diff --git a/ChangeLog.adoc b/ChangeLog.adoc
index 7474d3a91..0d18a5a64 100644
--- a/ChangeLog.adoc
+++ b/ChangeLog.adoc
@@ -27,6 +27,7 @@ New features::
   * core: add options weechat.buffer.* to save buffer properties set by user, add option `setauto` in command `/buffer` (issue #352)
   * core: add parameters and key bindings to move to edges of current area with commands `/cursor go` and `/cursor move` (issue #1282)
   * core: add variables "_chat_focused_line_bol" and "_chat_focused_line_eol" in focus data (issue #1955)
+  * core: add algorithms `sha512-224`, `sha512-256`, `sha3-*`, blake2b-*` and `blake2s-*` in option sec.crypt.hash_algo (issue #2008)
   * api: add algorithms `sha512-224`, `sha512-256`, blake2b-*` and `blake2s-*` in hash functions (issue #2008)
   * api: add support of path to variable and hashtable comparison in function hdata_compare (issue #1066)
   * api: add infos "nick_color_ignore_case" and "nick_color_name_ignore_case" (issue #194)
diff --git a/po/cs.po b/po/cs.po
index b47434bf7..4cfe2af5c 100644
--- a/po/cs.po
+++ b/po/cs.po
@@ -21,7 +21,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2023-09-12 15:06+0200\n"
+"POT-Creation-Date: 2023-09-13 15:09+0200\n"
 "PO-Revision-Date: 2023-09-06 19:13+0200\n"
 "Last-Translator: Ondřej Súkup <mimi.vx@gmail.com>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -845,13 +845,26 @@ msgstr "Zde nejsou šifrovaná data"
 msgid "All encrypted data has been deleted"
 msgstr "Všechna šifrovaná data byla smazána"
 
-msgid "Encrypted data has been successfully decrypted"
-msgstr "Šifrovaná data byly úspěšně dešifrována"
+#, c-format
+msgid ""
+"%sFailed to decrypt data: hash algorithm \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
 
 #, c-format
-msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid ""
+"%sFailed to decrypt data: cipher \"%s\" is not available (ligbcrypt version "
+"is too old?)"
+msgstr ""
+
+#, fuzzy, c-format
+#| msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid "%sFailed to decrypt data: wrong passphrase?"
 msgstr "%sNepovedlo se dešifrovat data (špatné heslo?)"
 
+msgid "Encrypted data has been successfully decrypted"
+msgstr "Šifrovaná data byly úspěšně dešifrována"
+
 #, c-format
 msgid ""
 "%sYou must decrypt data still encrypted before doing any operation on "
@@ -4840,6 +4853,12 @@ msgstr "heslo pro proxy server(pozn.: obsah je vykonán, viz /help eval)"
 msgid "WeeChat secured data (sec.conf) | Keys: [alt-v] Toggle values"
 msgstr "Chráněná data WeeChatu (sec.conf) | Klávesy: [alt-v] Přepnou hodnoty"
 
+#. TRANSLATORS: "hash algorithm not supported"
+#, fuzzy
+#| msgid "log not started"
+msgid "not supported"
+msgstr "logování nebylo spuštěno"
+
 msgid "on"
 msgstr "na"
 
@@ -4884,10 +4903,27 @@ msgid ""
 "secure decrypt, see /help secure)"
 msgstr ""
 
+#, c-format
+msgid ""
+"%sOption %s.%s.%s can not be changed because there are still encrypted data"
+msgstr ""
+
 #, c-format
 msgid "%sPassphrase is not set, unable to decrypt data \"%s\""
 msgstr "%sHeslo není nastaveno, nejde dešifrovat data \"%s\""
 
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, c-format
 msgid "%sWrong passphrase, unable to decrypt data \"%s\""
 msgstr "%sŠpatné heslo, nemohu dešifrovat údaje \"%s\""
@@ -4896,8 +4932,20 @@ msgstr "%sŠpatné heslo, nemohu dešifrovat údaje \"%s\""
 msgid "*** Wrong passphrase (decrypt error: %s) ***"
 msgstr "*** Špatné heslo (chyba dešifrování %s) ***"
 
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, fuzzy, c-format
-msgid "%sError encrypting data \"%s\" (%d)"
+msgid "%sFailed to encrypt data \"%s\" (%d)"
 msgstr "%sChyba odesílání signálu %d na pid %d: %s"
 
 msgid ""
@@ -4907,8 +4955,11 @@ msgstr ""
 "šifra použitá k šifrování dat (číslo za algoritmem je velikost klíče v "
 "bitech)"
 
-msgid "hash algorithm used to check the decrypted data"
-msgstr "hash algoritmus použitý ke kontrole dešifrovaných dat"
+msgid ""
+"hash algorithm used to check the decrypted data; some of them require a "
+"specific libgcrypt version: sha3-*: libgcrypt >= 1.7.0, blake2*: libgcrypt "
+">= 1.8.0, sha512-*: libgcrypt >= 1.9.4"
+msgstr ""
 
 msgid ""
 "read the passphrase from the output of this system command (only the first "
@@ -14599,3 +14650,6 @@ msgstr "%s%s: vypršel časový limit \"%s\" pro %s"
 #, c-format
 msgid "%s%s: unable to connect: unexpected error (%d)"
 msgstr "%s%s: nemohu se připojit\" neočekávaná chyba (%d)"
+
+#~ msgid "hash algorithm used to check the decrypted data"
+#~ msgstr "hash algoritmus použitý ke kontrole dešifrovaných dat"
diff --git a/po/de.po b/po/de.po
index f41ff5122..82531547a 100644
--- a/po/de.po
+++ b/po/de.po
@@ -26,7 +26,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2023-09-12 15:06+0200\n"
+"POT-Creation-Date: 2023-09-13 15:09+0200\n"
 "PO-Revision-Date: 2023-09-13 10:19+0200\n"
 "Last-Translator: Nils Görs <weechatter@arcor.de>\n"
 "Language-Team: German <kde-i18n-de@kde.org>\n"
@@ -872,13 +872,26 @@ msgstr "Es liegen keine verschlüsselten Daten vor"
 msgid "All encrypted data has been deleted"
 msgstr "Alle verschlüsselten Daten wurden gelöscht"
 
-msgid "Encrypted data has been successfully decrypted"
-msgstr "Die verschlüsselten Daten wurden erfolgreich entschlüsselt"
+#, c-format
+msgid ""
+"%sFailed to decrypt data: hash algorithm \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
 
 #, c-format
-msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid ""
+"%sFailed to decrypt data: cipher \"%s\" is not available (ligbcrypt version "
+"is too old?)"
+msgstr ""
+
+#, fuzzy, c-format
+#| msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid "%sFailed to decrypt data: wrong passphrase?"
 msgstr "%sFehler beim Entschlüsseln der Daten (falsche Passphrase?)"
 
+msgid "Encrypted data has been successfully decrypted"
+msgstr "Die verschlüsselten Daten wurden erfolgreich entschlüsselt"
+
 #, c-format
 msgid ""
 "%sYou must decrypt data still encrypted before doing any operation on "
@@ -5739,12 +5752,10 @@ msgstr ""
 "%sEs ist ein Fehler beim Speichern der Konfigurationsdatei \"%s\" aufgetreten"
 
 #, c-format
-#| msgid "%s: server %s%s%s has been copied to %s%s%s"
 msgid "%sFile %s has been backed up as %s"
 msgstr "%sFür Datei %s wurde eine Sicherheitskopie %s erstellt"
 
 #, c-format
-#| msgid "%s%s: unable to load file \"%s\""
 msgid "%sError: unable to backup file %s"
 msgstr "%sFehler: Für die Datei %s konnte keine Sicherung geschrieben werden"
 
@@ -6060,6 +6071,12 @@ msgstr ""
 "WeeChat schutzwürdigen Daten (sec.conf) | Tastenbefehle: [alt-v] Werte "
 "umschalten"
 
+#. TRANSLATORS: "hash algorithm not supported"
+#, fuzzy
+#| msgid "log not started"
+msgid "not supported"
+msgstr "Protokollierung wurde nicht gestartet"
+
 msgid "on"
 msgstr "an"
 
@@ -6109,12 +6126,29 @@ msgstr ""
 "%sDie Datei sec.conf kann nicht erneut geladen werden, da noch "
 "verschlüsselte Daten vorliegen (nutze /secure decrypt, siehe /help secure)"
 
+#, c-format
+msgid ""
+"%sOption %s.%s.%s can not be changed because there are still encrypted data"
+msgstr ""
+
 #, c-format
 msgid "%sPassphrase is not set, unable to decrypt data \"%s\""
 msgstr ""
 "%sPassphrase wurde nicht angegeben, Variable \"%s\" kann nicht entschlüsselt "
 "werden"
 
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, c-format
 msgid "%sWrong passphrase, unable to decrypt data \"%s\""
 msgstr ""
@@ -6125,7 +6159,20 @@ msgid "*** Wrong passphrase (decrypt error: %s) ***"
 msgstr "*** Passphrase falsch (Fehler bei Entschlüsselung: %s) ***"
 
 #, c-format
-msgid "%sError encrypting data \"%s\" (%d)"
+msgid ""
+"%sFailed to encrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
+#, fuzzy, c-format
+#| msgid "%sError encrypting data \"%s\" (%d)"
+msgid "%sFailed to encrypt data \"%s\" (%d)"
 msgstr "%sFehler beim Verschlüsseln von \"%s\" (%d)"
 
 msgid ""
@@ -6135,8 +6182,11 @@ msgstr ""
 "zu nutzendes Chiffre zum Verschlüsseln von Daten (die Zahl hinter dem "
 "Algorithmus bestimmt die Größe des Schlüssels, in Bits)"
 
