Git repository
A mirror of the repository is available on github.
A library that implements the Sanctum protocol can be found here.
Releases
Stable releases are distributed as source tarballs and can be found below. Only this website distributes release tarballs for sanctum, do not download release tarballs from other sites.
1.4.0 (live from sec-t)
sanctum-1.4.0.tgz (3.5MB)
released: 2026-09-11
sha256: f38874300689e72eecc0857f4063b5255bd4348acd6534aef42999f1b1a70e3d
Highlights
- Added commixtion, which mixes incoming data packets between cathedrals with multiple hops.
- Improved how hymn list output looks like to make it more readable at a glance.
- Improved MTU discovery and updated configuration settings for it.
- Fallback openssl-aes-gcm backend for platforms without libsodium or mbedtls.
- Liturgies now alter /etc/hosts to add the tunnel-id or friendly name of a tunnel so they can be resolved when the tunnels are up.
- Changed how cathedral federations are reloaded.
- Cathedrals now remove out-of-date or bad ambry files on reload.
- Small fixes for the improvement of overall code quality.
- Fixed logging on MacoS due to the sandbox being in the way of syslog.
1.3.0
sanctum-1.3.0.tgz (3.3MB)
released: 2026-06-23
sha256: 2eb8b05485b98363e4cec108b7b0a6074f4b6ebd19ea42ebad1e39e41ae0082c
Highlights
- Shroud now randomly changes packet sizes.
- Shroud now covers entire packets, not just meta-data.
1.2.0
sanctum-1.2.0.tgz (3.3MB)
released: 2026-06-19
sha256: 3c01b8b43e4efa3b59d38242a4d20847ac6a287f2afd823e92415aaed68ef6c4
Highlights
- Added graces, a way of sending data between the heaven processes.
- Moved heartbeats away from bless/confess and into newly added graces.
- Added MTU discovery using the newly added graces. Set your MTU to "auto" to make use of it.
- Small code adjustments to improve overall code quality.
- Turn a PRECOND() in the cathedrals into a soft error instead.
1.1.2
sanctum-1.1.2.tgz (3.1MB)
released: 2026-05-29
sha256: d4b730626f317ddd8b74019e62b7720a7360228e332bf498124e161c46eedfbf
Highlights
- Small mbedtls-aes-gcm fixes.
- Adjust shroud mask to cover sanctum_proto_hdr.
1.1.1
sanctum-1.1.1.tgz (3.1MB)
released: 2026-05-19
sha256: f35d1721a7301df0491114c5548d0b2175d93fa877cbb93210e7324041e46d7d
Highlights
- More paranoia when procs exit, explicitly call nyfe_zeroize_all() and warn on linger sensitive assets.
- Hold back key exchanges for a minute if a peer does not answer, reduces packets on the wire a bit when the peer is not online.
- Fixed a missing sanctum_packet_release() in an error path in confess.
- Cathedrals can now signal to peers if they are behind the same external ip, paving the way for local discovery later.
- Cathedrals now only forget tunnels after 120 seconds, instead of 45.
- Cathedrals now only allow offers to be federated each 3 seconds, instead of 1.
1.1.0
sanctum-1.1.0.tgz (3.1MB)
released: 2026-04-15
sha256: 17ccba4f8d495f65beff5bfdfd8ebaaaba75ec0283874d8b17fc3ada9fd8b3e6
Highlights
- New shroud functionality, replacing encapsulation. A shroud will mask away protocol meta-data with unique per-client traffic protection keys making traffic analysis much harder.
Packages
Packages exist for the following distributions: