VeraCrypt: Improved version of TrueCrypt

[CarderPlanet]

After a year and a half of development, the release of the VeraCrypt 1.26.7 project has been published, which develops a fork of the TrueCrypt disk partition encryption system, which has ceased to exist. VeraCrypt is notable for replacing the RIPEMD-160 algorithm used in TrueCrypt with SHA-512 and SHA-256, increasing the number of hash iterations, simplifying the build process for Linux and macOS, and eliminating problems identified during the TrueCrypt source code audit. The last official release of VeraCrypt 1.25.9 was published in February 2022. The code developed by the VeraCrypt project is distributed under the Apache 2.0 license, and borrowings from TrueCrypt continue to be delivered under the TrueCrypt 3.0 license. Ready-made builds are formed for Linux, FreeBSD, Windows, and macOS.

Among the changes in the new version::

* Added support for using bank smart cards that comply with the EMV standard as a key storage for accessing non-system partitions. EMV cards can be used in VeraCrypt without the need for separate configuration of the PKCS#11 module and without entering a PIN code. The contents of the key file are generated based on the unique data present on the map.

* Removed TrueCrypt compatibility mode. The latest version with support for mounting or converting TrueCrypt partitions is VeraCrypt 1.25.9.

* Completely removed support for the RIPEMD160 and GOST89 encryption algorithms. Partitions created using these algorithms can no longer be mounted using VeraCrypt.

• For standard and system encrypted partitions, it is possible to use a new pseudo-random sequence generation algorithm (PRF, Pseudo-Random Function) that uses the BLAKE2s hash function.

* Changes in the Linux version:

* Improved compatibility with the Alpine Linux distribution and the musl standard C library.

* Fixed compatibility issues with Ubuntu 23.04 and wxWidgets 3.1.6+.

* The version of the wxWidgets framework in static builds has been updated to 3.2.2.1.

* The implementation of the pseudo-random number generator corresponds to the official documentation and is similar in behavior to the Windows implementation.

* Fixed a bug in the pseudo-random number generator that caused test execution to fail when using the Blake2s algorithm.

* Fixed issues with running the fsck utility.

* Fixed an issue with selecting the wrong size for hidden partitions when using the full disk space usage mode.

Fixed a crash when creating hidden partitions via the command-line interface.

* Fixed errors in the text mode of the interface. It is forbidden to select exFAT and BTRFS file systems if they are not compatible with the partitions being created.

* Improved compatibility with classic installers of older Linux distributions.

* Implemented a recommendation to add an additional check that excludes whether the primary and secondary keys match when creating partitions. Due to the use of a pseudorandom number generator when generating keys, key matching is unlikely, and verification is added rather to completely exclude hypothetical attacks.

* In builds for the Windows platform, memory protection mode is enabled by default, which prohibits reading the contents of VeraCrypt memory by processes that do not have administrator privileges (this may affect compatibility with screen readers). Added protection against code substitution in VeraCrypt memory by other processes. Improved implementation of memory encryption and fast file container creation mode. EFI Bootloader improves support for the original Windows bootloader in crash recovery mode. An option to mount without using the cache has been added to the menu. Fixed problems with increasing slow-down of Encrypt-In-Place encryption in large partitions. Expander adds support for moving files and keys in drag&drop mode. A more modern file and directory selection dialog is used, which is better combined with Windows 11. The safe DLL loading mode is improved.

* Discontinued support for older versions of Windows. The minimum supported version is Windows 10. Theoretically, VeraCrypt can still run on Windows 7 and Windows 8/8. 1, but it is no longer tested correctly on these platforms.

 

[CarderPlanet]

More security with new technologies and smart cards.

After a year and a half of work, a new version of VeraCrypt 1.26 was introduced. The project is a continuation of the TrueCrypt disk partition encryption system, which has ceased to exist. VeraCrypt switched from the RIPEMD-160 algorithm used in TrueCrypt to SHA-512 and SHA-256. The number of hash iterations has also been increased, compilation for Linux and macOS has been simplified, and errors found during the TrueCrypt source audit have been fixed. The previous release of VeraCrypt 1.25.9 is dated February 2022. VeraCrypt code is distributed under the Apache 2.0 license, while elements borrowed from TrueCrypt are licensed under the TrueCrypt 3.0 License. The program is available for Linux, FreeBSD, Windows, and macOS.