-msgid "hash algorithm used to check the decrypted data"
-msgstr "Hash-Algorithmus zur Überprüfung der verschlüsselten Daten"
+msgid ""
+"hash algorithm used to check the decrypted data; some of them require a "
+"specific libgcrypt version: sha3-*: libgcrypt >= 1.7.0, blake2*: libgcrypt "
+">= 1.8.0, sha512-*: libgcrypt >= 1.9.4"
+msgstr ""
 
 msgid ""
 "read the passphrase from the output of this system command (only the first "
@@ -16553,8 +16603,7 @@ msgstr "verwaltet Trigger, das Schweizer Armeemesser für WeeChat"
 msgid ""
 "list [-o|-ol|-i|-il] || listfull || listdefault || add|addoff|addreplace "
 "<name> <hook> "
-"[\"<arguments>\" [\"<conditions>\" [\"<regex>\" [\"<command>\" [\"<"
-"return_code>\" [\"<post_action>\"]]]]]] "
+"[\"<arguments>\" [\"<conditions>\" [\"<regex>\" [\"<command>\" [\"<return_code>\" [\"<post_action>\"]]]]]] "
 "|| addinput [<hook>] || input|output|recreate <name> || set <name> <option> "
 "<value> || rename|copy <name> <new_name> || enable|disable|toggle [<name>|-"
 "all [<name>...]] || restart <name>|-all [<name>...] || show <name> || del "
@@ -16563,8 +16612,7 @@ msgid ""
 msgstr ""
 "list [-o|-ol|-i|-il] || listfull || listdefault || add|addoff|addreplace "
 "<name> <hook> "
-"[\"<arguments>\" [\"<conditions>\" [\"<regex>\" [\"<command>\" [\"<"
-"return_code>\" [\"<post_action>\"]]]]]] "
+"[\"<arguments>\" [\"<conditions>\" [\"<regex>\" [\"<command>\" [\"<return_code>\" [\"<post_action>\"]]]]]] "
 "|| addinput [<hook>] || input|output|recreate <name> || set <name> <option> "
 "<value> || rename|copy <name> <new_name> || enable|disable|toggle [<name>|-"
 "all [<name>...]] || restart <name>|-all [<name>...] || show <name> || del "
@@ -17492,3 +17540,6 @@ msgstr "%s%s: Zeitüberschreitung für \"%s\" mit %s"
 msgid "%s%s: unable to connect: unexpected error (%d)"
 msgstr ""
 "%s%s: Verbindung konnte nicht hergestellt werden: unerwarteter Fehler (%d)"
+
+#~ msgid "hash algorithm used to check the decrypted data"
+#~ msgstr "Hash-Algorithmus zur Überprüfung der verschlüsselten Daten"
diff --git a/po/es.po b/po/es.po
index 77efe375e..5085fd2c9 100644
--- a/po/es.po
+++ b/po/es.po
@@ -22,7 +22,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2023-09-12 15:06+0200\n"
+"POT-Creation-Date: 2023-09-13 15:09+0200\n"
 "PO-Revision-Date: 2023-09-06 19:13+0200\n"
 "Last-Translator: Santiago Forero <santiago@forero.xyz>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -901,13 +901,26 @@ msgstr "No hay datos encriptados"
 msgid "All encrypted data has been deleted"
 msgstr "Todos los datos encriptados fueron eliminados"
 
-msgid "Encrypted data has been successfully decrypted"
-msgstr "Los datos encriptados fueron desencriptados"
+#, c-format
+msgid ""
+"%sFailed to decrypt data: hash algorithm \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
 
 #, c-format
-msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid ""
+"%sFailed to decrypt data: cipher \"%s\" is not available (ligbcrypt version "
+"is too old?)"
+msgstr ""
+
+#, fuzzy, c-format
+#| msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid "%sFailed to decrypt data: wrong passphrase?"
 msgstr "%s Error al desencriptar datos (¿passphrase incorrecta?)"
 
+msgid "Encrypted data has been successfully decrypted"
+msgstr "Los datos encriptados fueron desencriptados"
+
 #, c-format
 msgid ""
 "%sYou must decrypt data still encrypted before doing any operation on "
@@ -5470,6 +5483,12 @@ msgstr ""
 msgid "WeeChat secured data (sec.conf) | Keys: [alt-v] Toggle values"
 msgstr ""
 
+#. TRANSLATORS: "hash algorithm not supported"
+#, fuzzy
+#| msgid "log not started"
+msgid "not supported"
+msgstr "registro no iniciado"
+
 msgid "on"
 msgstr "activo"
 
@@ -5509,10 +5528,27 @@ msgid ""
 "secure decrypt, see /help secure)"
 msgstr ""
 
+#, c-format
+msgid ""
+"%sOption %s.%s.%s can not be changed because there are still encrypted data"
+msgstr ""
+
 #, c-format
 msgid "%sPassphrase is not set, unable to decrypt data \"%s\""
 msgstr ""
 
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, fuzzy, c-format
 msgid "%sWrong passphrase, unable to decrypt data \"%s\""
 msgstr "%sError: no se puede desplazar la barra \"%s\""
@@ -5521,8 +5557,20 @@ msgstr "%sError: no se puede desplazar la barra \"%s\""
 msgid "*** Wrong passphrase (decrypt error: %s) ***"
 msgstr ""
 
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, fuzzy, c-format
-msgid "%sError encrypting data \"%s\" (%d)"
+msgid "%sFailed to encrypt data \"%s\" (%d)"
 msgstr "%s%s: error al crear el alias \"%s\" => \"%s\""
 
 msgid ""
@@ -5530,7 +5578,10 @@ msgid ""
 "in bits)"
 msgstr ""
 
-msgid "hash algorithm used to check the decrypted data"
+msgid ""
+"hash algorithm used to check the decrypted data; some of them require a "
+"specific libgcrypt version: sha3-*: libgcrypt >= 1.7.0, blake2*: libgcrypt "
+">= 1.8.0, sha512-*: libgcrypt >= 1.9.4"
 msgstr ""
 
 msgid ""
diff --git a/po/fr.po b/po/fr.po
index 956a5c1d1..dd1e9b74b 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -21,8 +21,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2023-09-12 15:06+0200\n"
-"PO-Revision-Date: 2023-09-12 15:07+0200\n"
+"POT-Creation-Date: 2023-09-13 15:07+0200\n"
+"PO-Revision-Date: 2023-09-13 15:07+0200\n"
 "Last-Translator: Sébastien Helleu <flashcode@flashtux.org>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
 "Language: fr\n"
@@ -854,13 +854,29 @@ msgstr "Il n'y a pas de donnée chiffrée"
 msgid "All encrypted data has been deleted"
 msgstr "Toutes les données chiffrées ont été supprimées"
 
-msgid "Encrypted data has been successfully decrypted"
-msgstr "La donnée chiffrée a été déchiffrée avec succès"
+#, c-format
+msgid ""
+"%sFailed to decrypt data: hash algorithm \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+"%sImpossible de déchiffrer les données : l'algorithme de hash \"%s\" n'est "
+"pas disponible (version de ligbcrypt trop ancienne ?)"
 
 #, c-format
-msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid ""
+"%sFailed to decrypt data: cipher \"%s\" is not available (ligbcrypt version "
+"is too old?)"
 msgstr ""
-"%sImpossible de déchiffrer la donnée (mauvaise phrase de chiffrement ?)"
+"%sImpossible de chiffrer les données : le chiffrement (\"cipher\") \"%s\" "
+"n'est pas disponible (version de ligbcrypt trop ancienne ?)"
+
+#, c-format
+msgid "%sFailed to decrypt data: wrong passphrase?"
+msgstr ""
+"%sImpossible de déchiffrer les données : mauvaise phrase de chiffrement ?"
+
+msgid "Encrypted data has been successfully decrypted"
+msgstr "La donnée chiffrée a été déchiffrée avec succès"
 
 #, c-format
 msgid ""
@@ -5933,6 +5949,10 @@ msgstr ""
 "Données sécurisées WeeChat (sec.conf) | Touches : [alt-v] Afficher/cacher "
 "les valeurs"
 
+#. TRANSLATORS: "hash algorithm not supported"
+msgid "not supported"
+msgstr "non supporté"
+
 msgid "on"
 msgstr "activé"
 
@@ -5982,12 +6002,35 @@ msgstr ""
 "%sImpossible de recharger le fichier sec.conf car il y a des données "
 "toujours chiffrées (utilisez /secure decrypt, voir /help secure)"
 
+#, c-format
+msgid ""
+"%sOption %s.%s.%s can not be changed because there are still encrypted data"
+msgstr ""
+"%sL'option %s.%s.%s ne peut pas être modifiée car il y a encore des données "
+"chiffrées"
+
 #, c-format
 msgid "%sPassphrase is not set, unable to decrypt data \"%s\""
 msgstr ""
 "%sPhrase de chiffrement non définie, impossible de déchiffrer la donnée "
 "\"%s\""
 
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+"%sImpossible de déchiffrer la donnée \"%s\" : l'algorithme de hash \"%s\" "
+"n'est pas disponible (version de ligbcrypt trop ancienne ?)"
+
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+"%sImpossible de déchiffrer la donnée \"%s\" : le chiffrement (\"cipher\") "
+"\"%s\" n'est pas disponible (version de ligbcrypt trop ancienne ?)"
+
 #, c-format
 msgid "%sWrong passphrase, unable to decrypt data \"%s\""
 msgstr ""
@@ -5998,8 +6041,24 @@ msgid "*** Wrong passphrase (decrypt error: %s) ***"
 msgstr "*** Mauvaise phrase de chiffrement (erreur de déchiffrement : %s) ***"
 
 #, c-format
-msgid "%sError encrypting data \"%s\" (%d)"
-msgstr "%sErreur de chiffrement de la donnée \"%s\" (%d)"
+msgid ""
+"%sFailed to encrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+"%sImpossible de chiffrer la donnée \"%s\" : l'algorithme de hash \"%s\" "
+"n'est pas disponible (version de ligbcrypt trop ancienne ?)"
+
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+"%sImpossible de chiffrer la donnée \"%s\" : le chiffrement (\"cipher\") "
+"\"%s\" n'est pas disponible (version de ligbcrypt trop ancienne ?)"
+
+#, c-format
+msgid "%sFailed to encrypt data \"%s\" (%d)"
+msgstr "%sImpossible de chiffrer la donnée \"%s\" (%d)"
 
 msgid ""
 "cipher used to crypt data (the number after algorithm is the size of the key "
@@ -6008,8 +6067,14 @@ msgstr ""
 "chiffrement (\"cipher\") utilisé pour chiffrer les données (le nombre après "
 "l'algorithme est la taille de la clé en bits)"
 
