gocryptfs, branch det Mirror of gocryptfs source code on Github http://nuetzlich.net/cgit/gocryptfs/atom?h=det 2017-05-28T18:44:54+00:00 fusefrontend: aessiv: enable deterministiv file id and block iv 2017-05-28T18:44:54+00:00 Jakob Unterwurzacher 2017-05-28T18:44:54+00:00 urn:sha1:791c78b203be199960274053ea2b1d44c63b07c6 Seems to work ok: $ echo aaaaaaaaaaaaaaaaaaa > b/foo $ gocryptfs-xray a/LAh7EiK-kjleJhStVZ1JGg Header: Version: 2, Id: 8d76d368438112fb00cb807fa8210a74 Block 0: IV: b05bb152f77816678230885d09a4a596, Tag: c1c7d580fe01dd1eb543efd9d8eda8ad, Offset: 18 Len: 52 $ > b/foo $ echo aaaaaaaaaaaaaaaaaaa > b/foo $ gocryptfs-xray a/LAh7EiK-kjleJhStVZ1JGg Header: Version: 2, Id: 8d76d368438112fb00cb807fa8210a74 Block 0: IV: b05bb152f77816678230885d09a4a596, Tag: c1c7d580fe01dd1eb543efd9d8eda8ad, Offset: 18 Len: 52 Deterministic diriv generation is still missing. Part of https://github.com/rfjakob/gocryptfs/issues/108 pathiv: move block IV algorithm into this package 2017-05-28T18:43:48+00:00 Jakob Unterwurzacher 2017-05-28T18:43:48+00:00 urn:sha1:e2341c93d5b113457905b338b414e41892113ec4 This was implemented in fusefrontend_reverse, but we need it in fusefrontend as well. Move the algorithm into pathiv.BlockIV(). tests: add v1.3-reverse example filesystem 2017-05-28T17:02:22+00:00 Jakob Unterwurzacher 2017-05-28T17:02:22+00:00 urn:sha1:1f5201da5ebb0180717f63d77bbe2338876bfd29 We check the md5 sum of the encrypted version of a file to make sure we don't accidentially change the ciphertext generation. pathiv: move derivedIVContainer into the package 2017-05-28T16:33:05+00:00 Jakob Unterwurzacher 2017-05-28T16:33:05+00:00 urn:sha1:35f4f8af56ec4da9952df4feba4981f5d148b2cf ...under the new name "FileIVs". This will also be used by forward mode. fusefrontend_reverse: move pathiv to its own package 2017-05-28T16:09:02+00:00 Jakob Unterwurzacher 2017-05-28T16:09:02+00:00 urn:sha1:ab10cf63ed21d09e239986ac125b990fe06b5572 We will also need it in forward mode. gocryptfs-xray: dumpmasterkey: disable "Reading password from stdin" 2017-05-28T15:43:09+00:00 Jakob Unterwurzacher 2017-05-28T15:43:09+00:00 urn:sha1:d59e7da6a6ee9883d61958ccd3ed3acb7c6ba8dc ...and also exit with the proper exit code when we get an error. gocryptfs-xray: add function to dump the master key 2017-05-28T15:11:50+00:00 Jakob Unterwurzacher 2017-05-28T15:11:50+00:00 urn:sha1:7f5ae5f8436442c1243609d0de7fd9678f9c33d5 Fixes https://github.com/rfjakob/gocryptfs/issues/83 package.bash: make it work somewhat on RHEL 2017-05-27T13:22:27+00:00 Jakob Unterwurzacher 2017-05-27T13:22:27+00:00 urn:sha1:c36a55e98599c96f228eb7ea09c1c71a5e114ee5 RHEL and CentOS do not have /etc/os-release yet. Read from /etc/redhat-release instead. Fixes https://github.com/rfjakob/gocryptfs/issues/113 cryptocore: improve comments and add tests for hkdfDerive 2017-05-27T12:41:20+00:00 Jakob Unterwurzacher 2017-05-27T12:41:20+00:00 urn:sha1:d6ef283c3f076ba45dd873d69e1c7d86ed29b14a These should make it easier to re-implement the key derivation that was enabled with the "HKDF" feature flag. README: update changelog 2017-05-25T19:36:49+00:00 Jakob Unterwurzacher 2017-05-25T19:36:49+00:00 urn:sha1:ce4aaf16d8d696aad2a7b2df7e7f28977d51f6c9