5333 private links
On December 10th 2020, Germany's Federal Office for Information Security (BSI) published the English report of a security evaluation of VeraCrypt that they ordered from the Fraunhofer Institute for Secure Information Technology (SIT).
The report can be found at the following URL: https://www.bsi.bund.de/DE/Publikationen/Studien/VeraCrypt/veracrypt.html
I have also attached the PDF of the report to this post in case URL changes in the future.
Before the publication of this report, the SIT team responsible of the security evaluation reached out to us and we had exchanges about their findings. I shared my feedback and I also implemented changes in 1.24-Update7 based on their findings.
In my opinion, this evaluation is the most comprehensive one that have been published so far about VeraCrypt, spanning over a year and analyzing all aspects of the project and the source code. Their findings are helpful and VeraCrypt development will benefit from them.