-msgid "hash algorithm used to check the decrypted data"
-msgstr "algorithme de hash pour vérifier les données déchiffrées"
+msgid ""
+"hash algorithm used to check the decrypted data; some of them require a "
+"specific libgcrypt version: sha3-*: libgcrypt >= 1.7.0, blake2*: libgcrypt "
+">= 1.8.0, sha512-*: libgcrypt >= 1.9.4"
+msgstr ""
+"algorithme de hash pour vérifier les données déchiffrées ; certains "
+"nécessitent une version spécifique de libgcrypt : sha3-* : libgcrypt >= "
+"1.7.0, blake2* : libgcrypt >= 1.8.0, sha512-* : libgcrypt >= 1.9.4"
 
 msgid ""
 "read the passphrase from the output of this system command (only the first "
diff --git a/po/hu.po b/po/hu.po
index a20afbd23..0bacc5bb0 100644
--- a/po/hu.po
+++ b/po/hu.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2023-09-12 15:06+0200\n"
+"POT-Creation-Date: 2023-09-13 15:09+0200\n"
 "PO-Revision-Date: 2023-09-06 19:13+0200\n"
 "Last-Translator: Andras Voroskoi <voroskoi@frugalware.org>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -822,11 +822,23 @@ msgstr ""
 msgid "All encrypted data has been deleted"
 msgstr "a felhasználók le lettek tiltva"
 
-msgid "Encrypted data has been successfully decrypted"
+#, c-format
+msgid ""
+"%sFailed to decrypt data: hash algorithm \"%s\" is not available (ligbcrypt "
+"version is too old?)"
 msgstr ""
 
 #, c-format
-msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid ""
+"%sFailed to decrypt data: cipher \"%s\" is not available (ligbcrypt version "
+"is too old?)"
+msgstr ""
+
+#, c-format
+msgid "%sFailed to decrypt data: wrong passphrase?"
+msgstr ""
+
+msgid "Encrypted data has been successfully decrypted"
 msgstr ""
 
 #, c-format
@@ -4380,6 +4392,12 @@ msgstr ""
 msgid "WeeChat secured data (sec.conf) | Keys: [alt-v] Toggle values"
 msgstr ""
 
+#. TRANSLATORS: "hash algorithm not supported"
+#, fuzzy
+#| msgid "not connected"
+msgid "not supported"
+msgstr "nincs csatlakozva"
+
 msgid "on"
 msgstr "be"
 
@@ -4419,10 +4437,27 @@ msgid ""
 "secure decrypt, see /help secure)"
 msgstr ""
 
+#, c-format
+msgid ""
+"%sOption %s.%s.%s can not be changed because there are still encrypted data"
+msgstr ""
+
 #, c-format
 msgid "%sPassphrase is not set, unable to decrypt data \"%s\""
 msgstr ""
 
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, fuzzy, c-format
 msgid "%sWrong passphrase, unable to decrypt data \"%s\""
 msgstr "%s nem sikerült a modul opciókat elmenteni\n"
@@ -4431,8 +4466,20 @@ msgstr "%s nem sikerült a modul opciókat elmenteni\n"
 msgid "*** Wrong passphrase (decrypt error: %s) ***"
 msgstr ""
 
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, fuzzy, c-format
-msgid "%sError encrypting data \"%s\" (%d)"
+msgid "%sFailed to encrypt data \"%s\" (%d)"
 msgstr "%s nincs elég memória az információs pult üzenethez\n"
 
 msgid ""
@@ -4440,7 +4487,10 @@ msgid ""
 "in bits)"
 msgstr ""
 
-msgid "hash algorithm used to check the decrypted data"
+msgid ""
+"hash algorithm used to check the decrypted data; some of them require a "
+"specific libgcrypt version: sha3-*: libgcrypt >= 1.7.0, blake2*: libgcrypt "
+">= 1.8.0, sha512-*: libgcrypt >= 1.9.4"
 msgstr ""
 
 msgid ""
diff --git a/po/it.po b/po/it.po
index aa087afeb..f920c4404 100644
--- a/po/it.po
+++ b/po/it.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2023-09-12 15:06+0200\n"
+"POT-Creation-Date: 2023-09-13 15:09+0200\n"
 "PO-Revision-Date: 2023-09-06 19:13+0200\n"
 "Last-Translator: Esteban I. Ruiz Moreno <exio4.com@gmail.com>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -816,13 +816,26 @@ msgstr "Non ci sono dati cifrati"
 msgid "All encrypted data has been deleted"
 msgstr "Tutti i dati cifrati sono stati eliminati"
 
-msgid "Encrypted data has been successfully decrypted"
-msgstr "I dati cifrati sono stati decifrati con successo"
+#, c-format
+msgid ""
+"%sFailed to decrypt data: hash algorithm \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
 
 #, c-format
-msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid ""
+"%sFailed to decrypt data: cipher \"%s\" is not available (ligbcrypt version "
+"is too old?)"
+msgstr ""
+
+#, fuzzy, c-format
+#| msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid "%sFailed to decrypt data: wrong passphrase?"
 msgstr "%sDecifratura dei dati non riuscita (chiave di cifratura sbagliata?)"
 
+msgid "Encrypted data has been successfully decrypted"
+msgstr "I dati cifrati sono stati decifrati con successo"
+
 #, c-format
 msgid ""
 "%sYou must decrypt data still encrypted before doing any operation on "
@@ -5115,6 +5128,12 @@ msgstr ""
 msgid "WeeChat secured data (sec.conf) | Keys: [alt-v] Toggle values"
 msgstr ""
 
+#. TRANSLATORS: "hash algorithm not supported"
+#, fuzzy
+#| msgid "log not started"
+msgid "not supported"
+msgstr "log non iniziato"
+
 msgid "on"
 msgstr "attivo"
 
@@ -5162,11 +5181,28 @@ msgstr ""
 "%sErrore: non è possibile ricaricare il file sec.conf poiché ci sono ancora "
 "dati decifrati (usare /secure decrypt, consultare /help secure)"
 
+#, c-format
+msgid ""
+"%sOption %s.%s.%s can not be changed because there are still encrypted data"
+msgstr ""
+
 #, c-format
 msgid "%sPassphrase is not set, unable to decrypt data \"%s\""
 msgstr ""
 "%sChiave di cifratura non impostata, impossibile decifrare i dati \"%s\""
 
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, c-format
 msgid "%sWrong passphrase, unable to decrypt data \"%s\""
 msgstr "%sChiave di cifratura errata, impossibile decifrare i dati \"%s\""
@@ -5176,7 +5212,20 @@ msgid "*** Wrong passphrase (decrypt error: %s) ***"
 msgstr "*** Chiave di cifratura errata (errore di decifratura: %s) ***"
 
 #, c-format
-msgid "%sError encrypting data \"%s\" (%d)"
+msgid ""
+"%sFailed to encrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
+#, fuzzy, c-format
+#| msgid "%sError encrypting data \"%s\" (%d)"
+msgid "%sFailed to encrypt data \"%s\" (%d)"
 msgstr "%sErrore nella cifratura dei dati \"%s\" (%d)"
 
 msgid ""
@@ -5184,7 +5233,10 @@ msgid ""
 "in bits)"
 msgstr ""
 
-msgid "hash algorithm used to check the decrypted data"
+msgid ""
+"hash algorithm used to check the decrypted data; some of them require a "
+"specific libgcrypt version: sha3-*: libgcrypt >= 1.7.0, blake2*: libgcrypt "
+">= 1.8.0, sha512-*: libgcrypt >= 1.9.4"
 msgstr ""
 
 msgid ""
diff --git a/po/ja.po b/po/ja.po
index 0dbd45eb3..c3a2ad0e4 100644
--- a/po/ja.po
+++ b/po/ja.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2023-09-12 15:06+0200\n"
+"POT-Creation-Date: 2023-09-13 15:09+0200\n"
 "PO-Revision-Date: 2023-09-06 19:13+0200\n"
 "Last-Translator: AYANOKOUZI, Ryuunosuke <i38w7i3@yahoo.co.jp>\n"
 "Language-Team: Japanese <https://github.com/l/weechat/tree/master/"
@@ -868,13 +868,26 @@ msgstr "暗号化されたデータはありません"
 msgid "All encrypted data has been deleted"
 msgstr "全ての暗号化されたデータを削除しました"
 
-msgid "Encrypted data has been successfully decrypted"
-msgstr "暗号化されたデータの復号に成功しました"
+#, c-format
+msgid ""
+"%sFailed to decrypt data: hash algorithm \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
 
 #, c-format
-msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid ""
+"%sFailed to decrypt data: cipher \"%s\" is not available (ligbcrypt version "
+"is too old?)"
+msgstr ""
+
+#, fuzzy, c-format
+#| msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid "%sFailed to decrypt data: wrong passphrase?"
 msgstr "%sデータの復号に失敗しました (パスフレーズが間違っているかも?)"
 
+msgid "Encrypted data has been successfully decrypted"
+msgstr "暗号化されたデータの復号に成功しました"
+
 #, c-format
 msgid ""
 "%sYou must decrypt data still encrypted before doing any operation on "
@@ -5757,6 +5770,12 @@ msgstr ""
 msgid "WeeChat secured data (sec.conf) | Keys: [alt-v] Toggle values"
 msgstr "WeeChat の保護データ (sec.conf) | キー: [alt-v] 値のトグル"
 
+#. TRANSLATORS: "hash algorithm not supported"
+#, fuzzy
+#| msgid "log not started"
+msgid "not supported"
+msgstr "ログ保存が開始されていません"
+
 msgid "on"
 msgstr "オン"
 
@@ -5807,10 +5826,27 @@ msgstr ""
 "%sエラー: 暗号化されたデータがあるため、sec.conf ファイルをリロードできませ"
 "ん (/help secure を参照し、/secure decrypt を利用してください)"
 
+#, c-format
+msgid ""
+"%sOption %s.%s.%s can not be changed because there are still encrypted data"
+msgstr ""
+
 #, c-format
 msgid "%sPassphrase is not set, unable to decrypt data \"%s\""
 msgstr "%sパスフレーズが設定されていません、データ \"%s\" の復号化ができません"
 
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, c-format
 msgid "%sWrong passphrase, unable to decrypt data \"%s\""
 msgstr "%sパスフレーズが違います、データ \"%s\" を復号化できません"
@@ -5820,7 +5856,20 @@ msgid "*** Wrong passphrase (decrypt error: %s) ***"
 msgstr "*** パスフレーズが違います (復号化エラー: %s) ***"
 
 #, c-format
-msgid "%sError encrypting data \"%s\" (%d)"
+msgid ""
+"%sFailed to encrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
+#, fuzzy, c-format
+#| msgid "%sError encrypting data \"%s\" (%d)"
+msgid "%sFailed to encrypt data \"%s\" (%d)"
 msgstr "%s データ \"%s\" (%d) を暗号化中にエラー"
 
 msgid ""
@@ -5829,8 +5878,11 @@ msgid ""
 msgstr ""
 "データの暗号化を行う暗号鍵 (アルゴリズムの後ろに書かれた数は鍵のビット数)"
 
