom0J+U(qot)Ks7_K+5~-=F0rG)?0q)+t
z8`9P%8NAuEXX9`<K5FoEIvqx%k;KGANp|?~Ve<3yxpCu0NWF9C&M|S~!~prBLx<SC
zdv{QsZQHi7XV0Dhd0Sf>6DCXuY3q{=-qE8+85kJ&s6HG&ew@U_L>@nW%#T0*NMT_i
zIXOA}^wUpFnluTg(;1+nR;!sXVFEopJv@E-)NgF08=IDv27t+A!t4ES3DViwIiin2
zgD02E88>bmy}iBs`RAX0V+jcfxZQ4EzkUsXMx#Ne)1gwS=;-LcYPCuZXfztsYBimm
zo#=Erlu9Lyjg0_|88Zg0R*PIN$8NXN*48H3P^nb7TrNMm$;ruRwOU**7gnp4SFc|A
z`PARv&*0!7>FMc=8Z`>L-Hy#>8*%ZWFn;`azWVAbz;`Qt|NVC^U%pIhYb%L~i7Z&K
zfNR&T1?cH?Is`%B^y$-l`|Y=X+g@sFDz9I^CNnehANd(Hcpi_34I4Jl+S<y`KmRPr
zBO)T$xpOBsZ{DP$qJkMSX0UecTENH8k&%%+dGdslCr>goG=#xmV9uO5n9XJuEn0-d
zVxh6Ik=)!|^78WN>+8eg@emai#hp8MxOC|f07XSb+`W63n>TMFlgU`Sb}gBinK&E{
z!otE(DwR}JR8Ub-0l+ukd_!|{GwJE+$mMbbK_Dh3hFiC8@$0X@{-X^6m@#7p07FAV
zR99C6(B9sT#bQCH(_t_ef(CCmZ&|HY^7HdaN=l-ssfo(UO1~TB7l5!Zrc9YaZEY=?
znVDo~XVcx?&2PW`#@n}VNAxpj@Vs6x4Gj&<ojVt$QYlfy^y$-)%jMM7)e#*XO<`dn
z4Gj%kxNrfN%f-~GQ`x+EGYb|hkTy0ZCWh41RDSs32kdq`8jXg$ygaU5yT<kF*8#}O
z%VY84#Tbpo0Ee@)v&qcNq`bVGs;VjkL15XkW#r}MVYOPZTCD)gn>UZLvNB926Ec~M
z)vH%CckW!ST)BeV?H+Lx-bZX~EC6rczV)NWj*bp=I-NBBK8ES<z<~oqMn+2Vt5>hG
za^=dPR6BX{WRyxJdcB^yx;kVs8Q`PLB}<lY|Ni}ueuiun8X6i<DwXJTI!R_Q7<lsJ
z2|YbMWMyUHcDuQF@uEa=7K??Nni>oSgQTNWDk(27$7ZuJG&F=pqd_K<(cRrG&AD~!
zR>(XzYt}5RRx4FiRe+Bbu3Wi7Z*MPISy|G&wzf7*CKKR0d}gy5xm->}L`2BNheC98
zGyo2V!%se(LWalR$MDU2^X3gDB_$j`ejK;k&5|Wc*s)_rP@Um`j~X?KW5<qBQc{B5
zZYLojfm5eWAqb(nxsV0R%a<?d=;%PN*VEY8h(@Df%9JUbIdcYp#Kc6LPA9p!xqf=_
z@$tmO#7HN|<MHs~#S3Y?v$K=d)>aA&3z;)#4v!u^!eX(|-rgS6kGQxvYHMr#WNx>c
z*49?WjvXt>IyyQ6=6opn`}+Z3?tK^G;o$%wi>dFv`;HSQPVmPcfB5C_;^Jb~ty@QF
zX=#8?eSJN-xw-WA_EJ|@2f&>>cer=&9tMMfw6rvunwo;z8?o9nnM^EPxR9{0F!Xvo
zgM))o!666&UauFmTJ5JJiXx&YqEILRU*33kBi(K{$BrFi_UzeYWMr^-@nTl2Sb^1Q
z<<zND0UHw@9?sz4V1RD}0|SzcVLSg8L{S7FGBOgGOeW>4(W6HL__4;jsIRXNkX2V#
zQ(Rn3N=iylo%Z(jfP-6GTZ_lzK@bE|Qc^xFc=zw$XX(<VQj#{AOcF(kqDXvvJm=4!
