VeraCrypt version 1.26.7

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.25.9 and 1.26.7 (1 October 2023) :

• All OSes:
  • Security: Ensure that XTS primary key is different from the secondary key when creating volumes
    • Issue unlikely to happen thanks to random generator properties but this check must be added to prevent attacks
    • Reference: CCSS,NSA comment at page 3: https://csrc.nist.gov/csrc/media/Projects/crypto-publication-review-project/documents/initial-comments/sp800-38e-initial-public-comments-2021.pdf
  • Remove TrueCrypt Mode support. Version 1.25.9 can be used to mount or convert TrueCrypt volumes.
  • Complete removal of RIPEMD160 and GOST89 algorithms. Legacy volumes using any of them cannot be mounted by VeraCrypt anymore.
  • Add support for BLAKE2s as new PRF algorithm for both system encryption and standard volumes.
  • Introducing support for EMV banking smart cards as keyfiles for non-system volumes.
    • No need for a separate PKCS#11 module configuration.
    • Card PIN isn't required.
    • Generates secure keyfile content from unique, encoded data present on the banking card.
    • Supports all EMV standard-compliant banking cards.
    • Can be enabled in settings (go to Settings->Security Tokens).
    • Developed by a team of students from the Institut national des sciences appliquées de Rennes.
    • More details about the team and the project are available at https://projets-info.insa-rennes.fr/projets/2022/VeraCrypt/index_en.html.
  • When overwriting an existing file container during volume creation, add its current size to the available free space
  • Add Corsican language support. Update several translations.
  • Update documentation
• Windows:
  • Officially, the minimum supported version is now Windows 10. VeraCrypt may still run on Windows 7 and Windows 8/8.1, but no active tests are done on these platforms.
  • EFI Bootloader:
    • Fix bug in PasswordTimeout value handling that caused it to be limited to 255 seconds.
    • Rescue Disk: enhance "Boot Original Windows Loader" by using embedded backup of original Windows loader if it is missing from disk
    • Addition of Blake2s and removal of RIPEMD160 & GOST89
  • Enable memory protection by default. Add option under Performance/Driver Configuration to disable it if needed.
    • Memory protection blocks non-admin processes from reading VeraCrypt memory
    • It may block Screen Readers (Accessibility support) from reading VeraCrypt UI, in which case it can be disabled
    • It can be disabled by setting registry value "VeraCryptEnableMemoryProtection" to 0 under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\veracrypt
  • Add process mitigation policy to prevent VeraCrypt from being injected by other processes
  • Minor enhancements to RAM Encryption implementation
  • Fix Secure Desktop issues under Windows 11 22H2
  • Implement support for mounting partially encrypted system partitions.
  • Fix false positive detection of new device insertion when Clear Encryption Keys option is enable (System Encryption case only)
  • Better implementation of Fast Create when creating file containers that uses UAC to request required privilege if not already held
  • Allow choosing Fast Create in Format Wizard UI when creating file containers
  • Fix formatting issues during volume creation on some machines.
  • Fix stall issue caused by Quick Format of large file containers
  • Add dropdown menu to Mount button to allow mounting without using the cache.
  • Possible workaround for logarithmic slowdown for Encrypt-In-Place on large volumes.
  • Make Expander first check file existence before proceeding further
  • Allow selecting size unit (KB/MB/GB) for generated keyfiles
  • Display full list of supported cluster sizes for NTFS, ReFS and exFAT filesystems when creating volumes
  • Support drag-n-drop of files and keyfiles in Expander.
  • Implement translation of Expander UI
  • Replace legacy file/dir selection APIs with modern IFileDialog interface for better Windows 11 compatibility
  • Enhancements to dependency dlls safe loading, including delay loading.
  • Remove recommendation of keyfiles files extensions and update documentation to mention risks of third-party file extensions.
  • Add support for more language in the setup installer
  • Update LZMA library to version 23.01
  • Update libzip to version 1.10.1 and zlib to version 1.3.
  • Linux:
    • Fix bug in Random generator on Linux when used with Blake2s that was triggering a self test failure.
    • Modify Random Generator on Linux to exactly match official documentation and the Windows implementation.
    • Fix compatibility issues with Ubuntu 23.04.
    • Fix assert messages displayed when using wxWidgets 3.1.6 and newer.
    • Fix issues launching fsck on Linux.
    • Fix privilege escalation prompts being ignored.
    • Fix wrong size for hidden volume when selecting the option to use all free space.
    • Fix failure to create hidden volume on a disk using CLI caused by wrong maximum size detection.
    • Fix various issues when running in Text mode:
      • Don't allow selecting exFAT/BTRFS filesytem if they are not present or not compatible with the created volume.
      • Fix wrong dismount message displayed when mounting a volume.
      • Hide PIM during entry and re-ask PIM when user entered a wrong value.
      • Fix printing error when checking free space during volume creation in path doesn't exist.
    • Use wxWidgets 3.2.2.1 for static builds (e.g. console only version)
    • Fix compatibility of generic installers with old Linux distros
    • Update help message to indicate that when cascading algorithms they must be separated by dash
    • Better compatibility with building under Alpine Linux and musl libc
  • macOS:
    • Fix issue of VeraCrypt window becoming unusable in use cases involving multiple monitors and change in resolution.