-msgid "hash algorithm used to check the decrypted data"
-msgstr "復号化データをチェックするハッシュアルゴリズム"
+msgid ""
+"hash algorithm used to check the decrypted data; some of them require a "
+"specific libgcrypt version: sha3-*: libgcrypt >= 1.7.0, blake2*: libgcrypt "
+">= 1.8.0, sha512-*: libgcrypt >= 1.9.4"
+msgstr ""
 
 msgid ""
 "read the passphrase from the output of this system command (only the first "
@@ -16581,3 +16633,6 @@ msgstr "%s%s: \"%s\" のタイムアウト %s"
 #, c-format
 msgid "%s%s: unable to connect: unexpected error (%d)"
 msgstr "%s%s: 接続できません: 未定義のエラー (%d)"
+
+#~ msgid "hash algorithm used to check the decrypted data"
+#~ msgstr "復号化データをチェックするハッシュアルゴリズム"
diff --git a/po/pl.po b/po/pl.po
index 7a57bfe11..25f0d1c9e 100644
--- a/po/pl.po
+++ b/po/pl.po
@@ -22,7 +22,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2023-09-12 15:06+0200\n"
+"POT-Creation-Date: 2023-09-13 15:09+0200\n"
 "PO-Revision-Date: 2023-09-06 19:13+0200\n"
 "Last-Translator: Krzysztof Korościk <soltys@soltys.info>\n"
 "Language-Team: Polish <kde-i18n-doc@kde.org>\n"
@@ -884,13 +884,26 @@ msgstr "Nie ma zaszyfrowanych danych"
 msgid "All encrypted data has been deleted"
 msgstr "Wszystkie zaszyfrowane dane zostały usunięte"
 
-msgid "Encrypted data has been successfully decrypted"
-msgstr "Zaszyfrowane dane zostały pomyślnie odszyfrowane"
+#, c-format
+msgid ""
+"%sFailed to decrypt data: hash algorithm \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
 
 #, c-format
-msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid ""
+"%sFailed to decrypt data: cipher \"%s\" is not available (ligbcrypt version "
+"is too old?)"
+msgstr ""
+
+#, fuzzy, c-format
+#| msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid "%sFailed to decrypt data: wrong passphrase?"
 msgstr "%sNie udało się odszyfrować danych (złe hasło?)"
 
+msgid "Encrypted data has been successfully decrypted"
+msgstr "Zaszyfrowane dane zostały pomyślnie odszyfrowane"
+
 #, c-format
 msgid ""
 "%sYou must decrypt data still encrypted before doing any operation on "
@@ -6335,6 +6348,12 @@ msgstr ""
 "Zabezpieczone dane WeeChat (sec.conf) | Klawisze: [alt-v] Przełączają "
 "wartości"
 
+#. TRANSLATORS: "hash algorithm not supported"
+#, fuzzy
+#| msgid "log not started"
+msgid "not supported"
+msgstr "log nie uruchomiony"
+
 msgid "on"
 msgstr "włączone"
 
@@ -6385,10 +6404,27 @@ msgstr ""
 "%sNie można przeładować pliku sec.conf ponieważ znajdują się w nim "
 "zaszyfrowane dane (użyj /secure decrypt, zobacz /help secure)"
 
+#, c-format
+msgid ""
+"%sOption %s.%s.%s can not be changed because there are still encrypted data"
+msgstr ""
+
 #, c-format
 msgid "%sPassphrase is not set, unable to decrypt data \"%s\""
 msgstr "%sHasło nie jest ustawione, niemożna odszyfrować \"%s\""
 
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, c-format
 msgid "%sWrong passphrase, unable to decrypt data \"%s\""
 msgstr "%sZłe hasło, nie można rozszyfrować \"%s\""
@@ -6398,7 +6434,20 @@ msgid "*** Wrong passphrase (decrypt error: %s) ***"
 msgstr "*** Złe hasło (błąd odszyfrowywania: %s) ***"
 
 #, c-format
-msgid "%sError encrypting data \"%s\" (%d)"
+msgid ""
+"%sFailed to encrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
+#, fuzzy, c-format
+#| msgid "%sError encrypting data \"%s\" (%d)"
+msgid "%sFailed to encrypt data \"%s\" (%d)"
 msgstr "%sBłąd podczas szyfrowania \"%s\" (%d)"
 
 msgid ""
@@ -6408,8 +6457,11 @@ msgstr ""
 "szyfr używany do szyfrowania danych (numer za nazwą algorytmu to długość "
 "klucza w bitach)"
 
-msgid "hash algorithm used to check the decrypted data"
-msgstr "algorytm haszujący użyty do sprawdzenia rozszyfrowanych danych"
+msgid ""
+"hash algorithm used to check the decrypted data; some of them require a "
+"specific libgcrypt version: sha3-*: libgcrypt >= 1.7.0, blake2*: libgcrypt "
+">= 1.8.0, sha512-*: libgcrypt >= 1.9.4"
+msgstr ""
 
 msgid ""
 "read the passphrase from the output of this system command (only the first "
@@ -18171,3 +18223,6 @@ msgstr "%s%s: przekroczono czas na \"%s\" z %s"
 #, c-format
 msgid "%s%s: unable to connect: unexpected error (%d)"
 msgstr "%s%s: nie można połączyć: niespodziewany błąd (%d)"
+
+#~ msgid "hash algorithm used to check the decrypted data"
+#~ msgstr "algorytm haszujący użyty do sprawdzenia rozszyfrowanych danych"
diff --git a/po/pt.po b/po/pt.po
index bf5c42440..a086f9198 100644
--- a/po/pt.po
+++ b/po/pt.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2023-09-12 15:06+0200\n"
+"POT-Creation-Date: 2023-09-13 15:09+0200\n"
 "PO-Revision-Date: 2023-09-06 19:13+0200\n"
 "Last-Translator: Vasco Almeida <vascomalmeida@sapo.pt>\n"
 "Language-Team: Portuguese <>\n"
@@ -849,13 +849,26 @@ msgstr "Não há dados encriptados"
 msgid "All encrypted data has been deleted"
 msgstr "Todos os dados encriptados foram eliminados"
 
-msgid "Encrypted data has been successfully decrypted"
-msgstr "Os dados encriptados foram desencriptados com sucesso"
+#, c-format
+msgid ""
+"%sFailed to decrypt data: hash algorithm \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
 
 #, c-format
-msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid ""
+"%sFailed to decrypt data: cipher \"%s\" is not available (ligbcrypt version "
+"is too old?)"
+msgstr ""
+
+#, fuzzy, c-format
+#| msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid "%sFailed to decrypt data: wrong passphrase?"
 msgstr "%sFalha ao desencriptar os dados (frase de acesso incorreta?)"
 
+msgid "Encrypted data has been successfully decrypted"
+msgstr "Os dados encriptados foram desencriptados com sucesso"
+
 #, c-format
 msgid ""
 "%sYou must decrypt data still encrypted before doing any operation on "
@@ -5752,6 +5765,12 @@ msgstr ""
 "Dados protegidos do WeeChat (sec.conf) | Teclas: [alt-v] Mostrar/ocultar os "
 "valores"
 
+#. TRANSLATORS: "hash algorithm not supported"
+#, fuzzy
+#| msgid "log not started"
+msgid "not supported"
+msgstr "registo não iniciado"
+
 msgid "on"
 msgstr "ativado"
 
@@ -5802,12 +5821,29 @@ msgstr ""
 "%sErro: não é possível recarregar o ficheiro sec.conf porque ainda há dados "
 "encriptados (use /secure decrypt, ver /help secure)"
 
+#, c-format
+msgid ""
+"%sOption %s.%s.%s can not be changed because there are still encrypted data"
+msgstr ""
+
 #, c-format
 msgid "%sPassphrase is not set, unable to decrypt data \"%s\""
 msgstr ""
 "%sA frase de acesso não está definida, não é possível desencriptar os dados "
 "\"%s\""
 
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, c-format
 msgid "%sWrong passphrase, unable to decrypt data \"%s\""
 msgstr ""
@@ -5818,7 +5854,20 @@ msgid "*** Wrong passphrase (decrypt error: %s) ***"
 msgstr "*** Frase de acesso incorreta (erro ao desencriptar: %s) ***"
 
 #, c-format
-msgid "%sError encrypting data \"%s\" (%d)"
+msgid ""
+"%sFailed to encrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
+#, fuzzy, c-format
+#| msgid "%sError encrypting data \"%s\" (%d)"
+msgid "%sFailed to encrypt data \"%s\" (%d)"
 msgstr "%sErro ao encriptar os dados \"%s\" (%d)"
 
 msgid ""
@@ -5828,8 +5877,11 @@ msgstr ""
 "cifra utilizada para encriptar os dados (o número depois do algoritmo é o "
 "tamanho da chave em bits)"
 
-msgid "hash algorithm used to check the decrypted data"
-msgstr "algoritmo de hash utilizado para verificar os dados desencriptados"
+msgid ""
+"hash algorithm used to check the decrypted data; some of them require a "
+"specific libgcrypt version: sha3-*: libgcrypt >= 1.7.0, blake2*: libgcrypt "
+">= 1.8.0, sha512-*: libgcrypt >= 1.9.4"
+msgstr ""
 
 msgid ""
 "read the passphrase from the output of this system command (only the first "
@@ -16279,3 +16331,6 @@ msgstr "%s%s: tempo limite de \"%s\" com %s"
 #, c-format
 msgid "%s%s: unable to connect: unexpected error (%d)"
 msgstr "%s%s: não foi possível conectar: erro inesperado (%d)"
+
+#~ msgid "hash algorithm used to check the decrypted data"
+#~ msgstr "algoritmo de hash utilizado para verificar os dados desencriptados"
diff --git a/po/pt_BR.po b/po/pt_BR.po
index 023a3ddc3..cb4a7ee40 100644
--- a/po/pt_BR.po
+++ b/po/pt_BR.po
@@ -21,7 +21,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2023-09-12 15:06+0200\n"
+"POT-Creation-Date: 2023-09-13 15:09+0200\n"
 "PO-Revision-Date: 2023-09-06 19:13+0200\n"
 "Last-Translator: Érico Nogueira <ericonr@disroot.org>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -857,11 +857,23 @@ msgstr ""
 msgid "All encrypted data has been deleted"
 msgstr "Toda informação criptografada foi deletada"
 
-msgid "Encrypted data has been successfully decrypted"
+#, c-format
+msgid ""
+"%sFailed to decrypt data: hash algorithm \"%s\" is not available (ligbcrypt "
+"version is too old?)"
 msgstr ""
 
