gocryptfs/Documentation, branch aegis Mirror of gocryptfs source code on Github http://nuetzlich.net/cgit/gocryptfs/atom?h=aegis 2025-03-12T19:43:23+00:00 Update overhead for AEGIS-256 with 32-bit nonces 2025-03-12T19:43:23+00:00 Frank Denis 2025-03-12T00:52:15+00:00 urn:sha1:e445b2f3f84f8b09b391c4bee2e6c2886963f2fe Do what @rfjakob asked me to do 2025-03-12T19:43:23+00:00 Frank Denis 2025-03-11T23:32:04+00:00 urn:sha1:3e852eb354f99fb95b399c68d950298b33ed88ab Add optional support for AEGIS encryption 2025-03-12T19:43:23+00:00 Frank Denis 2025-02-25T14:03:50+00:00 urn:sha1:779a850e0fb967aac79124c7e18b14706d5f2652 AEGIS is a new family of authenticated encryption algorithms that offers stronger security, higher usage limits, and better performance than AES-GCM. This pull request adds support for a new `-aegis` command-line flag, allowing AEGIS-128X2 to be used as an alternative to AES-GCM on CPUs with AES acceleration. It also introduces the ability to use ciphers with different key sizes. More information on AEGIS is available here: - https://cfrg.github.io/draft-irtf-cfrg-aegis-aead/draft-irtf-cfrg-aegis-aead.html - https://github.com/cfrg/draft-irtf-cfrg-aegis-aead gocryptfs -speed speed on Apple M1: AES-GCM-256-OpenSSL 3718.79 MB/s AES-GCM-256-Go 5083.43 MB/s (selected in auto mode) AES-SIV-512-Go 625.20 MB/s XChaCha20-Poly1305-OpenSSL 1358.63 MB/s (selected in auto mode) XChaCha20-Poly1305-Go 832.11 MB/s Aegis128X2-Go 11818.73 MB/s gocryptfs -speed speed on AMD Zen 4: AES-GCM-256-OpenSSL 5215.86 MB/s AES-GCM-256-Go 6918.01 MB/s (selected in auto mode) AES-SIV-512-Go 449.61 MB/s XChaCha20-Poly1305-OpenSSL 2643.48 MB/s XChaCha20-Poly1305-Go 3727.46 MB/s (selected in auto mode) Aegis128X2-Go 28109.92 MB/s manpage: fix typo in -passfile example 2024-12-30T10:47:08+00:00 Paul Pazderski 2024-11-28T16:42:52+00:00 urn:sha1:1464f9d1668b9b9aa34c239eb4570c2426f95dd9 manpage: Fix reference to manual section 2024-10-30T07:45:00+00:00 Alex 2024-10-30T06:34:47+00:00 urn:sha1:94bd6a3d657923350e84082ec059e488fdea7f4e The `--reverse` section of the manual has a reference to an `INIT FLAGS` section, but no such section exists. Change the reference to refer to the `INIT OPTIONS` section, which does exist. Fix documentation error 2024-05-12T17:46:05+00:00 invis-z 2024-05-09T03:18:01+00:00 urn:sha1:f7979602f6dea0238f54e8469666ec109024b404 Fix error in the examples for `-fido2-assert-option` Improve documentation 2024-04-19T20:36:55+00:00 invis-z 2024-03-14T08:26:20+00:00 urn:sha1:1b3fb29ba4d05cc3863c1fe1a76c591a0982fc22 Add option to set FIDO2 verificatoin option 2024-04-19T20:36:55+00:00 invis-z 2023-11-21T18:12:01+00:00 urn:sha1:4b6b9553c4a2e14fd809754f6bf187957ff3cdfd Add an option to specify user verification options for `fido2-assert -t` Options will be saved to config file Provide same functionality to #705 with simpler implementation Resolve #702 MANPAGE: emphasize that -reverse implies -aessiv, so you must specify it with -masterkey 2024-04-18T16:51:04+00:00 Jakob Unterwurzacher 2024-04-18T16:51:04+00:00 urn:sha1:7883d383d842707994b664f4d56ffbe833d3dc52 Fixes: https://github.com/rfjakob/gocryptfs/issues/841 Update MANPAGE.md 2023-11-12T20:32:04+00:00 Rohan Talip 2023-11-12T18:18:40+00:00 urn:sha1:1766df8475355a49595542e1cd52e63ace79bc74 Removed repeated "conflicts"