Compliance with Standards and Specifications
To our best knowledge, VeraCrypt complies with the following standards, specifications, and
recommendations:
ISO/IEC 10118-3:2004 [21]
FIPS 197 [3]
FIPS 198 [22]
FIPS 180-2 [14]
FIPS 140-2 (XTS-AES, SHA-256, SHA-512, HMAC) [25]
NIST SP 800-38E [24]
PKCS #5 v2.0 [7]
PKCS #11 v2.20 [23]
The correctness of the implementations of the encryption algorithms can be verified using test
vectors (select Tools > Test Vectors) or by examining the source code of VeraCrypt.
Source Code
VeraCrypt is open-source and free software. The complete source code of VeraCrypt (written in C,
C++, and assembly) is freely available for peer review at:
https://veracrypt.codeplex.com/SourceControl/latest
https://sourceforge.net/p/veracrypt/code/ci/master/tree/
https://github.com/veracrypt/VeraCrypt
https://bitbucket.org/veracrypt/veracrypt/src
The source code of each release can be downloaded from the same location as the release binaries.
157