 #, c-format
-msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid ""
+"%sFailed to decrypt data: cipher \"%s\" is not available (ligbcrypt version "
+"is too old?)"
+msgstr ""
+
+#, c-format
+msgid "%sFailed to decrypt data: wrong passphrase?"
+msgstr ""
+
+msgid "Encrypted data has been successfully decrypted"
 msgstr ""
 
 #, c-format
@@ -5105,6 +5117,12 @@ msgstr ""
 msgid "WeeChat secured data (sec.conf) | Keys: [alt-v] Toggle values"
 msgstr ""
 
+#. TRANSLATORS: "hash algorithm not supported"
+#, fuzzy
+#| msgid "log not started"
+msgid "not supported"
+msgstr "registro não iniciou"
+
 msgid "on"
 msgstr "ligado"
 
@@ -5144,10 +5162,27 @@ msgid ""
 "secure decrypt, see /help secure)"
 msgstr ""
 
+#, c-format
+msgid ""
+"%sOption %s.%s.%s can not be changed because there are still encrypted data"
+msgstr ""
+
 #, c-format
 msgid "%sPassphrase is not set, unable to decrypt data \"%s\""
 msgstr ""
 
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, fuzzy, c-format
 msgid "%sWrong passphrase, unable to decrypt data \"%s\""
 msgstr "%sErro: não foi possível rolar a barra \"%s\""
@@ -5156,8 +5191,20 @@ msgstr "%sErro: não foi possível rolar a barra \"%s\""
 msgid "*** Wrong passphrase (decrypt error: %s) ***"
 msgstr ""
 
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, fuzzy, c-format
-msgid "%sError encrypting data \"%s\" (%d)"
+msgid "%sFailed to encrypt data \"%s\" (%d)"
 msgstr "%s%s: erro ao criar atalho \"%s\" => \"%s\""
 
 msgid ""
@@ -5165,7 +5212,10 @@ msgid ""
 "in bits)"
 msgstr ""
 
-msgid "hash algorithm used to check the decrypted data"
+msgid ""
+"hash algorithm used to check the decrypted data; some of them require a "
+"specific libgcrypt version: sha3-*: libgcrypt >= 1.7.0, blake2*: libgcrypt "
+">= 1.8.0, sha512-*: libgcrypt >= 1.9.4"
 msgstr ""
 
 msgid ""
diff --git a/po/ru.po b/po/ru.po
index 9161b0e54..9c6131e04 100644
--- a/po/ru.po
+++ b/po/ru.po
@@ -21,7 +21,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2023-09-12 15:06+0200\n"
+"POT-Creation-Date: 2023-09-13 15:09+0200\n"
 "PO-Revision-Date: 2023-09-06 19:13+0200\n"
 "Last-Translator: Aleksey V Zapparov AKA ixti <ixti@member.fsf.org>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -838,11 +838,23 @@ msgstr ""
 msgid "All encrypted data has been deleted"
 msgstr "команда users отключена"
 
-msgid "Encrypted data has been successfully decrypted"
+#, c-format
+msgid ""
+"%sFailed to decrypt data: hash algorithm \"%s\" is not available (ligbcrypt "
+"version is too old?)"
 msgstr ""
 
 #, c-format
-msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid ""
+"%sFailed to decrypt data: cipher \"%s\" is not available (ligbcrypt version "
+"is too old?)"
+msgstr ""
+
+#, c-format
+msgid "%sFailed to decrypt data: wrong passphrase?"
+msgstr ""
+
+msgid "Encrypted data has been successfully decrypted"
 msgstr ""
 
 #, c-format
@@ -4414,6 +4426,12 @@ msgstr ""
 msgid "WeeChat secured data (sec.conf) | Keys: [alt-v] Toggle values"
 msgstr ""
 
+#. TRANSLATORS: "hash algorithm not supported"
+#, fuzzy
+#| msgid "not connected"
+msgid "not supported"
+msgstr "отключен"
+
 #, fuzzy
 msgid "on"
 msgstr "вкл."
@@ -4455,10 +4473,27 @@ msgid ""
 "secure decrypt, see /help secure)"
 msgstr ""
 
+#, c-format
+msgid ""
+"%sOption %s.%s.%s can not be changed because there are still encrypted data"
+msgstr ""
+
 #, c-format
 msgid "%sPassphrase is not set, unable to decrypt data \"%s\""
 msgstr ""
 
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, fuzzy, c-format
 msgid "%sWrong passphrase, unable to decrypt data \"%s\""
 msgstr "%s не могу сохранить конфигурационный файл pluginов\n"
@@ -4467,8 +4502,20 @@ msgstr "%s не могу сохранить конфигурационный ф
 msgid "*** Wrong passphrase (decrypt error: %s) ***"
 msgstr ""
 
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, fuzzy, c-format
-msgid "%sError encrypting data \"%s\" (%d)"
+msgid "%sFailed to encrypt data \"%s\" (%d)"
 msgstr "%s недостаточно памяти для сообщения в строке информации\n"
 
 msgid ""
@@ -4476,7 +4523,10 @@ msgid ""
 "in bits)"
 msgstr ""
 
-msgid "hash algorithm used to check the decrypted data"
+msgid ""
+"hash algorithm used to check the decrypted data; some of them require a "
+"specific libgcrypt version: sha3-*: libgcrypt >= 1.7.0, blake2*: libgcrypt "
+">= 1.8.0, sha512-*: libgcrypt >= 1.9.4"
 msgstr ""
 
 msgid ""
diff --git a/po/sr.po b/po/sr.po
index 728806754..5b105adfd 100644
--- a/po/sr.po
+++ b/po/sr.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2023-09-12 15:06+0200\n"
+"POT-Creation-Date: 2023-09-13 15:09+0200\n"
 "PO-Revision-Date: 2023-09-06 19:13+0200\n"
 "Last-Translator: Ivan Pešić <ivan.pesic@gmail.com>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -845,13 +845,26 @@ msgstr "Нема шифрованих података"
 msgid "All encrypted data has been deleted"
 msgstr "Обрисани су сви шифровани подаци"
 
-msgid "Encrypted data has been successfully decrypted"
-msgstr "Шифровани подаци су успешно дешифровани"
+#, c-format
+msgid ""
+"%sFailed to decrypt data: hash algorithm \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
 
 #, c-format
-msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid ""
+"%sFailed to decrypt data: cipher \"%s\" is not available (ligbcrypt version "
+"is too old?)"
+msgstr ""
+
+#, fuzzy, c-format
+#| msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid "%sFailed to decrypt data: wrong passphrase?"
 msgstr "%sНије успело дешифровање података (погрешна тајна реченица?)"
 
+msgid "Encrypted data has been successfully decrypted"
+msgstr "Шифровани подаци су успешно дешифровани"
+
 #, c-format
 msgid ""
 "%sYou must decrypt data still encrypted before doing any operation on "
@@ -5789,6 +5802,12 @@ msgid "WeeChat secured data (sec.conf) | Keys: [alt-v] Toggle values"
 msgstr ""
 "WeeChat обезбеђени подаци (sec.conf) | Тастери: [alt-v] Пребацивање вредности"
 
+#. TRANSLATORS: "hash algorithm not supported"
+#, fuzzy
+#| msgid "log not started"
+msgid "not supported"
+msgstr "лог није започет"
+
 msgid "on"
 msgstr "укључено"
 
@@ -5838,11 +5857,28 @@ msgstr ""
 "%sФајл sec.conf није могао поново да се учита јер још увек има шифрованих "
 "података (употребите /secure decrypt, погледајте /help secure)"
 
+#, c-format
+msgid ""
+"%sOption %s.%s.%s can not be changed because there are still encrypted data"
+msgstr ""
+
 #, c-format
 msgid "%sPassphrase is not set, unable to decrypt data \"%s\""
 msgstr ""
 "%sНије постављена тајна реченица, није могуће дешифровање података „%s”"
 
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, c-format
 msgid "%sWrong passphrase, unable to decrypt data \"%s\""
 msgstr "%sПогрешна тајна реченица, није могуће дешифровање података „%s”"
@@ -5852,7 +5888,20 @@ msgid "*** Wrong passphrase (decrypt error: %s) ***"
 msgstr "*** Погрешна тајна реченица (грешка дешифровања: %s) ***"
 
 #, c-format
-msgid "%sError encrypting data \"%s\" (%d)"
+msgid ""
+"%sFailed to encrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
+#, fuzzy, c-format
+#| msgid "%sError encrypting data \"%s\" (%d)"
+msgid "%sFailed to encrypt data \"%s\" (%d)"
 msgstr "%sГрешка при шифрирању података „%s” (%d)"
 
 msgid ""
@@ -5862,8 +5911,11 @@ msgstr ""
 "шифра која се користи за шифрирање података (број након алгоритма је "
 "величина кључа у битовима)"
 
-msgid "hash algorithm used to check the decrypted data"
-msgstr "хеш алгоритам који се користи за проверу дешифрованих података"
+msgid ""
+"hash algorithm used to check the decrypted data; some of them require a "
+"specific libgcrypt version: sha3-*: libgcrypt >= 1.7.0, blake2*: libgcrypt "
+">= 1.8.0, sha512-*: libgcrypt >= 1.9.4"
+msgstr ""
 
 msgid ""
 "read the passphrase from the output of this system command (only the first "
@@ -16853,3 +16905,6 @@ msgstr "%s%s: тајмаут за „%s” са %s"
 #, c-format
 msgid "%s%s: unable to connect: unexpected error (%d)"
 msgstr "%s%s: повезивање није успело: неочекивана грешка (%d)"
+
+#~ msgid "hash algorithm used to check the decrypted data"
+#~ msgstr "хеш алгоритам који се користи за проверу дешифрованих података"
diff --git a/po/tr.po b/po/tr.po
index b1fb471a7..e5de8e660 100644
--- a/po/tr.po
+++ b/po/tr.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2023-09-12 15:06+0200\n"
+"POT-Creation-Date: 2023-09-13 15:09+0200\n"
 "PO-Revision-Date: 2023-09-06 19:13+0200\n"
 "Last-Translator: Emir SARI <emir_sari@icloud.com>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -869,13 +869,26 @@ msgstr "Şifrelenmiş veri yok"
 msgid "All encrypted data has been deleted"
 msgstr "Tüm şifrelenmiş veri silindi"
 
-msgid "Encrypted data has been successfully decrypted"
-msgstr "Şifrelenmiş verinin şifresi başarıyla çözüldü"
+#, c-format
+msgid ""
+"%sFailed to decrypt data: hash algorithm \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
 
 #, c-format
-msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid ""
+"%sFailed to decrypt data: cipher \"%s\" is not available (ligbcrypt version "
+"is too old?)"
+msgstr ""
+
+#, fuzzy, c-format
+#| msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid "%sFailed to decrypt data: wrong passphrase?"
 msgstr "%sVeri şifresi açılamadı (hatalı parola?)"
 
