After a year of development, the release of VeraCrypt 1.25.4 has been published. This project is a fork of the disk encryption system TrueCrypt, which has ceased to exist. The code developed by VeraCrypt is distributed under the Apache 2.0 license, while contributions from TrueCrypt continue to be provided under the TrueCrypt License 3.0. Ready builds are available for Linux, FreeBSD, Windows, and macOS.
VeraCrypt is notable for replacing the RIPEMD-160 algorithm used in TrueCrypt with SHA-512 and SHA-256, increasing the number of hash iterations, simplifying the build process for Linux and macOS, and addressing issues identified during the TrueCrypt source code audit. Additionally, VeraCrypt provides compatibility mode with TrueCrypt volumes and includes tools for converting TrueCrypt volumes to VeraCrypt format.
The new version offers about 40 changes, including:
- Support for the OpenBSD platform has been added.
- A ‘—size=max’ option has been added to the command-line utility to allocate all available free disk space for the encrypted container. A similar setting has been added to the configuration interface.
- Error output is provided when an unknown file system is specified in the ‘—filesystem’ option, instead of ignoring the file system creation stage.
- In Linux, support for text translations in the user interface has been enabled. The interface language is selected based on the LANG environment variable, and translation files are stored in XML format.
- Compatibility with the PAM module pam_tmpdir has been ensured in Linux.
- In Ubuntu 18.04 and newer releases, the VeraCrypt icon is displayed in the notification area.
- In FreeBSD, encryption of system devices has been implemented.
- Performance optimization of the Streebog cryptographic hash function (GOST 34.11-2018) has been conducted.
- In Windows builds, support for devices based on the ARM64 architecture (Microsoft Surface Pro X) has been added, but system partition encryption for them is not yet supported. Support for Windows Vista, Windows 7, Windows 8, and Windows 8.1 has been discontinued. An installer in MSI format has been added. Windows-specific memory operation errors have been fixed. Protected versions of the functions wcscpy, wcscat, and strcpy have been utilized.
Source: opennet.ru