The new version includes the following changes:

• Added support for using bank smart cards of the EMV standard for storing keys for accessing non-system partitions. EMV cards work in VeraCrypt without setting up PKCS#11 and entering a PIN code. The contents of the key file are generated based on the unique data present on the map.
• Removed TrueCrypt compatibility mode. The latest version with support for mounting or converting TrueCrypt partitions is VeraCrypt 1.25.9.
• Removed support for the RIPEMD160 and GOST89 encryption algorithms. Partitions created using these algorithms can no longer be mounted using VeraCrypt.
• Ability to use the new pseudo-random sequence generation algorithm (PRF, Pseudo-Random Function) with the BLAKE2s hash function for standard and system partitions.
• Changes for Linux:
  • Improved compatibility with Alpine Linux and the musl C library.
  • Fixed compatibility issues with Ubuntu 23.04 and wxWidgets 3.1.6+.
  • Updated the wxWidgets framework version to 3.2.2.1 in static builds.
  • The implementation of the pseudorandom number generator corresponds to the official documentation and is similar in behavior to the Windows implementation.
  • Fixed bugs in the pseudo-random number generator that caused test execution to fail when using the Blake2s algorithm..
  • Fixed issues with running fsck.
  • Fixed an issue with selecting the wrong size for hidden partitions when using the full disk space usage mode.
  • Fixed a crash when creating hidden partitions via the command line.
  • Fixed errors in the text mode of the interface. It is forbidden to select exFAT and BTRFS file systems if they are not compatible with the partitions being created.
  • Improved compatibility with classic installers of older Linux distributions
  • Implemented a recommendation to add an additional check that excludes whether the primary and secondary keys match when creating partitions
• Windows versions now have a mode enabled by default that blocks access to VeraCrypt memory for processes without administrator rights (this can cause problems with screen readers). Protection against third-party code injection into VeraCrypt memory has also been strengthened. Memory encryption methods and the process of creating file containers are optimized. EFI Bootloader improves working with the standard Windows bootloader after unsuccessful launches. A non-cached mount option has been added to the menu. Fixed problems with increasing slow-down of Encrypt-In-Place encryption in large partitions. Expander adds support for moving files and keys in drag&drop mode. A more modern file and directory selection dialog is used, which is better combined with Windows 11. The safe DLL loading mode is improved.
• Support for legacy versions of Windows has been discontinued. The minimum supported version is now Windows 10. Although VeraCrypt can theoretically run on Windows 7 and 8/8. 1, health checks are no longer performed on these systems.

 

[CarderPlanet]

VeraCrypt 1.26.7 Update: New Security Features and the end of the TrueCrypt Era

Bank card protection, BLAKE2 algorithm support, and other features - what does the new version of VeraCrypt hide?

After more than 18 months of development, the VeraCrypt team has released a major update to its open source encryption software, releasing version 1.26.7. The update includes a number of important changes that may affect backward compatibility, especially for users who switched to VeraCrypt from TrueCrypt, a previous encryption project that was discontinued under questionable circumstances.

Here is a list of key updates and innovations in VeraCrypt version 1.26.7:

1. Removing TrueCrypt mode support, which means that VeraCrypt 1.26.7 and later versions no longer allow you to mount TrueCrypt volumes.
2. Removed support for the RIPEMD160 and GOST89 algorithms, making it impossible to mount volumes that use these algorithms in VeraCrypt 1.26.7 and later versions. The developers recommended using the previous version 1.25.9 to convert volumes before upgrading to version 1.26.7.
3. Support for EMV bank smart cards as key files for non-system volumes. The EMV standard was developed by Europay, MasterCard and Visa for secure payments using credit, debit and prepaid cards. VeraCrypt supports all bank cards that comply with the EMV standard, without the need to enter a PIN code or a separate configuration of the PKCS#11 module.
4. Introduction of support for the PRF BLAKE2s algorithm for encrypting standard and system volumes, which provides a fast and secure hashing method. BLAKE2 is a cryptographic hash function that developers claim is faster than MD5, SHA-1, SHA-2, and SHA-3,
5. Improved memory protection by default on Windows – non-administrative processes are blocked from reading VeraCrypt memory.
6. Introducing a new process mitigation policy on Windows to prevent VeraCrypt injections from other processes.
7. Fixed a secure desktop issue in Windows 11 version 22H2.
8. Improved compatibility with Ubuntu 23.04.
9. Fixed a number of issues when working in text mode on Linux systems.

The added changes make version 1.26.7 a significant step forward in the development of VeraCrypt. Thanks to the support of EMV bank smart cards and the introduction of the new PRF BLAKE2s algorithm, users will receive more advanced and secure methods for encrypting their data.