Published release of the project VeraCrypt 1.26.30, developing a fork of the TrueCrypt disk partition encryption system, which has ceased to exist. VeraCrypt is notable for replacing the RIPEMD-160 algorithm used in TrueCrypt with SHA-512 and SHA-256, increasing the number of hashing iterations, simplifying the build process for Linux and macOS, eliminating issues, identified during the audit of TrueCrypt source codes. The code developed by the VeraCrypt project is distributed under the Apache 2.0 license, and borrowings from TrueCrypt continue to be distributed under the TrueCrypt License 3.0. Ready-made builds of are generated for Linux, FreeBSD, Windows and macOS.
Among the changes in the new version:
- Several vulnerabilities have been fixed: Buffer overflow (CVE-2026-77372) when deserializing requests in a privileged service. Obtaining root rights due to incorrect operation of the installer with temporary files in the /tmp directory. Remaining decrypted data after unmounting on macOS when using FUSE-T (CVE-2026-108982). Elevation of privileges in the Windows version.
- Added support for writable partitions placed in files on shared storage without root access (for example, GVfs or NFS in root_squash mode).
- Script mount.veracrypt has been rewritten to the POSIX shell.
- Improved token data cleanup.
- In Linux, improved handling of read-only media.
- Added protection against leaking file descriptors associated with privileged services and authentication to child processes.
- Enabled detection of CPU capabilities before starting core services to enable hardware acceleration when working with mounts partitions.
- Support for the BLAKE2b-512 hash function has been added to the dialogs for generating a file with keys, checking hash performance and setting up a random number pool.
- In OpenBSD, the ability to create FFS partitions has been added to the command line interface and graphical configurator.
/Reports, release notes, official announcements.