z_tS}ph(M)M1?6|}C1{00K}}5!H8nK|g22p~Gg-4{4LLbE7>!21`JyNW%`tItaetZ6
zKNQ1xRHagpo}NxqQxoCg;Y^!04IpT<tyZf!dh{sZ>*=07dj|NbWPqNYo}jk2Z{JQv
zMg~Tsk+Wyd0={Z@m@ePEc@xsl5ueApySsV*{5kXI&qu4(`q7uoW@F5lF@7gXE|;@)
z>sG%0`s<M2%*e>#z<~pd8#fN{(dvT-4{$o2em7|t&!0a>uh*l|Xe3#3axxPqPW+!W
z@n*AG+Wh_d_cLwUH1_Y`k6Nw9>2yk!W@BR`q9}6Y$PxPc`&qVZ8AU}!96EG}w6rvq
zFJCUT48v9L-o1MfMNy*F<m6<Eii#*LEoI)kdCZ(SlM^RS0MOOdB~`n@@Rv<`Lqh}k
z`T4wj`O@!tKYaKQtJTV;O`E8$u0|9^^m;uB2?>;!mxugbOG^uVeSK`&w27LU8U_ak
z(d+fd<?^7F)%EMw$;ilH$BrG;*4Cm>D9Fjlp{uJ)Dq{X^csw3TN=hgzE2E&GfP#Vo
zY3%#&zo)CK3-CRkMMp<Vsbkl!U7R^{hE=Opv1-*SN$2U)r|jFe5AZQlbab?IP)kco
zS-*ZgNl8iEzI|KLak*R+7Z;ECSRv2O&fYiDLPSx->-ADyUG2y9Uayx24;~<s$<XO^
zXti2iy?VvjvuCB(1VIq!>+6$f2*Bxd(%jrkY-}tkDJhH}KVH%sE;<wn1vZ<Fo}L~C
z1_pTe@FB6Wv81M^5+5Ir*=(k)tV~*1SXdbC?d^VzyC4WSolaU>T0#~tRaI3ULa<L$
zQxo;|^~A-+;q`iX{P-~k4<7U@I#enZ_4W1KzI~hK=4Q-hGnJK<Qf{={?VLV+nvEMb
zN{<=}g#x?X&b@p0sI08S;c)QFFTbEvDiH($hr@x<Xk^QlEmA8L3bHT1gg(tD!oPzr
rzl1(xd<ouXj4#3ajPWISpE3Redkf>Syz^%>00000NkvXXu0mjfrK6`|

literal 0
HcmV?d00001

diff --git a/resources/images/badges/badges.svg b/resources/images/badges/badges.svg
index 2575c03..81f8c8a 100644
--- a/resources/images/badges/badges.svg
+++ b/resources/images/badges/badges.svg
@@ -29,8 +29,8 @@
      inkscape:document-units="mm"
      showgrid="false"
      inkscape:zoom="2.7438272"
-     inkscape:cx="235.98425"
-     inkscape:cy="228.69516"
+     inkscape:cx="236.3487"
+     inkscape:cy="229.05961"
      inkscape:window-width="2560"
      inkscape:window-height="1377"
      inkscape:window-x="0"
@@ -333,7 +333,7 @@
        height="5.2916675"
        x="61.548569"
        y="79.569435"
-       inkscape:export-filename="badge_version_0.5.4.png"
+       inkscape:export-filename="badge_version_0.5.5.png"
        inkscape:export-xdpi="96"
        inkscape:export-ydpi="96" />
     <text
@@ -364,7 +364,7 @@
          id="tspan462"
          style="font-style:normal;font-variant:normal;font-weight:600;font-stretch:normal;font-family:FreeSans;-inkscape-font-specification:'FreeSans Semi-Bold';fill:#ffffff;fill-opacity:1;stroke-width:0.183262"
          x="79.882088"
-         y="83.4077">0.5.4</tspan></text>
+         y="83.4077">0.5.5</tspan></text>
     <rect
        style="fill:#951b89;fill-opacity:1;stroke:none;stroke-width:0.245683;stroke-linecap:round;stroke-linejoin:round;stroke-dasharray:none;stroke-opacity:1"
        id="rect358"