diff --git a/DX.Blazor.Identity.Server/DX.Blazor.Identity.Server.csproj b/DX.Blazor.Identity.Server/DX.Blazor.Identity.Server.csproj
index 489692c..3a98a1e 100644
--- a/DX.Blazor.Identity.Server/DX.Blazor.Identity.Server.csproj
+++ b/DX.Blazor.Identity.Server/DX.Blazor.Identity.Server.csproj
@@ -13,6 +13,7 @@
 	<PropertyGroup>
 		<PackageReadmeFile>README.md</PackageReadmeFile>
 		<PackageReleaseNotes>
+			26.1.3.30: Rebuilt against DX.Blazor.Identity 26.1.3.32 (the Microsoft.Extensions.Identity packages per target framework (8.0 for net8.0, 9.0 for net9.0, 10.0 for net10.0): 10.0 on net8.0 brought Microsoft.AspNetCore.Cryptography.Internal 10 into .NET 8 apps and broke Data Protection (tokens, antiforgery) on Linux.)
 			26.1.3.28: Rebuilt against DX.Blazor.Identity 26.1.3.30 to pick up the System.Security.Cryptography.Xml 8.0.4 fix (NU1903) transitively.
 			26.1.3.27: Added a README.md with technical documentation, now embedded in the package via PackageReadmeFile. Rebuilt against DX.Blazor.Identity 26.1.3.29.
 			26.1.3.26: Rebuilt against DX.Blazor.Identity 26.1.3.28 to pick up DevExpress v26.1.3 transitively.
diff --git a/DX.Blazor.Identity.Wasm/DX.Blazor.Identity.Wasm.csproj b/DX.Blazor.Identity.Wasm/DX.Blazor.Identity.Wasm.csproj
index 81e2ad7..614784b 100644
--- a/DX.Blazor.Identity.Wasm/DX.Blazor.Identity.Wasm.csproj
+++ b/DX.Blazor.Identity.Wasm/DX.Blazor.Identity.Wasm.csproj
@@ -13,6 +13,7 @@
 	<PropertyGroup>
 		<PackageReadmeFile>README.md</PackageReadmeFile>
 		<PackageReleaseNotes>
+			26.1.3.30: Rebuilt against DX.Blazor.Identity 26.1.3.32 (the Microsoft.Extensions.Identity packages per target framework (8.0 for net8.0, 9.0 for net9.0, 10.0 for net10.0): 10.0 on net8.0 brought Microsoft.AspNetCore.Cryptography.Internal 10 into .NET 8 apps and broke Data Protection (tokens, antiforgery) on Linux.)
 			26.1.3.28: Rebuilt against DX.Blazor.Identity 26.1.3.30 to pick up the System.Security.Cryptography.Xml 8.0.4 fix (NU1903) transitively.
 			26.1.3.27: Added a README.md with technical documentation, now embedded in the package via PackageReadmeFile. Rebuilt against DX.Blazor.Identity 26.1.3.29.
 			26.1.3.26: Rebuilt against DX.Blazor.Identity 26.1.3.28 to pick up DevExpress v26.1.3 transitively.
diff --git a/DX.Data.Xpo.Identity.AutoMapper/DX.Data.Xpo.Identity.AutoMapper.csproj b/DX.Data.Xpo.Identity.AutoMapper/DX.Data.Xpo.Identity.AutoMapper.csproj
index 1dfad64..f71d2d3 100644
--- a/DX.Data.Xpo.Identity.AutoMapper/DX.Data.Xpo.Identity.AutoMapper.csproj
+++ b/DX.Data.Xpo.Identity.AutoMapper/DX.Data.Xpo.Identity.AutoMapper.csproj
@@ -12,7 +12,7 @@
 		<Nullable>enable</Nullable>
 		<PackageReadmeFile>README.md</PackageReadmeFile>
 		<PackageReleaseNotes>
-			26.1.3.38: Rebuilt against DX.Data.Xpo.Identity 26.1.3.39 and DX.Data.Xpo.AutoMapper 26.1.3.37 (Identity packages per target framework). Also built against DX.Data.Xpo 26.1.3.39 (System.Security.Cryptography.Xml 8.0.5).
+			26.1.3.38: Rebuilt against DX.Data.Xpo.Identity 26.1.3.39 and DX.Data.Xpo.AutoMapper 26.1.3.37 (the Microsoft.Extensions.Identity packages per target framework (8.0 for net8.0, 9.0 for net9.0, 10.0 for net10.0): 10.0 on net8.0 brought Microsoft.AspNetCore.Cryptography.Internal 10 into .NET 8 apps and broke Data Protection (tokens, antiforgery) on Linux.)
 			26.1.3.36: Rebuilt against DX.Data.Xpo.Identity 26.1.3.37 / DX.Data.Xpo.AutoMapper 26.1.3.36 to pick up the System.Security.Cryptography.Xml 8.0.4 fix (NU1903) transitively.
 			26.1.3.35: Added a README.md with technical documentation, now embedded in the package via PackageReadmeFile.