+msgid "Encrypted data has been successfully decrypted"
+msgstr "Şifrelenmiş verinin şifresi başarıyla çözüldü"
+
 #, c-format
 msgid ""
 "%sYou must decrypt data still encrypted before doing any operation on "
@@ -5887,6 +5900,12 @@ msgid "WeeChat secured data (sec.conf) | Keys: [alt-v] Toggle values"
 msgstr ""
 "WeeChat güvenli verisi (sec.conf) | Düğmeler: [alt-v] Değerleri aç/kapat"
 
+#. TRANSLATORS: "hash algorithm not supported"
+#, fuzzy
+#| msgid "log not started"
+msgid "not supported"
+msgstr "günlük başlamadı"
+
 msgid "on"
 msgstr "açık"
 
@@ -5936,10 +5955,27 @@ msgstr ""
 "%ssec.conf dosyası yeniden yüklenemedi; çünkü hâlâ şifreli veri mevcut (/"
 "secure decrypt kullanın, bkz. /help secure)"
 
+#, c-format
+msgid ""
+"%sOption %s.%s.%s can not be changed because there are still encrypted data"
+msgstr ""
+
 #, c-format
 msgid "%sPassphrase is not set, unable to decrypt data \"%s\""
 msgstr "%sParola ayarlanmamış, \"%s\" verisi şifresi çözülemiyor"
 
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, c-format
 msgid "%sWrong passphrase, unable to decrypt data \"%s\""
 msgstr "%sYanlış parola, \"%s\" verisi şifresi çözülemiyor"
@@ -5949,7 +5985,20 @@ msgid "*** Wrong passphrase (decrypt error: %s) ***"
 msgstr "*** Yanlış parola (şifre çözüm hatası: %s) ***"
 
 #, c-format
-msgid "%sError encrypting data \"%s\" (%d)"
+msgid ""
+"%sFailed to encrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
+#, fuzzy, c-format
+#| msgid "%sError encrypting data \"%s\" (%d)"
+msgid "%sFailed to encrypt data \"%s\" (%d)"
 msgstr "%s\"%s\" verisi şifrelenirken hata (%d)"
 
 msgid ""
@@ -5959,8 +6008,11 @@ msgstr ""
 "veriyi şifrelemek için kullanılan şifre (sayı sonrası algoritması anahtarın "
 "bit türünden boyutudur)"
 
-msgid "hash algorithm used to check the decrypted data"
-msgstr "şifresi çözülen veriyi denetlemek için kullanılan sağlama algoritması"
+msgid ""
+"hash algorithm used to check the decrypted data; some of them require a "
+"specific libgcrypt version: sha3-*: libgcrypt >= 1.7.0, blake2*: libgcrypt "
+">= 1.8.0, sha512-*: libgcrypt >= 1.9.4"
+msgstr ""
 
 msgid ""
 "read the passphrase from the output of this system command (only the first "
@@ -17474,3 +17526,7 @@ msgstr "%s%s: \"%s\" için %s ile zaman aşımı"
 #, c-format
 msgid "%s%s: unable to connect: unexpected error (%d)"
 msgstr "%s%s: Bağlanılamıyor: Beklenmedik hata (%d)"
+
+#~ msgid "hash algorithm used to check the decrypted data"
+#~ msgstr ""
+#~ "şifresi çözülen veriyi denetlemek için kullanılan sağlama algoritması"
diff --git a/po/weechat.pot b/po/weechat.pot
index c91b89808..4cdcb0951 100644
--- a/po/weechat.pot
+++ b/po/weechat.pot
@@ -21,7 +21,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2023-09-12 15:06+0200\n"
+"POT-Creation-Date: 2023-09-13 15:07+0200\n"
 "PO-Revision-Date: 2014-08-16 10:27+0200\n"
 "Last-Translator: Sébastien Helleu <flashcode@flashtux.org>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -760,11 +760,23 @@ msgstr ""
 msgid "All encrypted data has been deleted"
 msgstr ""
 
-msgid "Encrypted data has been successfully decrypted"
+#, c-format
+msgid ""
+"%sFailed to decrypt data: hash algorithm \"%s\" is not available (ligbcrypt "
+"version is too old?)"
 msgstr ""
 
 #, c-format
-msgid "%sFailed to decrypt data (wrong passphrase?)"
+msgid ""
+"%sFailed to decrypt data: cipher \"%s\" is not available (ligbcrypt version "
+"is too old?)"
+msgstr ""
+
+#, c-format
+msgid "%sFailed to decrypt data: wrong passphrase?"
+msgstr ""
+
+msgid "Encrypted data has been successfully decrypted"
 msgstr ""
 
 #, c-format
@@ -4013,6 +4025,10 @@ msgstr ""
 msgid "WeeChat secured data (sec.conf) | Keys: [alt-v] Toggle values"
 msgstr ""
 
+#. TRANSLATORS: "hash algorithm not supported"
+msgid "not supported"
+msgstr ""
+
 msgid "on"
 msgstr ""
 
@@ -4052,10 +4068,27 @@ msgid ""
 "secure decrypt, see /help secure)"
 msgstr ""
 
+#, c-format
+msgid ""
+"%sOption %s.%s.%s can not be changed because there are still encrypted data"
+msgstr ""
+
 #, c-format
 msgid "%sPassphrase is not set, unable to decrypt data \"%s\""
 msgstr ""
 
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to decrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
 #, c-format
 msgid "%sWrong passphrase, unable to decrypt data \"%s\""
 msgstr ""
@@ -4065,7 +4098,19 @@ msgid "*** Wrong passphrase (decrypt error: %s) ***"
 msgstr ""
 
 #, c-format
-msgid "%sError encrypting data \"%s\" (%d)"
+msgid ""
+"%sFailed to encrypt data \"%s\": hash algorithm \"%s\" is not available "
+"(ligbcrypt version is too old?)"
+msgstr ""
+
+#, c-format
+msgid ""
+"%sFailed to encrypt data \"%s\": cipher \"%s\" is not available (ligbcrypt "
+"version is too old?)"
+msgstr ""
+
+#, c-format
+msgid "%sFailed to encrypt data \"%s\" (%d)"
 msgstr ""
 
 msgid ""
@@ -4073,7 +4118,10 @@ msgid ""
 "in bits)"
 msgstr ""
 
-msgid "hash algorithm used to check the decrypted data"
+msgid ""
+"hash algorithm used to check the decrypted data; some of them require a "
+"specific libgcrypt version: sha3-*: libgcrypt >= 1.7.0, blake2*: libgcrypt "
+">= 1.8.0, sha512-*: libgcrypt >= 1.9.4"
 msgstr ""
 
 msgid ""
diff --git a/src/core/wee-command.c b/src/core/wee-command.c
index d98b36541..6269b945c 100644
--- a/src/core/wee-command.c
+++ b/src/core/wee-command.c
@@ -6109,7 +6109,7 @@ COMMAND_CALLBACK(save)
 
 COMMAND_CALLBACK(secure)
 {
-    int passphrase_was_set, count_encrypted;
+    int passphrase_was_set, count_encrypted, rc;
 
     /* make C compiler happy */
     (void) pointer;
@@ -6140,7 +6140,33 @@ COMMAND_CALLBACK(secure)
             gui_chat_printf (NULL, _("All encrypted data has been deleted"));
             return WEECHAT_RC_OK;
         }
-        if (secure_decrypt_data_not_decrypted (argv_eol[2]) > 0)
+        rc = secure_decrypt_data_not_decrypted (argv_eol[2]);
+        if (rc == -2)
+        {
+            gui_chat_printf (
+                NULL,
+                _("%sFailed to decrypt data: hash algorithm \"%s\" is not "
+                  "available (ligbcrypt version is too old?)"),
+                gui_chat_prefix[GUI_CHAT_PREFIX_ERROR],
+                config_file_option_string (secure_config_crypt_hash_algo));
+        }
+        else if (rc == -3)
+        {
+            gui_chat_printf (
+                NULL,
+                _("%sFailed to decrypt data: cipher \"%s\" is not "
+                  "available (ligbcrypt version is too old?)"),
+                gui_chat_prefix[GUI_CHAT_PREFIX_ERROR],
+                config_file_option_string (secure_config_crypt_cipher));
+        }
+        else if ((rc == -1) || (rc == 0))
+        {
+            gui_chat_printf (NULL,
+                             _("%sFailed to decrypt data: wrong passphrase?"),
+                             gui_chat_prefix[GUI_CHAT_PREFIX_ERROR]);
+
+        }
+        else
         {
             gui_chat_printf (NULL,
                              _("Encrypted data has been successfully decrypted"));
@@ -6148,12 +6174,6 @@ COMMAND_CALLBACK(secure)
                 free (secure_passphrase);
             secure_passphrase = strdup (argv_eol[2]);
         }
-        else
-        {
-            gui_chat_printf (NULL,
-                             _("%sFailed to decrypt data (wrong passphrase?)"),
-                             gui_chat_prefix[GUI_CHAT_PREFIX_ERROR]);
-        }
         return WEECHAT_RC_OK;
     }
 
diff --git a/src/core/wee-crypto.c b/src/core/wee-crypto.c
index 77d1629c9..e91233495 100644
--- a/src/core/wee-crypto.c
+++ b/src/core/wee-crypto.c
@@ -98,6 +98,18 @@ int weecrypto_hash_algo[] = {
 #endif
 };
 
+char *weecrypto_cipher_string[] = {
+    "aes128",
+    "aes192",
+    "aes256",
+    NULL,
+};
+int weecrypto_cipher[] = {
+    GCRY_CIPHER_AES128,
+    GCRY_CIPHER_AES192,
+    GCRY_CIPHER_AES256,
+};
+
 
 /*
  * Returns the hash algorithm with the name, or GCRY_MD_NONE if not found.
@@ -120,6 +132,27 @@ weecrypto_get_hash_algo (const char *hash_algo)
     return GCRY_MD_NONE;
 }
 