 			26.1.3.34: Upgrade to DevExpress v26.1.3
diff --git a/DX.Data.Xpo.Identity.Mapster/DX.Data.Xpo.Identity.Mapster.csproj b/DX.Data.Xpo.Identity.Mapster/DX.Data.Xpo.Identity.Mapster.csproj
index f52ccdf..fc06e7b 100644
--- a/DX.Data.Xpo.Identity.Mapster/DX.Data.Xpo.Identity.Mapster.csproj
+++ b/DX.Data.Xpo.Identity.Mapster/DX.Data.Xpo.Identity.Mapster.csproj
@@ -12,7 +12,7 @@
 		<Nullable>enable</Nullable>
 		<PackageReadmeFile>README.md</PackageReadmeFile>
 		<PackageReleaseNotes>
-			26.1.3.39: Rebuilt against DX.Data.Xpo.Identity 26.1.3.39 (Identity packages per target framework). Also built against DX.Data.Xpo 26.1.3.39 (System.Security.Cryptography.Xml 8.0.5).
+			26.1.3.39: Rebuilt against DX.Data.Xpo.Identity 26.1.3.39 (the Microsoft.Extensions.Identity packages per target framework (8.0 for net8.0, 9.0 for net9.0, 10.0 for net10.0): 10.0 on net8.0 brought Microsoft.AspNetCore.Cryptography.Internal 10 into .NET 8 apps and broke Data Protection (tokens, antiforgery) on Linux.)
 			26.1.3.37: Rebuilt against DX.Data.Xpo.Identity 26.1.3.37 / DX.Data.Xpo.Mapster 26.1.3.34 to pick up the System.Security.Cryptography.Xml 8.0.4 fix (NU1903) transitively.
 			26.1.3.36: Added a README.md with technical documentation, now embedded in the package via PackageReadmeFile.
 			26.1.3.35: Rebuilt against DX.Data.Xpo.Identity 26.1.3.35 / DX.Data.Xpo.Mapster 26.1.3.32 to pick up DevExpress v26.1.3 transitively.
diff --git a/DX.Data.Xpo.Identity/DX.Data.Xpo.Identity.csproj b/DX.Data.Xpo.Identity/DX.Data.Xpo.Identity.csproj
index b40412b..a886f31 100644
--- a/DX.Data.Xpo.Identity/DX.Data.Xpo.Identity.csproj
+++ b/DX.Data.Xpo.Identity/DX.Data.Xpo.Identity.csproj
@@ -92,29 +92,23 @@
 		<PackageReference Include="FluentValidation" Version="9.5.4" />
 	</ItemGroup>
 
+	<!-- The Identity packages come with ASP.NET Core's crypto (Microsoft.AspNetCore.Cryptography.KeyDerivation and
+	     .Internal), which must be the version of the app's ASP.NET Core: 10.0 on net8.0 replaced .NET 8's own
+	     Cryptography.Internal and broke Data Protection (tokens, antiforgery) on Linux. So per target framework. -->
+	<PropertyGroup>
+		<AspNetIdentityVersion Condition="'$(TargetFramework)'=='net8.0'">8.0.*</AspNetIdentityVersion>
+		<AspNetIdentityVersion Condition="'$(TargetFramework)'=='net9.0'">9.0.*</AspNetIdentityVersion>
+		<AspNetIdentityVersion Condition="'$(TargetFramework)'=='net10.0'">10.0.*</AspNetIdentityVersion>
+	</PropertyGroup>
+
 	<ItemGroup Condition="'$(TargetFramework)'!='net462'">
 		<PackageReference Include="Microsoft.Extensions.Caching.Abstractions" Version="10.0.*" />
 		<PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="10.0.*" />
 		<PackageReference Include="Microsoft.Extensions.Logging" Version="10.0.*" />
+		<PackageReference Include="Microsoft.Extensions.Identity.Core" Version="$(AspNetIdentityVersion)" />
+		<PackageReference Include="Microsoft.Extensions.Identity.Stores" Version="$(AspNetIdentityVersion)" />
 		<PackageReference Include="FluentValidation" Version="12.1.*" />
 	</ItemGroup>
-	<!--
-		Identity per target framework: Identity.Core brings Microsoft.AspNetCore.Cryptography.Internal along, which also
-		belongs to the ASP.NET Core shared framework. A newer one in a net8.0 app replaces the framework's, and its
-		Data Protection (8.0) then misses CryptoUtil methods: on Linux every antiforgery token fails to decrypt.
-	-->
-	<ItemGroup Condition="'$(TargetFramework)'=='net8.0'">
-		<PackageReference Include="Microsoft.Extensions.Identity.Core" Version="8.0.*" />
-		<PackageReference Include="Microsoft.Extensions.Identity.Stores" Version="8.0.*" />
-	</ItemGroup>
-	<ItemGroup Condition="'$(TargetFramework)'=='net9.0'">
-		<PackageReference Include="Microsoft.Extensions.Identity.Core" Version="9.0.*" />
-		<PackageReference Include="Microsoft.Extensions.Identity.Stores" Version="9.0.*" />
-	</ItemGroup>
-	<ItemGroup Condition="'$(TargetFramework)'=='net10.0'">
-		<PackageReference Include="Microsoft.Extensions.Identity.Core" Version="10.0.*" />
-		<PackageReference Include="Microsoft.Extensions.Identity.Stores" Version="10.0.*" />
-	</ItemGroup>
 	<ItemGroup>
 		<PackageReference Include="DevExpress.Xpo" Version="26.1.*" />
 	</ItemGroup>