+/*
+ * Returns the cipher with the name, or GCRY_CIPHER_NONE if not found.
+ */
+
+int
+weecrypto_get_cipher (const char *cipher)
+{
+    int i;
+
+    if (!cipher)
+        return GCRY_CIPHER_NONE;
+
+    for (i = 0; weecrypto_cipher_string[i]; i++)
+    {
+        if (strcmp (weecrypto_cipher_string[i], cipher) == 0)
+            return weecrypto_cipher[i];
+    }
+
+    return GCRY_CIPHER_NONE;
+}
+
 /*
  * Computes hash of data using the given hash algorithm.
  *
diff --git a/src/core/wee-crypto.h b/src/core/wee-crypto.h
index c06de3d8f..8fc99c37a 100644
--- a/src/core/wee-crypto.h
+++ b/src/core/wee-crypto.h
@@ -24,6 +24,7 @@
 #define WEECRYPTO_TOTP_MAX_DIGITS    10
 
 extern int weecrypto_get_hash_algo (const char *hash_algo);
+extern int weecrypto_get_cipher (const char *cipher);
 extern int weecrypto_hash (const void *data, int data_size, int hash_algo,
                            void *hash, int *hash_size);
 extern int weecrypto_hash_file (const char *filename, int hash_algo,
diff --git a/src/core/wee-secure-buffer.c b/src/core/wee-secure-buffer.c
index 6152fe66e..164e09596 100644
--- a/src/core/wee-secure-buffer.c
+++ b/src/core/wee-secure-buffer.c
@@ -26,9 +26,11 @@
 #include <stdlib.h>
 #include <stdio.h>
 #include <string.h>
+#include <gcrypt.h>
 
 #include "weechat.h"
 #include "wee-config-file.h"
+#include "wee-crypto.h"
 #include "wee-hashtable.h"
 #include "wee-secure.h"
 #include "wee-secure-buffer.h"
@@ -85,7 +87,8 @@ secure_buffer_display_data (void *data,
 void
 secure_buffer_display ()
 {
-    int line, count, count_encrypted;
+    int line, count, count_encrypted, hash_algo;
+    char str_supported[1024];
 
     if (!secure_buffer)
         return;
@@ -99,10 +102,22 @@ secure_buffer_display ()
 
     line = 0;
 
+    str_supported[0] = '\0';
+    hash_algo = weecrypto_get_hash_algo (
+        config_file_option_string (secure_config_crypt_hash_algo));
+    if (hash_algo == GCRY_MD_NONE)
+    {
+        snprintf (str_supported, sizeof (str_supported),
+                  " (%s)",
+                  /* TRANSLATORS: "hash algorithm not supported" */
+                  _("not supported"));
+    }
+
     gui_chat_printf_y (secure_buffer, line++,
-                       "Hash algo: %s  Cipher: %s  Salt: %s",
-                       secure_hash_algo_string[CONFIG_ENUM(secure_config_crypt_hash_algo)],
-                       secure_cipher_string[CONFIG_ENUM(secure_config_crypt_cipher)],
+                       "Hash algo: %s%s  Cipher: %s  Salt: %s",
+                       config_file_option_string (secure_config_crypt_hash_algo),
+                       str_supported,
+                       config_file_option_string (secure_config_crypt_cipher),
                        (CONFIG_BOOLEAN(secure_config_crypt_salt)) ? _("on") : _("off"));
 
     /* display passphrase */
diff --git a/src/core/wee-secure-config.c b/src/core/wee-secure-config.c
index 767cbe390..9cf94fcdd 100644
--- a/src/core/wee-secure-config.c
+++ b/src/core/wee-secure-config.c
@@ -26,9 +26,11 @@
 #include <stdlib.h>
 #include <stdio.h>
 #include <string.h>
+#include <gcrypt.h>
 
 #include "weechat.h"
 #include "wee-config-file.h"
+#include "wee-crypto.h"
 #include "wee-hashtable.h"
 #include "wee-secure.h"
 #include "wee-secure-config.h"
@@ -48,6 +50,8 @@ struct t_config_option *secure_config_crypt_hash_algo = NULL;
 struct t_config_option *secure_config_crypt_passphrase_command = NULL;
 struct t_config_option *secure_config_crypt_salt = NULL;
 
+int secure_config_loading = 0;
+
 
 /*
  * Gets passphrase from user and puts it in variable "secure_passphrase".
@@ -172,6 +176,39 @@ secure_config_reload_cb (const void *pointer, void *data,
     return config_file_reload (config_file);
 }
 
+/*
+ * Callback for changes on some options "weechat.crypt.*" (that can not be
+ * changed if there are encrypted data.
+ */
+
+int
+secure_config_check_crypt_option_cb (const void *pointer, void *data,
+                                     struct t_config_option *option,
+                                     const char *value)
+{
+    /* make C compiler happy */
+    (void) pointer;
+    (void) data;
+    (void) value;
+
+    /* any value allowed while reading config */
+    if (secure_config_loading)
+        return 1;
+
+    /* no encrypted data => changes allowed */
+    if (secure_hashtable_data_encrypted->items_count == 0)
+        return 1;
+
+    gui_chat_printf (NULL,
+                     _("%sOption %s.%s.%s can not be changed because there "
+                       "are still encrypted data"),
+                     gui_chat_prefix[GUI_CHAT_PREFIX_ERROR],
+                     option->config_file->name,
+                     option->section->name,
+                     option->name);
+    return 0;
+}
+
 /*
  * Reads a data option in secured data configuration file.
  */
@@ -183,7 +220,7 @@ secure_config_data_read_cb (const void *pointer, void *data,
                             const char *option_name, const char *value)
 {
     char *buffer, *decrypted, str_error[1024];
-    int length_buffer, length_decrypted, rc;
+    int length_buffer, length_decrypted, rc, hash_algo, cipher;
 
     /* make C compiler happy */
     (void) pointer;
@@ -237,6 +274,38 @@ secure_config_data_read_cb (const void *pointer, void *data,
         return WEECHAT_CONFIG_OPTION_SET_OK_SAME_VALUE;
     }
 
+    /* get hash algorithm */
+    hash_algo = weecrypto_get_hash_algo (
+        config_file_option_string (secure_config_crypt_hash_algo));
+    if (hash_algo == GCRY_MD_NONE)
+    {
+        gui_chat_printf (
+            NULL,
+            _("%sFailed to decrypt data \"%s\": hash algorithm \"%s\" is not "
+              "available (ligbcrypt version is too old?)"),
+            gui_chat_prefix[GUI_CHAT_PREFIX_ERROR],
+            option_name,
+            config_file_option_string (secure_config_crypt_hash_algo));
+        hashtable_set (secure_hashtable_data_encrypted, option_name, value);
+        return WEECHAT_CONFIG_OPTION_SET_OK_SAME_VALUE;
+    }
+
+    /* get cipher */
+    cipher = weecrypto_get_cipher (
+        config_file_option_string (secure_config_crypt_cipher));
+    if (cipher == GCRY_CIPHER_NONE)
+    {
+        gui_chat_printf (
+            NULL,
+            _("%sFailed to decrypt data \"%s\": cipher \"%s\" is not "
+              "available (ligbcrypt version is too old?)"),
+            gui_chat_prefix[GUI_CHAT_PREFIX_ERROR],
+            option_name,
+            config_file_option_string (secure_config_crypt_cipher));
+        hashtable_set (secure_hashtable_data_encrypted, option_name, value);
+        return WEECHAT_CONFIG_OPTION_SET_OK_SAME_VALUE;
+    }
+
     /* decrypt data */
     buffer = malloc (strlen (value) + 1);
     if (!buffer)
@@ -250,8 +319,8 @@ secure_config_data_read_cb (const void *pointer, void *data,
         rc = secure_decrypt_data (
             buffer,
             length_buffer,
-            secure_hash_algo[CONFIG_ENUM(secure_config_crypt_hash_algo)],
-            secure_cipher[CONFIG_ENUM(secure_config_crypt_cipher)],
+            hash_algo,
+            cipher,
             secure_passphrase,
             &decrypted,
             &length_decrypted);
@@ -311,13 +380,41 @@ secure_config_data_write_map_cb (void *data,
 {
     struct t_config_file *config_file;
     char *buffer, *buffer_base16;
-    int length_buffer, rc;
+    int length_buffer, rc, hash_algo, cipher;
 
     /* make C compiler happy */
     (void) hashtable;
 
     config_file = (struct t_config_file *)data;
 
+    hash_algo = weecrypto_get_hash_algo (
+        config_file_option_string (secure_config_crypt_hash_algo));
+    if (hash_algo == GCRY_MD_NONE)
+    {
+        gui_chat_printf (
+            NULL,
+            _("%sFailed to encrypt data \"%s\": hash algorithm \"%s\" is not "
+              "available (ligbcrypt version is too old?)"),
+            gui_chat_prefix[GUI_CHAT_PREFIX_ERROR],
+            key,
+            config_file_option_string (secure_config_crypt_hash_algo));
+        return;
+    }
+
+    cipher = weecrypto_get_cipher (
+        config_file_option_string (secure_config_crypt_cipher));
+    if (cipher == GCRY_CIPHER_NONE)
+    {
+        gui_chat_printf (
+            NULL,
+            _("%sFailed to encrypt data \"%s\": cipher \"%s\" is not "
+              "available (ligbcrypt version is too old?)"),
+            gui_chat_prefix[GUI_CHAT_PREFIX_ERROR],
+            key,
+            config_file_option_string (secure_config_crypt_cipher));
+        return;
+    }
+
     buffer = NULL;
     length_buffer = 0;
 
@@ -326,8 +423,8 @@ secure_config_data_write_map_cb (void *data,
         /* encrypt password using passphrase */
         rc = secure_encrypt_data (
             value, strlen (value) + 1,
-            secure_hash_algo[CONFIG_ENUM(secure_config_crypt_hash_algo)],
-            secure_cipher[CONFIG_ENUM(secure_config_crypt_cipher)],
+            hash_algo,
+            cipher,
             secure_passphrase,
             &buffer,
             &length_buffer);
@@ -352,7 +449,7 @@ secure_config_data_write_map_cb (void *data,
         else
         {
             gui_chat_printf (NULL,
-                             _("%sError encrypting data \"%s\" (%d)"),
+                             _("%sFailed to encrypt data \"%s\" (%d)"),
                              gui_chat_prefix[GUI_CHAT_PREFIX_ERROR],
                              key, rc);
         }
@@ -469,13 +566,26 @@ secure_config_init_options ()
             N_("cipher used to crypt data (the number after algorithm is the "
                "size of the key in bits)"),
             "aes128|aes192|aes256", 0, 0, "aes256", NULL, 0,
-            NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL);
+            &secure_config_check_crypt_option_cb, NULL, NULL,
+            NULL, NULL, NULL,
+            NULL, NULL, NULL);
         secure_config_crypt_hash_algo = config_file_new_option (
             secure_config_file, secure_config_section_crypt,
             "hash_algo", "enum",
-            N_("hash algorithm used to check the decrypted data"),
-            "sha224|sha256|sha384|sha512", 0, 0, "sha256", NULL, 0,
-            NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL);
+            N_("hash algorithm used to check the decrypted data; "
+               "some of them require a specific libgcrypt version: "
+               "sha3-*: libgcrypt >= 1.7.0, "
+               "blake2*: libgcrypt >= 1.8.0, "
+               "sha512-*: libgcrypt >= 1.9.4"),
+            "sha224|sha256|sha384|sha512"
+            "|sha512-224|sha512-256"
+            "|sha3-224|sha3-256|sha3-384|sha3-512"
+            "|blake2b-160|blake2b-256|blake2b-384|blake2b-512"
+            "|blake2s-128|blake2s-160|blake2s-224|blake2s-256",
+            0, 0, "sha256", NULL, 0,
+            &secure_config_check_crypt_option_cb, NULL, NULL,
+            NULL, NULL, NULL,
+            NULL, NULL, NULL);
         secure_config_crypt_passphrase_command = config_file_new_option (
             secure_config_file, secure_config_section_crypt,
             "passphrase_command", "string",
@@ -500,7 +610,9 @@ secure_config_init_options ()
                "then you can turn off this option to have always same content "
                "in file"),
             NULL, 0, 0, "on", NULL, 0,
-            NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL);
+            &secure_config_check_crypt_option_cb, NULL, NULL,
+            NULL, NULL, NULL,
+            NULL, NULL, NULL);
     }
 
     /* data */
@@ -532,7 +644,9 @@ secure_config_read ()
 
     secure_data_encrypted = 0;
 
+    secure_config_loading = 1;
     rc = config_file_read (secure_config_file);
+    secure_config_loading = 0;
 
     return rc;
 }
diff --git a/src/core/wee-secure.c b/src/core/wee-secure.c
index f2c68f16f..3d8e9dac6 100644
--- a/src/core/wee-secure.c
+++ b/src/core/wee-secure.c
@@ -46,17 +46,6 @@ struct t_hashtable *secure_hashtable_data = NULL;
 /* data still encrypted (if passphrase not set) */
 struct t_hashtable *secure_hashtable_data_encrypted = NULL;
 
-/* hash algorithms */
-char *secure_hash_algo_string[] = { "sha224", "sha256", "sha384", "sha512",
-                                    NULL };
-int secure_hash_algo[] = { GCRY_MD_SHA224, GCRY_MD_SHA256, GCRY_MD_SHA384,
-                           GCRY_MD_SHA512 };
-
-/* ciphers */
-char *secure_cipher_string[] = { "aes128", "aes192", "aes256", NULL };
-int secure_cipher[] = { GCRY_CIPHER_AES128, GCRY_CIPHER_AES192,
-                        GCRY_CIPHER_AES256 };
-
 char *secure_decrypt_error[] = { "memory", "buffer", "key", "cipher", "setkey",
                                  "decrypt", "hash", "hash mismatch" };
 
@@ -427,8 +416,10 @@ decrypt_end:
  * secured data configuration file (because no passphrase was given).
  *
  * Returns:
- *   > 0: number of decrypted data
- *     0: error decrypting data
+ *   >= 0: number of decrypted data
+ *     -1: error decrypting data (bad passphrase)
+ *     -2: unsupported hash algorithm
+ *     -3: unsupported cipher
  */
 
 int
@@ -436,11 +427,22 @@ secure_decrypt_data_not_decrypted (const char *passphrase)
 {
     char **keys, *buffer, *decrypted;
     const char *value;
-    int num_ok, num_keys, i, length_buffer, length_decrypted, rc;
+    int num_ok, num_keys, i, hash_algo, cipher, rc;
+    int length_buffer, length_decrypted;
 
     /* we need a passphrase to decrypt data! */
     if (!passphrase || !passphrase[0])
-        return 0;
+        return -1;
+
+    hash_algo = weecrypto_get_hash_algo (
+        config_file_option_string (secure_config_crypt_hash_algo));
+    if (hash_algo == GCRY_MD_NONE)
+        return -2;
+
+    cipher = weecrypto_get_cipher (
+        config_file_option_string (secure_config_crypt_cipher));
+    if (cipher == GCRY_CIPHER_NONE)
+        return -3;
 
     num_ok = 0;
 
@@ -469,8 +471,8 @@ secure_decrypt_data_not_decrypted (const char *passphrase)
                     rc = secure_decrypt_data (
                         buffer,
                         length_buffer,
-                        secure_hash_algo[CONFIG_ENUM(secure_config_crypt_hash_algo)],
-                        secure_cipher[CONFIG_ENUM(secure_config_crypt_cipher)],
+                        hash_algo,
+                        cipher,
                         passphrase,
                         &decrypted,
                         &length_decrypted);
diff --git a/src/core/wee-secure.h b/src/core/wee-secure.h
index df7a8f7d0..9ea759edf 100644
--- a/src/core/wee-secure.h
+++ b/src/core/wee-secure.h
@@ -28,28 +28,9 @@
 #define SECURE_DATA_PASSPHRASE_FLAG  "__passphrase__"
 #define SECURE_SALT_SIZE             8
 
-enum t_secure_config_hash_algo
-{
-    SECURE_CONFIG_HASH_SHA224 = 0,
-    SECURE_CONFIG_HASH_SHA256,
-    SECURE_CONFIG_HASH_SHA384,
-    SECURE_CONFIG_HASH_SHA512,
-};
-
-enum t_secure_config_cipher
-{
-    SECURE_CONFIG_CIPHER_AES128 = 0,
-    SECURE_CONFIG_CIPHER_AES192,
-    SECURE_CONFIG_CIPHER_AES256,
-};
-
 extern char *secure_passphrase;
 extern struct t_hashtable *secure_hashtable_data;
 extern struct t_hashtable *secure_hashtable_data_encrypted;
-extern char *secure_hash_algo_string[];
-extern int secure_hash_algo[];
-extern char *secure_cipher_string[];
-extern int secure_cipher[];
 extern int secure_data_encrypted;
 extern char *secure_decrypt_error[];
 
diff --git a/tests/unit/core/test-core-crypto.cpp b/tests/unit/core/test-core-crypto.cpp
index df1fdf267..7a77a27a2 100644
--- a/tests/unit/core/test-core-crypto.cpp
+++ b/tests/unit/core/test-core-crypto.cpp
@@ -269,6 +269,22 @@ TEST(CoreCrypto, GetHashAlgo)
 #endif
 }
 
+/*
+ * Tests functions:
+ *   weecrypto_get_cipher
+ */
+
+TEST(CoreCrypto, GetCipher)
+{
+    LONGS_EQUAL(GCRY_CIPHER_NONE, weecrypto_get_cipher (NULL));
+    LONGS_EQUAL(GCRY_CIPHER_NONE, weecrypto_get_cipher (""));
+    LONGS_EQUAL(GCRY_CIPHER_NONE, weecrypto_get_cipher ("not_a_cipher"));
+
+    LONGS_EQUAL(GCRY_CIPHER_AES128, weecrypto_get_cipher ("aes128"));
+    LONGS_EQUAL(GCRY_CIPHER_AES192, weecrypto_get_cipher ("aes192"));
+    LONGS_EQUAL(GCRY_CIPHER_AES256, weecrypto_get_cipher ("aes256"));
+}
+
 /*
  * Tests functions:
  *   weecrypto_hash
diff --git a/tests/unit/core/test-core-secure.cpp b/tests/unit/core/test-core-secure.cpp
index 6112be582..9d7e1c6ae 100644
--- a/tests/unit/core/test-core-secure.cpp
+++ b/tests/unit/core/test-core-secure.cpp
@@ -25,7 +25,10 @@ extern "C"
 {
 #include <string.h>
 #include <gcrypt.h>
+#include "src/core/wee-config-file.h"
+#include "src/core/wee-crypto.h"
 #include "src/core/wee-secure.h"
+#include "src/core/wee-secure-config.h"
 #include "src/core/wee-string.h"
 
 #define SECURE_PASSPHRASE "this_is_a_secret_passphrase"
@@ -88,17 +91,26 @@ TEST(CoreSecure, DeriveKey)
 TEST(CoreSecure, EncryptDecryptData)
 {
     const char *password = SECURE_PASSWORD;
-    int hash_algo, cipher, rc;
+    int i, j, hash_algo, cipher, rc;
     int length_password, length_encrypted_data, length_decrypted_data;
     char *encrypted_data, *decrypted_data;
 
     /* compute length of password, including the final \0 */
     length_password = strlen (password) + 1;
 
-    for (hash_algo = 0; secure_hash_algo_string[hash_algo]; hash_algo++)
+    for (i = 0; i <= secure_config_crypt_hash_algo->max; i++)
     {
-        for (cipher = 0; secure_cipher_string[cipher]; cipher++)
+        hash_algo = weecrypto_get_hash_algo (
+            secure_config_crypt_hash_algo->string_values[i]);
+        if (hash_algo == GCRY_MD_NONE)
+            continue;
+        for (j = 0; j <= secure_config_crypt_cipher->max; j++)
         {
+            cipher = weecrypto_get_cipher (
+                secure_config_crypt_cipher->string_values[j]);
+            if (cipher == GCRY_CIPHER_NONE)
+                continue;
+
             /* initialize data */
             encrypted_data = NULL;
             decrypted_data = NULL;
@@ -111,8 +123,8 @@ TEST(CoreSecure, EncryptDecryptData)
              */
             rc = secure_encrypt_data (password,
                                       length_password,
-                                      secure_hash_algo[hash_algo],
-                                      secure_cipher[cipher],
+                                      hash_algo,
+                                      cipher,
                                       SECURE_PASSPHRASE,
                                       &encrypted_data,
                                       &length_encrypted_data);
@@ -121,8 +133,8 @@ TEST(CoreSecure, EncryptDecryptData)
             /* decrypt the encrypted password */
             rc = secure_decrypt_data (encrypted_data,
                                       length_encrypted_data,
-                                      secure_hash_algo[hash_algo],
-                                      secure_cipher[cipher],
+                                      hash_algo,
+                                      cipher,
                                       SECURE_PASSPHRASE,
                                       &decrypted_data,
                                       &length_decrypted_data);